Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/66b74c-81c1-410e-957d-a8d65dccb96b/1/cuS6-Zq4QBKRMyhf6a17g_0TDDk.mft
File: cuS6-Zq4QBKRMyhf6a17g_0TDDk.mft (raw, json)
Hash identifier: QmV40rcFzEPuW23hN3MsK5QpU03aLRx1+dzZzv7oeAM=
Subject key identifier: 5A:B7:5A:97:59:7A:3A:84:9A:63:09:7F:8B:CD:0D:F6:D5:35:83:34
Authority key identifier: 72:E4:BA:F9:9A:B8:40:12:91:33:28:5F:E9:AD:7B:83:FD:13:0C:39
Certificate issuer: /CN=72e4baf99ab840129133285fe9ad7b83fd130c39
Certificate serial: 019CAB344EF9883DDC3F56956876FB4B5790
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cuS6-Zq4QBKRMyhf6a17g_0TDDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/66b74c-81c1-410e-957d-a8d65dccb96b/1/cuS6-Zq4QBKRMyhf6a17g_0TDDk.mft
Manifest number: 1854
Signing time: Sun 01 Mar 2026 21:00:57 +0000
Manifest this update: Sun 01 Mar 2026 21:00:57 +0000
Manifest next update: Mon 02 Mar 2026 21:00:57 +0000
Files and hashes: 1: 1E2GfXyPoyKCnvX8Op-67NNeeII.roa (hash: N8Q/qvAY27SFiMXr6tcvfagA2n7ieRadFl4CNkx0CiQ=)
2: cuS6-Zq4QBKRMyhf6a17g_0TDDk.crl (hash: ouXrIUlmU0B/mT3Q0MwhAcCkP7EomGvU+ExIbVTBykg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/66b74c-81c1-410e-957d-a8d65dccb96b/1/cuS6-Zq4QBKRMyhf6a17g_0TDDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/66b74c-81c1-410e-957d-a8d65dccb96b/1/cuS6-Zq4QBKRMyhf6a17g_0TDDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/cuS6-Zq4QBKRMyhf6a17g_0TDDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:4e:f9:88:3d:dc:3f:56:95:68:76:fb:4b:57:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72e4baf99ab840129133285fe9ad7b83fd130c39
Validity
Not Before: Mar 1 21:00:57 2026 GMT
Not After : Mar 2 21:00:57 2026 GMT
Subject: CN=5ab75a97597a3a849a63097f8bcd0df6d5358334
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c3:43:fd:d1:82:17:4a:60:33:a6:9a:21:ab:
fe:b5:b3:ce:2f:9c:0a:24:2f:3b:7c:e0:64:f9:06:
f8:98:5d:58:a5:dd:ba:1e:74:06:85:9e:05:12:8c:
90:13:1f:72:ad:b2:1f:19:4c:2f:5b:04:0d:78:b6:
1e:bd:be:54:ad:a1:c7:d8:66:73:f0:93:24:11:38:
7f:70:87:24:54:d1:1c:b9:49:b1:96:9b:e8:59:79:
44:ff:d0:97:34:44:e0:18:25:83:08:4f:3b:e0:9d:
5d:5b:5a:2b:be:bf:70:7a:53:e1:00:d9:76:53:2f:
ea:4f:c4:b4:6a:5f:5b:87:af:16:84:be:33:ee:5a:
dd:53:d3:d3:f0:0c:ae:2b:b0:a0:5d:85:3a:f1:6d:
78:69:24:51:12:18:79:0f:31:19:e4:0c:d2:3f:40:
b5:61:b8:22:66:d6:51:4d:bf:5b:82:43:34:86:79:
7f:44:b5:3b:d2:aa:cd:06:4a:86:be:8f:d5:c1:3f:
21:05:e5:4e:d1:87:aa:c6:d3:b6:d3:ed:95:93:d1:
40:0a:81:03:9b:9a:fb:85:d3:10:ef:dd:15:a6:28:
3e:cf:72:96:60:c9:eb:c6:e3:89:43:15:ea:ac:ea:
5f:52:27:d5:6e:34:33:04:de:24:12:6b:f2:aa:d9:
dd:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:B7:5A:97:59:7A:3A:84:9A:63:09:7F:8B:CD:0D:F6:D5:35:83:34
X509v3 Authority Key Identifier:
keyid:72:E4:BA:F9:9A:B8:40:12:91:33:28:5F:E9:AD:7B:83:FD:13:0C:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cuS6-Zq4QBKRMyhf6a17g_0TDDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/66b74c-81c1-410e-957d-a8d65dccb96b/1/cuS6-Zq4QBKRMyhf6a17g_0TDDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/66b74c-81c1-410e-957d-a8d65dccb96b/1/cuS6-Zq4QBKRMyhf6a17g_0TDDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:53:55:4b:b5:ea:a2:98:9d:2e:d3:d1:ae:e6:16:fc:cd:b0:
8b:55:31:4d:f4:3b:34:4f:50:7e:c7:d7:25:dd:46:b6:e2:37:
b4:d2:7c:17:1a:96:98:e1:c0:e1:83:15:58:67:f5:d8:ce:93:
77:ea:3b:a8:33:01:b2:f3:2f:a9:1b:da:f0:cd:3d:69:d9:3c:
a1:c3:cd:76:b6:9e:3a:37:70:46:39:df:6e:ac:46:3b:37:a5:
9c:d6:5e:cb:35:5a:ff:64:22:09:88:66:45:a9:40:c8:3d:4d:
bd:18:e3:d1:3e:ca:32:f1:5e:0d:f8:f6:7f:b2:04:0a:3f:ba:
bf:91:ca:00:3b:6e:05:eb:c6:51:8b:1a:ec:09:48:94:bc:33:
3c:2b:55:a2:90:5e:6a:7d:44:21:ec:12:d4:ae:82:36:af:9d:
05:0e:fe:21:26:7c:49:76:d4:b7:e4:f3:06:12:f5:3e:1e:f2:
60:f9:9c:68:74:0a:07:ac:f5:b4:6f:75:d6:7b:c0:a5:67:63:
49:e5:a4:31:49:ed:52:5b:f9:79:18:af:61:33:f5:98:8c:44:
20:59:9e:e7:5a:3b:71:bf:1f:4b:c5:a1:e1:26:77:20:5a:a4:
fd:dc:c5:08:cc:55:d2:8b:f7:67:26:68:33:88:66:c9:b7:14:
6e:2c:46:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:27:09 2026 by rpki-client