Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/a97f86-fb18-483e-926c-832d55590f29/1/Cv78Oruzv63prfFCafNgIwfJLl4.mft
File: Cv78Oruzv63prfFCafNgIwfJLl4.mft (raw, json)
Hash identifier: 11hS5NjHy2dKfqWNMh8YI4Y7z7JU8QT3Lg8YrYR1JuI=
Subject key identifier: B5:98:A0:69:19:85:D9:34:5C:4E:BD:1C:E2:61:22:58:F6:4E:46:52
Authority key identifier: 0A:FE:FC:3A:BB:B3:BF:AD:E9:AD:F1:42:69:F3:60:23:07:C9:2E:5E
Certificate issuer: /CN=0afefc3abbb3bfade9adf14269f3602307c92e5e
Certificate serial: 01A17F2A9F6128B0380640BD0E0D9B6D4C33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cv78Oruzv63prfFCafNgIwfJLl4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/a97f86-fb18-483e-926c-832d55590f29/1/Cv78Oruzv63prfFCafNgIwfJLl4.mft
Manifest number: 0264
Signing time: Tue 27 Oct 2026 21:01:02 +0000
Manifest this update: Tue 27 Oct 2026 21:01:02 +0000
Manifest next update: Wed 28 Oct 2026 21:01:02 +0000
Files and hashes: 1: Cv78Oruzv63prfFCafNgIwfJLl4.crl (hash: y+wDxY2qTj790R3cJ1MRjpT2fyhsuCSOWAWNTk0Sjg8=)
2: fdT5h_AVa4G_dfwdPb5ps2tK-dc.roa (hash: REU2paWp+wXXGlOwD8K0DYxInrpyINHxZ90ERdleFKg=)
3: wdZYfAFUeN1uYq_6mZZzbvOEO9E.roa (hash: qIQR+crOVY1d0komneMfNh35fcgqDk/iAFOlKpD6isU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/a97f86-fb18-483e-926c-832d55590f29/1/Cv78Oruzv63prfFCafNgIwfJLl4.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/a97f86-fb18-483e-926c-832d55590f29/1/Cv78Oruzv63prfFCafNgIwfJLl4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cv78Oruzv63prfFCafNgIwfJLl4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 21:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7f:2a:9f:61:28:b0:38:06:40:bd:0e:0d:9b:6d:4c:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0afefc3abbb3bfade9adf14269f3602307c92e5e
Validity
Not Before: Oct 27 21:01:02 2026 GMT
Not After : Oct 28 21:01:02 2026 GMT
Subject: CN=b598a0691985d9345c4ebd1ce2612258f64e4652
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:71:eb:88:4a:7c:71:95:69:74:70:63:66:40:
1e:ca:73:a3:b5:07:4e:d8:d0:98:26:9c:e8:93:9f:
c1:99:f8:92:f2:66:b1:92:9b:4f:1c:cc:79:db:de:
e6:b4:c8:83:e9:98:37:2d:45:73:0f:f0:63:42:35:
22:7c:6f:cc:13:36:8f:58:e2:ca:0d:da:18:19:49:
99:27:ee:a6:e3:f2:45:08:32:20:45:88:1e:46:c4:
49:c0:1d:c5:ad:a9:40:f7:c7:89:b1:bc:d7:98:03:
c4:66:7b:a1:bb:b3:78:b7:55:02:c8:0e:da:d5:86:
63:1b:28:7b:db:e6:f6:ea:a2:5c:ee:2d:4b:17:c8:
dc:96:9b:bd:6b:96:91:13:da:26:54:4d:d9:10:fc:
74:4f:49:b0:70:12:db:66:a8:c8:b6:97:b6:33:98:
4f:7c:e7:34:25:3c:1a:64:23:51:83:9b:01:3d:86:
70:90:69:7f:66:b7:57:a4:ba:34:87:14:44:82:3c:
32:26:ac:a4:4d:bd:39:5b:09:af:5c:47:01:83:b8:
61:f6:b2:b7:df:2b:63:22:82:2d:74:fe:82:d5:31:
29:0c:12:17:0d:ab:eb:c3:09:85:d6:28:db:30:ce:
66:cd:8b:95:8c:d6:85:ba:4e:e7:76:7d:67:f3:39:
0a:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:98:A0:69:19:85:D9:34:5C:4E:BD:1C:E2:61:22:58:F6:4E:46:52
X509v3 Authority Key Identifier:
keyid:0A:FE:FC:3A:BB:B3:BF:AD:E9:AD:F1:42:69:F3:60:23:07:C9:2E:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cv78Oruzv63prfFCafNgIwfJLl4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/a97f86-fb18-483e-926c-832d55590f29/1/Cv78Oruzv63prfFCafNgIwfJLl4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/a97f86-fb18-483e-926c-832d55590f29/1/Cv78Oruzv63prfFCafNgIwfJLl4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:91:66:24:f2:cb:38:07:f5:4d:78:08:ec:87:ef:db:80:26:
13:56:ac:30:19:82:fa:b2:eb:5b:a6:15:8f:39:3e:7d:0a:26:
1c:33:17:23:69:b5:92:52:64:6c:3f:a5:fd:c9:60:73:51:4b:
a8:d6:7d:d2:57:60:3d:06:04:f6:18:a3:c9:c3:20:b8:f4:cb:
2a:ff:aa:da:53:49:16:9d:4b:1e:a1:12:b8:b1:33:64:75:03:
4c:e5:e7:cb:5e:a7:63:93:de:e0:70:7a:cc:d6:b1:bc:7a:57:
02:80:8d:c3:81:68:a0:37:d0:c5:75:ea:25:95:23:81:98:42:
2b:2d:5d:bd:ee:d0:80:9c:7a:61:50:06:c6:98:f7:30:cc:4c:
96:81:d8:2f:a6:d7:69:52:c4:01:4b:b4:b8:c2:6f:00:cc:78:
7c:90:1e:65:56:cd:3e:b6:26:7e:62:e2:8d:d5:05:a8:df:82:
29:4b:f8:f3:97:12:a4:47:fc:a9:4e:fe:5d:0a:a7:f0:13:8f:
56:82:20:54:b6:54:5c:5a:a3:6f:32:80:03:77:47:9a:2a:ee:
30:65:54:62:59:f4:d7:23:c7:fb:31:77:5c:5f:f8:83:fc:55:
4b:35:c5:a0:9e:de:77:05:de:35:03:9a:87:25:9d:bd:9a:87:
19:82:6f:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 05:27:11 2026 by rpki-client