Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/64d910-945c-42e8-bb44-62821c2c299f/1/CVAiiQS52-tHkqaXcn42qv2E0uk.mft
File: CVAiiQS52-tHkqaXcn42qv2E0uk.mft (raw, json)
Hash identifier: PzXl+ROZcn6NW4Hnt9Szi1/V/ypQM6JcKPPjNUq+jAY=
Subject key identifier: 20:17:CB:71:DB:83:41:FC:11:61:30:D3:7A:96:73:E9:8B:0E:43:18
Authority key identifier: 09:50:22:89:04:B9:DB:EB:47:92:A6:97:72:7E:36:AA:FD:84:D2:E9
Certificate issuer: /CN=0950228904b9dbeb4792a697727e36aafd84d2e9
Certificate serial: 019D996299A04DE1599307FF2A73DEF2B706
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CVAiiQS52-tHkqaXcn42qv2E0uk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/64d910-945c-42e8-bb44-62821c2c299f/1/CVAiiQS52-tHkqaXcn42qv2E0uk.mft
Manifest number: 0FD5
Signing time: Fri 17 Apr 2026 03:01:08 +0000
Manifest this update: Fri 17 Apr 2026 03:01:08 +0000
Manifest next update: Sat 18 Apr 2026 03:01:08 +0000
Files and hashes: 1: 0bE4aaGgdiJFJ50d4SWw_RJ5yog.roa (hash: pfh5kzcii4MpQVjtzuuE7xEsH7nvPkPrk2Vo7JxfSO8=)
2: CVAiiQS52-tHkqaXcn42qv2E0uk.crl (hash: 2T7txWI5DriSGoOYIGQxKSfbEhDGQvDT2kz1Rk3JARc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/64d910-945c-42e8-bb44-62821c2c299f/1/CVAiiQS52-tHkqaXcn42qv2E0uk.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/64d910-945c-42e8-bb44-62821c2c299f/1/CVAiiQS52-tHkqaXcn42qv2E0uk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CVAiiQS52-tHkqaXcn42qv2E0uk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:99:a0:4d:e1:59:93:07:ff:2a:73:de:f2:b7:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0950228904b9dbeb4792a697727e36aafd84d2e9
Validity
Not Before: Apr 17 03:01:08 2026 GMT
Not After : Apr 18 03:01:08 2026 GMT
Subject: CN=2017cb71db8341fc116130d37a9673e98b0e4318
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9d:5a:14:ff:b6:35:96:24:a6:05:01:e1:da:
8f:a5:32:82:cb:cb:8c:a6:d3:90:0f:32:d3:19:13:
38:a9:a7:30:f0:e0:8c:19:ab:f0:01:9e:8d:94:f3:
7f:54:3e:ff:4b:d6:13:3b:52:e9:2f:7e:aa:fa:6c:
e8:2e:d0:2c:1c:1f:72:da:c2:bb:23:8f:be:51:e3:
c6:a5:dc:41:09:88:eb:3b:cd:b9:4e:70:6d:f9:b2:
89:41:a4:64:57:52:62:bc:e1:50:ea:7d:e4:79:21:
24:79:5d:6d:3a:ce:0c:e8:9f:be:04:f6:75:4c:f4:
0a:cd:75:68:87:60:33:0c:3c:47:f8:9a:2b:3f:1e:
17:a7:8b:07:f5:c9:ea:d8:a8:1c:dc:1b:05:9b:bd:
c5:b4:93:f3:d3:82:92:42:80:e0:9e:96:ea:8d:a8:
88:90:18:2a:b5:84:c0:6c:e5:7e:d5:ca:74:b2:8c:
83:10:7d:4e:87:57:a5:93:c5:70:56:2e:f0:08:9d:
22:75:41:6d:e7:ee:55:37:25:b8:15:04:57:f6:77:
f8:a9:cf:70:10:55:80:42:07:66:1e:5f:e0:22:60:
7b:8f:4a:a0:a3:26:73:97:a3:18:2f:da:2e:0a:f6:
dd:15:70:d8:0a:63:d8:c4:73:76:36:64:aa:37:34:
39:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:17:CB:71:DB:83:41:FC:11:61:30:D3:7A:96:73:E9:8B:0E:43:18
X509v3 Authority Key Identifier:
keyid:09:50:22:89:04:B9:DB:EB:47:92:A6:97:72:7E:36:AA:FD:84:D2:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CVAiiQS52-tHkqaXcn42qv2E0uk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/64d910-945c-42e8-bb44-62821c2c299f/1/CVAiiQS52-tHkqaXcn42qv2E0uk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/64d910-945c-42e8-bb44-62821c2c299f/1/CVAiiQS52-tHkqaXcn42qv2E0uk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:09:1d:a3:19:66:94:ee:e9:47:0a:0b:4d:fc:d8:f3:53:0a:
3b:42:66:da:05:b4:aa:5a:df:92:2f:81:3a:04:b6:70:5c:be:
84:57:3d:ad:78:36:f6:b4:31:3e:57:f2:0a:ec:ec:5e:de:a9:
4c:94:98:10:0a:e8:89:f5:a1:9c:b6:8f:3f:2b:7a:4b:48:52:
01:d3:e7:c7:c8:9d:ff:0d:e8:55:15:2a:41:6f:5f:8c:7f:8a:
ee:d0:bb:15:a5:39:8b:00:56:ce:59:08:57:17:bf:b3:a9:21:
d5:9c:f9:8e:a2:e8:1b:e9:13:b8:b8:22:27:fa:cd:c8:a8:68:
32:75:84:64:29:b2:bc:ad:02:4f:9b:ca:c3:a4:9d:04:d1:aa:
af:d7:1a:c3:94:72:c5:f0:de:cb:7d:54:e8:d4:3c:80:a7:f7:
f0:44:17:e7:aa:39:04:6f:ae:ef:7a:71:c1:b3:bb:31:bc:08:
db:cc:28:33:28:59:59:96:c9:e6:e2:d6:09:24:07:5e:bd:28:
d7:30:df:a0:9e:97:b1:03:c3:56:e0:29:2b:e2:60:e8:01:3c:
50:69:88:7b:b9:c0:bb:5a:36:b7:99:58:6d:9e:0c:a8:9f:08:
28:60:94:bd:be:79:6d:b5:0e:48:9b:2a:19:64:ba:c6:c8:55:
5b:c9:02:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:49:21 2026 by rpki-client