Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/494f27-4bbc-4b38-849b-d888a0689c19/1/_cuXa7YCkhb3oq0Ft5MvSlXgz4o.mft
File: _cuXa7YCkhb3oq0Ft5MvSlXgz4o.mft (raw, json)
Hash identifier: 2rRMdbzGKh+XDiWiCj3LF8gmSH9/ep68KX54zbtdBio=
Subject key identifier: 68:D9:73:C2:14:DB:B7:5E:BC:75:67:ED:B7:65:42:66:1E:D1:AF:CB
Authority key identifier: FD:CB:97:6B:B6:02:92:16:F7:A2:AD:05:B7:93:2F:4A:55:E0:CF:8A
Certificate issuer: /CN=fdcb976bb6029216f7a2ad05b7932f4a55e0cf8a
Certificate serial: 019ED53E535C42070045861E1249273FFF02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_cuXa7YCkhb3oq0Ft5MvSlXgz4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/494f27-4bbc-4b38-849b-d888a0689c19/1/_cuXa7YCkhb3oq0Ft5MvSlXgz4o.mft
Manifest number: 1965
Signing time: Wed 17 Jun 2026 11:01:31 +0000
Manifest this update: Wed 17 Jun 2026 11:01:31 +0000
Manifest next update: Thu 18 Jun 2026 11:01:31 +0000
Files and hashes: 1: 6e2vKhHmL-ZebC_h3M0uX9UQPQE.roa (hash: MuJkDaToFHy1onqOvnRia1v4P6X9FnZyEUR50zhW13E=)
2: _cuXa7YCkhb3oq0Ft5MvSlXgz4o.crl (hash: CFSxZTV5d5IHxXkr0i6tLKEtq3u9GqE9yKqN0kkvoC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/494f27-4bbc-4b38-849b-d888a0689c19/1/_cuXa7YCkhb3oq0Ft5MvSlXgz4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/494f27-4bbc-4b38-849b-d888a0689c19/1/_cuXa7YCkhb3oq0Ft5MvSlXgz4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/_cuXa7YCkhb3oq0Ft5MvSlXgz4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 11:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d5:3e:53:5c:42:07:00:45:86:1e:12:49:27:3f:ff:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdcb976bb6029216f7a2ad05b7932f4a55e0cf8a
Validity
Not Before: Jun 17 11:01:31 2026 GMT
Not After : Jun 18 11:01:31 2026 GMT
Subject: CN=68d973c214dbb75ebc7567edb76542661ed1afcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:96:b3:de:7a:b8:eb:88:81:43:75:95:5c:2e:
fd:f7:15:65:ba:36:40:78:6d:54:cd:c4:93:a1:65:
18:48:b2:e2:92:83:91:25:c3:1d:05:b8:76:3d:59:
34:cb:41:cd:04:c3:62:5c:d3:ec:5b:4d:3d:1c:92:
05:0a:43:ab:49:d8:5a:f8:1b:91:8a:90:28:07:e9:
8a:fa:aa:0a:b2:02:57:c2:0f:5d:86:4c:73:0b:46:
27:7b:54:8c:9b:1d:ca:22:61:9c:c0:9f:1c:a6:2a:
f1:b5:27:3f:cd:f0:0e:50:f8:62:61:7e:be:4e:17:
f5:37:90:0c:73:2f:0e:6d:39:f7:04:3b:e5:39:b0:
34:3e:8f:ee:34:46:b9:a3:05:06:1c:0f:56:e2:93:
8a:e2:12:38:e7:4b:41:02:d2:9a:b9:02:c8:65:9a:
2d:a2:b5:8b:f0:7b:ad:c8:05:a4:dc:3f:86:8a:4a:
4e:8b:f1:52:b7:f9:90:fe:50:3c:f8:84:5c:e8:49:
a9:71:82:76:cc:09:f0:75:ed:9b:a6:ad:a6:c1:79:
5a:9f:50:99:e4:5e:fd:31:fe:b0:94:b1:f9:c2:8b:
ff:67:a4:ad:e7:08:99:55:a5:1b:a3:a0:05:be:b5:
1f:d0:67:49:30:a7:8d:79:0a:7d:88:27:d3:a6:c6:
a5:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:D9:73:C2:14:DB:B7:5E:BC:75:67:ED:B7:65:42:66:1E:D1:AF:CB
X509v3 Authority Key Identifier:
keyid:FD:CB:97:6B:B6:02:92:16:F7:A2:AD:05:B7:93:2F:4A:55:E0:CF:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_cuXa7YCkhb3oq0Ft5MvSlXgz4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/494f27-4bbc-4b38-849b-d888a0689c19/1/_cuXa7YCkhb3oq0Ft5MvSlXgz4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/494f27-4bbc-4b38-849b-d888a0689c19/1/_cuXa7YCkhb3oq0Ft5MvSlXgz4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:cb:8a:7e:5f:0b:bf:dd:7a:64:40:b3:fb:8f:e4:d3:64:e3:
a4:44:46:9b:e1:91:a4:47:d1:59:40:0f:7d:61:48:80:df:39:
1e:46:d0:22:df:a4:0b:90:ba:b0:bd:a0:97:fe:61:08:92:96:
07:e6:03:3f:48:d8:58:c5:ea:73:52:65:ee:7f:d6:73:5d:19:
45:09:6f:4f:c8:c8:5e:bc:26:f0:b2:87:a0:27:73:ac:3f:d9:
b0:26:10:7c:ed:79:38:d1:39:64:8c:8e:ed:6e:cd:5a:fb:88:
94:05:f2:67:a9:0f:2f:74:68:8d:d5:e0:65:55:7a:15:b4:58:
de:40:95:4b:0b:84:b9:6b:6d:17:06:56:2d:74:f4:52:c2:13:
08:96:8a:87:1b:5b:53:43:09:0a:a5:01:8d:b7:3a:d1:33:2b:
30:4d:a1:28:16:4e:48:40:e6:65:84:00:a9:c0:d5:b3:be:da:
e4:d0:99:af:fe:ea:21:c6:9e:28:2c:bf:a7:9b:19:77:1b:ac:
5e:7c:6c:a4:dc:0e:6e:e4:27:99:39:91:6d:fd:9a:94:46:a4:
a9:69:6f:0e:3e:23:be:1e:71:f8:ce:3a:c9:07:12:23:53:21:
85:e0:51:89:43:4e:16:7c:ae:fd:33:39:e3:e6:e3:f9:19:b1:
95:1c:0d:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 19:40:01 2026 by rpki-client