Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/a97f86-fb18-483e-926c-832d55590f29/1/Cv78Oruzv63prfFCafNgIwfJLl4.mft
File: Cv78Oruzv63prfFCafNgIwfJLl4.mft (raw, json)
Hash identifier: ov343RPi3PJXS6ezTzlDVpbK26+x6kNeokIkXPn589k=
Subject key identifier: C6:FB:60:DC:7A:96:B0:C9:62:40:D0:EC:FD:58:1F:AA:14:B7:78:C4
Authority key identifier: 0A:FE:FC:3A:BB:B3:BF:AD:E9:AD:F1:42:69:F3:60:23:07:C9:2E:5E
Certificate issuer: /CN=0afefc3abbb3bfade9adf14269f3602307c92e5e
Certificate serial: 019E1DFDFD018DE1681CC83D52604A26F9E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cv78Oruzv63prfFCafNgIwfJLl4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/a97f86-fb18-483e-926c-832d55590f29/1/Cv78Oruzv63prfFCafNgIwfJLl4.mft
Manifest number: A4
Signing time: Tue 12 May 2026 21:00:45 +0000
Manifest this update: Tue 12 May 2026 21:00:45 +0000
Manifest next update: Wed 13 May 2026 21:00:45 +0000
Files and hashes: 1: Cv78Oruzv63prfFCafNgIwfJLl4.crl (hash: BXoN34QVyC+LEBTEb5+hvXGQ5LmfyByjJPmyxc+31FQ=)
2: fdT5h_AVa4G_dfwdPb5ps2tK-dc.roa (hash: REU2paWp+wXXGlOwD8K0DYxInrpyINHxZ90ERdleFKg=)
3: wdZYfAFUeN1uYq_6mZZzbvOEO9E.roa (hash: qIQR+crOVY1d0komneMfNh35fcgqDk/iAFOlKpD6isU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/a97f86-fb18-483e-926c-832d55590f29/1/Cv78Oruzv63prfFCafNgIwfJLl4.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/a97f86-fb18-483e-926c-832d55590f29/1/Cv78Oruzv63prfFCafNgIwfJLl4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cv78Oruzv63prfFCafNgIwfJLl4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fd:fd:01:8d:e1:68:1c:c8:3d:52:60:4a:26:f9:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0afefc3abbb3bfade9adf14269f3602307c92e5e
Validity
Not Before: May 12 21:00:45 2026 GMT
Not After : May 13 21:00:45 2026 GMT
Subject: CN=c6fb60dc7a96b0c96240d0ecfd581faa14b778c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:45:86:e5:74:68:a7:eb:3e:83:6e:fe:1f:20:
ee:cd:7c:c4:ed:e8:9b:1b:36:df:34:4a:2c:1f:87:
a7:73:79:d8:7e:e1:30:12:7a:ae:63:cf:c2:df:7e:
6e:84:5a:22:3b:32:85:5c:a3:dd:a0:ca:39:59:eb:
bd:bf:ec:a4:37:36:bf:62:b6:00:8d:b9:f0:51:9d:
b8:0a:2b:9a:92:ac:62:c6:62:f3:7a:90:68:d5:8d:
59:26:31:df:f7:d1:09:5b:b4:92:41:42:68:85:26:
93:ac:3a:82:14:04:8e:24:b6:81:0f:e3:03:a0:16:
f5:e2:7f:88:d5:c5:b9:9b:9b:62:5d:3d:4f:6b:12:
e2:96:11:73:6b:d3:19:77:c0:9c:f1:d7:76:11:7c:
75:2e:92:c9:b0:50:dc:54:a2:09:57:62:a1:33:cf:
fd:27:8f:6e:16:46:86:ab:16:d5:9e:d2:43:95:fe:
c7:17:23:72:12:fb:26:7e:4c:c6:ae:bc:d4:6d:db:
82:61:4e:da:a5:2a:6f:64:5e:a1:ea:b7:6c:9d:60:
72:3f:5c:2c:05:9b:da:09:ec:5f:12:1b:4f:1c:35:
3b:fa:a9:e4:04:77:54:8f:cc:99:9a:d5:39:be:a0:
c7:94:84:45:af:d7:da:75:bb:1f:8a:b3:c7:b9:ed:
b2:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:FB:60:DC:7A:96:B0:C9:62:40:D0:EC:FD:58:1F:AA:14:B7:78:C4
X509v3 Authority Key Identifier:
keyid:0A:FE:FC:3A:BB:B3:BF:AD:E9:AD:F1:42:69:F3:60:23:07:C9:2E:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cv78Oruzv63prfFCafNgIwfJLl4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/a97f86-fb18-483e-926c-832d55590f29/1/Cv78Oruzv63prfFCafNgIwfJLl4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/a97f86-fb18-483e-926c-832d55590f29/1/Cv78Oruzv63prfFCafNgIwfJLl4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:31:32:3a:6e:91:01:20:50:7f:22:ec:d7:48:bb:45:e7:06:
93:e0:cf:fa:4f:82:2c:09:5c:7a:85:9e:c0:be:a3:90:68:b2:
79:bd:32:60:24:1b:3a:32:d2:32:95:58:48:32:72:d9:eb:40:
93:cd:0c:70:20:b8:28:3b:6e:5d:48:65:f9:c8:55:ff:fe:0c:
b2:48:07:bc:73:de:dc:8b:23:72:1f:ae:a6:80:ab:97:4b:58:
19:03:88:62:8d:cc:43:78:1c:9e:29:0e:79:a3:6a:fb:c1:90:
44:19:7f:b7:24:da:21:08:a4:f7:e3:43:20:36:8d:24:5c:62:
8c:08:f6:a3:cb:8e:0c:76:1f:aa:87:87:f4:3e:92:c3:8e:a5:
60:a1:4f:57:ba:3a:f8:41:1d:cd:88:ad:b6:67:6c:86:55:90:
ca:19:88:4e:15:31:e7:ac:42:18:d8:db:fb:bc:12:06:8d:d3:
77:ae:25:b2:75:29:7a:49:d1:5d:e3:50:b0:2a:84:38:5e:7c:
ca:31:5b:e6:d6:ea:0c:08:8a:37:2a:80:fb:a0:bc:5f:33:3a:
8f:87:b4:6f:48:bf:d4:55:22:f0:3e:a6:0b:2a:0d:4f:ea:80:
5f:32:6c:75:f1:cf:3b:c7:3b:fd:81:74:bd:37:83:ff:b8:a2:
fe:0d:09:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4d/f0BjeFoHMg9UmBKJvnjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhZmVmYzNhYmJiM2JmYWRlOWFkZjE0MjY5ZjM2MDIzMDdj
OTJlNWUwHhcNMjYwNTEyMjEwMDQ1WhcNMjYwNTEzMjEwMDQ1WjAzMTEwLwYDVQQD
EyhjNmZiNjBkYzdhOTZiMGM5NjI0MGQwZWNmZDU4MWZhYTE0Yjc3OGM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwEWG5XRop+s+g27+HyDuzXzE7eib
GzbfNEosH4enc3nYfuEwEnquY8/C335uhFoiOzKFXKPdoMo5Weu9v+ykNza/YrYA
jbnwUZ24CiuakqxixmLzepBo1Y1ZJjHf99EJW7SSQUJohSaTrDqCFASOJLaBD+MD
oBb14n+I1cW5m5tiXT1PaxLilhFza9MZd8Cc8dd2EXx1LpLJsFDcVKIJV2KhM8/9
J49uFkaGqxbVntJDlf7HFyNyEvsmfkzGrrzUbduCYU7apSpvZF6h6rdsnWByP1ws
BZvaCexfEhtPHDU7+qnkBHdUj8yZmtU5vqDHlIRFr9fadbsfirPHue2ynQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMb7YNx6lrDJYkDQ7P1YH6oUt3jEMB8GA1UdIwQY
MBaAFAr+/Dq7s7+t6a3xQmnzYCMHyS5eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3Y3OE9ydXp2NjNwcmZGQ2FmTmdJd2ZKTGw0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9hOTdmODYtZmIxOC00ODNlLTkyNmMt
ODMyZDU1NTkwZjI5LzEvQ3Y3OE9ydXp2NjNwcmZGQ2FmTmdJd2ZKTGw0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC9hOTdmODYtZmIxOC00ODNlLTkyNmMtODMyZDU1NTkwZjI5
LzEvQ3Y3OE9ydXp2NjNwcmZGQ2FmTmdJd2ZKTGw0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjzEyOm6R
ASBQfyLs10i7RecGk+DP+k+CLAlceoWewL6jkGiyeb0yYCQbOjLSMpVYSDJy2etA
k80McCC4KDtuXUhl+chV//4MskgHvHPe3Isjch+upoCrl0tYGQOIYo3MQ3gcnikO
eaNq+8GQRBl/tyTaIQik9+NDIDaNJFxijAj2o8uODHYfqoeH9D6Sw46lYKFPV7o6
+EEdzYittmdshlWQyhmIThUx56xCGNjb+7wSBo3Td64lsnUpeknRXeNQsCqEOF58
yjFb5tbqDAiKNyqA+6C8XzM6j4e0b0i/1FUi8D6mCyoNT+qAXzJsdfHPO8c7/YF0
vTeD/7ii/g0JEw==
-----END CERTIFICATE-----
Generated at Wed May 13 05:10:18 2026 by rpki-client