Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/a97f86-fb18-483e-926c-832d55590f29/1/Cv78Oruzv63prfFCafNgIwfJLl4.mft
File: Cv78Oruzv63prfFCafNgIwfJLl4.mft (raw, json)
Hash identifier: oyZqeV8tYOx6juVhuzLREl8ROWjrzIxZ+hOLRrpymDo=
Subject key identifier: B5:D8:07:F6:1D:8B:D4:C6:50:6A:C2:A6:29:E6:CE:D6:42:90:49:21
Authority key identifier: 0A:FE:FC:3A:BB:B3:BF:AD:E9:AD:F1:42:69:F3:60:23:07:C9:2E:5E
Certificate issuer: /CN=0afefc3abbb3bfade9adf14269f3602307c92e5e
Certificate serial: 019D3A1CE8FC285AFD16306FFA3925095B88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cv78Oruzv63prfFCafNgIwfJLl4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/a97f86-fb18-483e-926c-832d55590f29/1/Cv78Oruzv63prfFCafNgIwfJLl4.mft
Manifest number: 2E
Signing time: Sun 29 Mar 2026 15:01:06 +0000
Manifest this update: Sun 29 Mar 2026 15:01:06 +0000
Manifest next update: Mon 30 Mar 2026 15:01:06 +0000
Files and hashes: 1: Cv78Oruzv63prfFCafNgIwfJLl4.crl (hash: +U0IFSPY4M6+a/XauX9h3PgqgVKkWwDuTTFeQoJUcX8=)
2: fdT5h_AVa4G_dfwdPb5ps2tK-dc.roa (hash: REU2paWp+wXXGlOwD8K0DYxInrpyINHxZ90ERdleFKg=)
3: wdZYfAFUeN1uYq_6mZZzbvOEO9E.roa (hash: qIQR+crOVY1d0komneMfNh35fcgqDk/iAFOlKpD6isU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/a97f86-fb18-483e-926c-832d55590f29/1/Cv78Oruzv63prfFCafNgIwfJLl4.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/a97f86-fb18-483e-926c-832d55590f29/1/Cv78Oruzv63prfFCafNgIwfJLl4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cv78Oruzv63prfFCafNgIwfJLl4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 15:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:e8:fc:28:5a:fd:16:30:6f:fa:39:25:09:5b:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0afefc3abbb3bfade9adf14269f3602307c92e5e
Validity
Not Before: Mar 29 15:01:06 2026 GMT
Not After : Mar 30 15:01:06 2026 GMT
Subject: CN=b5d807f61d8bd4c6506ac2a629e6ced642904921
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2a:69:ff:93:48:cc:49:af:12:a0:90:15:32:
c1:e0:fa:71:16:49:66:2d:f3:b5:fe:b8:2b:d0:c7:
bd:e8:b1:d2:39:2e:7a:9b:17:e7:57:c2:94:be:d2:
d7:49:aa:26:3b:0c:44:b6:8b:c8:69:e0:92:20:07:
60:5c:ee:56:a4:17:4c:ba:e0:cf:8f:28:ea:0d:29:
6a:f0:ae:a2:bd:b5:e1:ad:38:dd:e7:3a:88:02:aa:
b2:73:e7:a3:99:42:69:50:b7:68:8c:15:8e:79:d5:
50:fb:0b:d6:b5:f4:03:36:2e:35:ff:2e:10:6b:ea:
10:cb:a3:2f:05:98:3e:aa:d0:5e:6b:84:12:c9:e0:
68:19:3e:cc:d2:8e:52:b2:3d:f9:88:4d:13:8b:6b:
e5:d5:91:02:84:d3:c4:96:33:5c:35:b0:18:27:dd:
92:69:81:43:ed:6b:66:c3:c3:85:66:40:20:93:05:
1e:75:bf:ef:11:ce:1e:4b:a3:51:1c:e6:af:d7:50:
e5:4a:76:97:5a:9e:bb:68:f7:81:0b:1b:98:9c:79:
c3:48:33:26:98:92:ea:22:80:64:65:32:c9:5a:2c:
49:82:f8:8c:6d:9a:3e:1f:e0:2f:10:ed:9d:15:a6:
c2:e9:6f:7a:63:ed:77:94:f6:bd:72:a6:9f:f1:2b:
46:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:D8:07:F6:1D:8B:D4:C6:50:6A:C2:A6:29:E6:CE:D6:42:90:49:21
X509v3 Authority Key Identifier:
keyid:0A:FE:FC:3A:BB:B3:BF:AD:E9:AD:F1:42:69:F3:60:23:07:C9:2E:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cv78Oruzv63prfFCafNgIwfJLl4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/a97f86-fb18-483e-926c-832d55590f29/1/Cv78Oruzv63prfFCafNgIwfJLl4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/a97f86-fb18-483e-926c-832d55590f29/1/Cv78Oruzv63prfFCafNgIwfJLl4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:00:cd:10:cf:bb:76:de:d6:c5:a4:8b:fe:09:88:9e:2c:5e:
d8:f3:f9:c5:57:01:00:3f:fa:56:87:62:fc:bf:63:33:aa:8a:
81:55:8b:e8:5c:be:fa:1a:b4:1e:f8:c0:be:c9:c6:9a:92:45:
e8:b8:00:ac:f2:28:fe:95:0b:d9:59:f1:5a:16:75:4f:cf:9a:
f9:4b:c0:fa:0d:4d:59:8d:cf:d0:09:da:be:3c:06:5a:6a:83:
e1:57:62:71:8e:dd:a8:6f:11:fb:da:45:92:1b:04:30:cd:19:
75:91:56:5e:ca:c6:45:04:b7:2f:d2:2d:17:23:bb:e7:28:c7:
c1:03:49:16:d1:65:bc:c1:d4:bd:cd:d5:1d:54:b0:7f:ec:94:
37:aa:18:4d:1b:26:8f:fb:71:1e:c8:a0:09:7c:42:b4:52:44:
52:ac:66:e7:f4:5c:7c:22:0a:f9:80:60:ac:34:bf:ac:1a:a2:
f8:e5:5b:1e:ff:42:bc:e4:36:cb:33:7c:46:59:16:fd:77:4f:
4e:26:b9:1e:4c:d9:10:7b:a0:97:c1:48:53:0a:44:f7:a3:72:
26:da:63:26:09:a0:96:77:00:63:a3:77:61:63:45:6f:e7:a0:
8e:f6:5c:78:8f:97:df:b4:cc:67:02:4d:fd:a4:2a:cd:23:1e:
30:24:44:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:15:22 2026 by rpki-client