Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/494f27-4bbc-4b38-849b-d888a0689c19/1/_cuXa7YCkhb3oq0Ft5MvSlXgz4o.mft
File: _cuXa7YCkhb3oq0Ft5MvSlXgz4o.mft (raw, json)
Hash identifier: v/G5zIEeFq7Rn4sWq3ozKxb71PBMCiwJR+ecqVGjtLU=
Subject key identifier: 58:32:ED:E6:E1:20:4D:01:DF:DE:AF:BD:2C:B9:E4:17:67:1D:62:7F
Authority key identifier: FD:CB:97:6B:B6:02:92:16:F7:A2:AD:05:B7:93:2F:4A:55:E0:CF:8A
Certificate issuer: /CN=fdcb976bb6029216f7a2ad05b7932f4a55e0cf8a
Certificate serial: 019CACEBE649F82830DE4C778E7A40582A8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_cuXa7YCkhb3oq0Ft5MvSlXgz4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/494f27-4bbc-4b38-849b-d888a0689c19/1/_cuXa7YCkhb3oq0Ft5MvSlXgz4o.mft
Manifest number: 1847
Signing time: Mon 02 Mar 2026 05:01:06 +0000
Manifest this update: Mon 02 Mar 2026 05:01:06 +0000
Manifest next update: Tue 03 Mar 2026 05:01:06 +0000
Files and hashes: 1: 6e2vKhHmL-ZebC_h3M0uX9UQPQE.roa (hash: MuJkDaToFHy1onqOvnRia1v4P6X9FnZyEUR50zhW13E=)
2: _cuXa7YCkhb3oq0Ft5MvSlXgz4o.crl (hash: 1AQymv09aKzmTIVX1CNGAWo6TueTfGVKsN1jpn9bEPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/494f27-4bbc-4b38-849b-d888a0689c19/1/_cuXa7YCkhb3oq0Ft5MvSlXgz4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/494f27-4bbc-4b38-849b-d888a0689c19/1/_cuXa7YCkhb3oq0Ft5MvSlXgz4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/_cuXa7YCkhb3oq0Ft5MvSlXgz4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:e6:49:f8:28:30:de:4c:77:8e:7a:40:58:2a:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdcb976bb6029216f7a2ad05b7932f4a55e0cf8a
Validity
Not Before: Mar 2 05:01:06 2026 GMT
Not After : Mar 3 05:01:06 2026 GMT
Subject: CN=5832ede6e1204d01dfdeafbd2cb9e417671d627f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:38:3a:7c:53:9e:ab:a7:3d:39:20:34:c6:cd:
4f:ea:bc:47:a2:ff:ac:d0:9c:bc:ff:ec:d7:2c:89:
74:a8:40:c4:9f:79:4a:db:60:0b:ce:9a:a2:c4:60:
65:fd:a9:c8:12:da:29:71:d6:3d:fd:06:38:fa:6f:
97:47:bb:0a:4c:13:c7:72:a8:0e:8e:80:55:48:47:
3a:8e:64:a8:e5:5a:f4:85:19:3c:a0:0f:b3:ff:1b:
c7:35:e1:90:c0:1f:7f:77:9e:f6:4e:af:c2:b5:29:
7c:86:8c:3a:a4:52:2f:1a:cf:ec:b1:dc:38:8b:c3:
f0:d6:2c:85:90:12:a6:d7:25:85:68:38:82:a5:c7:
64:ed:8f:d1:ed:55:97:88:8f:7a:b2:ed:ef:0a:b8:
c3:c8:ca:57:25:86:e2:fb:b0:33:f8:0e:2b:63:3e:
ce:f9:65:00:63:69:fc:fa:ed:bd:f1:0e:7a:fd:61:
20:92:6f:39:ba:d7:61:14:47:77:11:20:35:f6:06:
3d:d3:15:b9:34:20:fd:a8:51:cf:6c:7d:67:00:44:
45:38:eb:59:ec:67:dd:68:74:18:48:47:c5:72:14:
ad:46:a2:b4:f2:50:54:b9:8c:a1:b7:65:9c:e5:f3:
b0:e6:39:39:ce:c3:9e:32:d7:47:88:a4:b4:41:d7:
9f:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:32:ED:E6:E1:20:4D:01:DF:DE:AF:BD:2C:B9:E4:17:67:1D:62:7F
X509v3 Authority Key Identifier:
keyid:FD:CB:97:6B:B6:02:92:16:F7:A2:AD:05:B7:93:2F:4A:55:E0:CF:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_cuXa7YCkhb3oq0Ft5MvSlXgz4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/494f27-4bbc-4b38-849b-d888a0689c19/1/_cuXa7YCkhb3oq0Ft5MvSlXgz4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/494f27-4bbc-4b38-849b-d888a0689c19/1/_cuXa7YCkhb3oq0Ft5MvSlXgz4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:47:d6:81:77:75:b8:02:52:af:e4:f4:b3:7a:40:d4:7c:a4:
b5:96:e0:f0:0a:9c:5a:58:a2:4a:e9:5d:e1:f4:b8:2d:a4:2c:
db:34:d7:42:fe:c6:7b:84:94:bb:d6:ff:24:b0:cb:49:99:b6:
cf:69:98:03:a0:d6:a2:4b:75:5b:f4:f7:e1:b1:7c:8a:a6:99:
cc:14:97:66:d4:7d:96:19:1a:af:2a:61:d1:3d:25:1a:ba:6b:
28:e3:bf:b3:44:dc:e6:f4:26:99:60:75:6f:b8:bb:31:6d:5b:
10:b8:49:dd:ca:40:37:d5:94:d6:8b:5c:1f:3c:79:2b:c2:00:
9a:4d:81:ba:31:8a:cd:60:60:15:a7:cf:7e:e0:9d:65:64:f3:
c9:4c:6d:f3:e8:f3:e2:8e:c3:30:de:c9:6b:04:eb:8b:57:e7:
89:67:f2:85:ee:b8:b9:50:66:cd:e7:4e:8c:57:b4:d7:5c:68:
c8:05:5c:fc:40:44:d3:5e:a8:c7:86:f6:3b:dd:67:a3:e9:9a:
00:6e:33:c7:db:4b:a0:1c:47:97:5f:bd:8e:7d:51:6d:8f:e3:
b0:7e:b3:5d:a6:09:d6:e1:b0:a0:f0:be:15:7d:7f:3e:60:36:
0d:b7:da:10:dd:3d:42:1b:dc:33:4d:f7:b7:14:fb:62:43:ab:
76:50:27:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZys6+ZJ+Cgw3kx3jnpAWCqPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkY2I5NzZiYjYwMjkyMTZmN2EyYWQwNWI3OTMyZjRhNTVl
MGNmOGEwHhcNMjYwMzAyMDUwMTA2WhcNMjYwMzAzMDUwMTA2WjAzMTEwLwYDVQQD
Eyg1ODMyZWRlNmUxMjA0ZDAxZGZkZWFmYmQyY2I5ZTQxNzY3MWQ2MjdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2jg6fFOeq6c9OSA0xs1P6rxHov+s
0Jy8/+zXLIl0qEDEn3lK22ALzpqixGBl/anIEtopcdY9/QY4+m+XR7sKTBPHcqgO
joBVSEc6jmSo5Vr0hRk8oA+z/xvHNeGQwB9/d572Tq/CtSl8how6pFIvGs/ssdw4
i8Pw1iyFkBKm1yWFaDiCpcdk7Y/R7VWXiI96su3vCrjDyMpXJYbi+7Az+A4rYz7O
+WUAY2n8+u298Q56/WEgkm85utdhFEd3ESA19gY90xW5NCD9qFHPbH1nAERFOOtZ
7GfdaHQYSEfFchStRqK08lBUuYyht2Wc5fOw5jk5zsOeMtdHiKS0QdefKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFgy7ebhIE0B396vvSy55BdnHWJ/MB8GA1UdIwQY
MBaAFP3Ll2u2ApIW96KtBbeTL0pV4M+KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2N1WGE3WUNraGIzb3EwRnQ1TXZTbFhnejRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS80OTRmMjctNGJiYy00YjM4LTg0OWIt
ZDg4OGEwNjg5YzE5LzEvX2N1WGE3WUNraGIzb3EwRnQ1TXZTbFhnejRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS80OTRmMjctNGJiYy00YjM4LTg0OWItZDg4OGEwNjg5YzE5
LzEvX2N1WGE3WUNraGIzb3EwRnQ1TXZTbFhnejRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsEfWgXd1
uAJSr+T0s3pA1HyktZbg8AqcWliiSuld4fS4LaQs2zTXQv7Ge4SUu9b/JLDLSZm2
z2mYA6DWokt1W/T34bF8iqaZzBSXZtR9lhkaryph0T0lGrprKOO/s0Tc5vQmmWB1
b7i7MW1bELhJ3cpAN9WU1otcHzx5K8IAmk2BujGKzWBgFafPfuCdZWTzyUxt8+jz
4o7DMN7JawTri1fniWfyhe64uVBmzedOjFe011xoyAVc/EBE016ox4b2O91no+ma
AG4zx9tLoBxHl1+9jn1RbY/jsH6zXaYJ1uGwoPC+FX1/PmA2DbfaEN09QhvcM033
txT7YkOrdlAnyA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:35:53 2026 by rpki-client