Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/434efd-ee54-4bcd-8141-c9f7c0e7acc6/1/cuv4F-GpLzzX9J32oxwmX_5HgAg.mft
File: cuv4F-GpLzzX9J32oxwmX_5HgAg.mft (raw, json)
Hash identifier: JsdxdxPCu/L2bHpEHO7JmrMwP0/tQRE4kancsvTWuc0=
Subject key identifier: F1:B5:88:0E:42:9E:DD:5A:8B:7A:CE:4E:0E:69:DE:2A:FB:2B:AA:E7
Authority key identifier: 72:EB:F8:17:E1:A9:2F:3C:D7:F4:9D:F6:A3:1C:26:5F:FE:47:80:08
Certificate issuer: /CN=72ebf817e1a92f3cd7f49df6a31c265ffe478008
Certificate serial: 019D9BBE868C7C14746AE29ED68F7AC0FAC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cuv4F-GpLzzX9J32oxwmX_5HgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/434efd-ee54-4bcd-8141-c9f7c0e7acc6/1/cuv4F-GpLzzX9J32oxwmX_5HgAg.mft
Manifest number: 01A3
Signing time: Fri 17 Apr 2026 14:00:47 +0000
Manifest this update: Fri 17 Apr 2026 14:00:47 +0000
Manifest next update: Sat 18 Apr 2026 14:00:47 +0000
Files and hashes: 1: 1y5lvBRirf64QUUNUs-wPlahoEo.roa (hash: LhMcKD7g9vzXQej5bGx62E/rTFGZbxyNoCRC/nLvA8U=)
2: QV7nlixfPKhI7EyPWNfAD7Hr-34.roa (hash: RcoZUOLY0DZ86B3NQRroG5VCtYfjUx1K45ubhmkvdMY=)
3: cuv4F-GpLzzX9J32oxwmX_5HgAg.crl (hash: xTykVWIX3RK2ovmyAhjB7bEmu/14UepMVc+QUOiPNMo=)
4: gs8em47DaB3LrlDmXLkgpxaB21Q.roa (hash: cb+0Kb2KZEjJwHjkLW7WFeSKNJZu/ACiHcXkWiE0wNU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/434efd-ee54-4bcd-8141-c9f7c0e7acc6/1/cuv4F-GpLzzX9J32oxwmX_5HgAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/434efd-ee54-4bcd-8141-c9f7c0e7acc6/1/cuv4F-GpLzzX9J32oxwmX_5HgAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/cuv4F-GpLzzX9J32oxwmX_5HgAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:be:86:8c:7c:14:74:6a:e2:9e:d6:8f:7a:c0:fa:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72ebf817e1a92f3cd7f49df6a31c265ffe478008
Validity
Not Before: Apr 17 14:00:47 2026 GMT
Not After : Apr 18 14:00:47 2026 GMT
Subject: CN=f1b5880e429edd5a8b7ace4e0e69de2afb2baae7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a7:3c:e8:96:24:25:65:f2:0a:ad:d9:26:ac:
eb:66:95:b1:ca:83:fb:48:02:d7:40:64:40:ed:72:
42:96:2b:39:30:b9:04:67:70:e1:2a:d8:fb:e6:db:
57:b3:ba:63:54:24:8f:7f:12:16:fb:21:ef:e0:e8:
00:dd:b9:40:fb:72:14:aa:09:9a:62:3a:64:0f:04:
9f:e4:ad:0d:34:09:b0:0b:7a:93:9b:42:15:11:91:
04:4e:b1:c3:44:d3:79:a9:ae:9b:3a:0f:cc:32:29:
0b:85:97:a4:d8:f5:5a:06:46:f3:01:24:7f:8f:c6:
2e:e7:19:17:21:42:c7:03:17:6f:bd:26:dd:64:86:
31:c2:b9:1c:18:56:15:3a:1c:d7:89:ae:f5:e8:59:
27:41:69:7e:6d:cd:30:58:cf:a3:17:e9:d0:38:98:
4f:61:40:65:34:ab:f0:36:84:ae:c8:24:3b:8d:18:
d9:12:cc:aa:47:27:82:9b:c2:17:5d:61:78:66:e5:
54:51:ab:dd:8c:d2:9d:3b:2a:94:b8:74:07:68:d3:
6e:fd:61:05:ca:27:d1:c5:70:79:74:79:e9:12:1d:
7d:cc:dc:07:87:68:5d:a7:28:95:bd:f7:42:64:5d:
77:e7:f0:c0:c1:3a:5f:b0:d2:9c:d1:9c:78:8f:e0:
c3:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:B5:88:0E:42:9E:DD:5A:8B:7A:CE:4E:0E:69:DE:2A:FB:2B:AA:E7
X509v3 Authority Key Identifier:
keyid:72:EB:F8:17:E1:A9:2F:3C:D7:F4:9D:F6:A3:1C:26:5F:FE:47:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cuv4F-GpLzzX9J32oxwmX_5HgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/434efd-ee54-4bcd-8141-c9f7c0e7acc6/1/cuv4F-GpLzzX9J32oxwmX_5HgAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/434efd-ee54-4bcd-8141-c9f7c0e7acc6/1/cuv4F-GpLzzX9J32oxwmX_5HgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:08:0c:90:75:b5:b1:ef:65:dd:5c:a5:7f:26:bf:d6:74:46:
b7:f3:c3:96:f7:c3:f6:42:49:bd:a7:2b:ad:20:4a:c2:cf:fd:
e3:41:e4:c2:89:27:7a:55:c8:39:46:6f:c4:c5:9e:08:d3:d8:
82:24:8f:02:55:d3:c5:dd:2c:12:62:9c:83:18:5c:01:92:13:
79:1a:4b:67:2f:09:14:6c:aa:db:7d:ba:7f:62:cf:e5:5c:60:
aa:4b:9d:19:bd:04:cb:bb:70:b4:62:83:00:3d:b9:a5:bb:04:
bf:99:01:28:21:0b:f2:5f:1f:b1:ab:8e:e5:c4:54:d6:4a:da:
85:d4:f4:2e:0d:4b:8b:20:8b:9a:40:94:14:f2:58:98:eb:c8:
e9:00:6f:a1:71:82:e4:59:48:75:a3:ea:67:53:3b:49:9e:95:
61:f5:04:2f:a3:51:c0:23:13:19:b1:ad:81:62:7c:31:9f:88:
8e:83:66:3b:81:00:85:65:e9:92:5c:d6:04:7f:92:ba:c6:04:
f0:4d:e1:cb:96:21:2b:43:1a:25:56:83:62:fa:e8:fe:7c:de:
a5:c2:5c:0d:3f:d8:44:58:23:3b:ad:68:f8:41:57:36:35:9a:
f2:1a:84:03:71:9d:d8:5c:3b:70:02:d4:1e:91:fe:90:37:d1:
ea:87:0b:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:48:29 2026 by rpki-client