Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/a97f86-fb18-483e-926c-832d55590f29/1/Cv78Oruzv63prfFCafNgIwfJLl4.mft
File: Cv78Oruzv63prfFCafNgIwfJLl4.mft (raw, json)
Hash identifier: i7EyyPyy+4D7naDP/9YpD9ba3tjdgnyE5W8lFqJtO4M=
Subject key identifier: 1F:02:1B:86:19:AE:0F:3A:6E:FB:B0:52:27:9B:3A:CF:4C:B5:00:21
Authority key identifier: 0A:FE:FC:3A:BB:B3:BF:AD:E9:AD:F1:42:69:F3:60:23:07:C9:2E:5E
Certificate issuer: /CN=0afefc3abbb3bfade9adf14269f3602307c92e5e
Certificate serial: 01A0C5C5A4DEA2003C07A1C5FD44E9050ED2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cv78Oruzv63prfFCafNgIwfJLl4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/a97f86-fb18-483e-926c-832d55590f29/1/Cv78Oruzv63prfFCafNgIwfJLl4.mft
Manifest number: 0204
Signing time: Mon 21 Sep 2026 21:00:59 +0000
Manifest this update: Mon 21 Sep 2026 21:00:59 +0000
Manifest next update: Tue 22 Sep 2026 21:00:59 +0000
Files and hashes: 1: Cv78Oruzv63prfFCafNgIwfJLl4.crl (hash: Tc95d6Ng7JfSOTSaeDhlG7VRpjWc35shQ1pc1w7JxPk=)
2: fdT5h_AVa4G_dfwdPb5ps2tK-dc.roa (hash: REU2paWp+wXXGlOwD8K0DYxInrpyINHxZ90ERdleFKg=)
3: wdZYfAFUeN1uYq_6mZZzbvOEO9E.roa (hash: qIQR+crOVY1d0komneMfNh35fcgqDk/iAFOlKpD6isU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/a97f86-fb18-483e-926c-832d55590f29/1/Cv78Oruzv63prfFCafNgIwfJLl4.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/a97f86-fb18-483e-926c-832d55590f29/1/Cv78Oruzv63prfFCafNgIwfJLl4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cv78Oruzv63prfFCafNgIwfJLl4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:c5:a4:de:a2:00:3c:07:a1:c5:fd:44:e9:05:0e:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0afefc3abbb3bfade9adf14269f3602307c92e5e
Validity
Not Before: Sep 21 21:00:59 2026 GMT
Not After : Sep 22 21:00:59 2026 GMT
Subject: CN=1f021b8619ae0f3a6efbb052279b3acf4cb50021
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:93:f1:57:17:0a:7a:38:15:b1:e0:e1:9f:d2:
bc:a0:06:a9:10:b2:d8:1d:68:41:49:fc:a1:4c:1c:
01:8a:ef:94:dd:2d:62:43:fd:dc:29:64:df:bf:d1:
1f:fa:03:88:47:e0:23:1d:6b:a4:1f:99:ca:27:c5:
b0:ef:69:d0:95:00:f1:8e:78:30:83:c2:2f:a6:a2:
53:46:8f:00:19:8d:54:14:06:60:1c:90:81:c3:ee:
77:ed:49:1d:2f:5d:07:e0:8c:3c:dc:2d:a2:f2:b6:
95:cd:fc:6b:71:1b:46:1a:d9:09:43:32:4b:40:0b:
c3:e3:ed:83:9b:60:68:34:36:bc:4f:87:41:06:22:
01:a0:f6:20:8b:8a:0f:cb:3b:bd:6c:e1:23:e5:53:
93:35:a6:1e:13:6b:dc:08:a7:2e:64:73:9a:55:89:
cc:e4:8f:bc:e8:63:04:7b:9d:e5:58:ef:90:04:14:
fa:2e:10:7d:ba:9d:71:8d:5c:8a:e8:28:95:a5:35:
13:da:ab:aa:f4:33:7a:6c:df:17:d2:92:16:68:f1:
1d:1f:45:56:f7:cc:2d:a9:7c:8b:b7:ef:2c:af:23:
db:cd:62:e0:47:d5:95:c7:30:ce:7e:82:5e:d9:fc:
8f:1d:72:81:b8:87:2c:1f:0b:dd:24:c0:65:9b:74:
d3:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:02:1B:86:19:AE:0F:3A:6E:FB:B0:52:27:9B:3A:CF:4C:B5:00:21
X509v3 Authority Key Identifier:
keyid:0A:FE:FC:3A:BB:B3:BF:AD:E9:AD:F1:42:69:F3:60:23:07:C9:2E:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cv78Oruzv63prfFCafNgIwfJLl4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/a97f86-fb18-483e-926c-832d55590f29/1/Cv78Oruzv63prfFCafNgIwfJLl4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/a97f86-fb18-483e-926c-832d55590f29/1/Cv78Oruzv63prfFCafNgIwfJLl4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:0c:e1:3b:04:a1:03:05:e1:ad:19:38:2f:28:ed:6b:d0:e1:
37:f3:02:46:8b:c5:75:39:6f:a6:04:d7:69:f0:e6:57:1b:4b:
68:54:78:ed:5d:ef:ad:7b:8d:b5:dd:1b:41:93:3b:28:f7:c4:
df:a0:bf:45:4b:7a:68:63:11:70:79:b1:7d:1f:6d:62:93:32:
0d:b8:23:41:e1:4e:9d:6c:9e:ec:d7:42:6c:aa:c6:fe:5f:a4:
d0:81:7f:8c:1b:63:9f:c8:f2:24:98:7d:55:47:53:e0:ec:38:
6b:c1:45:8f:8d:53:07:47:05:38:de:e9:e2:1c:c1:9a:bd:ec:
2f:22:67:17:a0:1a:89:12:1a:3d:5b:a1:3d:db:d4:f1:45:73:
fe:dd:8c:7a:f9:22:7c:db:fc:5d:52:e1:56:d1:95:61:2d:8f:
46:ef:92:0c:d5:41:dd:91:fd:68:ff:4d:ed:57:bb:8b:40:cf:
c1:22:6b:54:08:9e:d9:04:4e:f1:60:a3:60:87:7a:07:a3:37:
12:5c:95:67:0c:0a:c2:4b:ab:a1:84:9d:29:ed:83:99:cc:27:
3d:3b:69:ec:d0:c9:89:19:e4:d2:ef:05:1f:e6:2a:6c:a9:76:
ba:5f:d7:ec:ce:5e:21:33:43:0e:c4:d5:1d:38:16:e3:db:ae:
59:52:56:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 01:41:33 2026 by rpki-client