Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.mft
File: CUJF7otbpMZv4s7KZL5Gb8lvce0.mft (raw, json)
Hash identifier: SnNfwtGiNurKuShJIfBdRG+IWZfEuLO/2bor8HomPak=
Subject key identifier: D3:B4:DA:0A:90:0E:7D:78:CD:91:64:07:11:13:AC:E4:31:4E:8B:FB
Authority key identifier: 09:42:45:EE:8B:5B:A4:C6:6F:E2:CE:CA:64:BE:46:6F:C9:6F:71:ED
Certificate issuer: /CN=094245ee8b5ba4c66fe2ceca64be466fc96f71ed
Certificate serial: 019FA90784A09E12AD80ECE7C21E31E39583
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CUJF7otbpMZv4s7KZL5Gb8lvce0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.mft
Manifest number: 1515
Signing time: Tue 28 Jul 2026 14:01:09 +0000
Manifest this update: Tue 28 Jul 2026 14:01:09 +0000
Manifest next update: Wed 29 Jul 2026 14:01:09 +0000
Files and hashes: 1: 14Ys9mltTrx3HTjwmBcjfuVTekY.roa (hash: iBB9lJSfcBZPQU6QwVO+HUBTusp2/eskLo+xXHX5mVY=)
2: CUJF7otbpMZv4s7KZL5Gb8lvce0.crl (hash: D+dXfTZJUSzJlPbvJzVDpSrhJfIS02XE70P7EVz/1HI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CUJF7otbpMZv4s7KZL5Gb8lvce0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:07:84:a0:9e:12:ad:80:ec:e7:c2:1e:31:e3:95:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=094245ee8b5ba4c66fe2ceca64be466fc96f71ed
Validity
Not Before: Jul 28 14:01:09 2026 GMT
Not After : Jul 29 14:01:09 2026 GMT
Subject: CN=d3b4da0a900e7d78cd9164071113ace4314e8bfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:59:dc:24:24:dd:ec:38:f8:42:fe:d3:d1:40:
0a:e9:b5:da:99:4a:46:ee:eb:6c:3d:cc:a6:e9:44:
03:0c:69:2c:06:bc:18:ad:9d:c7:63:16:a6:6a:a4:
14:8a:db:be:03:22:c9:4d:cf:eb:7d:9a:18:11:d6:
73:1b:be:87:7a:13:43:87:28:71:33:83:59:59:ce:
92:de:65:e2:db:a3:27:ab:e4:16:a8:77:0d:fc:3a:
a3:10:77:4f:13:b1:10:52:07:aa:c9:19:2f:07:ff:
be:3a:65:f9:51:60:2c:30:5a:30:b9:72:d0:1b:40:
75:40:6b:93:76:50:01:b2:69:d7:dd:96:bd:2f:0d:
d5:69:26:b9:9c:39:99:2e:9b:cb:a0:0b:72:0b:5f:
dd:18:51:54:cf:5a:14:a9:cb:a1:35:5c:d3:9d:38:
f5:43:c9:a6:4f:a6:bc:41:8a:96:9a:9c:e5:40:b2:
24:6f:9c:85:a6:a7:81:52:99:ad:3a:0a:dc:88:98:
63:6a:d8:b6:16:6b:6f:f0:7c:02:8d:a3:ef:02:70:
38:5e:e4:73:a1:73:a1:11:c0:12:be:8f:ee:cb:16:
48:37:00:57:2d:6c:94:4a:69:ed:30:cd:bf:20:68:
75:8b:14:22:21:43:1f:1c:16:73:f3:54:95:87:ac:
f8:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:B4:DA:0A:90:0E:7D:78:CD:91:64:07:11:13:AC:E4:31:4E:8B:FB
X509v3 Authority Key Identifier:
keyid:09:42:45:EE:8B:5B:A4:C6:6F:E2:CE:CA:64:BE:46:6F:C9:6F:71:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CUJF7otbpMZv4s7KZL5Gb8lvce0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:07:d7:b9:84:62:dc:67:92:2f:2b:d1:1f:d2:71:77:b9:04:
3f:11:f7:d8:6c:95:6f:a5:3f:55:f0:cd:80:2e:23:8b:e6:34:
d3:ed:fc:cf:a9:b0:46:b2:93:20:ca:67:d6:8d:b7:6e:b7:83:
6f:b7:43:03:2b:11:55:de:0a:63:1b:db:a1:31:45:89:2d:38:
e8:7b:4c:a6:de:a3:81:86:d2:a2:eb:d6:15:66:2d:4f:ed:cb:
7e:42:d3:70:bc:c3:02:35:45:77:8d:6a:a0:f0:98:39:07:53:
5e:55:64:42:c5:e7:98:85:ee:00:2d:fb:18:72:7a:07:be:c9:
34:b9:20:2a:41:a4:59:e0:d7:f7:db:43:ba:2c:a3:21:fa:51:
2e:97:95:f0:29:be:b8:a8:38:4d:d0:07:38:c9:e4:15:a1:ad:
9d:f3:f0:4d:83:f0:b7:61:e7:d0:bd:08:bf:cc:48:36:5e:0e:
cb:1f:96:76:94:e6:25:d2:ff:f6:4b:3f:33:3f:02:2b:cf:0f:
de:68:8c:8a:37:c0:a1:78:fe:3d:1f:4e:ad:e9:74:e7:39:fe:
e4:0e:e9:c0:18:7b:02:70:4c:75:c9:a8:bf:70:e9:2a:c4:0e:
f2:71:5f:76:14:af:85:0b:91:79:bb:20:5d:35:f9:9d:85:f6:
9c:6e:28:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+pB4SgnhKtgOznwh4x45WDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5NDI0NWVlOGI1YmE0YzY2ZmUyY2VjYTY0YmU0NjZmYzk2
ZjcxZWQwHhcNMjYwNzI4MTQwMTA5WhcNMjYwNzI5MTQwMTA5WjAzMTEwLwYDVQQD
EyhkM2I0ZGEwYTkwMGU3ZDc4Y2Q5MTY0MDcxMTEzYWNlNDMxNGU4YmZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlncJCTd7Dj4Qv7T0UAK6bXamUpG
7utsPcym6UQDDGksBrwYrZ3HYxamaqQUitu+AyLJTc/rfZoYEdZzG76HehNDhyhx
M4NZWc6S3mXi26Mnq+QWqHcN/DqjEHdPE7EQUgeqyRkvB/++OmX5UWAsMFowuXLQ
G0B1QGuTdlABsmnX3Za9Lw3VaSa5nDmZLpvLoAtyC1/dGFFUz1oUqcuhNVzTnTj1
Q8mmT6a8QYqWmpzlQLIkb5yFpqeBUpmtOgrciJhjati2Fmtv8HwCjaPvAnA4XuRz
oXOhEcASvo/uyxZINwBXLWyUSmntMM2/IGh1ixQiIUMfHBZz81SVh6z4zwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNO02gqQDn14zZFkBxETrOQxTov7MB8GA1UdIwQY
MBaAFAlCRe6LW6TGb+LOymS+Rm/Jb3HtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1VKRjdvdGJwTVp2NHM3S1pMNUdiOGx2Y2UwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9iZGQ0M2YtNDUyOC00YzkyLTg4YmEt
NTZlN2Y5M2RjZGJmLzEvQ1VKRjdvdGJwTVp2NHM3S1pMNUdiOGx2Y2UwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9iZGQ0M2YtNDUyOC00YzkyLTg4YmEtNTZlN2Y5M2RjZGJm
LzEvQ1VKRjdvdGJwTVp2NHM3S1pMNUdiOGx2Y2UwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmAfXuYRi
3GeSLyvRH9Jxd7kEPxH32GyVb6U/VfDNgC4ji+Y00+38z6mwRrKTIMpn1o23breD
b7dDAysRVd4KYxvboTFFiS046HtMpt6jgYbSouvWFWYtT+3LfkLTcLzDAjVFd41q
oPCYOQdTXlVkQsXnmIXuAC37GHJ6B77JNLkgKkGkWeDX99tDuiyjIfpRLpeV8Cm+
uKg4TdAHOMnkFaGtnfPwTYPwt2Hn0L0Iv8xINl4Oyx+WdpTmJdL/9ks/Mz8CK88P
3miMijfAoXj+PR9Orel05zn+5A7pwBh7AnBMdcmov3DpKsQO8nFfdhSvhQuRebsg
XTX5nYX2nG4o7w==
-----END CERTIFICATE-----
Generated at Tue Jul 28 18:10:52 2026 by rpki-client