Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/a97f86-fb18-483e-926c-832d55590f29/1/Cv78Oruzv63prfFCafNgIwfJLl4.mft
File: Cv78Oruzv63prfFCafNgIwfJLl4.mft (raw, json)
Hash identifier: HZ3FnGFvnUmkXr/cccH+IFAaQQv2wPVYIfTgi9JUn/8=
Subject key identifier: 66:E7:32:F5:AA:A4:FD:3B:98:ED:FB:E9:15:C2:58:7B:27:9C:FD:E6
Authority key identifier: 0A:FE:FC:3A:BB:B3:BF:AD:E9:AD:F1:42:69:F3:60:23:07:C9:2E:5E
Certificate issuer: /CN=0afefc3abbb3bfade9adf14269f3602307c92e5e
Certificate serial: 019D3263999AFC1FE09849E3E2E51D1A610A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cv78Oruzv63prfFCafNgIwfJLl4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/a97f86-fb18-483e-926c-832d55590f29/1/Cv78Oruzv63prfFCafNgIwfJLl4.mft
Manifest number: 2A
Signing time: Sat 28 Mar 2026 03:01:21 +0000
Manifest this update: Sat 28 Mar 2026 03:01:21 +0000
Manifest next update: Sun 29 Mar 2026 03:01:21 +0000
Files and hashes: 1: Cv78Oruzv63prfFCafNgIwfJLl4.crl (hash: EACeIqHVB3RsknGsEi6ptjB4TXZEK4zvYJStNqcgRUs=)
2: fdT5h_AVa4G_dfwdPb5ps2tK-dc.roa (hash: REU2paWp+wXXGlOwD8K0DYxInrpyINHxZ90ERdleFKg=)
3: wdZYfAFUeN1uYq_6mZZzbvOEO9E.roa (hash: qIQR+crOVY1d0komneMfNh35fcgqDk/iAFOlKpD6isU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/a97f86-fb18-483e-926c-832d55590f29/1/Cv78Oruzv63prfFCafNgIwfJLl4.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/a97f86-fb18-483e-926c-832d55590f29/1/Cv78Oruzv63prfFCafNgIwfJLl4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cv78Oruzv63prfFCafNgIwfJLl4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:63:99:9a:fc:1f:e0:98:49:e3:e2:e5:1d:1a:61:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0afefc3abbb3bfade9adf14269f3602307c92e5e
Validity
Not Before: Mar 28 03:01:21 2026 GMT
Not After : Mar 29 03:01:21 2026 GMT
Subject: CN=66e732f5aaa4fd3b98edfbe915c2587b279cfde6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b6:98:50:f5:46:af:e5:7b:1b:d3:11:e3:e7:
35:2e:64:30:d7:8a:8a:28:5f:fb:73:4f:e9:e3:1c:
d2:c2:12:85:e4:69:d4:11:dc:cd:e7:ec:12:bd:d9:
6b:e8:69:3c:a3:b3:aa:e3:ea:fe:46:87:82:50:cc:
e5:f2:44:73:7c:74:80:e5:66:c5:52:6e:bb:d9:4e:
6f:7b:f1:b1:44:1c:18:8c:af:57:22:97:36:f8:0d:
46:59:2e:1d:01:d5:94:ac:88:0e:29:08:83:55:75:
7c:20:89:11:7a:65:57:11:6c:a1:c0:d5:72:67:7e:
f6:85:35:f3:89:6b:bb:49:c7:ac:30:90:f8:d4:6b:
29:4e:f6:ab:f1:a2:3b:5b:d6:7f:f4:51:ce:79:64:
64:53:c4:cd:52:36:33:26:ec:e5:5a:08:56:7f:ad:
73:38:f6:5b:20:cc:35:93:c2:a7:25:ce:18:e5:60:
74:e8:d8:e5:8e:b4:01:64:c4:58:f1:d6:5a:e2:b1:
2d:9a:03:5c:ba:5c:73:fd:de:da:ba:49:a5:35:02:
e4:10:da:c8:5b:b3:52:e3:59:a9:c9:87:1c:c5:34:
63:b4:ce:34:52:4f:2d:bf:4c:72:fd:7d:1e:b0:fe:
96:ac:86:00:e3:09:0f:22:b6:e6:1a:79:87:90:ea:
9f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:E7:32:F5:AA:A4:FD:3B:98:ED:FB:E9:15:C2:58:7B:27:9C:FD:E6
X509v3 Authority Key Identifier:
keyid:0A:FE:FC:3A:BB:B3:BF:AD:E9:AD:F1:42:69:F3:60:23:07:C9:2E:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cv78Oruzv63prfFCafNgIwfJLl4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/a97f86-fb18-483e-926c-832d55590f29/1/Cv78Oruzv63prfFCafNgIwfJLl4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/a97f86-fb18-483e-926c-832d55590f29/1/Cv78Oruzv63prfFCafNgIwfJLl4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:a6:0b:a7:9d:d0:73:c6:f0:83:5f:c0:c8:52:8f:ef:08:da:
23:18:68:d4:ad:71:09:64:05:d4:af:03:41:75:0c:8f:f5:aa:
e2:ae:00:d2:ff:f3:67:2c:11:15:bd:ec:ad:6f:07:a8:2f:26:
9d:fd:ba:f8:2d:0f:32:7d:38:a1:70:01:c1:b2:8e:28:00:3e:
94:6b:02:74:ab:96:9d:75:95:69:8d:26:09:2a:05:6b:ad:3a:
4d:04:54:72:76:e1:27:24:fc:f7:a6:6c:85:d7:29:16:24:5f:
0f:19:75:02:35:4a:a4:07:6a:0b:83:cf:5c:a7:c6:22:28:e2:
6d:c4:95:88:04:44:c2:cb:15:3c:88:e7:4f:f7:92:8f:eb:3c:
6d:f8:7a:f5:a1:67:e9:45:d6:b1:df:f2:e5:cd:7f:7a:51:dd:
37:68:8b:bf:3a:ab:e3:96:f6:d6:12:1a:d1:81:c2:3a:88:31:
64:ae:37:25:bb:9d:ca:58:1b:1b:a6:2e:22:80:78:8c:48:3f:
5a:a4:56:3d:60:83:28:31:42:33:0c:53:07:ab:80:dd:f2:e4:
ed:88:36:fc:10:bf:50:92:13:b4:bb:8d:24:4a:e2:44:7e:56:
03:29:b4:4d:e2:f0:02:9d:8a:5e:98:6e:54:bb:6b:5d:e5:f8:
5e:9e:63:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:48:03 2026 by rpki-client