Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/cVOwKU08jbFTBqsQnVBtp0rnCXk.mft
File: cVOwKU08jbFTBqsQnVBtp0rnCXk.mft (raw, json)
Hash identifier: nQyBVi/WJH9dL20hG00lvKrX9WKYCvNJbqmMBQdzy+4=
Subject key identifier: 0D:21:8A:E5:11:38:FD:80:8E:D6:CA:9D:CD:6E:EB:69:88:E3:AD:47
Authority key identifier: 71:53:B0:29:4D:3C:8D:B1:53:06:AB:10:9D:50:6D:A7:4A:E7:09:79
Certificate issuer: /CN=7153b0294d3c8db15306ab109d506da74ae70979
Certificate serial: 01A00394F18F9EEBAB06D511470CC2BB4A13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cVOwKU08jbFTBqsQnVBtp0rnCXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/cVOwKU08jbFTBqsQnVBtp0rnCXk.mft
Manifest number: 1A02
Signing time: Sat 15 Aug 2026 04:01:27 +0000
Manifest this update: Sat 15 Aug 2026 04:01:27 +0000
Manifest next update: Sun 16 Aug 2026 04:01:27 +0000
Files and hashes: 1: cVOwKU08jbFTBqsQnVBtp0rnCXk.crl (hash: Ts4fAsFGJpwZOt+tjfw8jQLI20XQkLuoqAivAv6TSyA=)
2: uA7Vx2C904r9TfjpNMf_38HK6tA.roa (hash: mh6KzvsWQ7ay62shUSjJavZVXDITnNYoJN+fQex29Ro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/cVOwKU08jbFTBqsQnVBtp0rnCXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/cVOwKU08jbFTBqsQnVBtp0rnCXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/cVOwKU08jbFTBqsQnVBtp0rnCXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:03:94:f1:8f:9e:eb:ab:06:d5:11:47:0c:c2:bb:4a:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7153b0294d3c8db15306ab109d506da74ae70979
Validity
Not Before: Aug 15 04:01:27 2026 GMT
Not After : Aug 16 04:01:27 2026 GMT
Subject: CN=0d218ae51138fd808ed6ca9dcd6eeb6988e3ad47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d0:f8:50:6c:94:ba:96:ba:74:5a:bb:7c:b1:
1a:11:6f:2c:1b:9b:07:0c:cd:20:35:d5:1e:ef:f4:
f3:f1:83:98:64:70:69:d8:d8:5a:7a:33:46:99:13:
24:1e:60:9f:e0:d1:f9:5a:17:68:4b:bb:c0:aa:60:
80:7d:2b:b1:d7:0c:27:c5:df:a1:b1:11:00:9c:24:
c9:cd:f2:96:4e:13:6a:1f:33:ff:33:5d:7c:af:66:
4a:97:2d:3a:65:7d:46:04:3d:c8:37:53:53:70:7e:
6b:6b:d4:c8:5d:63:36:e0:05:b3:74:0e:fe:6f:9b:
20:70:96:79:61:43:c5:a1:04:e5:14:9a:c5:5f:53:
6b:ad:e9:b0:5f:7a:3a:e2:f1:1f:c1:60:0a:9f:1e:
32:02:e4:0a:d7:3b:e4:b1:5c:21:da:45:49:8f:3d:
ce:90:cb:19:f8:78:ae:1f:bc:18:7d:3c:a0:72:a0:
d6:ab:81:3d:d5:6a:1d:4f:7c:08:86:b4:91:c8:78:
b6:c4:75:65:66:ea:77:2f:ce:85:17:85:89:91:99:
de:b4:c0:a8:96:e8:e1:bd:07:da:0a:19:40:b7:42:
5c:51:23:93:0d:4b:73:6b:42:dc:79:32:33:17:e4:
76:ac:43:88:2c:6a:38:94:3d:f3:63:46:81:c3:06:
99:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:21:8A:E5:11:38:FD:80:8E:D6:CA:9D:CD:6E:EB:69:88:E3:AD:47
X509v3 Authority Key Identifier:
keyid:71:53:B0:29:4D:3C:8D:B1:53:06:AB:10:9D:50:6D:A7:4A:E7:09:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cVOwKU08jbFTBqsQnVBtp0rnCXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/cVOwKU08jbFTBqsQnVBtp0rnCXk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/cVOwKU08jbFTBqsQnVBtp0rnCXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:7c:4c:19:4e:54:0a:79:d0:5a:9b:6a:85:e1:16:70:1a:31:
38:90:23:54:98:12:1c:08:1e:63:3f:a8:04:2a:c8:38:0a:bb:
48:0c:c8:1e:9a:9d:43:85:c3:3e:ff:fa:1a:9c:35:b2:5a:ee:
03:8b:41:72:be:97:31:2c:f0:ce:64:06:46:2c:1a:5a:57:0c:
11:f0:32:6a:2f:c6:eb:14:54:9f:4f:53:a6:da:f6:4d:45:82:
bd:cd:21:7b:f6:22:5d:6e:78:68:40:18:dd:68:c7:f3:5a:db:
9a:7f:94:01:75:05:c2:3a:5b:95:89:bb:19:64:13:55:5f:07:
82:ce:50:57:82:99:52:b3:a8:78:9b:a8:cd:5e:8b:ce:dd:1d:
af:0a:20:48:57:9d:cb:93:26:ce:92:e9:96:da:bb:4b:10:03:
6c:5f:b2:1d:3f:56:c6:af:4d:77:e7:91:34:2b:ac:33:e3:4a:
ad:e8:02:9c:1f:58:6b:8e:ca:61:08:36:c2:61:b7:50:d6:66:
3d:78:ef:da:aa:62:79:b4:53:77:ef:b0:a8:87:f6:12:34:5d:
6c:d8:03:23:dd:5b:46:ad:d5:ff:8b:ad:ce:3c:33:35:3e:84:
5c:df:3b:bd:3e:31:fb:1f:67:28:38:ce:a4:8e:7f:33:e2:e2:
3f:fd:34:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 08:43:28 2026 by rpki-client