Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/64d910-945c-42e8-bb44-62821c2c299f/1/CVAiiQS52-tHkqaXcn42qv2E0uk.mft
File: CVAiiQS52-tHkqaXcn42qv2E0uk.mft (raw, json)
Hash identifier: iSUPF6VzyX/4gkz1GlO4CVGuWrlZ5S4o8gX29Mv3TvM=
Subject key identifier: 4A:9C:78:86:E0:61:B5:10:1C:06:0C:CD:8D:FD:79:54:0A:C8:07:4A
Authority key identifier: 09:50:22:89:04:B9:DB:EB:47:92:A6:97:72:7E:36:AA:FD:84:D2:E9
Certificate issuer: /CN=0950228904b9dbeb4792a697727e36aafd84d2e9
Certificate serial: 01A113AAD85671934F732FC1D96A1E8452A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CVAiiQS52-tHkqaXcn42qv2E0uk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/64d910-945c-42e8-bb44-62821c2c299f/1/CVAiiQS52-tHkqaXcn42qv2E0uk.mft
Manifest number: 11A2
Signing time: Wed 07 Oct 2026 00:02:05 +0000
Manifest this update: Wed 07 Oct 2026 00:02:05 +0000
Manifest next update: Thu 08 Oct 2026 00:02:05 +0000
Files and hashes: 1: 0bE4aaGgdiJFJ50d4SWw_RJ5yog.roa (hash: pfh5kzcii4MpQVjtzuuE7xEsH7nvPkPrk2Vo7JxfSO8=)
2: CVAiiQS52-tHkqaXcn42qv2E0uk.crl (hash: KPHqGRMH+Mb/8kx+YyhTnoP0MhYsRsu3ktk4Rh3jZVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/64d910-945c-42e8-bb44-62821c2c299f/1/CVAiiQS52-tHkqaXcn42qv2E0uk.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/64d910-945c-42e8-bb44-62821c2c299f/1/CVAiiQS52-tHkqaXcn42qv2E0uk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CVAiiQS52-tHkqaXcn42qv2E0uk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 22:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:13:aa:d8:56:71:93:4f:73:2f:c1:d9:6a:1e:84:52:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0950228904b9dbeb4792a697727e36aafd84d2e9
Validity
Not Before: Oct 7 00:02:05 2026 GMT
Not After : Oct 8 00:02:05 2026 GMT
Subject: CN=4a9c7886e061b5101c060ccd8dfd79540ac8074a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:25:86:5e:bc:e0:8f:b1:ba:45:87:e9:3a:2a:
5a:1c:07:ba:14:65:2b:98:01:40:83:b3:f6:fa:9a:
20:9e:6f:d7:97:d4:05:7c:8d:05:69:15:82:83:a0:
d4:81:8b:32:b3:17:d4:c6:6f:21:c3:a7:3d:24:eb:
2d:29:93:ea:da:0c:8a:2d:50:e7:22:75:5b:50:f6:
6c:9f:a8:42:94:2d:42:1b:2f:2c:76:89:17:18:f4:
28:ad:8a:60:77:8a:82:fd:ff:0c:75:0f:fa:6b:f5:
fb:86:55:d6:ec:e0:69:6b:31:dc:bf:2c:10:ea:4c:
d1:84:04:23:38:c5:07:af:b5:41:0d:c8:93:5a:3a:
30:db:8a:05:6a:4c:80:f8:ce:dc:4f:a5:d9:55:da:
79:82:4e:6a:cd:69:4d:31:f2:34:06:ed:c9:27:91:
05:82:ab:66:99:68:f4:90:d9:46:c2:e8:c5:5a:c4:
ce:cd:be:43:73:b3:08:36:99:1c:c4:03:c7:fb:d3:
61:ad:45:56:70:b1:74:d9:f3:89:a3:cf:d1:a2:24:
71:82:47:60:a0:a9:3c:2c:bf:76:3f:92:31:06:5d:
23:9d:d0:7a:2b:67:82:fc:2a:a2:c6:f9:c1:ff:24:
a8:d6:b5:2f:cb:1b:6e:f6:67:88:ab:d7:1d:b1:b9:
27:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:9C:78:86:E0:61:B5:10:1C:06:0C:CD:8D:FD:79:54:0A:C8:07:4A
X509v3 Authority Key Identifier:
keyid:09:50:22:89:04:B9:DB:EB:47:92:A6:97:72:7E:36:AA:FD:84:D2:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CVAiiQS52-tHkqaXcn42qv2E0uk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/64d910-945c-42e8-bb44-62821c2c299f/1/CVAiiQS52-tHkqaXcn42qv2E0uk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/64d910-945c-42e8-bb44-62821c2c299f/1/CVAiiQS52-tHkqaXcn42qv2E0uk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:57:ea:eb:9b:64:72:2b:3b:1a:60:d2:77:81:0b:6e:a4:64:
38:43:89:4b:0e:59:82:15:65:5e:3d:7c:81:f2:ba:5c:ef:d3:
96:89:24:d6:ec:3b:88:6f:e4:8d:26:81:c8:00:4a:c5:55:90:
42:35:64:42:d6:d9:47:15:19:26:65:48:de:ea:13:27:6a:0b:
fa:fe:5f:22:a3:98:c1:04:8b:8c:50:5d:e9:87:0e:ef:62:de:
58:5d:7c:51:c4:75:7e:88:ef:99:76:7d:e3:63:85:ed:c8:ba:
38:11:09:7d:65:30:e1:11:41:45:99:9c:c3:2a:31:6c:53:a9:
c7:4f:7b:9a:bd:1d:48:18:d1:d2:1e:ad:a9:d0:02:21:0e:05:
07:16:9e:a7:19:62:37:2a:6e:3b:44:9a:5a:26:1e:ef:08:aa:
2c:aa:f5:85:96:c3:20:56:87:e9:3c:01:e0:08:c7:c1:74:22:
51:18:94:f8:ac:b9:75:b4:4a:82:c6:19:8e:d2:c7:3e:20:e8:
74:06:83:7d:1a:65:55:09:71:47:3e:73:cf:66:5c:f0:9b:a8:
cf:f3:d2:f4:77:7e:e9:e0:15:d5:bd:96:41:c1:3a:74:75:eb:
20:26:11:c3:d3:52:f8:95:9f:0f:39:59:39:5f:41:4b:61:6c:
a4:73:5e:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 05:58:01 2026 by rpki-client