Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/64d910-945c-42e8-bb44-62821c2c299f/1/CVAiiQS52-tHkqaXcn42qv2E0uk.mft
File: CVAiiQS52-tHkqaXcn42qv2E0uk.mft (raw, json)
Hash identifier: hr8Of+ihd5T180fh0uuzpYM15ZLI1rXLVrGXa1w1Myk=
Subject key identifier: 67:74:C9:8E:C9:66:CA:1E:4C:D3:80:DA:20:DA:35:F2:40:4A:EC:B2
Authority key identifier: 09:50:22:89:04:B9:DB:EB:47:92:A6:97:72:7E:36:AA:FD:84:D2:E9
Certificate issuer: /CN=0950228904b9dbeb4792a697727e36aafd84d2e9
Certificate serial: 01A0C28E43DCBFF324208294D9E80B56DDA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CVAiiQS52-tHkqaXcn42qv2E0uk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/64d910-945c-42e8-bb44-62821c2c299f/1/CVAiiQS52-tHkqaXcn42qv2E0uk.mft
Manifest number: 1178
Signing time: Mon 21 Sep 2026 06:01:38 +0000
Manifest this update: Mon 21 Sep 2026 06:01:38 +0000
Manifest next update: Tue 22 Sep 2026 06:01:38 +0000
Files and hashes: 1: 0bE4aaGgdiJFJ50d4SWw_RJ5yog.roa (hash: pfh5kzcii4MpQVjtzuuE7xEsH7nvPkPrk2Vo7JxfSO8=)
2: CVAiiQS52-tHkqaXcn42qv2E0uk.crl (hash: aM/eIsikP3sTgW15PSa/i3ZIBG8VlLiPMK90Lccy43k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/64d910-945c-42e8-bb44-62821c2c299f/1/CVAiiQS52-tHkqaXcn42qv2E0uk.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/64d910-945c-42e8-bb44-62821c2c299f/1/CVAiiQS52-tHkqaXcn42qv2E0uk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CVAiiQS52-tHkqaXcn42qv2E0uk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 06:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:8e:43:dc:bf:f3:24:20:82:94:d9:e8:0b:56:dd:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0950228904b9dbeb4792a697727e36aafd84d2e9
Validity
Not Before: Sep 21 06:01:38 2026 GMT
Not After : Sep 22 06:01:38 2026 GMT
Subject: CN=6774c98ec966ca1e4cd380da20da35f2404aecb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:02:08:53:5b:c2:44:4c:91:f8:f6:53:c5:87:
3b:ff:3a:6c:6c:2f:d4:83:ec:27:c3:1b:14:23:23:
26:da:03:a1:62:bd:e5:c0:b3:16:f2:57:a0:ad:7f:
82:67:42:77:91:a2:1b:be:b7:96:65:a8:e1:2e:43:
7f:56:0a:ac:29:31:6f:01:82:40:fe:03:b1:d4:94:
f8:ad:77:72:9d:ac:c7:37:46:b3:2d:fb:fe:22:9c:
e7:73:b8:93:d7:c5:61:21:27:e5:6d:27:bf:c8:2d:
41:b6:ca:a4:a2:6d:4b:ed:bd:63:97:12:c1:27:58:
7a:3a:e3:c2:1c:36:f6:7c:f2:f0:35:82:da:55:b4:
79:58:12:f2:3c:15:bd:65:f8:9f:d1:f8:1d:d4:f7:
1a:c3:01:df:c4:c2:9b:d9:05:54:ea:99:db:61:f8:
db:2d:5f:c9:8d:e4:70:ec:4c:78:41:71:4c:f5:54:
a7:ed:f1:70:a7:84:98:58:d2:77:b7:21:bd:ef:1e:
e6:0a:24:15:d0:e1:45:ff:ca:65:92:dc:27:5c:a2:
09:54:d9:46:4f:cc:ed:8a:5b:c0:72:2a:08:7b:5e:
b6:90:49:ea:54:2b:15:18:86:44:0b:09:ec:c5:d4:
36:4b:2e:22:3a:d2:65:75:7f:a0:8b:eb:a4:ab:be:
ec:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:74:C9:8E:C9:66:CA:1E:4C:D3:80:DA:20:DA:35:F2:40:4A:EC:B2
X509v3 Authority Key Identifier:
keyid:09:50:22:89:04:B9:DB:EB:47:92:A6:97:72:7E:36:AA:FD:84:D2:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CVAiiQS52-tHkqaXcn42qv2E0uk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/64d910-945c-42e8-bb44-62821c2c299f/1/CVAiiQS52-tHkqaXcn42qv2E0uk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/64d910-945c-42e8-bb44-62821c2c299f/1/CVAiiQS52-tHkqaXcn42qv2E0uk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:9d:d5:3c:e8:7a:68:bb:51:95:82:91:ee:94:79:2a:47:57:
6f:b9:db:f8:e9:d1:17:b8:cf:29:6d:ef:94:1e:7f:c1:af:56:
4b:e7:72:50:b1:c1:dd:39:6b:0c:18:54:15:b5:74:b3:5d:52:
44:9b:d1:f6:c8:88:94:32:4d:18:ce:d5:fa:cc:6c:9f:b3:0b:
d8:fd:f4:4f:7e:e2:a6:42:59:36:da:39:df:8d:f9:49:a8:94:
fd:47:d1:10:29:1c:45:18:4c:72:62:f4:5a:c3:5d:16:99:43:
05:15:aa:e4:c1:bd:76:83:68:8a:6c:0b:46:cc:0a:f5:f7:d6:
8b:4b:86:ee:6b:84:3b:3d:94:a9:8d:a5:6c:3c:77:89:18:d0:
51:1f:02:d7:d7:0b:cf:c6:4a:55:d6:f2:02:f2:b9:c4:f8:8b:
3e:22:37:cc:f1:cd:b3:14:b7:a5:62:0e:1b:e4:bd:f7:6e:26:
e3:49:ad:83:ab:cc:d1:ad:ce:56:0d:e7:ac:12:79:ec:ac:76:
12:5a:8c:75:08:a3:54:88:56:b3:f0:10:c1:e8:aa:3e:b4:a6:
28:2d:55:86:fd:08:e7:f3:21:15:af:06:1a:52:98:2c:ac:b8:
be:ca:bf:a0:fe:20:f5:6d:95:4a:dd:d0:d3:5f:b0:ef:e7:2f:
06:d7:89:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:00:07 2026 by rpki-client