Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.mft
File: CuS8lAHZ-HdyyMnGmDQHdRL0JhE.mft (raw, json)
Hash identifier: lqZgeXmDtySL9V6HF3TuB7k3lEcwuzkmyR1pI2kmTt4=
Subject key identifier: 66:07:04:27:50:F0:D6:D8:E0:CC:FB:FE:55:86:7D:D7:72:C5:EA:7F
Authority key identifier: 0A:E4:BC:94:01:D9:F8:77:72:C8:C9:C6:98:34:07:75:12:F4:26:11
Certificate issuer: /CN=0ae4bc9401d9f87772c8c9c69834077512f42611
Certificate serial: 019CADFE95FDDB153D1A9506022895AAFBBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.mft
Manifest number: 013B
Signing time: Mon 02 Mar 2026 10:01:08 +0000
Manifest this update: Mon 02 Mar 2026 10:01:08 +0000
Manifest next update: Tue 03 Mar 2026 10:01:08 +0000
Files and hashes: 1: CuS8lAHZ-HdyyMnGmDQHdRL0JhE.crl (hash: 2Wi27cPVEvW9KbY0PD+k5HDj0KDAJcLNmjQ/6tl6wik=)
2: L6EfYpj4kjPfBKjDIwYvQZVTYw8.roa (hash: fL/0JncMhmbdQ9wqzpSOA1G0U/HtPjMSzlL0nOCbrRw=)
3: lN94pD7ai5OUJubsRp4mNzHp4U0.roa (hash: Kg4NFToY9jwNR516lKmTZhRo725Vd2ZsUfAcCos3+og=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 10:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:95:fd:db:15:3d:1a:95:06:02:28:95:aa:fb:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ae4bc9401d9f87772c8c9c69834077512f42611
Validity
Not Before: Mar 2 10:01:08 2026 GMT
Not After : Mar 3 10:01:08 2026 GMT
Subject: CN=6607042750f0d6d8e0ccfbfe55867dd772c5ea7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c3:c4:40:7a:82:cc:4e:3b:29:2a:6b:c4:29:
86:31:24:ee:a7:37:93:0c:f2:b9:8d:8d:d6:85:af:
5b:44:b6:36:64:94:83:ac:66:96:48:b7:23:d6:08:
11:53:ab:1c:9e:31:8b:e6:d1:fe:93:ab:b5:c1:cd:
3c:eb:a1:19:d2:c3:82:1c:1a:53:50:54:54:83:fa:
75:54:cf:ff:6a:e4:82:10:3b:f5:d5:05:17:62:5d:
08:7c:4c:76:ff:5f:c4:46:3f:97:58:4c:42:4a:99:
b0:5c:09:e1:29:99:e7:ba:24:fc:b1:45:ec:68:0b:
ad:06:d8:75:d4:6f:36:3c:2f:43:ac:76:ff:16:7b:
5c:14:21:a4:5c:05:85:19:26:ba:2c:99:d2:67:a9:
ff:8d:80:9a:52:d3:8e:fb:cf:bf:d9:96:f6:b9:35:
e6:a8:3a:b7:ee:51:c8:9d:0c:6f:0d:20:41:ea:81:
37:7e:ee:34:4f:e3:cd:b0:85:ea:a3:e5:1b:c7:68:
88:76:12:f5:8e:1b:3c:11:96:56:1e:a1:9f:0a:74:
15:b0:09:c3:8e:5c:86:46:b1:65:fa:7b:05:02:64:
19:ee:9b:b3:d6:40:dd:76:9d:44:92:6c:46:d1:c6:
d8:52:57:59:88:1d:54:46:35:90:77:8f:00:77:1e:
da:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:07:04:27:50:F0:D6:D8:E0:CC:FB:FE:55:86:7D:D7:72:C5:EA:7F
X509v3 Authority Key Identifier:
keyid:0A:E4:BC:94:01:D9:F8:77:72:C8:C9:C6:98:34:07:75:12:F4:26:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:61:1b:1a:80:c3:26:b8:a1:9b:c2:71:aa:72:dd:7a:e2:50:
cd:c4:68:89:e4:66:64:85:95:3d:4e:b8:e3:23:7f:de:62:ba:
09:eb:0b:7f:90:cc:9d:df:87:0d:ad:fd:9e:93:d6:0b:4d:d7:
0f:95:b5:bb:0c:fc:13:33:03:44:13:be:3b:1b:5b:be:4b:ac:
f9:3c:a9:c9:95:da:e4:ce:01:b5:ba:16:c0:09:55:25:31:03:
b6:86:53:7d:2a:af:2a:e2:44:ef:02:25:bd:9e:f1:b3:10:e4:
8e:c3:f9:af:3c:8f:cc:7a:a7:5a:99:73:d1:59:0f:1c:61:44:
a1:b1:66:32:90:2f:35:0a:f5:e8:0e:79:27:aa:a2:c4:98:43:
98:2d:50:e4:c8:7c:9a:37:59:3a:a8:ec:db:5e:6c:e1:6c:c0:
d0:bc:3f:56:95:95:00:94:b3:64:11:67:ba:54:91:23:29:98:
85:db:f2:af:e3:fb:6e:39:60:51:8d:4d:fd:e3:9a:cc:f8:09:
97:df:88:e0:99:09:6d:a0:1a:1d:63:a9:60:b4:2b:26:c0:2d:
3e:d6:d6:bf:69:d9:a3:77:1c:ea:d5:87:4f:31:65:a4:09:05:
76:7e:94:65:49:96:b1:68:84:58:5d:9c:c3:1e:bc:b2:e9:b2:
1b:f6:a7:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:25:06 2026 by rpki-client