Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/64d910-945c-42e8-bb44-62821c2c299f/1/CVAiiQS52-tHkqaXcn42qv2E0uk.mft
File: CVAiiQS52-tHkqaXcn42qv2E0uk.mft (raw, json)
Hash identifier: G+SObwFbHXvHdveQUUSKs87ytwCeYaXfNg5a4kIBaGw=
Subject key identifier: CB:2B:D2:D5:86:DA:66:BA:B5:FA:C4:F4:26:68:B8:06:6D:E5:AB:9E
Authority key identifier: 09:50:22:89:04:B9:DB:EB:47:92:A6:97:72:7E:36:AA:FD:84:D2:E9
Certificate issuer: /CN=0950228904b9dbeb4792a697727e36aafd84d2e9
Certificate serial: 01A0CE2378CA68681DA7642C1EC700B53A2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CVAiiQS52-tHkqaXcn42qv2E0uk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/64d910-945c-42e8-bb44-62821c2c299f/1/CVAiiQS52-tHkqaXcn42qv2E0uk.mft
Manifest number: 117E
Signing time: Wed 23 Sep 2026 12:00:26 +0000
Manifest this update: Wed 23 Sep 2026 12:00:26 +0000
Manifest next update: Thu 24 Sep 2026 12:00:26 +0000
Files and hashes: 1: 0bE4aaGgdiJFJ50d4SWw_RJ5yog.roa (hash: pfh5kzcii4MpQVjtzuuE7xEsH7nvPkPrk2Vo7JxfSO8=)
2: CVAiiQS52-tHkqaXcn42qv2E0uk.crl (hash: GHi3LxToZT/wlnQHaMyoLdZnv5FpwKnTZBCqC0/yMFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/64d910-945c-42e8-bb44-62821c2c299f/1/CVAiiQS52-tHkqaXcn42qv2E0uk.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/64d910-945c-42e8-bb44-62821c2c299f/1/CVAiiQS52-tHkqaXcn42qv2E0uk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CVAiiQS52-tHkqaXcn42qv2E0uk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 12:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:23:78:ca:68:68:1d:a7:64:2c:1e:c7:00:b5:3a:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0950228904b9dbeb4792a697727e36aafd84d2e9
Validity
Not Before: Sep 23 12:00:26 2026 GMT
Not After : Sep 24 12:00:26 2026 GMT
Subject: CN=cb2bd2d586da66bab5fac4f42668b8066de5ab9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f8:b5:0d:39:21:16:3d:a3:ef:1a:4d:72:a1:
b3:2d:29:38:15:d5:66:13:ff:68:65:4b:4a:27:2d:
4e:55:11:56:48:1c:1b:7e:89:c2:96:69:e3:6a:4f:
48:55:d1:19:77:06:c8:18:7f:ec:dc:4c:0a:ab:82:
fc:ed:a7:7c:77:81:bc:e0:cd:61:1b:78:38:bb:04:
5b:fb:eb:67:d4:3d:7b:2e:ba:ee:43:4c:04:97:55:
07:c5:c7:c3:f2:da:72:53:00:0f:61:ba:9a:19:d9:
f4:61:f6:80:f5:c9:60:f2:f7:71:a7:8a:55:54:f8:
0d:6b:89:0a:a9:64:bb:34:19:56:8b:e5:85:07:a9:
e8:ca:50:bf:ad:03:d5:2f:5f:cd:b2:67:04:f6:d6:
5d:4f:fa:03:90:6d:54:a8:52:bf:8e:a3:60:68:85:
d8:81:4e:df:08:b3:53:e8:88:5c:8f:e5:cd:95:2f:
39:d0:90:4f:d3:12:8a:31:34:1b:d0:96:d0:ea:72:
bc:e4:ab:23:d0:f5:94:b5:ca:ed:5b:e8:8c:ad:fc:
1d:d5:8c:9e:a6:71:a0:83:26:5c:21:4f:59:19:e8:
1e:ce:bd:9c:ce:92:1c:b9:d8:38:ff:ea:4a:7a:d1:
66:23:b4:7a:c1:29:b6:4b:3f:bb:9c:e0:49:32:2d:
06:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:2B:D2:D5:86:DA:66:BA:B5:FA:C4:F4:26:68:B8:06:6D:E5:AB:9E
X509v3 Authority Key Identifier:
keyid:09:50:22:89:04:B9:DB:EB:47:92:A6:97:72:7E:36:AA:FD:84:D2:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CVAiiQS52-tHkqaXcn42qv2E0uk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/64d910-945c-42e8-bb44-62821c2c299f/1/CVAiiQS52-tHkqaXcn42qv2E0uk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/64d910-945c-42e8-bb44-62821c2c299f/1/CVAiiQS52-tHkqaXcn42qv2E0uk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:bb:3a:66:79:13:9f:b9:de:5e:e2:b4:d5:d8:f2:b6:74:e5:
cb:f6:d2:60:4a:d9:6d:fd:3f:6f:73:c5:c0:6c:06:60:5c:82:
57:32:55:4a:bb:d6:0e:85:c4:bd:f3:05:a4:73:72:a4:69:36:
8e:d7:2c:c9:0f:71:0e:2b:cf:6f:39:da:da:79:78:ee:65:bf:
9b:eb:dc:39:90:60:1c:4d:33:76:e9:96:5c:41:db:b7:dc:82:
8c:64:94:62:1c:4f:03:b8:c5:93:5b:b9:67:60:27:0c:6a:1e:
91:bc:df:8c:f3:12:99:1d:16:d9:db:23:f8:b0:63:53:1e:52:
f2:e2:d3:bf:a6:8e:f9:31:ad:ae:c8:b5:38:06:8c:61:ef:ff:
91:40:3b:97:20:42:36:ff:cd:7f:ea:2e:93:50:4d:df:50:5b:
e4:4f:64:a9:81:b2:4f:90:c2:e4:d9:f4:bf:26:c9:73:fc:f4:
4c:69:c0:5e:d2:8a:99:b7:6e:1a:ee:f0:1a:6d:d9:3c:07:9f:
5a:46:d3:3a:4a:39:e5:42:b1:4c:e9:53:38:e5:f5:54:68:6e:
23:e8:78:d8:ee:f6:1d:0f:f3:e4:bf:a0:f9:8e:47:39:87:cc:
f4:c7:62:af:f5:97:7a:03:cf:ea:2d:1f:35:63:a1:49:11:47:
ea:3c:6f:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:03:37 2026 by rpki-client