Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/a97f86-fb18-483e-926c-832d55590f29/1/Cv78Oruzv63prfFCafNgIwfJLl4.mft
File: Cv78Oruzv63prfFCafNgIwfJLl4.mft (raw, json)
Hash identifier: 2UX6r3se3ExyZqgTrFOndACQVfl+gvCsrC0zNcK8RjA=
Subject key identifier: EA:B2:5A:60:7B:25:57:AA:D6:83:55:FD:3F:3D:A1:D8:F8:6E:A7:F8
Authority key identifier: 0A:FE:FC:3A:BB:B3:BF:AD:E9:AD:F1:42:69:F3:60:23:07:C9:2E:5E
Certificate issuer: /CN=0afefc3abbb3bfade9adf14269f3602307c92e5e
Certificate serial: 01A0D15C15001A829BE3678B6E0E6638909E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cv78Oruzv63prfFCafNgIwfJLl4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/a97f86-fb18-483e-926c-832d55590f29/1/Cv78Oruzv63prfFCafNgIwfJLl4.mft
Manifest number: 020A
Signing time: Thu 24 Sep 2026 03:01:07 +0000
Manifest this update: Thu 24 Sep 2026 03:01:07 +0000
Manifest next update: Fri 25 Sep 2026 03:01:07 +0000
Files and hashes: 1: Cv78Oruzv63prfFCafNgIwfJLl4.crl (hash: 6Leh8F/CUNaqeNRkL1v+0pYooXmE1iuoSi5xBmgXPes=)
2: fdT5h_AVa4G_dfwdPb5ps2tK-dc.roa (hash: REU2paWp+wXXGlOwD8K0DYxInrpyINHxZ90ERdleFKg=)
3: wdZYfAFUeN1uYq_6mZZzbvOEO9E.roa (hash: qIQR+crOVY1d0komneMfNh35fcgqDk/iAFOlKpD6isU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/a97f86-fb18-483e-926c-832d55590f29/1/Cv78Oruzv63prfFCafNgIwfJLl4.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/a97f86-fb18-483e-926c-832d55590f29/1/Cv78Oruzv63prfFCafNgIwfJLl4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cv78Oruzv63prfFCafNgIwfJLl4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:5c:15:00:1a:82:9b:e3:67:8b:6e:0e:66:38:90:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0afefc3abbb3bfade9adf14269f3602307c92e5e
Validity
Not Before: Sep 24 03:01:07 2026 GMT
Not After : Sep 25 03:01:07 2026 GMT
Subject: CN=eab25a607b2557aad68355fd3f3da1d8f86ea7f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:20:12:8c:52:98:ba:38:9e:53:87:a0:04:8d:
b5:4f:0d:63:b5:1c:cb:a2:0d:60:d3:01:2e:cf:b9:
4e:57:0d:f7:42:04:09:f6:fc:8e:07:e1:1a:92:fe:
c3:38:7e:9b:d4:7e:7d:f4:9c:7a:db:e9:1a:93:54:
6c:1b:85:65:96:75:12:bb:e8:4b:cb:87:2f:63:f8:
b5:79:65:39:01:4a:1f:fe:de:48:c4:82:d5:0f:9a:
27:51:2c:cf:00:06:90:95:75:92:f0:6a:e9:a7:39:
d4:7b:a5:ab:06:84:83:f7:44:80:6c:1d:0f:19:31:
78:a7:3c:92:b7:07:0c:be:d1:91:64:7c:c9:ff:32:
93:f3:05:c4:7f:63:21:ed:fd:11:fc:31:f9:99:fa:
7d:ab:67:04:df:eb:67:0a:1c:3c:e5:b6:76:a4:0b:
4e:94:93:bf:9a:d7:78:e4:21:2c:43:df:d0:a3:df:
aa:de:e3:f7:d0:81:e4:4f:ea:55:31:45:a3:cb:4a:
68:28:7b:cb:7b:36:30:e1:fb:2d:e9:7a:91:e1:1a:
98:c5:fb:d4:2f:3c:be:24:d6:b2:71:59:01:ce:e6:
bd:ee:8d:af:c1:a0:09:4e:22:8b:dc:cc:27:21:0b:
64:a4:b4:cd:22:42:05:f6:48:f8:ba:08:60:6b:d5:
14:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:B2:5A:60:7B:25:57:AA:D6:83:55:FD:3F:3D:A1:D8:F8:6E:A7:F8
X509v3 Authority Key Identifier:
keyid:0A:FE:FC:3A:BB:B3:BF:AD:E9:AD:F1:42:69:F3:60:23:07:C9:2E:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cv78Oruzv63prfFCafNgIwfJLl4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/a97f86-fb18-483e-926c-832d55590f29/1/Cv78Oruzv63prfFCafNgIwfJLl4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/a97f86-fb18-483e-926c-832d55590f29/1/Cv78Oruzv63prfFCafNgIwfJLl4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:de:01:f7:3a:78:14:b2:89:4b:a0:ae:61:0a:4c:00:8f:f9:
d4:2c:2c:5a:30:db:78:53:2a:6c:3b:36:4c:bc:f0:4d:79:56:
4a:67:5a:86:46:31:65:e6:f9:3e:c8:42:4f:f4:9b:df:c1:5e:
d9:64:90:e2:87:9a:c7:e8:ee:25:a4:dd:a6:11:f3:5f:ea:f1:
0a:7f:3c:9f:7f:c9:90:38:7d:46:28:f0:69:0f:49:0a:cd:ce:
e2:c0:61:3a:54:c1:8b:2e:39:0f:66:27:d3:50:2f:6c:34:e0:
0e:62:70:ed:e2:61:a0:f3:ae:6f:87:2b:76:71:58:a0:88:71:
22:e3:f7:57:b7:e5:47:90:7f:ee:6d:a1:df:c8:72:7d:bb:d0:
61:f7:6d:e9:b5:4a:d6:f5:96:b2:9d:e5:99:ea:16:bf:33:60:
5b:b5:cd:f0:dc:53:8b:02:b6:31:b6:41:6b:2c:16:11:ba:63:
68:7b:49:d1:3b:6d:cb:aa:59:2d:d4:c5:ec:e8:97:84:06:f1:
de:3d:bc:0a:46:38:a1:30:57:53:ce:23:6d:e4:47:1c:aa:e0:
70:31:8b:7b:46:ec:75:5d:e9:30:11:ad:02:b6:6c:69:54:b9:
5a:5d:27:ab:74:ae:85:dc:e7:51:31:bc:0b:7e:b7:9f:46:55:
1e:60:c1:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDRXBUAGoKb42eLbg5mOJCeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhZmVmYzNhYmJiM2JmYWRlOWFkZjE0MjY5ZjM2MDIzMDdj
OTJlNWUwHhcNMjYwOTI0MDMwMTA3WhcNMjYwOTI1MDMwMTA3WjAzMTEwLwYDVQQD
EyhlYWIyNWE2MDdiMjU1N2FhZDY4MzU1ZmQzZjNkYTFkOGY4NmVhN2Y4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxCASjFKYujieU4egBI21Tw1jtRzL
og1g0wEuz7lOVw33QgQJ9vyOB+Eakv7DOH6b1H599Jx62+kak1RsG4VllnUSu+hL
y4cvY/i1eWU5AUof/t5IxILVD5onUSzPAAaQlXWS8GrppznUe6WrBoSD90SAbB0P
GTF4pzyStwcMvtGRZHzJ/zKT8wXEf2Mh7f0R/DH5mfp9q2cE3+tnChw85bZ2pAtO
lJO/mtd45CEsQ9/Qo9+q3uP30IHkT+pVMUWjy0poKHvLezYw4fst6XqR4RqYxfvU
Lzy+JNaycVkBzua97o2vwaAJTiKL3MwnIQtkpLTNIkIF9kj4ughga9UULQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOqyWmB7JVeq1oNV/T89odj4bqf4MB8GA1UdIwQY
MBaAFAr+/Dq7s7+t6a3xQmnzYCMHyS5eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3Y3OE9ydXp2NjNwcmZGQ2FmTmdJd2ZKTGw0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9hOTdmODYtZmIxOC00ODNlLTkyNmMt
ODMyZDU1NTkwZjI5LzEvQ3Y3OE9ydXp2NjNwcmZGQ2FmTmdJd2ZKTGw0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC9hOTdmODYtZmIxOC00ODNlLTkyNmMtODMyZDU1NTkwZjI5
LzEvQ3Y3OE9ydXp2NjNwcmZGQ2FmTmdJd2ZKTGw0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm94B9zp4
FLKJS6CuYQpMAI/51CwsWjDbeFMqbDs2TLzwTXlWSmdahkYxZeb5PshCT/Sb38Fe
2WSQ4oeax+juJaTdphHzX+rxCn88n3/JkDh9RijwaQ9JCs3O4sBhOlTBiy45D2Yn
01AvbDTgDmJw7eJhoPOub4crdnFYoIhxIuP3V7flR5B/7m2h38hyfbvQYfdt6bVK
1vWWsp3lmeoWvzNgW7XN8NxTiwK2MbZBaywWEbpjaHtJ0Ttty6pZLdTF7OiXhAbx
3j28CkY4oTBXU84jbeRHHKrgcDGLe0bsdV3pMBGtArZsaVS5Wl0nq3SuhdznUTG8
C363n0ZVHmDB6A==
-----END CERTIFICATE-----
Generated at Thu Sep 24 06:31:13 2026 by rpki-client