Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/64d910-945c-42e8-bb44-62821c2c299f/1/CVAiiQS52-tHkqaXcn42qv2E0uk.mft
File: CVAiiQS52-tHkqaXcn42qv2E0uk.mft (raw, json)
Hash identifier: aAhZawTsOEIj6bVP86qYoTpidh3yYmlY6aMAeLyOUFc=
Subject key identifier: 57:82:AF:20:74:69:D8:0E:C7:E2:FE:5E:B1:94:02:7D:82:22:BD:B4
Authority key identifier: 09:50:22:89:04:B9:DB:EB:47:92:A6:97:72:7E:36:AA:FD:84:D2:E9
Certificate issuer: /CN=0950228904b9dbeb4792a697727e36aafd84d2e9
Certificate serial: 01A1DE71453759E44095E19A67E82F6E86E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CVAiiQS52-tHkqaXcn42qv2E0uk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/64d910-945c-42e8-bb44-62821c2c299f/1/CVAiiQS52-tHkqaXcn42qv2E0uk.mft
Manifest number: 120B
Signing time: Sun 15 Nov 2026 09:02:07 +0000
Manifest this update: Sun 15 Nov 2026 09:02:07 +0000
Manifest next update: Mon 16 Nov 2026 09:02:07 +0000
Files and hashes: 1: 0bE4aaGgdiJFJ50d4SWw_RJ5yog.roa (hash: pfh5kzcii4MpQVjtzuuE7xEsH7nvPkPrk2Vo7JxfSO8=)
2: CVAiiQS52-tHkqaXcn42qv2E0uk.crl (hash: IXJvnBtx1VGPfLBSV8vsr6piAA7+rqDDrxN2YemUeTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/64d910-945c-42e8-bb44-62821c2c299f/1/CVAiiQS52-tHkqaXcn42qv2E0uk.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/64d910-945c-42e8-bb44-62821c2c299f/1/CVAiiQS52-tHkqaXcn42qv2E0uk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CVAiiQS52-tHkqaXcn42qv2E0uk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:71:45:37:59:e4:40:95:e1:9a:67:e8:2f:6e:86:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0950228904b9dbeb4792a697727e36aafd84d2e9
Validity
Not Before: Nov 15 09:02:07 2026 GMT
Not After : Nov 16 09:02:07 2026 GMT
Subject: CN=5782af207469d80ec7e2fe5eb194027d8222bdb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:71:cd:9b:f0:6a:c8:27:5c:1c:08:94:03:5d:
b5:4f:64:a9:95:73:a4:d9:3c:ff:ef:39:81:93:43:
06:f8:dd:32:38:73:a3:37:95:0a:61:e8:ff:15:7b:
89:09:2f:8f:34:67:b7:51:6a:41:42:48:0b:24:b6:
1d:ce:d9:99:7d:cc:67:f2:b1:20:14:7b:08:a4:10:
2b:70:ba:e3:1c:c5:ad:32:fc:70:8c:d0:44:a9:ad:
c8:0e:06:1b:6a:e5:26:a9:c4:bf:52:2b:e3:76:9c:
33:1f:74:2e:7e:11:34:6e:4d:03:f8:72:a6:97:a0:
41:f1:2b:42:b0:a2:bf:ae:6b:bc:9c:6e:cc:af:c8:
00:3e:2b:9c:cf:5d:bc:7a:11:43:58:7f:77:db:de:
5a:a2:5e:c0:72:1c:0d:2e:72:da:0c:53:17:5b:92:
b0:99:7a:5c:c3:94:8c:c3:a0:b6:fd:f1:01:ed:a0:
76:92:18:5f:45:bf:fe:41:5c:06:ee:9e:77:60:23:
ce:1b:d1:85:88:09:4d:b7:d1:83:d6:c9:58:49:1a:
89:24:6f:b9:c7:ff:b2:7e:56:23:6d:5c:75:05:ab:
f4:a6:6f:66:c8:b0:78:71:82:19:0c:88:84:c1:ff:
c0:31:51:4e:a7:e4:a6:1c:96:e3:4d:59:18:34:6c:
31:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:82:AF:20:74:69:D8:0E:C7:E2:FE:5E:B1:94:02:7D:82:22:BD:B4
X509v3 Authority Key Identifier:
keyid:09:50:22:89:04:B9:DB:EB:47:92:A6:97:72:7E:36:AA:FD:84:D2:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CVAiiQS52-tHkqaXcn42qv2E0uk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/64d910-945c-42e8-bb44-62821c2c299f/1/CVAiiQS52-tHkqaXcn42qv2E0uk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/64d910-945c-42e8-bb44-62821c2c299f/1/CVAiiQS52-tHkqaXcn42qv2E0uk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:34:cb:4e:f8:97:27:33:de:e2:21:42:36:d4:4d:60:77:81:
2b:69:88:8f:47:4f:65:d7:66:59:8b:fc:31:fb:5f:6f:69:11:
f1:5e:14:9c:1b:d9:6d:ec:2f:3d:9d:58:0b:89:81:65:c3:16:
8f:b5:51:04:c1:cf:b7:e9:c0:6c:e1:e1:08:a6:87:d9:19:ec:
c2:4e:8d:80:a7:e7:be:5c:e8:0a:d9:a2:8a:56:fd:07:d3:0c:
55:66:e2:36:1d:01:a1:de:12:3a:68:a0:76:40:55:a2:7d:8c:
22:ad:ab:3f:2e:76:e1:29:af:e2:bf:95:e0:06:02:11:da:8a:
18:7f:d7:73:b4:60:e4:f3:ad:22:c7:6b:09:ad:d6:3e:a4:bc:
a3:5f:f3:9d:c8:73:8f:5f:3c:81:59:e0:8d:46:52:e4:0e:4e:
47:80:34:5f:b2:a4:58:c4:44:94:cc:9a:47:28:67:65:7a:e2:
da:c9:c0:9c:4a:ea:26:c4:39:69:07:2c:01:54:4f:dd:68:ff:
58:4e:4c:de:a2:a0:de:51:0a:4d:08:96:bc:84:87:39:1a:03:
92:08:c0:9b:be:f1:4d:28:08:e9:e3:18:46:2c:25:62:b7:6d:
82:bd:aa:be:c2:09:0b:a2:fc:eb:fe:da:ab:94:31:71:26:f3:
f0:8b:fa:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHecUU3WeRAleGaZ+gvboboMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5NTAyMjg5MDRiOWRiZWI0NzkyYTY5NzcyN2UzNmFhZmQ4
NGQyZTkwHhcNMjYxMTE1MDkwMjA3WhcNMjYxMTE2MDkwMjA3WjAzMTEwLwYDVQQD
Eyg1NzgyYWYyMDc0NjlkODBlYzdlMmZlNWViMTk0MDI3ZDgyMjJiZGI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3nHNm/BqyCdcHAiUA121T2SplXOk
2Tz/7zmBk0MG+N0yOHOjN5UKYej/FXuJCS+PNGe3UWpBQkgLJLYdztmZfcxn8rEg
FHsIpBArcLrjHMWtMvxwjNBEqa3IDgYbauUmqcS/UivjdpwzH3QufhE0bk0D+HKm
l6BB8StCsKK/rmu8nG7Mr8gAPiucz128ehFDWH93295aol7AchwNLnLaDFMXW5Kw
mXpcw5SMw6C2/fEB7aB2khhfRb/+QVwG7p53YCPOG9GFiAlNt9GD1slYSRqJJG+5
x/+yflYjbVx1Bav0pm9myLB4cYIZDIiEwf/AMVFOp+SmHJbjTVkYNGwxrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFeCryB0adgOx+L+XrGUAn2CIr20MB8GA1UdIwQY
MBaAFAlQIokEudvrR5Kml3J+Nqr9hNLpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1ZBaWlRUzUyLXRIa3FhWGNuNDJxdjJFMHVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS82NGQ5MTAtOTQ1Yy00MmU4LWJiNDQt
NjI4MjFjMmMyOTlmLzEvQ1ZBaWlRUzUyLXRIa3FhWGNuNDJxdjJFMHVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS82NGQ5MTAtOTQ1Yy00MmU4LWJiNDQtNjI4MjFjMmMyOTlm
LzEvQ1ZBaWlRUzUyLXRIa3FhWGNuNDJxdjJFMHVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAszTLTviX
JzPe4iFCNtRNYHeBK2mIj0dPZddmWYv8Mftfb2kR8V4UnBvZbewvPZ1YC4mBZcMW
j7VRBMHPt+nAbOHhCKaH2Rnswk6NgKfnvlzoCtmiilb9B9MMVWbiNh0Bod4SOmig
dkBVon2MIq2rPy524Smv4r+V4AYCEdqKGH/Xc7Rg5POtIsdrCa3WPqS8o1/znchz
j188gVngjUZS5A5OR4A0X7KkWMRElMyaRyhnZXri2snAnErqJsQ5aQcsAVRP3Wj/
WE5M3qKg3lEKTQiWvISHORoDkgjAm77xTSgI6eMYRiwlYrdtgr2qvsIJC6L86/7a
q5QxcSbz8Iv6xw==
-----END CERTIFICATE-----
Generated at Sun Nov 15 12:43:05 2026 by rpki-client