Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/a97f86-fb18-483e-926c-832d55590f29/1/Cv78Oruzv63prfFCafNgIwfJLl4.mft
File: Cv78Oruzv63prfFCafNgIwfJLl4.mft (raw, json)
Hash identifier: 1Uo1P7dOd/ODbm6UzgslAiwmX8KmWHUyLhvF7rexVLg=
Subject key identifier: 5F:0A:CA:55:B8:AC:CE:25:EC:50:0A:06:26:F5:B4:90:14:AF:1D:F5
Authority key identifier: 0A:FE:FC:3A:BB:B3:BF:AD:E9:AD:F1:42:69:F3:60:23:07:C9:2E:5E
Certificate issuer: /CN=0afefc3abbb3bfade9adf14269f3602307c92e5e
Certificate serial: 019F8ED9D11E7CAC628C2A8BF271C1163068
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cv78Oruzv63prfFCafNgIwfJLl4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/a97f86-fb18-483e-926c-832d55590f29/1/Cv78Oruzv63prfFCafNgIwfJLl4.mft
Manifest number: 0163
Signing time: Thu 23 Jul 2026 12:01:06 +0000
Manifest this update: Thu 23 Jul 2026 12:01:06 +0000
Manifest next update: Fri 24 Jul 2026 12:01:06 +0000
Files and hashes: 1: Cv78Oruzv63prfFCafNgIwfJLl4.crl (hash: gmNSbAIn9j89uodAMsWV7rfAm99xYKDm+MqFha3NsOQ=)
2: fdT5h_AVa4G_dfwdPb5ps2tK-dc.roa (hash: REU2paWp+wXXGlOwD8K0DYxInrpyINHxZ90ERdleFKg=)
3: wdZYfAFUeN1uYq_6mZZzbvOEO9E.roa (hash: qIQR+crOVY1d0komneMfNh35fcgqDk/iAFOlKpD6isU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/a97f86-fb18-483e-926c-832d55590f29/1/Cv78Oruzv63prfFCafNgIwfJLl4.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/a97f86-fb18-483e-926c-832d55590f29/1/Cv78Oruzv63prfFCafNgIwfJLl4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cv78Oruzv63prfFCafNgIwfJLl4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 12:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:d9:d1:1e:7c:ac:62:8c:2a:8b:f2:71:c1:16:30:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0afefc3abbb3bfade9adf14269f3602307c92e5e
Validity
Not Before: Jul 23 12:01:06 2026 GMT
Not After : Jul 24 12:01:06 2026 GMT
Subject: CN=5f0aca55b8acce25ec500a0626f5b49014af1df5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:78:61:03:e1:2b:88:2b:69:63:90:b5:f7:05:
2e:61:a2:c9:b7:c1:b5:06:fb:20:c5:ad:1b:f1:c0:
b8:66:6c:50:86:a6:cc:0a:26:08:9a:46:43:91:f0:
0f:45:12:8c:9a:14:bb:48:7c:ea:34:f3:e4:72:65:
e2:f2:42:18:6c:b5:4f:80:d3:ae:7b:cc:9a:47:fd:
41:0c:7a:25:61:dc:6e:83:8c:a1:63:8a:27:97:18:
15:05:0f:7a:df:42:3d:e7:ca:d9:07:76:18:99:52:
5c:96:92:a9:c6:64:9c:e0:4e:e6:b2:f3:db:6a:28:
e4:db:fd:14:5c:ed:0d:31:1a:ac:23:08:82:94:01:
df:3a:52:50:83:f2:f7:94:f1:39:ba:42:fd:b1:5a:
f7:e2:bb:1d:2c:0f:6d:dc:7f:5e:58:00:81:6f:e8:
88:e6:71:d0:fb:4f:1a:d1:1f:cd:8c:93:91:cc:61:
e8:06:25:f9:43:2e:e5:e9:b7:e1:1e:be:51:f1:21:
be:8d:64:50:24:46:92:1f:a3:e4:e6:cd:4b:32:31:
f5:81:b3:48:0b:3f:fc:28:d8:70:31:be:42:21:47:
a4:f5:44:b8:07:68:a7:6a:90:8c:f0:1b:a3:af:56:
00:8e:73:66:75:f3:d1:68:5f:be:56:16:f9:1e:b3:
9c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:0A:CA:55:B8:AC:CE:25:EC:50:0A:06:26:F5:B4:90:14:AF:1D:F5
X509v3 Authority Key Identifier:
keyid:0A:FE:FC:3A:BB:B3:BF:AD:E9:AD:F1:42:69:F3:60:23:07:C9:2E:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cv78Oruzv63prfFCafNgIwfJLl4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/a97f86-fb18-483e-926c-832d55590f29/1/Cv78Oruzv63prfFCafNgIwfJLl4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/a97f86-fb18-483e-926c-832d55590f29/1/Cv78Oruzv63prfFCafNgIwfJLl4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:e0:72:c7:75:57:b6:a6:d9:4c:4f:f5:68:91:75:9e:6d:4d:
d0:74:9a:62:10:14:8c:38:8a:84:49:cf:bd:a0:63:7b:9e:9c:
56:cc:00:83:97:7e:04:7c:1c:1c:33:52:36:d2:3d:ab:d0:66:
f0:62:4f:0a:1c:f9:89:11:8e:a6:d2:98:5f:67:e9:18:6d:10:
c2:ec:39:10:e9:86:32:b7:42:12:0e:db:4d:a7:24:65:a0:34:
e4:b3:ac:42:f4:59:97:58:1b:4e:16:fe:21:fc:3c:91:a4:6c:
f2:da:17:28:74:11:f1:a3:d1:21:1c:81:b2:ee:d6:35:f2:95:
72:2f:f9:21:79:b7:26:9c:5e:fd:dc:04:b4:de:5c:38:76:84:
ff:b1:2a:f4:b2:2f:ed:59:14:0f:43:c8:cd:3c:f5:9e:7e:0b:
ca:62:7a:71:cf:44:f0:86:a1:bd:63:7d:23:c3:57:c9:64:f6:
12:18:a9:11:62:16:21:f4:06:7a:5b:3f:9f:ef:0b:00:47:58:
53:ca:d9:89:b1:73:3f:2f:46:1f:66:a4:9e:68:29:1b:d9:33:
52:f8:b9:18:41:96:c9:ae:a3:64:03:ec:ad:3a:95:04:53:3f:
ed:25:ff:4c:99:cd:d2:83:76:7a:63:eb:71:8d:43:35:ae:a1:
7a:eb:f0:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+O2dEefKxijCqL8nHBFjBoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhZmVmYzNhYmJiM2JmYWRlOWFkZjE0MjY5ZjM2MDIzMDdj
OTJlNWUwHhcNMjYwNzIzMTIwMTA2WhcNMjYwNzI0MTIwMTA2WjAzMTEwLwYDVQQD
Eyg1ZjBhY2E1NWI4YWNjZTI1ZWM1MDBhMDYyNmY1YjQ5MDE0YWYxZGY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxHhhA+EriCtpY5C19wUuYaLJt8G1
Bvsgxa0b8cC4ZmxQhqbMCiYImkZDkfAPRRKMmhS7SHzqNPPkcmXi8kIYbLVPgNOu
e8yaR/1BDHolYdxug4yhY4onlxgVBQ9630I958rZB3YYmVJclpKpxmSc4E7msvPb
aijk2/0UXO0NMRqsIwiClAHfOlJQg/L3lPE5ukL9sVr34rsdLA9t3H9eWACBb+iI
5nHQ+08a0R/NjJORzGHoBiX5Qy7l6bfhHr5R8SG+jWRQJEaSH6Pk5s1LMjH1gbNI
Cz/8KNhwMb5CIUek9US4B2inapCM8Bujr1YAjnNmdfPRaF++Vhb5HrOcOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF8KylW4rM4l7FAKBib1tJAUrx31MB8GA1UdIwQY
MBaAFAr+/Dq7s7+t6a3xQmnzYCMHyS5eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3Y3OE9ydXp2NjNwcmZGQ2FmTmdJd2ZKTGw0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9hOTdmODYtZmIxOC00ODNlLTkyNmMt
ODMyZDU1NTkwZjI5LzEvQ3Y3OE9ydXp2NjNwcmZGQ2FmTmdJd2ZKTGw0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC9hOTdmODYtZmIxOC00ODNlLTkyNmMtODMyZDU1NTkwZjI5
LzEvQ3Y3OE9ydXp2NjNwcmZGQ2FmTmdJd2ZKTGw0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh+Byx3VX
tqbZTE/1aJF1nm1N0HSaYhAUjDiKhEnPvaBje56cVswAg5d+BHwcHDNSNtI9q9Bm
8GJPChz5iRGOptKYX2fpGG0Qwuw5EOmGMrdCEg7bTackZaA05LOsQvRZl1gbThb+
Ifw8kaRs8toXKHQR8aPRIRyBsu7WNfKVci/5IXm3Jpxe/dwEtN5cOHaE/7Eq9LIv
7VkUD0PIzTz1nn4LymJ6cc9E8IahvWN9I8NXyWT2EhipEWIWIfQGels/n+8LAEdY
U8rZibFzPy9GH2aknmgpG9kzUvi5GEGWya6jZAPsrTqVBFM/7SX/TJnN0oN2emPr
cY1DNa6heuvwFQ==
-----END CERTIFICATE-----
Generated at Thu Jul 23 20:26:36 2026 by rpki-client