Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/64d910-945c-42e8-bb44-62821c2c299f/1/CVAiiQS52-tHkqaXcn42qv2E0uk.mft
File: CVAiiQS52-tHkqaXcn42qv2E0uk.mft (raw, json)
Hash identifier: 00X83wcQ92TgdDyCZjDmGwj6ttnuiBH32phqIdLYm2I=
Subject key identifier: DA:F2:2A:53:22:46:35:E9:53:19:2E:13:6A:22:28:24:7B:9E:CD:B8
Authority key identifier: 09:50:22:89:04:B9:DB:EB:47:92:A6:97:72:7E:36:AA:FD:84:D2:E9
Certificate issuer: /CN=0950228904b9dbeb4792a697727e36aafd84d2e9
Certificate serial: 019E20922A82A62C10A33F5B7CEFBDE189D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CVAiiQS52-tHkqaXcn42qv2E0uk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/64d910-945c-42e8-bb44-62821c2c299f/1/CVAiiQS52-tHkqaXcn42qv2E0uk.mft
Manifest number: 101B
Signing time: Wed 13 May 2026 09:01:50 +0000
Manifest this update: Wed 13 May 2026 09:01:50 +0000
Manifest next update: Thu 14 May 2026 09:01:50 +0000
Files and hashes: 1: 0bE4aaGgdiJFJ50d4SWw_RJ5yog.roa (hash: pfh5kzcii4MpQVjtzuuE7xEsH7nvPkPrk2Vo7JxfSO8=)
2: CVAiiQS52-tHkqaXcn42qv2E0uk.crl (hash: UwTvChu0MwweGUODTkYZuGrAimyUTjNZKGi5txawImM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/64d910-945c-42e8-bb44-62821c2c299f/1/CVAiiQS52-tHkqaXcn42qv2E0uk.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/64d910-945c-42e8-bb44-62821c2c299f/1/CVAiiQS52-tHkqaXcn42qv2E0uk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CVAiiQS52-tHkqaXcn42qv2E0uk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:92:2a:82:a6:2c:10:a3:3f:5b:7c:ef:bd:e1:89:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0950228904b9dbeb4792a697727e36aafd84d2e9
Validity
Not Before: May 13 09:01:50 2026 GMT
Not After : May 14 09:01:50 2026 GMT
Subject: CN=daf22a53224635e953192e136a2228247b9ecdb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:35:e4:1b:68:19:55:95:21:30:f7:62:8b:18:
41:3b:10:ed:f8:1d:30:85:45:1f:88:e1:86:a9:ef:
0c:5f:06:b6:98:79:79:03:b5:46:05:87:d5:39:79:
4e:88:36:42:01:62:f1:87:f7:3a:0d:b4:ba:76:86:
ac:a0:97:f7:fb:c0:c8:ed:58:cb:08:48:a9:13:45:
6a:67:6f:b5:3c:f6:35:53:a9:02:0c:d9:3a:b0:79:
43:24:02:a1:63:7e:e2:1d:79:c4:2f:1d:7e:b7:cc:
04:76:49:5a:35:b8:76:d1:e7:89:ee:48:5d:11:86:
0d:7c:5f:9d:5c:0b:68:01:58:43:12:ba:67:2a:b3:
96:92:5d:14:f1:f3:dd:d2:62:bf:11:2e:d2:f5:95:
85:53:33:e9:66:9a:8a:94:89:9b:92:35:be:f2:25:
48:b4:fa:3e:40:df:4c:8a:2d:ce:10:68:ec:b6:6d:
4b:53:97:82:cd:83:b6:8d:c0:d3:1c:a0:cf:03:ab:
5d:f2:41:0e:6f:d2:c5:fd:d4:d6:d2:9f:d4:a2:22:
c3:2a:72:b1:d4:93:fe:a1:4e:4b:54:3d:b0:42:6a:
69:19:eb:c8:a9:54:fd:c5:73:bb:b7:ca:23:be:c6:
98:98:c3:ec:af:9e:8b:9f:fa:2a:94:b0:b7:d7:f5:
54:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:F2:2A:53:22:46:35:E9:53:19:2E:13:6A:22:28:24:7B:9E:CD:B8
X509v3 Authority Key Identifier:
keyid:09:50:22:89:04:B9:DB:EB:47:92:A6:97:72:7E:36:AA:FD:84:D2:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CVAiiQS52-tHkqaXcn42qv2E0uk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/64d910-945c-42e8-bb44-62821c2c299f/1/CVAiiQS52-tHkqaXcn42qv2E0uk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/64d910-945c-42e8-bb44-62821c2c299f/1/CVAiiQS52-tHkqaXcn42qv2E0uk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:1d:8e:93:ed:d5:f8:12:c3:9b:5b:14:12:48:f3:33:fd:a8:
c0:29:7a:d1:6f:3c:70:b6:9a:a9:c3:71:65:01:5e:e7:f3:69:
7a:78:1e:9f:28:71:d2:48:59:97:38:0b:2a:40:5b:f8:71:54:
73:99:9d:c2:79:02:f9:8d:7c:21:f0:df:6b:c7:4e:a7:66:8c:
97:b5:41:14:68:69:8f:ac:8c:f6:e3:a4:7c:60:a2:04:af:83:
67:7f:10:20:e6:ab:44:78:64:91:94:ca:eb:d0:42:4c:f8:9f:
0d:26:36:b5:66:71:a4:19:a5:a8:77:2a:bb:83:58:a5:12:14:
75:d1:5f:f4:39:71:5a:d5:6c:a6:ea:0b:ab:64:08:8e:cc:4c:
9a:0f:ae:03:12:31:60:1c:df:eb:5a:de:8c:ea:4c:87:d1:72:
27:8f:0d:3b:64:8c:89:8b:07:c9:57:9a:8d:98:50:4a:82:ff:
66:14:85:77:a8:55:d7:dc:a3:a6:8a:ed:d6:98:bf:ef:90:45:
c1:85:d6:6f:2f:9c:95:9f:7e:36:38:cc:b9:b8:94:ca:ba:97:
9b:81:0e:71:da:1c:98:6c:5e:eb:6a:b4:96:31:88:34:2c:3a:
e2:7f:5b:e4:dc:1f:fd:6c:8a:c1:87:d3:23:ea:e5:f6:6b:b5:
61:65:0e:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:52:40 2026 by rpki-client