Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/92bbbf-9f93-4741-8682-f1e8bd74180c/1/cuE5FfobxXn1hW9Y7LJHhjeaXUg.mft
File: cuE5FfobxXn1hW9Y7LJHhjeaXUg.mft (raw, json)
Hash identifier: BVV10DCg9j8+3G42SfqwNAZWY5Xxh+Kk0uMWpAVLI5w=
Subject key identifier: 2C:70:A5:D2:8F:99:13:87:F6:DC:D5:29:BE:B7:46:04:9E:4E:5C:8B
Authority key identifier: 72:E1:39:15:FA:1B:C5:79:F5:85:6F:58:EC:B2:47:86:37:9A:5D:48
Certificate issuer: /CN=72e13915fa1bc579f5856f58ecb24786379a5d48
Certificate serial: 019CAF115071BB75429572A46A2A6FDAA579
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cuE5FfobxXn1hW9Y7LJHhjeaXUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/92bbbf-9f93-4741-8682-f1e8bd74180c/1/cuE5FfobxXn1hW9Y7LJHhjeaXUg.mft
Manifest number: 0301
Signing time: Mon 02 Mar 2026 15:01:13 +0000
Manifest this update: Mon 02 Mar 2026 15:01:13 +0000
Manifest next update: Tue 03 Mar 2026 15:01:13 +0000
Files and hashes: 1: 1tgtjL3B3YdYAU03MUR31VYv6CI.roa (hash: 16zjErqZd+Fe3OsAh8pnaOrjHjMKr/IPGlIT7NNIBL0=)
2: cuE5FfobxXn1hW9Y7LJHhjeaXUg.crl (hash: X/NegqfskXdSQW40o/ewbenoFmfSS8D/WVGFLwaca30=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/92bbbf-9f93-4741-8682-f1e8bd74180c/1/cuE5FfobxXn1hW9Y7LJHhjeaXUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/92bbbf-9f93-4741-8682-f1e8bd74180c/1/cuE5FfobxXn1hW9Y7LJHhjeaXUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/cuE5FfobxXn1hW9Y7LJHhjeaXUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:11:50:71:bb:75:42:95:72:a4:6a:2a:6f:da:a5:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72e13915fa1bc579f5856f58ecb24786379a5d48
Validity
Not Before: Mar 2 15:01:13 2026 GMT
Not After : Mar 3 15:01:13 2026 GMT
Subject: CN=2c70a5d28f991387f6dcd529beb746049e4e5c8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ac:9d:0c:42:7b:8e:f6:31:52:1d:42:08:c3:
2c:e8:7e:aa:69:93:a7:fd:1f:84:9f:12:2b:fd:8b:
2a:f2:05:02:13:8a:c0:a6:a4:ec:00:18:42:0c:58:
6e:57:e3:4d:6b:c5:7b:6d:38:7a:89:9f:c8:a8:e0:
bf:c7:a8:5b:d0:d1:45:79:0f:62:84:bf:48:c4:5d:
c8:4f:8d:58:a2:e9:93:98:ec:92:1d:2f:85:94:b6:
1f:82:d0:76:55:a7:29:c0:39:0f:52:7b:b2:7c:8c:
92:8c:df:36:07:b4:be:e5:84:f1:19:fb:45:ee:cc:
3b:7d:d5:81:37:f1:de:68:40:ac:63:63:60:ae:fd:
97:9d:eb:15:22:ae:87:6f:3a:bf:99:c4:eb:b4:96:
7f:cf:75:d6:0c:15:8a:97:23:b2:be:c2:d6:e0:08:
1b:b7:e1:46:16:68:34:cd:6e:b7:17:5d:f6:b2:f4:
78:5f:57:fe:d5:9b:12:b1:67:64:9a:04:cf:ee:78:
7e:81:da:cd:43:12:8a:de:56:38:e6:65:b0:9e:43:
7f:fc:d1:51:aa:80:b5:60:24:71:d7:0e:3f:a4:50:
ea:a2:d3:31:60:31:db:84:2c:83:4a:a8:b8:f7:74:
ba:b5:be:97:6d:f2:be:e9:73:16:a5:42:e8:a7:59:
6e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:70:A5:D2:8F:99:13:87:F6:DC:D5:29:BE:B7:46:04:9E:4E:5C:8B
X509v3 Authority Key Identifier:
keyid:72:E1:39:15:FA:1B:C5:79:F5:85:6F:58:EC:B2:47:86:37:9A:5D:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cuE5FfobxXn1hW9Y7LJHhjeaXUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/92bbbf-9f93-4741-8682-f1e8bd74180c/1/cuE5FfobxXn1hW9Y7LJHhjeaXUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/92bbbf-9f93-4741-8682-f1e8bd74180c/1/cuE5FfobxXn1hW9Y7LJHhjeaXUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:d2:79:96:5c:10:9a:81:1d:df:14:7b:0c:10:61:cb:6a:27:
6f:1b:b1:2c:29:26:48:67:42:08:f1:41:85:5d:dc:a4:74:c4:
71:52:1d:94:8a:98:9b:25:c9:0f:c8:1c:42:70:2e:44:08:d7:
a4:45:42:21:15:36:05:42:79:cc:be:da:58:0a:73:57:34:89:
26:4a:96:50:90:6b:9b:48:1d:d9:c8:2c:62:e6:7e:03:7c:da:
d6:d4:54:b1:2f:92:9e:71:0c:50:62:90:13:ad:8d:78:71:75:
2d:ca:e8:52:1e:7b:f5:3a:86:01:8a:7a:02:57:34:72:b5:18:
64:e9:92:e1:6f:3c:fc:8b:51:5d:c8:78:00:8c:94:c1:10:9e:
57:8b:55:f5:8e:74:0d:47:6c:cd:b4:37:cb:75:46:60:f6:06:
27:80:77:e1:c7:b9:2a:ef:d5:53:4e:e9:15:69:91:f0:6a:d0:
a7:eb:00:bd:c3:25:45:52:09:7c:9b:fc:67:13:60:b5:92:87:
d4:68:28:df:1c:00:76:29:bd:64:9e:a3:d9:f1:65:12:03:7a:
fd:53:21:51:5c:97:43:3b:7c:67:61:81:78:ba:55:75:07:ab:
36:4b:da:e4:76:21:77:82:53:02:7e:86:26:7e:40:b0:f2:2d:
cc:15:c7:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyvEVBxu3VClXKkaipv2qV5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyZTEzOTE1ZmExYmM1NzlmNTg1NmY1OGVjYjI0Nzg2Mzc5
YTVkNDgwHhcNMjYwMzAyMTUwMTEzWhcNMjYwMzAzMTUwMTEzWjAzMTEwLwYDVQQD
EygyYzcwYTVkMjhmOTkxMzg3ZjZkY2Q1MjliZWI3NDYwNDllNGU1YzhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6ydDEJ7jvYxUh1CCMMs6H6qaZOn
/R+EnxIr/Ysq8gUCE4rApqTsABhCDFhuV+NNa8V7bTh6iZ/IqOC/x6hb0NFFeQ9i
hL9IxF3IT41YoumTmOySHS+FlLYfgtB2VacpwDkPUnuyfIySjN82B7S+5YTxGftF
7sw7fdWBN/HeaECsY2Ngrv2XnesVIq6Hbzq/mcTrtJZ/z3XWDBWKlyOyvsLW4Agb
t+FGFmg0zW63F132svR4X1f+1ZsSsWdkmgTP7nh+gdrNQxKK3lY45mWwnkN//NFR
qoC1YCRx1w4/pFDqotMxYDHbhCyDSqi493S6tb6XbfK+6XMWpULop1luxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCxwpdKPmROH9tzVKb63RgSeTlyLMB8GA1UdIwQY
MBaAFHLhORX6G8V59YVvWOyyR4Y3ml1IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3VFNUZmb2J4WG4xaFc5WTdMSkhoamVhWFVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi85MmJiYmYtOWY5My00NzQxLTg2ODIt
ZjFlOGJkNzQxODBjLzEvY3VFNUZmb2J4WG4xaFc5WTdMSkhoamVhWFVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi85MmJiYmYtOWY5My00NzQxLTg2ODItZjFlOGJkNzQxODBj
LzEvY3VFNUZmb2J4WG4xaFc5WTdMSkhoamVhWFVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAw9J5llwQ
moEd3xR7DBBhy2onbxuxLCkmSGdCCPFBhV3cpHTEcVIdlIqYmyXJD8gcQnAuRAjX
pEVCIRU2BUJ5zL7aWApzVzSJJkqWUJBrm0gd2cgsYuZ+A3za1tRUsS+SnnEMUGKQ
E62NeHF1LcroUh579TqGAYp6Alc0crUYZOmS4W88/ItRXch4AIyUwRCeV4tV9Y50
DUdszbQ3y3VGYPYGJ4B34ce5Ku/VU07pFWmR8GrQp+sAvcMlRVIJfJv8ZxNgtZKH
1Ggo3xwAdim9ZJ6j2fFlEgN6/VMhUVyXQzt8Z2GBeLpVdQerNkva5HYhd4JTAn6G
Jn5AsPItzBXHrA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 20:06:12 2026 by rpki-client