Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/4320e2-55cc-4e5d-98cb-0912d9a5d947/1/CUe_Bv_WqoNzcWZqxPtIXDMirzA.mft
File: CUe_Bv_WqoNzcWZqxPtIXDMirzA.mft (raw, json)
Hash identifier: UTr/ebRRRa4Z88xE7m61XBmDbZFqrhoCfsNHp5Chmys=
Subject key identifier: 74:D3:2B:13:E7:97:B8:8A:99:A5:93:6B:EE:DF:1E:88:7A:8D:3A:93
Authority key identifier: 09:47:BF:06:FF:D6:AA:83:73:71:66:6A:C4:FB:48:5C:33:22:AF:30
Certificate issuer: /CN=0947bf06ffd6aa837371666ac4fb485c3322af30
Certificate serial: 019FADBFF5EB89B55355B399081A5427C030
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CUe_Bv_WqoNzcWZqxPtIXDMirzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/4320e2-55cc-4e5d-98cb-0912d9a5d947/1/CUe_Bv_WqoNzcWZqxPtIXDMirzA.mft
Manifest number: D2
Signing time: Wed 29 Jul 2026 12:01:06 +0000
Manifest this update: Wed 29 Jul 2026 12:01:06 +0000
Manifest next update: Thu 30 Jul 2026 12:01:06 +0000
Files and hashes: 1: 1eP5CXO1PBIl9QsPThVXxpFKkiI.roa (hash: KZ7tVteP3lGVX8UW1l2BZ5G++9dxomswpEwb1weu7Qg=)
2: CUe_Bv_WqoNzcWZqxPtIXDMirzA.crl (hash: H9QFDjG3+Btag5V8xtYNJlQuTjibiN+bmz2ld6q9s5o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/4320e2-55cc-4e5d-98cb-0912d9a5d947/1/CUe_Bv_WqoNzcWZqxPtIXDMirzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/4320e2-55cc-4e5d-98cb-0912d9a5d947/1/CUe_Bv_WqoNzcWZqxPtIXDMirzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/CUe_Bv_WqoNzcWZqxPtIXDMirzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 12:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:bf:f5:eb:89:b5:53:55:b3:99:08:1a:54:27:c0:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0947bf06ffd6aa837371666ac4fb485c3322af30
Validity
Not Before: Jul 29 12:01:06 2026 GMT
Not After : Jul 30 12:01:06 2026 GMT
Subject: CN=74d32b13e797b88a99a5936beedf1e887a8d3a93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c7:b8:73:ab:6b:3b:5c:7c:5d:6b:92:e4:d5:
0c:db:55:5d:c1:15:b6:2b:34:07:f3:bf:18:dd:2d:
02:34:86:aa:77:78:a3:fe:d8:63:57:ae:68:c4:17:
c3:5a:38:bf:06:c0:23:de:ae:7a:75:3f:0f:a8:96:
3b:fb:93:b7:91:2b:fe:85:03:0d:57:2f:0b:84:fb:
e9:0b:b9:72:71:a7:3c:3f:81:19:92:58:58:7b:8b:
af:15:85:3a:81:98:af:89:a0:9c:2b:fe:64:c3:27:
b5:3c:e4:3a:9c:4e:28:2a:62:f2:23:53:fe:a0:e5:
cc:50:6e:55:f4:29:76:83:30:b2:3e:2a:4f:d6:1f:
dd:39:17:06:13:98:1f:3b:83:04:71:82:5c:36:16:
32:4d:48:91:b5:85:33:91:a8:8b:3d:73:f8:52:22:
6d:90:b0:1c:e0:c0:7b:2d:6d:1b:3d:cf:8b:54:54:
84:f2:c1:da:52:93:f6:3e:34:de:bd:f6:20:17:95:
15:71:52:fe:be:ed:e4:a6:a3:50:d9:51:76:50:e4:
36:d3:4f:5e:8c:fd:eb:61:9d:ee:2a:93:93:ca:6e:
06:5e:a1:37:33:57:d0:21:d6:88:49:71:d4:07:ef:
22:1a:63:53:ef:1e:80:6a:ef:f2:ce:4d:c2:0b:3e:
bd:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:D3:2B:13:E7:97:B8:8A:99:A5:93:6B:EE:DF:1E:88:7A:8D:3A:93
X509v3 Authority Key Identifier:
keyid:09:47:BF:06:FF:D6:AA:83:73:71:66:6A:C4:FB:48:5C:33:22:AF:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CUe_Bv_WqoNzcWZqxPtIXDMirzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/4320e2-55cc-4e5d-98cb-0912d9a5d947/1/CUe_Bv_WqoNzcWZqxPtIXDMirzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/4320e2-55cc-4e5d-98cb-0912d9a5d947/1/CUe_Bv_WqoNzcWZqxPtIXDMirzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:12:92:0f:07:46:7e:19:15:e1:44:5c:7e:f3:d2:44:19:dc:
af:73:b1:e2:93:e0:4c:9e:40:4d:59:2d:88:e3:a4:13:59:01:
e5:c6:57:9f:06:18:65:bd:1f:f8:d8:b8:da:ec:b2:0c:19:ea:
e4:12:dd:d7:35:9a:c4:d4:db:82:7b:94:06:a2:97:de:1a:8d:
e3:35:7b:6e:42:5f:96:f6:a1:58:36:b8:74:5d:ce:2a:5b:bc:
66:13:00:72:10:78:da:4a:31:6e:59:57:86:ec:39:38:3a:44:
8c:24:3b:bb:16:35:81:a3:00:cd:71:24:7e:25:90:2e:38:fa:
13:6c:60:f9:6b:4b:1b:17:47:2a:1d:bb:73:03:59:a7:dd:84:
05:97:6d:28:29:5f:73:33:bd:61:eb:49:03:c3:95:a3:75:ed:
2d:58:9b:58:a1:12:0a:bb:e8:f8:b7:7d:1c:59:3b:8b:5c:de:
33:2a:fe:3e:74:a1:30:53:57:84:9d:26:ab:d2:9b:ce:ff:28:
51:ab:3b:a0:44:e3:ec:d4:c9:bd:95:99:ed:5a:a5:29:ba:99:
ff:82:d4:49:d6:57:6f:f5:13:da:34:b9:b1:80:8f:85:d9:22:
8c:59:6a:10:2c:1c:4d:13:7a:df:f3:b4:6f:06:57:1b:1a:19:
c3:bb:c2:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 16:31:27 2026 by rpki-client