Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/66b74c-81c1-410e-957d-a8d65dccb96b/1/cuS6-Zq4QBKRMyhf6a17g_0TDDk.mft
File: cuS6-Zq4QBKRMyhf6a17g_0TDDk.mft (raw, json)
Hash identifier: SqaGO5luJChjzi/UoHKAYMC+q5DW3NckaGZc8P2iF1M=
Subject key identifier: DA:F6:EC:F5:E2:98:B1:5F:75:B4:81:73:F4:0E:38:6B:C2:7D:4C:72
Authority key identifier: 72:E4:BA:F9:9A:B8:40:12:91:33:28:5F:E9:AD:7B:83:FD:13:0C:39
Certificate issuer: /CN=72e4baf99ab840129133285fe9ad7b83fd130c39
Certificate serial: 019D9AAC11E213BFB31AAB8065A32A4D6478
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cuS6-Zq4QBKRMyhf6a17g_0TDDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/66b74c-81c1-410e-957d-a8d65dccb96b/1/cuS6-Zq4QBKRMyhf6a17g_0TDDk.mft
Manifest number: 18D0
Signing time: Fri 17 Apr 2026 09:01:01 +0000
Manifest this update: Fri 17 Apr 2026 09:01:01 +0000
Manifest next update: Sat 18 Apr 2026 09:01:01 +0000
Files and hashes: 1: 1E2GfXyPoyKCnvX8Op-67NNeeII.roa (hash: N8Q/qvAY27SFiMXr6tcvfagA2n7ieRadFl4CNkx0CiQ=)
2: cuS6-Zq4QBKRMyhf6a17g_0TDDk.crl (hash: Bt/cNB1kS45Xvb86Dhq/TieI4Sh3KfoZW7HtacZqDec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/66b74c-81c1-410e-957d-a8d65dccb96b/1/cuS6-Zq4QBKRMyhf6a17g_0TDDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/66b74c-81c1-410e-957d-a8d65dccb96b/1/cuS6-Zq4QBKRMyhf6a17g_0TDDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/cuS6-Zq4QBKRMyhf6a17g_0TDDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ac:11:e2:13:bf:b3:1a:ab:80:65:a3:2a:4d:64:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72e4baf99ab840129133285fe9ad7b83fd130c39
Validity
Not Before: Apr 17 09:01:01 2026 GMT
Not After : Apr 18 09:01:01 2026 GMT
Subject: CN=daf6ecf5e298b15f75b48173f40e386bc27d4c72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c6:b8:a1:b5:e4:97:13:61:5a:2d:11:61:d3:
b0:ff:59:84:61:42:8c:9d:8a:db:5d:83:62:66:d4:
d2:03:31:cf:8d:da:a6:24:b0:00:c9:7c:01:97:35:
13:d0:0b:03:d2:b5:87:3e:cc:00:fd:57:ab:3a:4d:
a6:41:a4:c3:b3:ff:08:80:d0:76:ff:5d:83:85:9c:
ca:85:98:cd:35:e9:38:ca:87:93:2d:5e:d0:e9:10:
29:f8:59:73:f2:0f:8c:06:e3:e1:15:79:6a:e6:2f:
6e:bd:05:54:50:25:5c:0b:1f:af:3b:6b:75:01:2e:
9c:ea:95:d2:fa:55:75:54:6e:86:12:ac:48:bc:89:
f1:3a:ec:ba:e3:02:c8:17:32:38:88:b6:7f:3f:cc:
8d:c1:36:be:e3:ee:a3:44:ec:21:32:b2:90:91:d4:
c3:a4:95:8f:26:c5:8e:de:10:de:5d:c6:85:82:82:
09:81:cb:db:fb:f1:8e:2a:c0:a0:fb:71:89:1a:e4:
0e:ad:9d:48:61:2f:25:09:1f:c7:08:d3:fc:16:88:
eb:dd:63:eb:58:e8:f9:d3:6b:32:bf:ae:08:39:22:
ea:a4:dd:52:b7:45:09:a2:f9:cc:b2:56:e0:b7:11:
ad:45:f1:d4:26:3d:76:14:d1:c9:85:40:50:54:9f:
fb:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:F6:EC:F5:E2:98:B1:5F:75:B4:81:73:F4:0E:38:6B:C2:7D:4C:72
X509v3 Authority Key Identifier:
keyid:72:E4:BA:F9:9A:B8:40:12:91:33:28:5F:E9:AD:7B:83:FD:13:0C:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cuS6-Zq4QBKRMyhf6a17g_0TDDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/66b74c-81c1-410e-957d-a8d65dccb96b/1/cuS6-Zq4QBKRMyhf6a17g_0TDDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/66b74c-81c1-410e-957d-a8d65dccb96b/1/cuS6-Zq4QBKRMyhf6a17g_0TDDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:61:34:98:a4:f3:71:64:9a:e4:71:bd:44:7a:ec:8d:32:58:
35:7f:7d:fb:f2:71:0f:59:66:1f:8d:dc:1b:c0:4c:b4:e8:70:
3a:7d:b5:e5:ae:f4:91:ba:a8:d5:7a:10:dd:cc:f4:24:3f:62:
37:2f:1b:41:24:2c:7b:8a:53:6f:27:78:67:12:ca:09:12:73:
28:b4:8f:1b:57:66:2c:18:55:1c:ad:48:12:b6:94:d7:fc:03:
7c:b1:cf:63:2e:30:c8:43:49:f2:25:16:51:c2:aa:d7:71:ed:
55:3d:39:5e:ca:59:0f:93:ce:f7:29:aa:3b:a9:81:d2:28:3d:
8f:18:06:fc:77:ae:06:40:44:40:15:b1:2d:f7:a2:46:5c:5d:
be:3d:2c:19:69:f5:78:8c:e6:60:42:5e:aa:a1:90:f5:c6:8e:
41:05:3b:b8:d4:10:75:ec:77:b5:72:36:aa:64:7d:ed:23:fe:
98:e8:90:11:2f:83:ab:e8:65:97:91:07:81:6d:b8:ec:23:56:
b2:97:82:83:16:b9:42:54:5b:b0:ce:b1:99:d7:a3:8c:4c:ec:
3d:3c:79:03:15:c5:d1:98:c0:eb:c2:14:0d:bd:1f:63:4b:0f:
56:e4:40:75:5d:df:bb:58:c5:56:ce:74:84:87:95:72:b6:ab:
f1:3d:fc:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2arBHiE7+zGquAZaMqTWR4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyZTRiYWY5OWFiODQwMTI5MTMzMjg1ZmU5YWQ3YjgzZmQx
MzBjMzkwHhcNMjYwNDE3MDkwMTAxWhcNMjYwNDE4MDkwMTAxWjAzMTEwLwYDVQQD
EyhkYWY2ZWNmNWUyOThiMTVmNzViNDgxNzNmNDBlMzg2YmMyN2Q0YzcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8a4obXklxNhWi0RYdOw/1mEYUKM
nYrbXYNiZtTSAzHPjdqmJLAAyXwBlzUT0AsD0rWHPswA/VerOk2mQaTDs/8IgNB2
/12DhZzKhZjNNek4yoeTLV7Q6RAp+Flz8g+MBuPhFXlq5i9uvQVUUCVcCx+vO2t1
AS6c6pXS+lV1VG6GEqxIvInxOuy64wLIFzI4iLZ/P8yNwTa+4+6jROwhMrKQkdTD
pJWPJsWO3hDeXcaFgoIJgcvb+/GOKsCg+3GJGuQOrZ1IYS8lCR/HCNP8Fojr3WPr
WOj502syv64IOSLqpN1St0UJovnMslbgtxGtRfHUJj12FNHJhUBQVJ/7AQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNr27PXimLFfdbSBc/QOOGvCfUxyMB8GA1UdIwQY
MBaAFHLkuvmauEASkTMoX+mte4P9Eww5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3VTNi1acTRRQktSTXloZjZhMTdnXzBURERrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi82NmI3NGMtODFjMS00MTBlLTk1N2Qt
YThkNjVkY2NiOTZiLzEvY3VTNi1acTRRQktSTXloZjZhMTdnXzBURERrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi82NmI3NGMtODFjMS00MTBlLTk1N2QtYThkNjVkY2NiOTZi
LzEvY3VTNi1acTRRQktSTXloZjZhMTdnXzBURERrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASGE0mKTz
cWSa5HG9RHrsjTJYNX99+/JxD1lmH43cG8BMtOhwOn215a70kbqo1XoQ3cz0JD9i
Ny8bQSQse4pTbyd4ZxLKCRJzKLSPG1dmLBhVHK1IEraU1/wDfLHPYy4wyENJ8iUW
UcKq13HtVT05XspZD5PO9ymqO6mB0ig9jxgG/HeuBkBEQBWxLfeiRlxdvj0sGWn1
eIzmYEJeqqGQ9caOQQU7uNQQdex3tXI2qmR97SP+mOiQES+Dq+hll5EHgW247CNW
speCgxa5QlRbsM6xmdejjEzsPTx5AxXF0ZjA68IUDb0fY0sPVuRAdV3fu1jFVs50
hIeVcrar8T38Cw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:32:15 2026 by rpki-client