Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/64d910-945c-42e8-bb44-62821c2c299f/1/CVAiiQS52-tHkqaXcn42qv2E0uk.mft
File: CVAiiQS52-tHkqaXcn42qv2E0uk.mft (raw, json)
Hash identifier: 91DBKy0w7v0VUpBpqqWjSuAe06hGm66z87Szea4IgjE=
Subject key identifier: FC:54:69:DE:4C:B7:23:AC:16:14:C1:F0:A7:3C:E5:94:A0:D1:42:3A
Authority key identifier: 09:50:22:89:04:B9:DB:EB:47:92:A6:97:72:7E:36:AA:FD:84:D2:E9
Certificate issuer: /CN=0950228904b9dbeb4792a697727e36aafd84d2e9
Certificate serial: 019CABD92B733F100E0E34DC2B8EDDFDF5FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CVAiiQS52-tHkqaXcn42qv2E0uk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/64d910-945c-42e8-bb44-62821c2c299f/1/CVAiiQS52-tHkqaXcn42qv2E0uk.mft
Manifest number: 0F5A
Signing time: Mon 02 Mar 2026 00:01:02 +0000
Manifest this update: Mon 02 Mar 2026 00:01:02 +0000
Manifest next update: Tue 03 Mar 2026 00:01:02 +0000
Files and hashes: 1: 0bE4aaGgdiJFJ50d4SWw_RJ5yog.roa (hash: pfh5kzcii4MpQVjtzuuE7xEsH7nvPkPrk2Vo7JxfSO8=)
2: CVAiiQS52-tHkqaXcn42qv2E0uk.crl (hash: t9UiAcj1+E3YPJsHKVyya9PvfiVPQQOIETpK0zP11ks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/64d910-945c-42e8-bb44-62821c2c299f/1/CVAiiQS52-tHkqaXcn42qv2E0uk.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/64d910-945c-42e8-bb44-62821c2c299f/1/CVAiiQS52-tHkqaXcn42qv2E0uk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CVAiiQS52-tHkqaXcn42qv2E0uk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:2b:73:3f:10:0e:0e:34:dc:2b:8e:dd:fd:f5:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0950228904b9dbeb4792a697727e36aafd84d2e9
Validity
Not Before: Mar 2 00:01:02 2026 GMT
Not After : Mar 3 00:01:02 2026 GMT
Subject: CN=fc5469de4cb723ac1614c1f0a73ce594a0d1423a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:53:98:41:41:40:2c:34:80:52:b4:d3:3a:4d:
29:0c:36:fa:32:3f:0e:cf:c5:d9:4e:c5:45:bc:d5:
19:9d:32:44:e9:6d:4e:84:4e:aa:9a:c9:fa:9f:bb:
72:4e:52:cf:c7:34:11:22:73:fd:51:3d:36:6d:d9:
57:08:32:9b:80:06:21:96:ae:cd:24:73:35:b1:68:
0b:f0:bc:2e:41:9a:9d:9a:dd:c4:79:0f:92:ef:d3:
fb:e6:13:2e:56:92:6b:fe:05:42:e8:43:27:c6:55:
f1:6b:42:c5:49:9b:17:e6:37:04:ba:81:e7:6d:59:
3c:c4:3b:4a:b8:3c:e0:87:5f:4c:50:9f:57:a7:42:
43:21:15:95:47:3d:9a:bc:ae:76:2a:d0:09:d7:fc:
e2:7b:c1:40:82:3a:ae:c3:a7:fe:2b:4b:c8:f5:6e:
ef:40:db:d8:df:17:ba:cf:0f:3a:4b:f1:92:02:53:
62:1c:f7:00:18:34:7b:27:90:a8:c3:0c:e6:c0:3c:
8a:e0:01:90:81:b5:a3:13:21:97:85:fd:e8:ba:14:
6c:60:55:e9:f6:ff:8b:4b:4a:5e:6e:fb:65:4c:12:
1a:7b:cd:c2:42:6a:41:75:0a:ef:5c:9d:b3:1e:23:
e5:b3:30:4f:1e:a3:f1:4d:68:d7:fd:8d:29:de:ed:
b5:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:54:69:DE:4C:B7:23:AC:16:14:C1:F0:A7:3C:E5:94:A0:D1:42:3A
X509v3 Authority Key Identifier:
keyid:09:50:22:89:04:B9:DB:EB:47:92:A6:97:72:7E:36:AA:FD:84:D2:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CVAiiQS52-tHkqaXcn42qv2E0uk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/64d910-945c-42e8-bb44-62821c2c299f/1/CVAiiQS52-tHkqaXcn42qv2E0uk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/64d910-945c-42e8-bb44-62821c2c299f/1/CVAiiQS52-tHkqaXcn42qv2E0uk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:14:3a:cd:1a:c4:5b:f4:2c:52:cb:b7:16:72:e6:1f:48:51:
01:4e:49:3a:86:ba:bc:25:31:a4:bf:31:ec:77:c6:ec:95:55:
ff:4b:6c:c8:76:65:2a:ea:ae:18:a2:56:05:12:45:4c:8c:a7:
80:fd:ee:f5:af:7d:ea:bf:00:9c:b7:e6:9c:8f:b8:25:4c:0d:
d1:e8:d6:6b:b7:ef:80:f3:49:65:b2:3e:a6:9b:e9:de:52:9b:
f8:b9:e7:0f:12:8c:ff:4a:67:f5:26:6f:c0:0d:19:4c:67:53:
e6:ef:5d:44:4a:ec:eb:54:0b:04:88:82:3b:85:c3:55:1b:a5:
78:6e:ef:6a:0d:45:e5:a6:25:ad:f4:69:7e:a4:a1:ed:52:c2:
30:a8:4a:40:ce:f2:62:e7:c6:dd:e6:59:62:e2:a2:f0:65:83:
87:b7:61:19:a4:8e:c7:6e:83:e8:f5:d6:20:ab:4d:40:ea:e1:
70:e9:f5:d3:2c:4b:07:83:a2:41:04:41:12:e5:71:c6:24:44:
79:57:f0:be:e2:8b:bb:aa:a8:81:52:82:bc:06:34:da:49:d1:
e8:93:e0:e6:87:f9:20:79:21:33:36:49:f8:92:2c:73:97:8a:
2f:6e:ef:22:0d:a1:68:5c:04:b7:51:3e:83:d3:c3:8f:fe:93:
89:d3:ad:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:40:20 2026 by rpki-client