
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/a97f86-fb18-483e-926c-832d55590f29/1/Cv78Oruzv63prfFCafNgIwfJLl4.mft
File: Cv78Oruzv63prfFCafNgIwfJLl4.mft (raw, json)
Hash identifier: 3dB5L3f2Iv+yQt8/FVws9QdlB4930qSz9BJv66eqJUQ=
Subject key identifier: DC:C9:C4:12:F2:98:AF:9F:98:A6:A8:AB:BE:20:7F:EA:94:88:4B:BD
Authority key identifier: 0A:FE:FC:3A:BB:B3:BF:AD:E9:AD:F1:42:69:F3:60:23:07:C9:2E:5E
Certificate issuer: /CN=0afefc3abbb3bfade9adf14269f3602307c92e5e
Certificate serial: 019FA22994C5501BF274CB0BCC0820383515
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cv78Oruzv63prfFCafNgIwfJLl4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/a97f86-fb18-483e-926c-832d55590f29/1/Cv78Oruzv63prfFCafNgIwfJLl4.mft
Manifest number: 016D
Signing time: Mon 27 Jul 2026 06:01:01 +0000
Manifest this update: Mon 27 Jul 2026 06:01:01 +0000
Manifest next update: Tue 28 Jul 2026 06:01:01 +0000
Files and hashes: 1: Cv78Oruzv63prfFCafNgIwfJLl4.crl (hash: eHtyozI3jicVwE70OnGPaAZwHEIA6tjaTgvXX/8wIaQ=)
2: fdT5h_AVa4G_dfwdPb5ps2tK-dc.roa (hash: REU2paWp+wXXGlOwD8K0DYxInrpyINHxZ90ERdleFKg=)
3: wdZYfAFUeN1uYq_6mZZzbvOEO9E.roa (hash: qIQR+crOVY1d0komneMfNh35fcgqDk/iAFOlKpD6isU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/a97f86-fb18-483e-926c-832d55590f29/1/Cv78Oruzv63prfFCafNgIwfJLl4.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/a97f86-fb18-483e-926c-832d55590f29/1/Cv78Oruzv63prfFCafNgIwfJLl4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cv78Oruzv63prfFCafNgIwfJLl4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:29:94:c5:50:1b:f2:74:cb:0b:cc:08:20:38:35:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0afefc3abbb3bfade9adf14269f3602307c92e5e
Validity
Not Before: Jul 27 06:01:01 2026 GMT
Not After : Jul 28 06:01:01 2026 GMT
Subject: CN=dcc9c412f298af9f98a6a8abbe207fea94884bbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:46:60:58:53:61:7b:41:65:81:4f:65:8e:be:
05:50:ad:41:38:a1:84:09:36:79:fd:f5:ad:b7:5a:
28:b8:da:92:b2:a2:16:68:be:02:c4:1b:04:87:10:
27:ae:ce:d8:51:6f:c6:8c:73:2c:57:de:e6:18:a7:
9f:ee:51:64:09:9b:6a:27:a1:79:30:b6:f7:b4:cd:
28:96:da:28:0e:e7:df:b9:17:67:34:e0:fa:9d:7a:
84:17:74:b2:c0:e5:38:52:f1:ca:24:08:3b:00:f1:
ab:31:2c:b5:10:09:4a:fa:63:a6:d4:86:d2:a1:62:
4a:78:f8:a6:e2:53:21:02:12:d9:13:7e:c5:23:9b:
94:d5:a7:61:df:9e:4c:9c:1f:af:3b:42:22:d2:94:
c9:98:13:f6:95:87:67:cc:f6:11:69:0b:42:06:c3:
2a:59:55:12:85:be:00:81:4f:29:bf:58:26:bb:69:
ef:aa:d0:26:1e:80:12:27:90:ce:31:c4:81:b3:36:
ce:9e:c9:93:ab:e9:09:f0:b5:6e:1d:ae:46:11:36:
1b:43:07:c6:9a:e1:bb:d7:ec:b9:98:58:1d:00:5c:
18:a0:52:67:be:9b:f4:e3:c6:86:69:14:a1:64:9c:
76:81:12:d9:d9:ba:46:ed:b0:ee:9c:1b:c4:0e:57:
e7:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:C9:C4:12:F2:98:AF:9F:98:A6:A8:AB:BE:20:7F:EA:94:88:4B:BD
X509v3 Authority Key Identifier:
keyid:0A:FE:FC:3A:BB:B3:BF:AD:E9:AD:F1:42:69:F3:60:23:07:C9:2E:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cv78Oruzv63prfFCafNgIwfJLl4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/a97f86-fb18-483e-926c-832d55590f29/1/Cv78Oruzv63prfFCafNgIwfJLl4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/a97f86-fb18-483e-926c-832d55590f29/1/Cv78Oruzv63prfFCafNgIwfJLl4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:d6:bd:c1:f1:d2:42:d3:36:68:2a:d7:e9:ef:c0:9e:78:6c:
d6:63:eb:9f:8e:9a:f6:fe:74:c4:f4:dc:b3:bc:10:2f:64:2a:
a9:69:69:cc:7d:f5:74:df:8a:55:0a:7c:29:e6:bd:15:15:93:
20:59:9f:32:7e:54:5d:bb:a6:bc:f7:9f:04:14:1f:92:f8:d3:
b4:23:f4:b2:11:99:43:5d:8f:08:c0:00:64:66:be:5e:12:ca:
f4:09:2d:db:72:d6:4a:67:0b:45:74:37:6f:93:7b:63:09:ea:
f5:bb:88:9e:73:a6:4d:ae:fc:2c:f0:d3:f1:e9:7e:4e:40:2e:
e4:e3:b1:3b:b3:01:d8:b4:a5:17:96:65:a7:fc:38:61:d6:70:
7b:c9:80:7b:ff:e6:c6:8e:1e:3d:63:5c:da:e5:9a:01:43:f9:
56:a3:cc:07:48:13:e5:1e:26:61:71:33:40:d4:c5:2b:6e:85:
84:c2:57:72:b7:69:c8:a7:13:7c:47:55:3d:94:68:f7:a2:04:
e4:da:17:88:73:37:e1:87:67:20:f5:3b:fc:7c:af:39:33:83:
07:17:f6:83:96:9d:fb:24:ca:88:38:2e:85:12:e6:84:18:60:
c2:69:53:19:9b:8e:09:c5:13:ce:6e:f1:4a:13:d9:e2:de:cc:
3c:7f:de:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 08:05:54 2026 by rpki-client