Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.mft
File: CuS8lAHZ-HdyyMnGmDQHdRL0JhE.mft (raw, json)
Hash identifier: DDdhPclLSPkxXQlioK12w5b1MOzXBBvuXZukN9n4n6E=
Subject key identifier: 8E:01:DC:05:7D:C3:09:CF:00:5B:FC:58:F3:A2:EB:99:CC:24:CC:C3
Authority key identifier: 0A:E4:BC:94:01:D9:F8:77:72:C8:C9:C6:98:34:07:75:12:F4:26:11
Certificate issuer: /CN=0ae4bc9401d9f87772c8c9c69834077512f42611
Certificate serial: 019D9B87B1B8EAF2CA4B0E953499ED4886B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.mft
Manifest number: 01BC
Signing time: Fri 17 Apr 2026 13:00:54 +0000
Manifest this update: Fri 17 Apr 2026 13:00:54 +0000
Manifest next update: Sat 18 Apr 2026 13:00:54 +0000
Files and hashes: 1: CuS8lAHZ-HdyyMnGmDQHdRL0JhE.crl (hash: +SSr9QdtA0MB5HNkEaWkCV4vf7mOf0FvSB94ZNUwQ84=)
2: IrAmy11rZJI6T7b9TOqwrK9lVyU.roa (hash: h9URKcjvU/CcITMUnrMcCY/cFNmMmE8d3RdTZSBmw+I=)
3: opb3Dk9q7WglcwVKydeR4HMjMxM.roa (hash: 3tNhFHkdfs4fq11SDf2cq5GThxVsi6mCSUEyz5phCxY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:b1:b8:ea:f2:ca:4b:0e:95:34:99:ed:48:86:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ae4bc9401d9f87772c8c9c69834077512f42611
Validity
Not Before: Apr 17 13:00:54 2026 GMT
Not After : Apr 18 13:00:54 2026 GMT
Subject: CN=8e01dc057dc309cf005bfc58f3a2eb99cc24ccc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3a:c1:e4:ec:1b:f3:d4:30:2b:35:cb:b6:6e:
87:17:3d:ba:f8:58:ec:61:55:9e:ed:a0:00:3b:f9:
7f:ae:e6:9f:ed:f1:93:aa:66:d0:45:0e:07:ce:c1:
c4:26:10:35:23:07:89:53:86:67:9f:da:fc:5b:55:
e2:2c:85:e4:62:f1:d2:8d:a6:02:42:26:b1:57:3d:
b4:5f:fd:41:b4:18:92:55:7c:f5:f4:df:89:90:64:
66:81:d1:4e:da:6f:72:ff:58:32:24:4b:2e:5f:11:
62:d9:be:9d:75:a1:23:e3:57:09:b0:8f:38:e5:72:
ab:14:c6:9a:9b:56:65:40:70:7d:30:eb:7a:f8:99:
42:c7:24:bb:3a:f7:69:32:d1:67:da:52:d9:0c:98:
25:39:37:ed:8e:2a:af:a2:d4:d0:7b:c5:ea:4b:af:
e4:62:f8:c5:f6:f4:3a:2c:ab:c3:81:24:84:50:15:
c5:1b:8d:db:20:f1:cb:6c:d2:b6:7d:17:e6:ae:9b:
81:83:78:a3:53:d4:cb:44:6f:3c:d8:00:9f:54:06:
08:a1:dc:ef:41:fc:f5:1f:4b:5f:d2:8b:8c:1b:48:
25:a7:50:cf:f7:a6:cc:f3:ab:4b:91:91:59:1e:a7:
eb:15:4c:3b:8d:20:55:e3:b6:f7:f8:09:a3:9c:58:
6e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:01:DC:05:7D:C3:09:CF:00:5B:FC:58:F3:A2:EB:99:CC:24:CC:C3
X509v3 Authority Key Identifier:
keyid:0A:E4:BC:94:01:D9:F8:77:72:C8:C9:C6:98:34:07:75:12:F4:26:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:a3:e9:54:85:84:28:ef:ba:ef:4d:7f:30:5b:64:32:a9:54:
d7:0c:49:ca:e8:43:68:a0:19:c8:7c:74:b7:33:74:a2:75:43:
96:b8:0d:ba:a1:6a:cc:db:3a:14:44:e9:c3:29:35:f3:1a:e7:
a4:a3:49:7b:bb:1e:58:2a:57:bc:d2:c7:9e:3c:4d:50:ed:ac:
62:63:5d:7f:4d:2e:cb:21:1d:12:6d:bf:42:4e:e6:75:72:54:
8d:e6:7a:82:90:74:d2:d3:cb:00:63:f1:cc:2b:83:98:61:59:
6c:ea:f9:31:6d:38:94:c8:3c:4c:6c:dd:60:c0:a5:4b:9d:d6:
43:66:5b:79:51:08:e7:e2:05:57:79:30:0b:4d:4a:86:07:0f:
6e:eb:c6:5e:cb:6b:d7:72:b0:7b:b9:bb:8d:12:ce:00:d2:c2:
4a:3e:77:5c:df:93:93:e8:39:69:c0:81:58:9b:d0:be:23:33:
f2:39:5b:32:9d:ae:a1:2e:2d:b6:2c:87:39:89:fd:3c:d6:52:
52:97:1d:55:f8:41:a7:38:40:4e:eb:ae:74:5e:7a:5a:1f:03:
5a:14:fc:e3:c1:6a:04:94:93:51:fc:57:ac:1f:fa:ac:97:18:
68:0e:ed:a9:67:bb:e5:42:ec:4d:cb:29:a3:63:45:aa:0e:f2:
4b:06:ac:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bh7G46vLKSw6VNJntSIa3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhZTRiYzk0MDFkOWY4Nzc3MmM4YzljNjk4MzQwNzc1MTJm
NDI2MTEwHhcNMjYwNDE3MTMwMDU0WhcNMjYwNDE4MTMwMDU0WjAzMTEwLwYDVQQD
Eyg4ZTAxZGMwNTdkYzMwOWNmMDA1YmZjNThmM2EyZWI5OWNjMjRjY2MzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDrB5Owb89QwKzXLtm6HFz26+Fjs
YVWe7aAAO/l/ruaf7fGTqmbQRQ4HzsHEJhA1IweJU4Znn9r8W1XiLIXkYvHSjaYC
QiaxVz20X/1BtBiSVXz19N+JkGRmgdFO2m9y/1gyJEsuXxFi2b6ddaEj41cJsI84
5XKrFMaam1ZlQHB9MOt6+JlCxyS7OvdpMtFn2lLZDJglOTftjiqvotTQe8XqS6/k
YvjF9vQ6LKvDgSSEUBXFG43bIPHLbNK2fRfmrpuBg3ijU9TLRG882ACfVAYIodzv
Qfz1H0tf0ouMG0glp1DP96bM86tLkZFZHqfrFUw7jSBV47b3+AmjnFhu3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI4B3AV9wwnPAFv8WPOi65nMJMzDMB8GA1UdIwQY
MBaAFArkvJQB2fh3csjJxpg0B3US9CYRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3VTOGxBSFotSGR5eU1uR21EUUhkUkwwSmhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9hNDA3YTAtOGJjMS00NDE2LTk0Mzct
MjQyNDY2ODJiZjAwLzEvQ3VTOGxBSFotSGR5eU1uR21EUUhkUkwwSmhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC9hNDA3YTAtOGJjMS00NDE2LTk0MzctMjQyNDY2ODJiZjAw
LzEvQ3VTOGxBSFotSGR5eU1uR21EUUhkUkwwSmhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEqPpVIWE
KO+6701/MFtkMqlU1wxJyuhDaKAZyHx0tzN0onVDlrgNuqFqzNs6FETpwyk18xrn
pKNJe7seWCpXvNLHnjxNUO2sYmNdf00uyyEdEm2/Qk7mdXJUjeZ6gpB00tPLAGPx
zCuDmGFZbOr5MW04lMg8TGzdYMClS53WQ2ZbeVEI5+IFV3kwC01KhgcPbuvGXstr
13Kwe7m7jRLOANLCSj53XN+Tk+g5acCBWJvQviMz8jlbMp2uoS4ttiyHOYn9PNZS
UpcdVfhBpzhATuuudF56Wh8DWhT848FqBJSTUfxXrB/6rJcYaA7tqWe75ULsTcsp
o2NFqg7ySwaszg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:16:37 2026 by rpki-client