Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.mft
File: CuS8lAHZ-HdyyMnGmDQHdRL0JhE.mft (raw, json)
Hash identifier: N7Kpup4rxJkSJYIZzwi5+uKx87WLBhuy78SEEQfujuM=
Subject key identifier: 07:D2:E9:AB:20:AF:5D:2F:2F:87:51:E8:AA:E4:68:F4:0C:3D:FB:05
Authority key identifier: 0A:E4:BC:94:01:D9:F8:77:72:C8:C9:C6:98:34:07:75:12:F4:26:11
Certificate issuer: /CN=0ae4bc9401d9f87772c8c9c69834077512f42611
Certificate serial: 019EC1B6932D2F848D8B36801E7F879D4C4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.mft
Manifest number: 0255
Signing time: Sat 13 Jun 2026 16:00:28 +0000
Manifest this update: Sat 13 Jun 2026 16:00:28 +0000
Manifest next update: Sun 14 Jun 2026 16:00:28 +0000
Files and hashes: 1: CuS8lAHZ-HdyyMnGmDQHdRL0JhE.crl (hash: YfAeKGMoobwyUXI1pmPvVDbJ0YrOBrrmRzJzD1i34SM=)
2: IrAmy11rZJI6T7b9TOqwrK9lVyU.roa (hash: h9URKcjvU/CcITMUnrMcCY/cFNmMmE8d3RdTZSBmw+I=)
3: PeGqvcvoQwIlcxZ0yNmi59c1yzQ.roa (hash: 50M9/kQdJNFZZaEeJg52nYi4ikYT+HD/jZQVEJxVekQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 16:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:b6:93:2d:2f:84:8d:8b:36:80:1e:7f:87:9d:4c:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ae4bc9401d9f87772c8c9c69834077512f42611
Validity
Not Before: Jun 13 16:00:28 2026 GMT
Not After : Jun 14 16:00:28 2026 GMT
Subject: CN=07d2e9ab20af5d2f2f8751e8aae468f40c3dfb05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:bd:47:3a:a8:3b:e8:db:52:8f:b4:a1:d3:fb:
df:ca:a6:5c:6f:6d:01:f1:82:55:ef:01:93:ff:e0:
0f:70:48:28:8d:9e:32:a2:9b:4a:3e:65:86:86:d0:
70:d6:6a:4e:05:e7:5b:85:f7:40:98:17:3a:cf:e4:
cf:9b:c0:60:86:1d:ae:78:d3:ad:f0:5e:a0:0d:4d:
1b:04:27:13:a1:e6:71:5b:ed:c4:cf:67:65:e4:d2:
8a:76:26:0f:29:cc:bd:83:17:36:58:d0:36:36:70:
b6:05:f6:cb:2f:24:f8:79:e8:2a:2e:b3:df:36:f6:
7f:a1:42:1e:34:e6:de:99:d4:e4:0f:7a:7c:ac:06:
8d:50:26:f2:bc:37:8a:42:d2:e8:cc:05:71:c8:a4:
31:e4:ab:b2:35:ad:3a:d7:5a:20:f7:32:d5:f6:8b:
ac:92:68:2f:d7:36:d9:6e:82:44:6f:53:1d:a7:ba:
72:10:8d:c6:9d:c9:4c:fe:e3:d3:54:aa:37:9d:db:
d1:de:cb:d6:f0:6b:48:24:17:c4:35:e0:1f:38:c3:
46:97:bc:37:b1:2b:5a:6c:be:cf:1b:33:ab:98:90:
8f:b7:19:95:0c:a0:ad:1f:61:8b:73:47:fb:ee:71:
0e:ce:23:4d:71:60:69:ea:18:35:d9:25:16:5d:49:
46:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:D2:E9:AB:20:AF:5D:2F:2F:87:51:E8:AA:E4:68:F4:0C:3D:FB:05
X509v3 Authority Key Identifier:
keyid:0A:E4:BC:94:01:D9:F8:77:72:C8:C9:C6:98:34:07:75:12:F4:26:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:7e:52:ec:5b:88:14:e8:c0:ad:c9:13:73:2d:f8:21:e9:26:
08:f5:11:24:d4:03:61:c8:08:01:bf:6e:68:bf:9f:07:42:87:
ab:02:73:21:40:d2:03:31:48:0a:59:c5:26:a6:5e:5f:45:f6:
2f:7b:20:ed:aa:de:72:18:c3:06:a9:8c:26:8a:8f:6b:51:f7:
77:df:77:1f:8c:61:86:18:ab:bd:d5:62:51:d6:56:c1:52:dc:
7e:06:a9:0d:c8:01:03:aa:b4:59:75:79:b1:e2:38:13:64:4d:
8a:00:26:0c:8a:d0:64:33:11:25:81:85:8d:9d:66:00:2c:d6:
65:57:28:5d:69:5d:98:76:bf:48:ea:cc:4e:62:2b:3c:71:7f:
21:7c:d3:10:04:16:b2:25:2c:52:9c:16:e5:74:eb:b0:4f:fb:
b9:86:8a:81:6b:22:e8:15:38:7f:aa:53:10:c0:67:b9:17:2c:
82:56:47:76:73:7e:3c:02:83:b0:3c:6d:70:0a:6c:0f:24:9a:
cc:ab:f0:51:a5:4b:b7:ea:8a:a1:4b:be:67:32:30:67:6f:83:
08:86:97:37:bd:dc:f5:4a:5b:2b:de:99:e1:0c:08:68:42:74:
82:19:20:55:2a:b1:f8:52:06:ef:49:38:07:a8:8e:e9:f7:58:
2b:61:17:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:51:19 2026 by rpki-client