Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/64d910-945c-42e8-bb44-62821c2c299f/1/CVAiiQS52-tHkqaXcn42qv2E0uk.mft
File: CVAiiQS52-tHkqaXcn42qv2E0uk.mft (raw, json)
Hash identifier: tk6tu/tj8Wj9xKeho0AMqb1ZV36gIDHmTMMkNs706JE=
Subject key identifier: 10:E1:3E:74:4E:5D:58:AD:97:9C:01:F5:FF:F7:E8:56:DC:F0:EC:FE
Authority key identifier: 09:50:22:89:04:B9:DB:EB:47:92:A6:97:72:7E:36:AA:FD:84:D2:E9
Certificate issuer: /CN=0950228904b9dbeb4792a697727e36aafd84d2e9
Certificate serial: 019FF7C7E49A9754164EFE288A1576DE71C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CVAiiQS52-tHkqaXcn42qv2E0uk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/64d910-945c-42e8-bb44-62821c2c299f/1/CVAiiQS52-tHkqaXcn42qv2E0uk.mft
Manifest number: 110F
Signing time: Wed 12 Aug 2026 21:01:40 +0000
Manifest this update: Wed 12 Aug 2026 21:01:40 +0000
Manifest next update: Thu 13 Aug 2026 21:01:40 +0000
Files and hashes: 1: 0bE4aaGgdiJFJ50d4SWw_RJ5yog.roa (hash: pfh5kzcii4MpQVjtzuuE7xEsH7nvPkPrk2Vo7JxfSO8=)
2: CVAiiQS52-tHkqaXcn42qv2E0uk.crl (hash: ZC0yExIav22ObvsOG7pXbiI2B+Zy9wL/LJROr0tuMi0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/64d910-945c-42e8-bb44-62821c2c299f/1/CVAiiQS52-tHkqaXcn42qv2E0uk.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/64d910-945c-42e8-bb44-62821c2c299f/1/CVAiiQS52-tHkqaXcn42qv2E0uk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CVAiiQS52-tHkqaXcn42qv2E0uk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 16:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f7:c7:e4:9a:97:54:16:4e:fe:28:8a:15:76:de:71:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0950228904b9dbeb4792a697727e36aafd84d2e9
Validity
Not Before: Aug 12 21:01:40 2026 GMT
Not After : Aug 13 21:01:40 2026 GMT
Subject: CN=10e13e744e5d58ad979c01f5fff7e856dcf0ecfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:4e:2c:24:6b:37:e3:15:d0:7e:4e:37:7c:d4:
c4:a8:9a:99:5f:54:2d:e8:7d:50:b5:57:96:75:be:
c7:f9:76:7d:a1:b3:09:17:1e:3b:22:19:89:9a:96:
fa:bc:8c:41:f7:9b:f1:20:76:fd:8a:96:01:68:bd:
80:3e:91:dd:ed:91:37:e8:10:6e:fd:7f:0b:49:70:
d4:1d:30:e6:bc:ce:a6:30:cd:62:bd:97:cb:dc:9b:
b2:07:5a:65:29:3b:aa:08:c3:d6:2b:a4:79:8b:79:
9a:9e:24:ff:1d:b2:d0:89:63:7a:79:11:60:c5:cf:
aa:18:f3:d8:91:06:8f:ec:89:dc:80:cf:87:90:86:
50:12:3e:ea:e7:9a:68:0c:5e:a6:8a:b5:01:71:98:
22:11:97:7c:a5:14:d3:ef:4d:8e:10:4a:88:ad:2f:
0e:22:5d:af:80:76:35:0f:82:09:9d:b1:43:94:e4:
17:91:3d:9c:ce:1f:d4:33:b7:7f:99:64:db:09:4d:
81:f3:57:7e:5c:92:f9:5f:53:9a:c6:11:68:28:74:
e4:85:9a:0f:5b:89:50:d8:5b:06:cf:d2:28:10:71:
6d:cc:0d:2c:4d:1d:61:e7:f4:cb:a0:f2:3d:04:2c:
0a:2e:7b:b1:11:83:3a:e8:bb:a2:1f:89:bc:71:d9:
7b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:E1:3E:74:4E:5D:58:AD:97:9C:01:F5:FF:F7:E8:56:DC:F0:EC:FE
X509v3 Authority Key Identifier:
keyid:09:50:22:89:04:B9:DB:EB:47:92:A6:97:72:7E:36:AA:FD:84:D2:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CVAiiQS52-tHkqaXcn42qv2E0uk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/64d910-945c-42e8-bb44-62821c2c299f/1/CVAiiQS52-tHkqaXcn42qv2E0uk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/64d910-945c-42e8-bb44-62821c2c299f/1/CVAiiQS52-tHkqaXcn42qv2E0uk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:64:06:b6:c5:bd:c4:24:fa:d3:7a:2f:4a:7e:8d:90:f8:0e:
67:87:0e:7c:04:ec:eb:35:39:88:da:13:de:1d:9f:d1:32:99:
7c:ba:12:9f:b9:78:df:0e:db:26:03:a5:7c:d1:21:4b:ec:da:
a9:4c:9c:89:66:1a:47:c4:6f:a0:49:b4:e6:a4:cb:40:1a:9c:
ca:e5:bb:f7:45:7c:7f:02:09:a3:52:8c:ba:aa:7e:6d:aa:39:
64:26:69:5c:c4:29:91:b6:68:9f:99:78:a4:63:25:29:b5:5e:
a1:b1:9f:4f:5c:89:ed:38:c4:df:06:6c:b8:67:4b:43:33:2b:
2f:f1:5c:a2:ed:41:61:27:08:9e:8b:89:5d:58:76:0b:ff:ec:
50:10:80:0f:55:f3:6b:4b:b3:c4:2f:35:9f:61:52:60:04:58:
2e:cd:7a:d2:78:42:6b:fa:4e:35:9f:14:fa:98:ec:cd:73:6c:
f1:c1:77:12:06:83:a0:40:a5:60:51:98:b3:bd:3f:ba:e4:3d:
28:fa:2c:3a:66:af:27:3c:95:28:5b:39:78:cd:8a:d0:5d:9c:
dd:39:90:3f:63:96:28:8a:5e:84:85:03:c6:08:8a:2b:d2:ff:
c0:15:63:40:ea:70:96:51:dd:8d:49:88:37:ec:e7:5b:9c:52:
16:5b:2a:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 00:14:49 2026 by rpki-client