Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/64d910-945c-42e8-bb44-62821c2c299f/1/CVAiiQS52-tHkqaXcn42qv2E0uk.mft
File: CVAiiQS52-tHkqaXcn42qv2E0uk.mft (raw, json)
Hash identifier: ZWwxFMw2WH781x7/V3v7FM42GbgYxvb92M6b+h/Ju9M=
Subject key identifier: 8F:DC:D1:5B:88:18:DA:02:04:B9:F7:72:1E:A5:F2:56:DD:A4:92:88
Authority key identifier: 09:50:22:89:04:B9:DB:EB:47:92:A6:97:72:7E:36:AA:FD:84:D2:E9
Certificate issuer: /CN=0950228904b9dbeb4792a697727e36aafd84d2e9
Certificate serial: 019FA899C923F20D479C22DCF1123244F4CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CVAiiQS52-tHkqaXcn42qv2E0uk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/64d910-945c-42e8-bb44-62821c2c299f/1/CVAiiQS52-tHkqaXcn42qv2E0uk.mft
Manifest number: 10E6
Signing time: Tue 28 Jul 2026 12:01:18 +0000
Manifest this update: Tue 28 Jul 2026 12:01:18 +0000
Manifest next update: Wed 29 Jul 2026 12:01:18 +0000
Files and hashes: 1: 0bE4aaGgdiJFJ50d4SWw_RJ5yog.roa (hash: pfh5kzcii4MpQVjtzuuE7xEsH7nvPkPrk2Vo7JxfSO8=)
2: CVAiiQS52-tHkqaXcn42qv2E0uk.crl (hash: mvxQFEOTKboe8U+hH9NCc7I2xnEAPWgCCNRaB4HQ4uw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/64d910-945c-42e8-bb44-62821c2c299f/1/CVAiiQS52-tHkqaXcn42qv2E0uk.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/64d910-945c-42e8-bb44-62821c2c299f/1/CVAiiQS52-tHkqaXcn42qv2E0uk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CVAiiQS52-tHkqaXcn42qv2E0uk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:99:c9:23:f2:0d:47:9c:22:dc:f1:12:32:44:f4:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0950228904b9dbeb4792a697727e36aafd84d2e9
Validity
Not Before: Jul 28 12:01:18 2026 GMT
Not After : Jul 29 12:01:18 2026 GMT
Subject: CN=8fdcd15b8818da0204b9f7721ea5f256dda49288
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c7:2e:e5:32:8e:8c:f7:59:00:2d:99:68:52:
a1:92:61:27:32:73:a3:6c:7f:e1:96:68:50:a1:05:
8d:07:4f:dc:28:95:dc:53:6c:65:63:6d:fd:57:09:
3b:f5:3a:8d:57:6e:da:59:22:3a:ec:30:26:39:b7:
ca:83:76:b0:f7:02:e2:9c:5e:fd:33:54:20:22:c5:
20:ee:08:a8:e1:cf:89:10:a1:75:9b:33:33:31:2c:
4c:c6:32:1d:53:17:db:85:8a:f9:49:fc:2b:8e:d2:
1a:94:79:cd:45:6a:54:5b:eb:99:6a:f4:c5:1e:22:
43:cc:a0:83:82:40:24:a1:74:d7:a1:3c:fe:76:6f:
38:2e:6c:2f:ba:ef:99:ca:d5:7e:6a:88:49:79:71:
af:70:59:79:a8:d3:03:dd:9f:17:a9:6c:79:f1:5a:
03:90:98:c0:53:da:22:90:2a:6a:8e:0c:05:18:d7:
9a:99:0d:fa:e8:41:9a:f9:5e:27:d8:55:09:32:84:
67:1c:fe:14:f8:8d:25:0e:8b:90:e2:94:69:62:fb:
52:f1:76:f7:14:f9:83:c2:42:0d:bd:63:ca:0e:1d:
06:a3:78:97:bf:0b:3d:0b:05:f7:e2:01:d2:cf:72:
60:9b:e0:fe:65:c1:90:d9:47:d2:30:4a:15:2e:51:
49:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:DC:D1:5B:88:18:DA:02:04:B9:F7:72:1E:A5:F2:56:DD:A4:92:88
X509v3 Authority Key Identifier:
keyid:09:50:22:89:04:B9:DB:EB:47:92:A6:97:72:7E:36:AA:FD:84:D2:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CVAiiQS52-tHkqaXcn42qv2E0uk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/64d910-945c-42e8-bb44-62821c2c299f/1/CVAiiQS52-tHkqaXcn42qv2E0uk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/64d910-945c-42e8-bb44-62821c2c299f/1/CVAiiQS52-tHkqaXcn42qv2E0uk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:87:86:82:dd:a4:d1:e2:e8:66:d8:dd:22:fc:84:ff:77:e5:
8c:20:c3:cd:5f:48:cc:d6:d9:43:43:7f:08:b3:39:38:b7:c9:
f5:96:ed:40:2a:4d:c7:10:be:a6:d8:05:69:dc:8a:08:71:39:
f5:a1:ef:2e:cc:31:5e:ce:32:49:ad:54:96:72:9f:30:68:8a:
6e:32:f6:0c:e5:87:45:3f:c9:83:1c:bf:cb:b9:b8:b7:ba:29:
c0:27:62:e7:29:64:bd:3d:c7:39:0f:40:95:d1:98:05:b5:e2:
6c:b5:df:b7:7c:9b:5a:65:85:4b:05:1e:0f:73:b4:01:f1:57:
5a:41:f8:f3:09:af:ec:dc:fd:4c:94:d4:89:1f:60:51:0e:c6:
fc:90:13:17:ac:cd:0f:77:30:4d:a2:79:99:5b:a8:5c:9f:23:
0f:05:d1:c1:81:c0:41:30:d5:e8:7f:ca:ef:21:c8:26:36:e8:
ed:7a:56:a5:5b:27:86:0d:23:1d:db:45:b1:b6:51:0c:19:03:
d1:23:fd:5e:e9:dd:d2:08:67:ca:6d:46:10:3e:f1:fa:88:0b:
97:0e:33:94:a1:a0:a0:30:6d:a3:db:05:4a:49:b7:2a:93:2a:
8f:14:ac:d8:71:09:ec:ea:a8:ac:9b:3c:e5:e4:98:67:5d:4a:
22:93:87:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:29:35 2026 by rpki-client