Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/64d910-945c-42e8-bb44-62821c2c299f/1/CVAiiQS52-tHkqaXcn42qv2E0uk.mft
File: CVAiiQS52-tHkqaXcn42qv2E0uk.mft (raw, json)
Hash identifier: KrMDCHogMOvoQ1C53fp3zirWFeyHBB29OJCttAeBG2I=
Subject key identifier: E9:AB:BF:0D:EA:05:0E:8C:85:3F:CA:EE:3F:7D:DB:10:FB:49:07:52
Authority key identifier: 09:50:22:89:04:B9:DB:EB:47:92:A6:97:72:7E:36:AA:FD:84:D2:E9
Certificate issuer: /CN=0950228904b9dbeb4792a697727e36aafd84d2e9
Certificate serial: 019EBEECD8D4E8A093C51BBD3D1FAA877576
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CVAiiQS52-tHkqaXcn42qv2E0uk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/64d910-945c-42e8-bb44-62821c2c299f/1/CVAiiQS52-tHkqaXcn42qv2E0uk.mft
Manifest number: 106D
Signing time: Sat 13 Jun 2026 03:00:53 +0000
Manifest this update: Sat 13 Jun 2026 03:00:53 +0000
Manifest next update: Sun 14 Jun 2026 03:00:53 +0000
Files and hashes: 1: 0bE4aaGgdiJFJ50d4SWw_RJ5yog.roa (hash: pfh5kzcii4MpQVjtzuuE7xEsH7nvPkPrk2Vo7JxfSO8=)
2: CVAiiQS52-tHkqaXcn42qv2E0uk.crl (hash: S4y7kpUjsh9ujJxUC/wfusdDkTSmlBlG306z7FFcs/E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/64d910-945c-42e8-bb44-62821c2c299f/1/CVAiiQS52-tHkqaXcn42qv2E0uk.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/64d910-945c-42e8-bb44-62821c2c299f/1/CVAiiQS52-tHkqaXcn42qv2E0uk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CVAiiQS52-tHkqaXcn42qv2E0uk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:ec:d8:d4:e8:a0:93:c5:1b:bd:3d:1f:aa:87:75:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0950228904b9dbeb4792a697727e36aafd84d2e9
Validity
Not Before: Jun 13 03:00:53 2026 GMT
Not After : Jun 14 03:00:53 2026 GMT
Subject: CN=e9abbf0dea050e8c853fcaee3f7ddb10fb490752
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d9:57:25:50:c2:2d:d8:8f:0c:78:79:4f:a0:
7a:12:b3:49:01:e1:4f:66:ae:46:0b:af:1b:0f:ee:
f4:2e:35:1d:7b:e6:8f:ce:25:45:4f:7e:22:52:2a:
ad:a6:3d:de:47:f5:80:41:8a:89:2c:6b:b7:57:82:
32:35:e2:44:d0:06:f2:ad:de:83:1a:0d:d4:b5:6d:
d4:34:56:3d:9c:d4:27:94:36:15:34:c5:7c:0f:c5:
e0:40:99:29:f7:f7:69:c0:95:ea:34:13:43:06:d5:
3f:6a:3a:0d:dd:4a:98:51:7a:d2:5a:72:46:13:78:
68:bb:f2:a1:a3:ed:db:73:bf:74:d1:4a:c8:cd:54:
82:94:e5:96:5a:77:a2:5e:81:6d:26:a2:83:f2:40:
98:65:60:df:ce:e9:22:3d:e1:fc:54:66:68:db:88:
eb:30:6a:35:13:43:f8:5e:c1:b0:43:5f:b5:dd:c7:
a6:ce:07:72:e8:9a:88:ec:6b:a0:d2:4f:0e:e3:a7:
79:75:af:bc:a1:8b:2d:d7:93:cf:5d:76:fa:07:65:
ee:8e:d1:29:91:ab:11:cb:bf:ca:47:5c:7a:f8:36:
fd:95:82:97:6a:fe:39:61:24:f9:57:58:9c:09:34:
ec:47:3b:b7:d2:c7:b1:5f:21:7d:dd:30:29:6e:93:
a3:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:AB:BF:0D:EA:05:0E:8C:85:3F:CA:EE:3F:7D:DB:10:FB:49:07:52
X509v3 Authority Key Identifier:
keyid:09:50:22:89:04:B9:DB:EB:47:92:A6:97:72:7E:36:AA:FD:84:D2:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CVAiiQS52-tHkqaXcn42qv2E0uk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/64d910-945c-42e8-bb44-62821c2c299f/1/CVAiiQS52-tHkqaXcn42qv2E0uk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/64d910-945c-42e8-bb44-62821c2c299f/1/CVAiiQS52-tHkqaXcn42qv2E0uk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:04:c0:d6:0c:f9:af:9b:0c:4a:3b:fd:89:e7:20:32:28:f6:
1c:7f:8f:0b:83:8a:06:10:ae:dc:5f:03:6d:ac:9c:2a:e0:c3:
53:5d:b9:a8:03:42:ed:36:81:5e:8d:1e:65:2a:ce:d7:48:b5:
6f:9b:55:d8:99:6c:52:e9:d3:e6:8f:b1:81:0d:dd:05:14:05:
72:d1:3c:ce:85:b6:39:e5:bc:01:b7:4f:e3:fc:c9:7e:b6:21:
b6:28:0e:50:a8:39:f4:ae:99:98:cf:fa:96:5d:f6:ee:e0:e3:
92:c6:82:b0:1c:36:21:30:87:12:32:2a:0f:a1:7a:ca:23:5d:
df:a7:ed:73:25:2a:78:93:3a:cc:fc:07:a5:73:ff:7b:ac:ec:
36:4a:69:a3:15:e8:4c:be:93:4c:fb:a5:60:9f:3d:8d:94:cb:
c7:1e:65:b5:ad:09:02:c9:4a:4b:60:0f:a5:f0:c0:78:6a:2a:
d3:15:e7:f5:f4:70:be:52:e3:0f:c1:59:a8:d8:a7:da:56:10:
56:52:80:21:8f:01:55:fa:de:4c:d4:b4:7b:64:67:a2:f6:66:
16:75:4b:36:a8:02:ef:b7:40:1e:87:df:1c:61:cc:f0:d1:c2:
fc:b8:1e:3f:4a:3b:3e:1c:65:1e:8b:05:27:47:a3:ff:e0:38:
db:b5:bb:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:20:20 2026 by rpki-client