Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/434efd-ee54-4bcd-8141-c9f7c0e7acc6/1/cuv4F-GpLzzX9J32oxwmX_5HgAg.mft
File: cuv4F-GpLzzX9J32oxwmX_5HgAg.mft (raw, json)
Hash identifier: cQxZhqUDchrRBOIYAByWlMxtQgeHGZaa1ajypk7Hogw=
Subject key identifier: 9A:1F:49:95:86:EA:4F:D5:18:6D:89:B9:70:EB:8A:0D:56:31:80:EF
Authority key identifier: 72:EB:F8:17:E1:A9:2F:3C:D7:F4:9D:F6:A3:1C:26:5F:FE:47:80:08
Certificate issuer: /CN=72ebf817e1a92f3cd7f49df6a31c265ffe478008
Certificate serial: 019CAC4704384484B073017E2D30BC196727
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cuv4F-GpLzzX9J32oxwmX_5HgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/434efd-ee54-4bcd-8141-c9f7c0e7acc6/1/cuv4F-GpLzzX9J32oxwmX_5HgAg.mft
Manifest number: 0127
Signing time: Mon 02 Mar 2026 02:01:01 +0000
Manifest this update: Mon 02 Mar 2026 02:01:01 +0000
Manifest next update: Tue 03 Mar 2026 02:01:01 +0000
Files and hashes: 1: 1y5lvBRirf64QUUNUs-wPlahoEo.roa (hash: LhMcKD7g9vzXQej5bGx62E/rTFGZbxyNoCRC/nLvA8U=)
2: QV7nlixfPKhI7EyPWNfAD7Hr-34.roa (hash: RcoZUOLY0DZ86B3NQRroG5VCtYfjUx1K45ubhmkvdMY=)
3: cuv4F-GpLzzX9J32oxwmX_5HgAg.crl (hash: hwMXUnM2JaJYm0Izk8U8H9AlEWk5ChTyAp1lGVf2aPs=)
4: gs8em47DaB3LrlDmXLkgpxaB21Q.roa (hash: cb+0Kb2KZEjJwHjkLW7WFeSKNJZu/ACiHcXkWiE0wNU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/434efd-ee54-4bcd-8141-c9f7c0e7acc6/1/cuv4F-GpLzzX9J32oxwmX_5HgAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/434efd-ee54-4bcd-8141-c9f7c0e7acc6/1/cuv4F-GpLzzX9J32oxwmX_5HgAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/cuv4F-GpLzzX9J32oxwmX_5HgAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:04:38:44:84:b0:73:01:7e:2d:30:bc:19:67:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72ebf817e1a92f3cd7f49df6a31c265ffe478008
Validity
Not Before: Mar 2 02:01:01 2026 GMT
Not After : Mar 3 02:01:01 2026 GMT
Subject: CN=9a1f499586ea4fd5186d89b970eb8a0d563180ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8e:c4:28:06:ba:8d:14:77:b2:cf:14:15:e8:
dc:c9:ee:a2:ed:2e:30:af:c2:bb:b7:6f:1d:1d:e0:
7f:51:cc:34:d0:dc:fa:37:1e:fd:8d:b6:6c:57:48:
91:7c:92:94:33:1c:81:e5:79:2e:27:24:c4:85:59:
68:d0:55:3d:7e:61:5b:e7:35:b4:db:b8:87:ab:8d:
cb:6e:8b:16:8b:24:99:83:a1:1e:f8:8e:6c:10:2b:
c3:2a:a3:a9:96:a8:0e:87:a9:c2:b1:da:56:ba:75:
6a:de:8f:4e:cf:13:9b:8d:c2:0e:51:ed:d3:53:6e:
9b:48:70:4e:42:41:71:46:fb:52:ac:57:1b:3d:bd:
85:ab:fa:76:82:64:af:d2:96:26:aa:32:dc:6d:dd:
6f:53:c1:a9:19:9e:79:44:f0:3c:0c:13:44:88:fd:
82:89:6e:8d:3b:4b:94:89:c3:c0:c0:d9:e7:28:87:
b2:a5:35:56:ba:07:df:6e:74:dc:ad:ba:e4:61:3b:
0c:61:c9:06:ab:c9:eb:2d:cb:81:79:eb:f5:16:6c:
72:e7:fe:71:2d:e2:e4:ac:16:be:89:bd:86:1d:03:
0f:04:0c:0a:b6:95:96:4b:c8:ff:e6:0a:33:d8:5a:
05:a1:e8:65:37:60:b6:27:4d:51:76:78:75:8b:cd:
72:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:1F:49:95:86:EA:4F:D5:18:6D:89:B9:70:EB:8A:0D:56:31:80:EF
X509v3 Authority Key Identifier:
keyid:72:EB:F8:17:E1:A9:2F:3C:D7:F4:9D:F6:A3:1C:26:5F:FE:47:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cuv4F-GpLzzX9J32oxwmX_5HgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/434efd-ee54-4bcd-8141-c9f7c0e7acc6/1/cuv4F-GpLzzX9J32oxwmX_5HgAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/434efd-ee54-4bcd-8141-c9f7c0e7acc6/1/cuv4F-GpLzzX9J32oxwmX_5HgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:66:4e:c6:f4:14:60:65:ff:6e:4b:d1:cf:71:99:bd:cd:2c:
40:c4:47:b2:f7:a4:37:d4:09:ac:ac:61:91:e2:8c:2e:2a:db:
71:92:35:29:61:cf:5a:c5:31:19:49:08:9d:7e:f9:a0:16:87:
37:2c:13:3b:01:bd:12:bb:b9:78:fa:93:20:6a:00:81:a5:8a:
20:7c:81:1a:02:91:06:c4:cb:0f:35:1b:03:60:82:ab:3e:be:
0a:40:45:9a:eb:6d:1a:14:89:fd:c8:30:8a:f0:c5:63:f3:e9:
19:d9:1c:b3:1b:3c:d6:e4:87:8b:fa:24:fe:ea:b6:74:41:bd:
33:8e:50:3f:78:81:1a:fc:c7:ea:9e:bc:f3:16:81:22:72:e5:
39:17:cd:d7:a8:4d:d8:9b:09:90:7a:1d:f8:a9:03:3f:10:c1:
15:a4:1b:67:f6:fc:61:d0:7f:d2:87:79:ba:b1:a2:2d:17:62:
23:c5:c4:36:12:b7:3a:5d:df:e5:bc:c7:72:c5:6b:fc:9d:c5:
65:23:90:42:94:fe:99:67:ee:20:99:88:dd:d7:03:bf:30:d3:
61:8d:e2:23:6c:55:71:d0:db:9f:d5:58:43:c3:90:7f:a4:e7:
4f:d3:32:ac:f5:23:84:42:e3:8c:c6:08:5e:a9:53:d7:a2:c9:
f8:d4:aa:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:42:05 2026 by rpki-client