Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/1faa24-f086-4b48-b1bd-45527e8e44d2/1/cuEqOHb_e9ANnZ67lyqx5iHqHo0.mft
File: cuEqOHb_e9ANnZ67lyqx5iHqHo0.mft (raw, json)
Hash identifier: SdsgAGrqPaGBkNJ1i79QaX7Wzhis8dx6ohhZlA7fZxk=
Subject key identifier: 57:DA:FE:91:9A:43:A3:3E:AA:5B:3D:8D:D7:C1:97:6C:2F:87:BC:52
Authority key identifier: 72:E1:2A:38:76:FF:7B:D0:0D:9D:9E:BB:97:2A:B1:E6:21:EA:1E:8D
Certificate issuer: /CN=72e12a3876ff7bd00d9d9ebb972ab1e621ea1e8d
Certificate serial: 019CAC0FD20E4FB57D2E8ECA037452733FFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cuEqOHb_e9ANnZ67lyqx5iHqHo0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/1faa24-f086-4b48-b1bd-45527e8e44d2/1/cuEqOHb_e9ANnZ67lyqx5iHqHo0.mft
Manifest number: 17D9
Signing time: Mon 02 Mar 2026 01:00:43 +0000
Manifest this update: Mon 02 Mar 2026 01:00:43 +0000
Manifest next update: Tue 03 Mar 2026 01:00:43 +0000
Files and hashes: 1: VGyi3_XM7fe5glWnkMXs_96XfgY.roa (hash: 5b1Wuvrw9UByaw3AW1uJ5o3W+F06ZtJx4zNpuEiuZ3Q=)
2: cuEqOHb_e9ANnZ67lyqx5iHqHo0.crl (hash: eluN6kwzq5hBIyEGMkVKPH2ONKZTMZHsMpicw+qRZOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/1faa24-f086-4b48-b1bd-45527e8e44d2/1/cuEqOHb_e9ANnZ67lyqx5iHqHo0.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/1faa24-f086-4b48-b1bd-45527e8e44d2/1/cuEqOHb_e9ANnZ67lyqx5iHqHo0.mft
rsync://rpki.ripe.net/repository/DEFAULT/cuEqOHb_e9ANnZ67lyqx5iHqHo0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:d2:0e:4f:b5:7d:2e:8e:ca:03:74:52:73:3f:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72e12a3876ff7bd00d9d9ebb972ab1e621ea1e8d
Validity
Not Before: Mar 2 01:00:43 2026 GMT
Not After : Mar 3 01:00:43 2026 GMT
Subject: CN=57dafe919a43a33eaa5b3d8dd7c1976c2f87bc52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ab:87:21:d3:dc:75:b7:33:49:60:0d:e6:ea:
37:b6:e2:6b:75:3f:41:d5:c2:a7:7f:c8:3f:0b:da:
98:33:f9:bd:9c:9d:07:52:8f:60:92:0b:f8:1e:dc:
4c:e6:68:82:3c:f1:80:4a:2a:c3:65:7b:b0:0c:0d:
b6:8c:3e:31:bd:9b:a5:15:26:c2:c6:f6:ce:f2:90:
8c:1c:b9:b4:96:4f:2e:1d:67:1d:ce:68:58:42:c8:
83:09:ba:84:28:dd:0f:06:21:6f:9b:17:cf:39:de:
03:e2:44:45:f6:d8:8b:99:f4:89:73:ea:c1:b0:93:
1b:c6:00:f4:5f:50:14:4a:c0:2a:32:4c:d1:f8:4c:
e5:d9:13:59:e7:53:bf:b2:d2:44:0b:85:21:f0:88:
85:b9:eb:86:f0:ce:16:2c:6b:92:ff:6e:e5:80:6b:
71:e8:3d:56:fc:44:d8:18:fd:f3:df:04:af:24:a8:
98:2a:bc:4e:ea:26:9f:f1:f9:12:f3:c8:bf:2c:03:
69:30:0a:ba:bb:00:ba:99:b4:fb:e5:54:33:24:c3:
dd:e1:66:7f:5e:3e:c7:d5:94:ab:7f:a9:ce:58:f5:
e7:a6:0d:3d:53:48:66:c5:27:d7:a1:90:db:5e:72:
dd:41:3c:9a:5d:e1:6c:c5:a3:44:4a:91:91:09:b2:
ec:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:DA:FE:91:9A:43:A3:3E:AA:5B:3D:8D:D7:C1:97:6C:2F:87:BC:52
X509v3 Authority Key Identifier:
keyid:72:E1:2A:38:76:FF:7B:D0:0D:9D:9E:BB:97:2A:B1:E6:21:EA:1E:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cuEqOHb_e9ANnZ67lyqx5iHqHo0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1faa24-f086-4b48-b1bd-45527e8e44d2/1/cuEqOHb_e9ANnZ67lyqx5iHqHo0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1faa24-f086-4b48-b1bd-45527e8e44d2/1/cuEqOHb_e9ANnZ67lyqx5iHqHo0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:f3:e0:41:d5:b6:37:4c:9e:8b:78:2e:20:73:56:2e:ba:5f:
63:65:ab:50:77:06:16:78:06:4f:0d:d6:3c:f6:ab:7b:27:c4:
9e:17:ba:86:6b:d1:68:59:6e:41:fe:ce:33:ce:02:0e:ac:47:
8b:b7:ab:b1:10:a7:30:18:be:ec:ad:9a:10:df:a8:ee:cb:d3:
71:cc:70:a2:95:95:56:13:ae:dc:3a:cf:7b:c5:28:6d:bd:38:
b9:39:69:e4:ab:1d:cf:44:44:53:c3:b8:d9:83:b7:52:fc:96:
44:09:2d:ca:e5:78:86:c4:3d:5f:05:46:e1:a6:52:b9:c7:54:
a8:a5:d1:14:cd:65:11:38:10:45:5b:01:b8:d8:4e:26:f0:6c:
2a:cf:12:10:8c:6f:3b:dd:3e:81:25:0d:c6:67:f6:f6:45:61:
82:b3:73:4d:c0:ab:a6:d8:6a:24:1e:90:5e:b7:bf:cb:9e:a8:
09:ef:11:07:13:0f:06:df:71:5a:cd:d8:c0:d8:ba:e3:f2:bd:
d8:2f:5e:6e:84:0e:ac:53:c0:4d:c6:87:ba:a4:37:f2:9e:52:
47:e3:af:0c:22:fd:78:3d:80:53:f2:fd:fc:2e:27:43:24:77:
a4:82:7d:2c:a3:85:28:22:e2:ea:39:e3:65:53:c0:93:be:17:
70:70:79:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:14:14 2026 by rpki-client