Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.mft
File: CUJF7otbpMZv4s7KZL5Gb8lvce0.mft (raw, json)
Hash identifier: Eb6kVukXa43t8EqNKpxKiwuE4keNToArGZWkB8LJfUg=
Subject key identifier: 87:F9:38:B0:86:B5:0E:B1:22:95:56:C9:7E:27:5C:9D:7D:18:57:0D
Authority key identifier: 09:42:45:EE:8B:5B:A4:C6:6F:E2:CE:CA:64:BE:46:6F:C9:6F:71:ED
Certificate issuer: /CN=094245ee8b5ba4c66fe2ceca64be466fc96f71ed
Certificate serial: 019EBF5B290D8671280125F7289CF931C558
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CUJF7otbpMZv4s7KZL5Gb8lvce0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.mft
Manifest number: 149C
Signing time: Sat 13 Jun 2026 05:01:23 +0000
Manifest this update: Sat 13 Jun 2026 05:01:23 +0000
Manifest next update: Sun 14 Jun 2026 05:01:23 +0000
Files and hashes: 1: 14Ys9mltTrx3HTjwmBcjfuVTekY.roa (hash: iBB9lJSfcBZPQU6QwVO+HUBTusp2/eskLo+xXHX5mVY=)
2: CUJF7otbpMZv4s7KZL5Gb8lvce0.crl (hash: UYxSsymgTMsrIkjWuXqD6oG9iAEgKmxLHZHUQzyG5/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CUJF7otbpMZv4s7KZL5Gb8lvce0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:5b:29:0d:86:71:28:01:25:f7:28:9c:f9:31:c5:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=094245ee8b5ba4c66fe2ceca64be466fc96f71ed
Validity
Not Before: Jun 13 05:01:23 2026 GMT
Not After : Jun 14 05:01:23 2026 GMT
Subject: CN=87f938b086b50eb1229556c97e275c9d7d18570d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:5c:eb:1b:b4:e8:a4:47:bb:90:0e:0d:6e:3b:
bc:49:d4:db:55:0b:a5:ce:7c:b8:14:1d:06:bd:56:
4a:09:61:63:99:1f:30:69:33:8b:66:2a:0a:e1:39:
e0:33:42:a1:fb:3a:71:80:06:3e:c3:90:0d:90:91:
d9:9e:3b:2d:60:aa:e8:0d:6f:5d:d4:b8:60:40:af:
73:27:2e:2f:82:76:69:9c:24:bd:2c:ad:ed:ac:59:
be:3b:43:fa:b3:66:20:75:0f:c3:b9:67:47:f0:09:
27:46:48:dd:23:9b:39:28:53:c4:f6:96:68:68:09:
12:e6:44:cd:47:ed:7c:5d:6b:12:34:49:bf:98:e9:
b8:59:ea:df:bd:9b:e5:fc:30:a1:da:10:49:bb:4e:
77:74:05:4a:e7:2e:87:85:4d:83:c8:92:9a:8a:8b:
20:5a:fd:30:d3:75:20:95:fa:f5:e9:b9:9f:80:ac:
73:d8:4f:e0:e4:41:20:28:75:df:51:90:5a:be:ec:
2d:19:4d:4e:c1:cd:9a:fb:76:3c:74:ec:a2:84:29:
ca:d5:ee:75:0d:19:fd:3c:80:62:78:0f:21:11:c4:
a1:18:6d:41:06:70:51:02:6f:71:a6:f8:94:6f:00:
6d:a3:b4:ed:87:00:b2:83:42:ab:9c:49:b8:fc:ae:
7a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:F9:38:B0:86:B5:0E:B1:22:95:56:C9:7E:27:5C:9D:7D:18:57:0D
X509v3 Authority Key Identifier:
keyid:09:42:45:EE:8B:5B:A4:C6:6F:E2:CE:CA:64:BE:46:6F:C9:6F:71:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CUJF7otbpMZv4s7KZL5Gb8lvce0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:e7:5c:72:a3:fa:70:cc:e4:ce:7c:a5:80:a1:85:9e:8c:3f:
17:5b:09:bd:56:94:8b:49:8b:e7:a6:e4:fd:15:bf:06:fe:2c:
18:cf:97:e8:99:23:bd:4d:94:4c:a9:73:eb:58:4c:fa:13:4c:
16:fa:79:f2:df:d8:0f:2b:07:bc:e1:57:29:53:aa:5f:48:a5:
c1:8e:d8:03:a2:d4:22:90:83:22:79:af:08:e7:41:f3:f1:25:
87:f2:cf:fa:56:8b:f2:61:37:da:5e:1e:06:e5:8f:cd:12:23:
44:b2:3b:94:b1:e4:6d:62:e3:31:5b:33:2e:9b:02:f3:e7:a2:
f1:8f:a4:9c:61:b4:5c:e5:d4:64:78:fa:55:a5:5f:18:21:b6:
c6:de:03:da:74:a7:e5:50:aa:28:ab:9a:c7:f7:4f:a9:3e:fa:
43:3e:83:9f:68:d0:2d:03:76:b3:86:78:38:b0:a3:ea:12:40:
37:76:d9:25:55:30:0a:e4:69:c8:fa:04:29:45:c2:9e:19:bb:
cd:8e:8e:82:f6:58:30:2c:02:b1:3a:d5:c9:18:1a:a3:45:64:
4c:e4:8b:02:4a:cb:d1:77:2c:34:de:03:3a:5c:06:c4:d0:93:
64:bb:e0:01:d0:8e:6d:01:78:85:f4:a3:04:94:20:e5:84:5e:
9e:43:d0:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:29:56 2026 by rpki-client