Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/64d910-945c-42e8-bb44-62821c2c299f/1/CVAiiQS52-tHkqaXcn42qv2E0uk.mft
File: CVAiiQS52-tHkqaXcn42qv2E0uk.mft (raw, json)
Hash identifier: 0cQIuHElda3KjcSWUV0OBZjnvd3EI3gcj+wD6xGp28s=
Subject key identifier: 90:79:11:4E:51:12:47:D9:89:5D:F5:6D:2D:98:52:13:31:58:29:3E
Authority key identifier: 09:50:22:89:04:B9:DB:EB:47:92:A6:97:72:7E:36:AA:FD:84:D2:E9
Certificate issuer: /CN=0950228904b9dbeb4792a697727e36aafd84d2e9
Certificate serial: 019F0A3E420A4C6AD988271D5DB4D0CFC9ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CVAiiQS52-tHkqaXcn42qv2E0uk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/64d910-945c-42e8-bb44-62821c2c299f/1/CVAiiQS52-tHkqaXcn42qv2E0uk.mft
Manifest number: 1094
Signing time: Sat 27 Jun 2026 18:01:19 +0000
Manifest this update: Sat 27 Jun 2026 18:01:19 +0000
Manifest next update: Sun 28 Jun 2026 18:01:19 +0000
Files and hashes: 1: 0bE4aaGgdiJFJ50d4SWw_RJ5yog.roa (hash: pfh5kzcii4MpQVjtzuuE7xEsH7nvPkPrk2Vo7JxfSO8=)
2: CVAiiQS52-tHkqaXcn42qv2E0uk.crl (hash: usOU2Yn3x1iyuGa0wUrFk10Mr4Iligc70kQw5F1Sa1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/64d910-945c-42e8-bb44-62821c2c299f/1/CVAiiQS52-tHkqaXcn42qv2E0uk.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/64d910-945c-42e8-bb44-62821c2c299f/1/CVAiiQS52-tHkqaXcn42qv2E0uk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CVAiiQS52-tHkqaXcn42qv2E0uk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Jun 2026 18:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:0a:3e:42:0a:4c:6a:d9:88:27:1d:5d:b4:d0:cf:c9:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0950228904b9dbeb4792a697727e36aafd84d2e9
Validity
Not Before: Jun 27 18:01:19 2026 GMT
Not After : Jun 28 18:01:19 2026 GMT
Subject: CN=9079114e511247d9895df56d2d9852133158293e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:0c:0a:0b:50:91:89:7a:10:04:40:28:d2:9f:
dd:ce:c7:74:df:d4:da:8c:1b:02:6a:e4:c3:e7:c1:
79:7d:1d:e6:10:77:a5:24:6f:7c:ae:6f:bc:5a:b3:
56:19:2c:28:f5:1e:d9:95:d0:2a:57:89:a5:d9:1b:
61:a9:92:f2:38:95:7b:30:47:13:0b:13:d6:36:d1:
e5:4d:61:d4:c0:eb:58:b9:07:75:a6:fc:88:6d:64:
05:34:c4:da:7a:f2:2a:ac:df:34:6c:75:0b:a6:57:
99:bc:09:d1:d4:be:8c:5b:5c:4a:b5:e4:f2:ca:76:
b7:77:e1:e1:ac:40:eb:a5:02:8e:7a:a8:a9:25:b6:
dd:ed:1a:f4:3c:29:cd:3f:05:60:15:c5:b3:77:aa:
32:c1:cd:cf:bf:d5:0b:98:3c:13:3a:71:dd:f1:e6:
09:bb:b2:25:56:74:5d:65:a4:cb:7e:ef:54:db:6f:
94:5f:1d:d1:58:85:3c:56:ee:8a:21:bd:92:fd:67:
1d:34:49:45:37:90:8d:09:5f:cb:75:08:6b:3d:b4:
ff:c2:aa:e8:ff:49:71:41:7a:b7:63:69:7b:ef:9e:
9f:a1:eb:d6:3c:0e:d9:f3:a5:11:66:70:8a:9d:99:
89:cf:28:a5:35:ee:04:42:ca:16:c6:be:1a:6e:25:
74:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:79:11:4E:51:12:47:D9:89:5D:F5:6D:2D:98:52:13:31:58:29:3E
X509v3 Authority Key Identifier:
keyid:09:50:22:89:04:B9:DB:EB:47:92:A6:97:72:7E:36:AA:FD:84:D2:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CVAiiQS52-tHkqaXcn42qv2E0uk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/64d910-945c-42e8-bb44-62821c2c299f/1/CVAiiQS52-tHkqaXcn42qv2E0uk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/64d910-945c-42e8-bb44-62821c2c299f/1/CVAiiQS52-tHkqaXcn42qv2E0uk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:37:7e:a9:bc:7a:45:76:fe:b8:20:2d:31:10:8a:ad:02:26:
43:ae:45:fc:ce:95:0f:5e:35:52:72:fb:25:8e:b4:a3:dc:63:
44:a5:b2:a0:81:bd:0a:4f:b3:ba:16:97:fb:5e:1f:66:24:54:
ed:7a:a7:87:bf:9a:c3:c2:33:6b:ab:47:9a:82:7f:62:30:bd:
f8:cc:31:79:6f:c7:87:52:a9:06:b1:9c:d3:7f:0d:9f:ba:e4:
be:e2:73:88:77:f3:18:5a:ab:9e:f6:1b:2c:3d:93:a1:9e:73:
94:dd:4b:fc:7d:20:fb:1a:3a:b2:9f:10:a9:3e:d1:b5:23:3f:
65:77:81:58:b7:2b:fc:5e:d4:3b:b2:fe:f2:38:34:eb:f1:f3:
7a:ba:a8:8a:1d:4d:47:9a:d9:63:ea:2e:f2:24:28:91:a0:1d:
fa:e6:5d:1d:f6:cd:af:05:9d:32:0e:17:29:21:82:81:af:df:
37:60:25:86:dd:d0:a8:2e:1d:b8:59:4d:79:4c:cb:8a:e4:cb:
f4:7c:00:6a:4b:38:e2:4f:fd:87:9c:28:84:ec:6a:61:2b:15:
45:6f:38:47:fa:20:8c:3e:f2:1e:b1:bf:c1:ae:e0:f0:d0:2f:
fc:ef:92:3e:4b:21:48:c1:bc:36:cd:be:2f:c9:2b:cd:3a:56:
fa:75:80:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 03:24:11 2026 by rpki-client