Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/64d910-945c-42e8-bb44-62821c2c299f/1/CVAiiQS52-tHkqaXcn42qv2E0uk.mft
File: CVAiiQS52-tHkqaXcn42qv2E0uk.mft (raw, json)
Hash identifier: g2ljXdIDzGa1WVO2lunqzl5ukck4nnUdd+7+0781vGY=
Subject key identifier: 4F:A2:77:BF:27:83:8C:2A:A3:8B:0D:2D:D0:C0:47:3B:8E:E3:8F:A8
Authority key identifier: 09:50:22:89:04:B9:DB:EB:47:92:A6:97:72:7E:36:AA:FD:84:D2:E9
Certificate issuer: /CN=0950228904b9dbeb4792a697727e36aafd84d2e9
Certificate serial: 019F916C93761BF3419A6E75EBA052BED349
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CVAiiQS52-tHkqaXcn42qv2E0uk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/64d910-945c-42e8-bb44-62821c2c299f/1/CVAiiQS52-tHkqaXcn42qv2E0uk.mft
Manifest number: 10DA
Signing time: Fri 24 Jul 2026 00:00:39 +0000
Manifest this update: Fri 24 Jul 2026 00:00:39 +0000
Manifest next update: Sat 25 Jul 2026 00:00:39 +0000
Files and hashes: 1: 0bE4aaGgdiJFJ50d4SWw_RJ5yog.roa (hash: pfh5kzcii4MpQVjtzuuE7xEsH7nvPkPrk2Vo7JxfSO8=)
2: CVAiiQS52-tHkqaXcn42qv2E0uk.crl (hash: 4G6/TpA+78jhs69svPMj3J8DW/jmcWUiR5EByntF51c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/64d910-945c-42e8-bb44-62821c2c299f/1/CVAiiQS52-tHkqaXcn42qv2E0uk.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/64d910-945c-42e8-bb44-62821c2c299f/1/CVAiiQS52-tHkqaXcn42qv2E0uk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CVAiiQS52-tHkqaXcn42qv2E0uk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6c:93:76:1b:f3:41:9a:6e:75:eb:a0:52:be:d3:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0950228904b9dbeb4792a697727e36aafd84d2e9
Validity
Not Before: Jul 24 00:00:39 2026 GMT
Not After : Jul 25 00:00:39 2026 GMT
Subject: CN=4fa277bf27838c2aa38b0d2dd0c0473b8ee38fa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ae:ac:7e:35:07:74:06:48:fb:96:08:25:04:
4f:3b:73:6c:4b:bf:01:ab:90:3d:13:c7:94:98:4f:
ab:18:86:1e:11:a7:55:04:ae:15:bd:fc:4c:0b:02:
cc:d2:84:60:f3:db:e1:7e:1a:38:07:9b:7c:61:94:
29:0d:b7:6d:db:ba:1d:53:d3:f9:dc:2a:e7:dd:15:
e0:57:bc:b6:f9:13:5a:12:7c:ba:f9:76:9c:d1:a1:
ea:b9:2c:ba:ac:32:9f:75:76:80:bc:fb:94:0a:cd:
e9:f8:8c:5e:55:05:27:92:88:b1:bc:3a:2a:17:f7:
6c:15:57:12:49:3e:c4:45:a6:c2:f8:63:9c:cb:b6:
89:14:83:5c:8c:88:8f:4e:27:0f:a6:7c:90:cd:60:
15:9e:50:6d:85:8b:54:87:5d:ab:ac:34:80:9c:8a:
ee:1c:53:d3:dc:83:5f:bd:65:f1:be:e3:d3:74:fa:
6d:c5:85:d0:70:45:7d:b5:c3:30:c0:a3:8b:21:9d:
17:95:c2:10:de:08:c4:53:2f:ba:6c:c2:bb:3b:6a:
15:a9:1e:ea:c3:e4:32:4d:ef:a9:0a:e0:4a:ae:ab:
24:45:b9:d6:aa:14:dc:80:be:87:8b:21:6b:cf:e2:
33:ee:69:a2:b3:c9:d3:f7:2d:24:c7:f6:03:bb:2f:
9b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:A2:77:BF:27:83:8C:2A:A3:8B:0D:2D:D0:C0:47:3B:8E:E3:8F:A8
X509v3 Authority Key Identifier:
keyid:09:50:22:89:04:B9:DB:EB:47:92:A6:97:72:7E:36:AA:FD:84:D2:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CVAiiQS52-tHkqaXcn42qv2E0uk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/64d910-945c-42e8-bb44-62821c2c299f/1/CVAiiQS52-tHkqaXcn42qv2E0uk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/64d910-945c-42e8-bb44-62821c2c299f/1/CVAiiQS52-tHkqaXcn42qv2E0uk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:19:bd:29:34:50:44:43:28:e0:9f:fd:56:e4:41:af:65:b2:
f6:28:50:97:95:a2:a2:4c:13:10:64:03:e4:3f:9b:b6:54:b7:
70:8b:ad:24:92:4b:e8:3a:b3:8d:1f:47:47:a5:23:06:ed:3a:
a5:2e:0a:fc:ab:f2:d3:26:10:68:d4:94:78:51:92:2b:09:17:
8c:14:46:7b:07:67:00:b5:75:6b:6b:6e:b4:1f:95:79:15:75:
2a:27:42:44:51:d9:e1:a2:c6:21:95:9a:84:59:3e:55:ed:4b:
b5:cb:43:2f:19:53:5e:d1:71:0a:91:18:51:85:1c:c0:28:4c:
74:a6:14:17:1d:56:29:c3:51:af:99:de:14:13:d1:3c:d6:f1:
58:58:ee:8e:e5:50:b4:2d:61:cb:d6:03:38:cd:e5:15:7f:e4:
33:11:a2:19:a7:88:ee:9f:fb:75:17:46:69:38:ec:00:79:b4:
6b:c3:b8:38:0e:02:51:a7:33:a6:9d:cd:dc:a3:b5:fd:48:11:
e8:a1:94:5c:eb:20:0c:d2:e7:3f:3a:61:e6:c3:fa:b8:41:73:
a9:93:88:81:0f:39:96:7b:0e:8b:98:2e:a6:39:85:37:d2:d7:
44:f5:f3:ed:49:ab:90:61:39:67:c2:d1:2b:6a:29:92:b1:71:
6e:95:9c:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:46:46 2026 by rpki-client