Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/494f27-4bbc-4b38-849b-d888a0689c19/1/_cuXa7YCkhb3oq0Ft5MvSlXgz4o.mft
File: _cuXa7YCkhb3oq0Ft5MvSlXgz4o.mft (raw, json)
Hash identifier: IS2t3TmdrNqEa1TVolGH1tXe8LVKXTALJhz0zhtpq4c=
Subject key identifier: EB:0D:1B:89:F7:4F:AE:16:CB:59:97:8F:4B:80:85:4F:39:5A:96:C5
Authority key identifier: FD:CB:97:6B:B6:02:92:16:F7:A2:AD:05:B7:93:2F:4A:55:E0:CF:8A
Certificate issuer: /CN=fdcb976bb6029216f7a2ad05b7932f4a55e0cf8a
Certificate serial: 01A120532036444FF9D2045028CA9B344E5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_cuXa7YCkhb3oq0Ft5MvSlXgz4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/494f27-4bbc-4b38-849b-d888a0689c19/1/_cuXa7YCkhb3oq0Ft5MvSlXgz4o.mft
Manifest number: 1A95
Signing time: Fri 09 Oct 2026 11:01:20 +0000
Manifest this update: Fri 09 Oct 2026 11:01:20 +0000
Manifest next update: Sat 10 Oct 2026 11:01:20 +0000
Files and hashes: 1: 6e2vKhHmL-ZebC_h3M0uX9UQPQE.roa (hash: MuJkDaToFHy1onqOvnRia1v4P6X9FnZyEUR50zhW13E=)
2: _cuXa7YCkhb3oq0Ft5MvSlXgz4o.crl (hash: u825pQlo5PdtHtAYTJeaVYj6EBYN180lChDQjAsuX28=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/494f27-4bbc-4b38-849b-d888a0689c19/1/_cuXa7YCkhb3oq0Ft5MvSlXgz4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/494f27-4bbc-4b38-849b-d888a0689c19/1/_cuXa7YCkhb3oq0Ft5MvSlXgz4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/_cuXa7YCkhb3oq0Ft5MvSlXgz4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 08:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:20:53:20:36:44:4f:f9:d2:04:50:28:ca:9b:34:4e:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdcb976bb6029216f7a2ad05b7932f4a55e0cf8a
Validity
Not Before: Oct 9 11:01:20 2026 GMT
Not After : Oct 10 11:01:20 2026 GMT
Subject: CN=eb0d1b89f74fae16cb59978f4b80854f395a96c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:4e:b1:84:d8:e9:d8:3c:0a:de:10:40:3e:db:
4b:1e:ab:a4:02:a0:d9:1c:75:21:fa:57:c9:ca:63:
2e:dc:4a:99:e3:3a:f4:13:67:83:e1:16:20:a8:aa:
0a:32:a1:bd:bb:a5:8b:13:17:b7:72:aa:de:70:a3:
be:79:1e:ae:f0:7b:14:0a:a1:b0:44:a8:66:ea:54:
2f:84:24:30:62:ba:77:ce:ea:e8:7a:1b:b9:db:8c:
43:1d:18:a9:76:08:54:f2:37:e6:f8:69:a5:f9:ab:
c6:02:6d:23:aa:b5:9c:0a:b5:37:b6:c3:55:7d:a6:
94:3d:f3:97:34:a7:45:8d:95:73:86:16:f2:51:ac:
fa:c3:eb:6a:bc:39:f4:5e:1a:37:28:61:f7:a5:fd:
48:1e:1a:ef:4b:a7:28:ed:d6:17:e5:a2:59:fa:9b:
7c:01:00:a1:2d:fc:78:03:71:d5:f4:e3:d2:76:cb:
e0:75:3b:f3:93:41:c5:16:9b:31:77:6a:46:a1:48:
0b:10:e1:d5:6c:14:aa:27:b4:3d:40:6c:f2:9a:0f:
61:f5:01:a7:f3:df:fc:35:a9:5c:24:a5:36:67:c4:
ce:e9:ff:d3:e3:a3:dc:25:e0:3c:b5:b9:74:51:ea:
f5:78:8e:31:1e:16:30:dd:57:9e:e2:0f:0d:63:14:
18:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:0D:1B:89:F7:4F:AE:16:CB:59:97:8F:4B:80:85:4F:39:5A:96:C5
X509v3 Authority Key Identifier:
keyid:FD:CB:97:6B:B6:02:92:16:F7:A2:AD:05:B7:93:2F:4A:55:E0:CF:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_cuXa7YCkhb3oq0Ft5MvSlXgz4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/494f27-4bbc-4b38-849b-d888a0689c19/1/_cuXa7YCkhb3oq0Ft5MvSlXgz4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/494f27-4bbc-4b38-849b-d888a0689c19/1/_cuXa7YCkhb3oq0Ft5MvSlXgz4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:1e:8f:45:eb:cf:ba:e0:5b:a2:bb:ad:71:bb:bd:0e:34:27:
11:be:47:b4:06:16:f9:b0:41:c5:06:ae:55:80:cf:d7:7a:82:
12:79:1d:e7:a3:b4:9c:10:ad:52:cf:5c:36:aa:7e:06:51:db:
8a:1e:72:93:53:88:34:c6:ed:ef:c4:8b:78:6d:4b:63:b8:92:
e0:46:05:16:80:c3:f9:91:c4:9d:d3:29:c7:65:e7:28:a6:1f:
6c:cf:fd:48:dd:66:02:42:9c:56:6d:cb:b4:4a:9a:13:23:4d:
e5:92:ab:a3:ae:c6:ef:a7:4f:7e:d9:22:b6:68:8a:20:d2:51:
75:26:3b:98:79:f7:01:67:d7:7c:cf:ab:0b:cf:65:e0:9d:a6:
24:b5:42:fe:d2:f8:f8:f8:1d:46:3d:7c:67:26:a3:46:77:d9:
dc:af:fa:cb:d3:bb:c2:ac:9e:29:f7:6a:0f:43:13:b7:2f:16:
b6:40:1c:f9:34:2e:15:eb:5f:64:a7:28:9b:0c:50:82:5e:5a:
fa:e4:49:30:93:ed:f3:f4:d4:39:d3:2a:ec:19:19:20:0a:42:
df:68:cc:22:50:38:4e:ed:52:84:c8:fa:2f:62:c1:7e:82:dd:
b5:77:13:43:96:8b:d1:78:29:c7:99:67:98:13:93:ee:c9:ac:
8c:0e:5d:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 14:44:32 2026 by rpki-client