Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/a97f86-fb18-483e-926c-832d55590f29/1/Cv78Oruzv63prfFCafNgIwfJLl4.mft
File: Cv78Oruzv63prfFCafNgIwfJLl4.mft (raw, json)
Hash identifier: xsvQYoaqs/W8hJETfLu+AISfu7myjCTdA8ggvJxMKeI=
Subject key identifier: 67:2C:8A:11:91:DD:EA:48:76:45:A0:1A:31:BB:92:F9:E3:A8:1B:0D
Authority key identifier: 0A:FE:FC:3A:BB:B3:BF:AD:E9:AD:F1:42:69:F3:60:23:07:C9:2E:5E
Certificate issuer: /CN=0afefc3abbb3bfade9adf14269f3602307c92e5e
Certificate serial: 019EC03615744EF9D649DED919B687D14357
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cv78Oruzv63prfFCafNgIwfJLl4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/a97f86-fb18-483e-926c-832d55590f29/1/Cv78Oruzv63prfFCafNgIwfJLl4.mft
Manifest number: F8
Signing time: Sat 13 Jun 2026 09:00:30 +0000
Manifest this update: Sat 13 Jun 2026 09:00:30 +0000
Manifest next update: Sun 14 Jun 2026 09:00:30 +0000
Files and hashes: 1: Cv78Oruzv63prfFCafNgIwfJLl4.crl (hash: mE08egyeu+JhS3zUmkc4ILP8idXjzXIq9MKEFKJMSQU=)
2: fdT5h_AVa4G_dfwdPb5ps2tK-dc.roa (hash: REU2paWp+wXXGlOwD8K0DYxInrpyINHxZ90ERdleFKg=)
3: wdZYfAFUeN1uYq_6mZZzbvOEO9E.roa (hash: qIQR+crOVY1d0komneMfNh35fcgqDk/iAFOlKpD6isU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/a97f86-fb18-483e-926c-832d55590f29/1/Cv78Oruzv63prfFCafNgIwfJLl4.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/a97f86-fb18-483e-926c-832d55590f29/1/Cv78Oruzv63prfFCafNgIwfJLl4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cv78Oruzv63prfFCafNgIwfJLl4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:36:15:74:4e:f9:d6:49:de:d9:19:b6:87:d1:43:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0afefc3abbb3bfade9adf14269f3602307c92e5e
Validity
Not Before: Jun 13 09:00:30 2026 GMT
Not After : Jun 14 09:00:30 2026 GMT
Subject: CN=672c8a1191ddea487645a01a31bb92f9e3a81b0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:09:a0:cf:dd:03:5e:2f:15:49:94:a1:2b:51:
26:bb:29:75:c7:8f:7d:c0:b7:85:81:75:8c:ee:63:
5a:93:45:f5:d6:c8:9f:b5:c6:0e:52:ed:59:b4:e3:
e1:14:42:a3:b4:02:d7:db:f4:ce:86:1d:ee:cb:a8:
e3:c8:fc:e8:af:ac:6f:7d:22:40:a5:59:37:75:71:
3b:63:de:f0:cf:7b:48:76:ae:06:ed:f0:df:9d:e0:
08:3a:c5:00:d5:d5:c6:f3:6b:79:1b:34:63:95:e1:
df:cf:58:b6:f3:0b:40:bd:5a:d6:04:9d:b7:3a:92:
6d:72:22:e6:d3:c6:6e:f9:09:0b:ae:19:05:e9:03:
29:b8:b8:dd:e4:55:aa:ce:68:9f:28:20:6a:7b:8c:
b0:72:8f:5a:a0:e5:ee:e4:fd:49:e0:4a:17:05:96:
b1:70:44:19:43:11:bb:32:7c:59:d0:17:d0:e2:52:
5a:17:4b:f9:c4:e3:a0:3d:d7:b3:27:fa:96:de:41:
c3:1d:b6:2d:9f:de:4e:85:21:74:99:b8:09:88:48:
f1:7f:9e:d2:2d:08:02:37:36:71:97:67:76:57:cc:
34:56:7c:20:76:40:a8:1b:b7:d8:8f:05:fb:ad:de:
c3:0f:bb:20:d8:a4:42:18:77:3b:d7:cd:a9:89:84:
a1:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:2C:8A:11:91:DD:EA:48:76:45:A0:1A:31:BB:92:F9:E3:A8:1B:0D
X509v3 Authority Key Identifier:
keyid:0A:FE:FC:3A:BB:B3:BF:AD:E9:AD:F1:42:69:F3:60:23:07:C9:2E:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cv78Oruzv63prfFCafNgIwfJLl4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/a97f86-fb18-483e-926c-832d55590f29/1/Cv78Oruzv63prfFCafNgIwfJLl4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/a97f86-fb18-483e-926c-832d55590f29/1/Cv78Oruzv63prfFCafNgIwfJLl4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:92:00:ca:ae:17:46:95:5f:5a:ac:54:b3:b4:b9:e2:7a:34:
ed:0a:73:c3:51:10:96:64:30:90:f4:38:5b:3c:8b:34:9b:cc:
86:00:6e:56:7d:bc:b4:7f:16:90:72:37:ba:ab:62:dd:7d:14:
13:5d:50:3c:76:f7:3a:cb:f6:dc:17:82:44:f3:40:68:b2:18:
a3:50:31:7b:da:1e:a1:23:82:67:33:b8:7c:7c:73:7d:11:4b:
bc:df:7f:b1:25:49:fa:30:9a:90:a8:f7:c4:4c:9a:e3:fa:59:
4a:cd:06:60:73:72:0b:29:4a:f4:16:41:27:f4:c2:d1:e3:9b:
1f:e8:c2:85:ce:b8:a4:3d:d8:42:89:cb:71:02:bc:0e:0d:73:
b0:be:e2:93:86:90:0e:ae:78:06:ac:e4:c1:1e:36:89:75:ca:
1a:0c:96:40:c4:87:0c:d5:d8:9e:c8:ce:aa:01:d8:72:44:c5:
5f:7e:f1:1c:d9:83:92:7e:66:18:f4:40:28:9d:ce:54:e3:d6:
51:e5:4f:b8:3b:7a:21:b7:5d:fe:3d:75:8a:49:4d:bc:f9:10:
83:ff:9b:eb:e5:ac:76:52:d9:51:c1:97:ef:04:99:ae:20:02:
24:03:5b:e4:1a:6b:f9:16:6d:d1:54:26:14:88:cb:af:07:c9:
f5:ff:b9:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7ANhV0TvnWSd7ZGbaH0UNXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhZmVmYzNhYmJiM2JmYWRlOWFkZjE0MjY5ZjM2MDIzMDdj
OTJlNWUwHhcNMjYwNjEzMDkwMDMwWhcNMjYwNjE0MDkwMDMwWjAzMTEwLwYDVQQD
Eyg2NzJjOGExMTkxZGRlYTQ4NzY0NWEwMWEzMWJiOTJmOWUzYTgxYjBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxgmgz90DXi8VSZShK1Emuyl1x499
wLeFgXWM7mNak0X11siftcYOUu1ZtOPhFEKjtALX2/TOhh3uy6jjyPzor6xvfSJA
pVk3dXE7Y97wz3tIdq4G7fDfneAIOsUA1dXG82t5GzRjleHfz1i28wtAvVrWBJ23
OpJtciLm08Zu+QkLrhkF6QMpuLjd5FWqzmifKCBqe4ywco9aoOXu5P1J4EoXBZax
cEQZQxG7MnxZ0BfQ4lJaF0v5xOOgPdezJ/qW3kHDHbYtn95OhSF0mbgJiEjxf57S
LQgCNzZxl2d2V8w0VnwgdkCoG7fYjwX7rd7DD7sg2KRCGHc7182piYShJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGcsihGR3epIdkWgGjG7kvnjqBsNMB8GA1UdIwQY
MBaAFAr+/Dq7s7+t6a3xQmnzYCMHyS5eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3Y3OE9ydXp2NjNwcmZGQ2FmTmdJd2ZKTGw0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9hOTdmODYtZmIxOC00ODNlLTkyNmMt
ODMyZDU1NTkwZjI5LzEvQ3Y3OE9ydXp2NjNwcmZGQ2FmTmdJd2ZKTGw0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC9hOTdmODYtZmIxOC00ODNlLTkyNmMtODMyZDU1NTkwZjI5
LzEvQ3Y3OE9ydXp2NjNwcmZGQ2FmTmdJd2ZKTGw0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkpIAyq4X
RpVfWqxUs7S54no07Qpzw1EQlmQwkPQ4WzyLNJvMhgBuVn28tH8WkHI3uqti3X0U
E11QPHb3Osv23BeCRPNAaLIYo1Axe9oeoSOCZzO4fHxzfRFLvN9/sSVJ+jCakKj3
xEya4/pZSs0GYHNyCylK9BZBJ/TC0eObH+jChc64pD3YQonLcQK8Dg1zsL7ik4aQ
Dq54BqzkwR42iXXKGgyWQMSHDNXYnsjOqgHYckTFX37xHNmDkn5mGPRAKJ3OVOPW
UeVPuDt6Ibdd/j11iklNvPkQg/+b6+WsdlLZUcGX7wSZriACJANb5Bpr+RZt0VQm
FIjLrwfJ9f+5PQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 15:10:48 2026 by rpki-client