Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/71/c3ffdd-b376-4dcb-9841-1415f8c7038e/1/riVa_-CEMRtuoC--Roa3lFNZhhw.mft
File: riVa_-CEMRtuoC--Roa3lFNZhhw.mft (raw, json)
Hash identifier: gQFdnyfw+Cpdx4G2clQ2tvaOez9KJbUG8Vl1Y+bgzpE=
Subject key identifier: BA:92:A9:09:7D:74:68:1D:27:51:FD:F9:49:56:BF:A4:59:B2:C5:43
Authority key identifier: AE:25:5A:FF:E0:84:31:1B:6E:A0:2F:BE:46:86:B7:94:53:59:86:1C
Certificate issuer: /CN=ae255affe084311b6ea02fbe4686b7945359861c
Certificate serial: 01A0DF4E96AE1C2A9E68B475A8CEE5013FF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/riVa_-CEMRtuoC--Roa3lFNZhhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/c3ffdd-b376-4dcb-9841-1415f8c7038e/1/riVa_-CEMRtuoC--Roa3lFNZhhw.mft
Manifest number: 0871
Signing time: Sat 26 Sep 2026 20:01:04 +0000
Manifest this update: Sat 26 Sep 2026 20:01:04 +0000
Manifest next update: Sun 27 Sep 2026 20:01:04 +0000
Files and hashes: 1: i8H3aU5bgW18uYHhOOBfWZ7EJh8.roa (hash: R7V99BPh2gSY158u1xq56jjcC0ccD7ZBtCrVoXgm5mE=)
2: riVa_-CEMRtuoC--Roa3lFNZhhw.crl (hash: RPBdecEvWuqzAA5ZtoeMiE1J6aKb5jRY600rDsmJfi0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/c3ffdd-b376-4dcb-9841-1415f8c7038e/1/riVa_-CEMRtuoC--Roa3lFNZhhw.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/c3ffdd-b376-4dcb-9841-1415f8c7038e/1/riVa_-CEMRtuoC--Roa3lFNZhhw.mft
rsync://rpki.ripe.net/repository/DEFAULT/riVa_-CEMRtuoC--Roa3lFNZhhw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 20:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:4e:96:ae:1c:2a:9e:68:b4:75:a8:ce:e5:01:3f:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae255affe084311b6ea02fbe4686b7945359861c
Validity
Not Before: Sep 26 20:01:04 2026 GMT
Not After : Sep 27 20:01:04 2026 GMT
Subject: CN=ba92a9097d74681d2751fdf94956bfa459b2c543
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:07:7f:66:4b:32:d5:cd:dc:e6:8a:68:0c:1e:
6c:9f:46:d4:09:7a:6d:31:8b:f4:fe:c1:74:ce:ce:
ac:83:e6:32:02:33:cc:0a:7f:9c:6b:25:2c:79:d9:
bd:ea:36:25:dd:a6:4b:f4:de:9a:96:c7:a3:e1:a0:
7b:8a:a1:4e:95:9d:e8:61:3a:93:28:4a:17:63:20:
6e:11:20:6d:2f:04:c3:6c:6e:27:26:7b:30:a6:7a:
1c:0f:72:84:34:bf:53:47:e4:ee:ec:3f:a8:4a:89:
27:c1:9b:ea:77:b8:a2:8c:61:df:80:32:68:1f:b1:
5a:b5:cb:5c:02:0c:45:59:38:42:99:a3:bc:50:5c:
2c:60:b1:ee:43:b0:99:9b:61:2b:32:9f:06:0d:45:
9a:43:c6:5f:ec:d0:ae:a9:2f:cd:b5:b7:db:2a:a6:
00:10:47:f3:3a:ca:32:e3:d7:5a:45:60:bb:80:ab:
25:93:1b:cd:74:5f:b6:43:32:39:4c:ad:0c:14:81:
90:6c:7b:c0:62:4b:83:c7:cc:08:fe:6d:a7:31:13:
1f:66:c0:65:1e:4b:32:7b:bb:bb:a7:e0:09:3d:1e:
08:b8:37:5b:06:36:0f:35:77:b0:3b:e1:d1:d3:d6:
3a:16:ba:58:a1:7b:47:c2:5b:8e:db:fe:a0:52:be:
e2:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:92:A9:09:7D:74:68:1D:27:51:FD:F9:49:56:BF:A4:59:B2:C5:43
X509v3 Authority Key Identifier:
keyid:AE:25:5A:FF:E0:84:31:1B:6E:A0:2F:BE:46:86:B7:94:53:59:86:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/riVa_-CEMRtuoC--Roa3lFNZhhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/c3ffdd-b376-4dcb-9841-1415f8c7038e/1/riVa_-CEMRtuoC--Roa3lFNZhhw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/c3ffdd-b376-4dcb-9841-1415f8c7038e/1/riVa_-CEMRtuoC--Roa3lFNZhhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:27:e1:e9:2e:3d:f7:ba:3f:da:54:d6:ec:d2:2c:c7:a4:5e:
b2:55:5b:02:dd:bd:32:aa:16:14:53:3e:dd:4a:54:40:61:cf:
c0:b2:ff:f4:8d:21:a2:f3:1d:23:b4:2d:63:22:fc:e4:27:7c:
69:57:0d:fe:36:f9:04:f0:55:25:1d:0d:dc:19:82:f1:8b:c4:
da:f4:78:56:3b:9c:ea:bb:68:83:ae:d6:79:70:ed:1f:9f:bc:
81:f5:64:0c:97:ea:13:b4:8e:d6:c8:19:cf:60:91:f7:5e:3b:
3b:48:c3:46:a0:68:5d:52:e2:05:39:70:0a:83:06:e6:30:d7:
13:e0:55:77:4a:a9:b5:97:4e:88:2a:e4:06:c4:87:a2:29:b7:
3f:07:8e:9a:36:e7:ab:78:04:07:c5:77:69:e6:6f:f8:28:a1:
63:90:a7:49:9c:97:ee:97:8e:ab:ce:7c:39:23:f9:9b:68:84:
8f:db:36:50:a2:5d:3c:cf:68:24:a1:cc:8d:11:72:2d:b7:36:
fd:9b:6a:3e:0b:96:b8:6d:e5:06:dd:dd:93:75:31:8f:4e:b7:
5e:74:d1:f4:d0:b4:8d:65:9e:e0:ee:1d:93:e0:67:dc:fe:5d:
25:40:64:be:b9:8a:ca:3a:9d:57:0d:e6:21:b7:8f:0e:f7:d1:
91:86:23:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 08:13:09 2026 by rpki-client