Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.mft
File: CUJF7otbpMZv4s7KZL5Gb8lvce0.mft (raw, json)
Hash identifier: whDs5OpkaaHcH6n9/BCWwRH6ynYc9dpyTG5TbW8j3l0=
Subject key identifier: 86:A5:A2:BC:65:17:02:DD:E0:99:50:74:0F:D6:40:D0:6D:F6:83:A6
Authority key identifier: 09:42:45:EE:8B:5B:A4:C6:6F:E2:CE:CA:64:BE:46:6F:C9:6F:71:ED
Certificate issuer: /CN=094245ee8b5ba4c66fe2ceca64be466fc96f71ed
Certificate serial: 019CAA58E30E330A0D3534D8DA2E6C84F5F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CUJF7otbpMZv4s7KZL5Gb8lvce0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.mft
Manifest number: 1388
Signing time: Sun 01 Mar 2026 17:01:17 +0000
Manifest this update: Sun 01 Mar 2026 17:01:17 +0000
Manifest next update: Mon 02 Mar 2026 17:01:17 +0000
Files and hashes: 1: 14Ys9mltTrx3HTjwmBcjfuVTekY.roa (hash: iBB9lJSfcBZPQU6QwVO+HUBTusp2/eskLo+xXHX5mVY=)
2: CUJF7otbpMZv4s7KZL5Gb8lvce0.crl (hash: xvTMMobGCtrvr/27ecm4/AfuIE1VM4e/5FQdh/MPiTg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CUJF7otbpMZv4s7KZL5Gb8lvce0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:e3:0e:33:0a:0d:35:34:d8:da:2e:6c:84:f5:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=094245ee8b5ba4c66fe2ceca64be466fc96f71ed
Validity
Not Before: Mar 1 17:01:17 2026 GMT
Not After : Mar 2 17:01:17 2026 GMT
Subject: CN=86a5a2bc651702dde09950740fd640d06df683a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:fe:91:7e:a4:71:f6:1a:25:b7:df:fa:e6:52:
ff:3b:8a:f3:da:88:29:71:36:03:e3:df:bd:e7:e8:
7d:92:f2:3d:b8:4e:05:c5:91:29:68:3c:ff:86:4d:
da:c0:38:61:13:4c:9d:0b:f3:fd:39:9c:c9:85:cf:
6a:89:48:4b:4e:1a:a4:9c:fc:e6:51:f8:0f:27:eb:
42:3a:e5:92:87:38:5d:a1:a7:ae:53:8c:10:f8:22:
e3:e9:87:1a:e4:54:ed:9b:5d:c6:c6:37:2a:d6:9b:
70:7f:1d:15:85:bb:1b:b4:36:2b:88:45:93:49:8b:
c1:3c:9a:e9:ba:dd:da:f6:45:09:94:e5:39:70:7b:
93:15:c3:33:6a:51:c6:76:cd:d5:18:1b:2b:f8:06:
8f:8c:fd:90:e4:0a:f1:7b:2e:2d:37:a5:05:c3:0a:
4a:2c:67:1a:3a:12:a5:91:46:a7:42:4e:3e:22:df:
c3:04:1b:f2:bd:51:fe:ba:a4:1a:2b:aa:82:53:d3:
e1:90:bd:09:f3:87:94:31:15:fd:c1:03:7d:51:96:
d4:78:c4:dd:e9:2f:5e:8f:99:fa:3a:a3:e8:28:06:
75:44:6f:8a:6d:64:62:f2:b1:bf:2b:02:11:62:90:
b7:eb:ed:7d:4e:78:04:70:26:4d:f2:b1:5d:2f:29:
2d:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:A5:A2:BC:65:17:02:DD:E0:99:50:74:0F:D6:40:D0:6D:F6:83:A6
X509v3 Authority Key Identifier:
keyid:09:42:45:EE:8B:5B:A4:C6:6F:E2:CE:CA:64:BE:46:6F:C9:6F:71:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CUJF7otbpMZv4s7KZL5Gb8lvce0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:5d:3f:8c:98:3b:b5:20:39:d8:7a:52:2f:a6:b1:46:83:ec:
65:f3:23:21:3c:05:39:e0:f6:58:a3:75:8c:08:1e:72:6d:92:
94:e5:5f:39:c8:d8:75:68:e8:92:6e:a4:41:ae:df:6b:df:34:
cf:7e:8a:05:10:9c:aa:a7:34:40:7b:d2:e9:b8:d9:fc:95:69:
3e:04:85:1a:fd:5b:01:ab:3e:6b:2f:1e:3e:f2:e4:8c:26:0f:
8e:48:fd:84:24:35:ea:99:b7:c3:82:2d:77:f9:2a:f5:c8:c8:
90:fc:ce:b1:9a:66:4a:be:6d:10:04:75:60:27:a0:de:28:1f:
77:cb:13:cd:77:d4:67:d0:b7:92:01:5e:ec:65:19:66:6f:d7:
78:20:15:df:ca:25:7a:f1:58:dc:ca:3b:fc:2c:4a:cd:4a:68:
19:c6:c0:24:10:c7:12:48:b6:65:6d:19:d5:93:4e:f4:11:ed:
cc:d7:bc:b8:c4:19:a4:d2:eb:da:6b:6d:74:3c:e8:3f:90:f0:
56:b9:2e:48:dd:bf:90:88:b0:3b:d3:76:fe:81:27:6f:7b:ab:
a6:a5:57:cd:c2:6c:86:25:e7:d9:2b:ed:d3:35:c3:a0:00:a2:
3e:33:f0:a0:aa:f1:57:cd:9d:2d:f3:b1:a1:fd:4f:f0:a6:0e:
e1:a6:92:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqWOMOMwoNNTTY2i5shPXyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5NDI0NWVlOGI1YmE0YzY2ZmUyY2VjYTY0YmU0NjZmYzk2
ZjcxZWQwHhcNMjYwMzAxMTcwMTE3WhcNMjYwMzAyMTcwMTE3WjAzMTEwLwYDVQQD
Eyg4NmE1YTJiYzY1MTcwMmRkZTA5OTUwNzQwZmQ2NDBkMDZkZjY4M2E2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2v6RfqRx9holt9/65lL/O4rz2ogp
cTYD49+95+h9kvI9uE4FxZEpaDz/hk3awDhhE0ydC/P9OZzJhc9qiUhLThqknPzm
UfgPJ+tCOuWShzhdoaeuU4wQ+CLj6Yca5FTtm13Gxjcq1ptwfx0VhbsbtDYriEWT
SYvBPJrput3a9kUJlOU5cHuTFcMzalHGds3VGBsr+AaPjP2Q5Arxey4tN6UFwwpK
LGcaOhKlkUanQk4+It/DBBvyvVH+uqQaK6qCU9PhkL0J84eUMRX9wQN9UZbUeMTd
6S9ej5n6OqPoKAZ1RG+KbWRi8rG/KwIRYpC36+19TngEcCZN8rFdLyktfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIalorxlFwLd4JlQdA/WQNBt9oOmMB8GA1UdIwQY
MBaAFAlCRe6LW6TGb+LOymS+Rm/Jb3HtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1VKRjdvdGJwTVp2NHM3S1pMNUdiOGx2Y2UwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9iZGQ0M2YtNDUyOC00YzkyLTg4YmEt
NTZlN2Y5M2RjZGJmLzEvQ1VKRjdvdGJwTVp2NHM3S1pMNUdiOGx2Y2UwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9iZGQ0M2YtNDUyOC00YzkyLTg4YmEtNTZlN2Y5M2RjZGJm
LzEvQ1VKRjdvdGJwTVp2NHM3S1pMNUdiOGx2Y2UwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABl0/jJg7
tSA52HpSL6axRoPsZfMjITwFOeD2WKN1jAgecm2SlOVfOcjYdWjokm6kQa7fa980
z36KBRCcqqc0QHvS6bjZ/JVpPgSFGv1bAas+ay8ePvLkjCYPjkj9hCQ16pm3w4It
d/kq9cjIkPzOsZpmSr5tEAR1YCeg3igfd8sTzXfUZ9C3kgFe7GUZZm/XeCAV38ol
evFY3Mo7/CxKzUpoGcbAJBDHEki2ZW0Z1ZNO9BHtzNe8uMQZpNLr2mttdDzoP5Dw
VrkuSN2/kIiwO9N2/oEnb3urpqVXzcJshiXn2Svt0zXDoACiPjPwoKrxV82dLfOx
of1P8KYO4aaS1g==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:54:49 2026 by rpki-client