Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/a97f86-fb18-483e-926c-832d55590f29/1/Cv78Oruzv63prfFCafNgIwfJLl4.mft
File: Cv78Oruzv63prfFCafNgIwfJLl4.mft (raw, json)
Hash identifier: G3QASej+TASc82ao8ujaGPjSHSYZq5yPiKQrmK9kXgI=
Subject key identifier: 83:68:31:30:8E:82:B7:7B:BE:2F:DB:A5:18:95:C1:C0:8C:AB:F4:CC
Authority key identifier: 0A:FE:FC:3A:BB:B3:BF:AD:E9:AD:F1:42:69:F3:60:23:07:C9:2E:5E
Certificate issuer: /CN=0afefc3abbb3bfade9adf14269f3602307c92e5e
Certificate serial: 01A08BD5C4F7F38106286522C189B61A25A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cv78Oruzv63prfFCafNgIwfJLl4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/a97f86-fb18-483e-926c-832d55590f29/1/Cv78Oruzv63prfFCafNgIwfJLl4.mft
Manifest number: 01E6
Signing time: Thu 10 Sep 2026 15:00:37 +0000
Manifest this update: Thu 10 Sep 2026 15:00:37 +0000
Manifest next update: Fri 11 Sep 2026 15:00:37 +0000
Files and hashes: 1: Cv78Oruzv63prfFCafNgIwfJLl4.crl (hash: 7w+syahHYyCvzJcgYDVoSqiM0SjCuTw0qBLN5EPv/tk=)
2: fdT5h_AVa4G_dfwdPb5ps2tK-dc.roa (hash: REU2paWp+wXXGlOwD8K0DYxInrpyINHxZ90ERdleFKg=)
3: wdZYfAFUeN1uYq_6mZZzbvOEO9E.roa (hash: qIQR+crOVY1d0komneMfNh35fcgqDk/iAFOlKpD6isU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/a97f86-fb18-483e-926c-832d55590f29/1/Cv78Oruzv63prfFCafNgIwfJLl4.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/a97f86-fb18-483e-926c-832d55590f29/1/Cv78Oruzv63prfFCafNgIwfJLl4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cv78Oruzv63prfFCafNgIwfJLl4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:d5:c4:f7:f3:81:06:28:65:22:c1:89:b6:1a:25:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0afefc3abbb3bfade9adf14269f3602307c92e5e
Validity
Not Before: Sep 10 15:00:37 2026 GMT
Not After : Sep 11 15:00:37 2026 GMT
Subject: CN=836831308e82b77bbe2fdba51895c1c08cabf4cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:64:45:58:f2:74:ec:11:54:ff:60:b0:39:1b:
77:b9:51:00:39:b2:af:13:24:05:e7:30:25:28:62:
90:27:5a:8e:2c:e7:97:57:e4:48:42:72:89:91:98:
9c:3f:60:b7:c0:1a:98:82:d6:19:1a:a1:da:1f:b7:
e8:c5:4e:c8:ee:0c:a6:7a:03:17:6f:f8:f9:54:97:
a1:3c:f7:b6:77:26:03:de:b1:11:82:c1:a6:32:c0:
07:1b:e4:a7:2d:d2:ab:2f:8b:2e:21:54:3f:3e:a5:
52:7b:9c:68:70:5e:09:fe:b4:01:c3:a7:e1:24:dc:
cf:39:7d:e0:50:45:0a:6b:24:5b:e4:62:aa:8b:7e:
83:f9:b0:c0:94:fd:69:58:de:38:71:6a:98:b3:d2:
b7:59:a8:b2:2e:59:5f:92:56:c5:1a:cd:2e:89:93:
bd:be:4d:38:95:7c:27:fe:77:ff:46:39:ac:ab:1d:
a0:e2:c0:6c:7d:e1:69:47:67:ab:5a:73:4e:00:28:
0c:52:e2:27:66:6e:d4:25:17:25:67:bf:e1:1e:d3:
18:2c:59:62:3e:ef:dd:73:67:f2:f3:55:17:82:1a:
51:03:db:a6:48:fa:27:e8:98:0a:05:65:c6:9c:b2:
38:50:3f:cf:7f:57:a7:5b:7e:54:11:77:4e:2e:41:
e6:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:68:31:30:8E:82:B7:7B:BE:2F:DB:A5:18:95:C1:C0:8C:AB:F4:CC
X509v3 Authority Key Identifier:
keyid:0A:FE:FC:3A:BB:B3:BF:AD:E9:AD:F1:42:69:F3:60:23:07:C9:2E:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cv78Oruzv63prfFCafNgIwfJLl4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/a97f86-fb18-483e-926c-832d55590f29/1/Cv78Oruzv63prfFCafNgIwfJLl4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/a97f86-fb18-483e-926c-832d55590f29/1/Cv78Oruzv63prfFCafNgIwfJLl4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:39:e7:93:04:d6:a9:19:91:ca:71:0e:c3:02:7e:31:10:94:
c7:28:c4:81:c5:1e:bf:0c:03:02:cc:fd:fa:d4:cd:55:93:40:
e7:b6:58:93:52:43:f2:38:1a:00:2d:8f:b8:a8:b7:0a:cb:c2:
e7:be:78:6a:38:23:8b:e0:18:80:26:b3:46:b3:85:b6:d6:8a:
0d:0e:39:24:ae:d4:49:ea:59:58:26:3e:13:a5:bd:50:c6:4c:
17:33:c5:e0:ea:8f:fb:52:d5:a3:8d:9b:3b:ee:16:0a:b8:f7:
97:a6:4c:e9:2d:96:49:4d:e4:26:f3:25:c3:c1:d8:f4:ec:6e:
b6:2a:64:9b:73:31:9c:a9:43:be:bc:c3:e8:82:80:58:a0:55:
3f:57:0b:58:98:88:93:6f:93:44:53:2c:a1:82:1f:a7:80:cd:
7c:33:fe:c3:e9:48:a9:7f:33:7f:cf:bc:49:ba:1c:11:75:5b:
7e:ff:8f:fb:af:64:1b:08:ee:e4:b0:eb:b0:0a:8e:9c:8d:e6:
38:70:7a:ec:1e:38:99:08:96:be:da:b7:e9:ad:45:c9:e9:21:
57:d1:7c:aa:c8:9d:a2:36:95:40:c9:3e:13:3c:35:8b:c7:17:
42:b4:c3:b9:ee:cd:6f:35:a6:4a:aa:e6:ff:d9:cf:3c:a9:87:
ac:ec:4e:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:15:42 2026 by rpki-client