Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b0/eae3d7-eee8-421e-80d9-982cce868ffa/1/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.mft
File: CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.mft (raw, json)
Hash identifier: smz9Vif4hX10mOmEhOeW2/SCXCzmOllmfemANJCjepg=
Subject key identifier: EC:49:A2:2A:90:3D:E7:C0:5C:41:04:22:DC:9E:67:48:10:C6:30:D1
Authority key identifier: 09:4E:A1:CF:4F:DC:34:75:C1:F2:8D:61:1C:1F:18:FE:02:7C:10:98
Certificate issuer: /CN=094ea1cf4fdc3475c1f28d611c1f18fe027c1098
Certificate serial: 01A1DD94EE46BCCD037CFEF43366D0DF1500
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/eae3d7-eee8-421e-80d9-982cce868ffa/1/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.mft
Manifest number: 1AF6
Signing time: Sun 15 Nov 2026 05:01:27 +0000
Manifest this update: Sun 15 Nov 2026 05:01:27 +0000
Manifest next update: Mon 16 Nov 2026 05:01:27 +0000
Files and hashes: 1: CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.crl (hash: O5XlR2qladhVb75GjllYL+FGk21Oh8tON3C8CE4vENA=)
2: WnQNBeJ77W1lWNnHWWSvM1zW9Ss.roa (hash: 4WNmsHvXiTbK61q93ojoVESn4x/SoVpSfuMXeeNjBw0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/eae3d7-eee8-421e-80d9-982cce868ffa/1/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/eae3d7-eee8-421e-80d9-982cce868ffa/1/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 05:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:94:ee:46:bc:cd:03:7c:fe:f4:33:66:d0:df:15:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=094ea1cf4fdc3475c1f28d611c1f18fe027c1098
Validity
Not Before: Nov 15 05:01:27 2026 GMT
Not After : Nov 16 05:01:27 2026 GMT
Subject: CN=ec49a22a903de7c05c410422dc9e674810c630d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b7:21:d7:cc:a3:c6:d3:b8:bc:5b:82:39:66:
3b:33:3e:40:79:43:4e:f9:46:a5:d8:02:f1:06:35:
00:fb:49:b3:5e:50:5f:65:76:29:d3:b3:c0:61:88:
da:a5:04:49:03:1d:08:43:72:6b:f9:f3:72:54:aa:
c1:8a:ef:a2:74:ae:8e:60:2c:1e:dc:04:b2:8c:b8:
74:3b:35:40:b5:1a:c5:cc:97:97:4e:4b:1d:a6:67:
9a:f5:7e:24:80:df:c0:17:57:3b:49:04:36:45:b9:
7a:39:13:9b:77:14:02:55:35:e7:5e:03:16:55:68:
8c:d7:03:0c:73:12:fb:21:0e:de:a8:54:94:76:8d:
c4:7f:af:96:fb:f6:4a:0b:2b:20:18:9d:5e:46:29:
9b:c9:99:c7:68:69:1d:7e:e5:2f:01:29:51:5e:b9:
21:ed:ce:59:a4:1b:9e:57:bb:4c:fb:12:89:17:e2:
bd:9f:f6:1b:92:b6:34:58:6d:28:31:9a:e2:5c:37:
55:44:48:d5:75:01:99:50:4c:7e:78:f3:5b:b5:ce:
b9:3a:4f:65:93:01:93:c9:cf:f4:a3:06:dd:65:32:
05:1c:a3:d6:c0:8c:09:37:15:7d:fd:f4:83:53:02:
b0:aa:37:1e:3e:fa:68:f2:ed:db:99:e7:51:bc:ae:
4c:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:49:A2:2A:90:3D:E7:C0:5C:41:04:22:DC:9E:67:48:10:C6:30:D1
X509v3 Authority Key Identifier:
keyid:09:4E:A1:CF:4F:DC:34:75:C1:F2:8D:61:1C:1F:18:FE:02:7C:10:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/eae3d7-eee8-421e-80d9-982cce868ffa/1/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/eae3d7-eee8-421e-80d9-982cce868ffa/1/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:64:d6:43:5d:f1:04:d2:ce:5f:92:69:b4:2e:aa:18:86:1b:
eb:d2:d7:d5:b3:67:d8:33:5a:a4:52:cc:0d:48:9e:ae:7c:35:
9c:5b:68:ca:02:9b:1a:8a:2f:68:fd:0e:c2:6c:6e:ec:4d:c6:
f9:9a:e5:86:3b:ae:7a:fb:41:be:f1:d9:40:56:3f:45:26:39:
68:6b:8e:d8:63:aa:7c:83:5b:0c:1f:37:90:66:56:f2:ca:d2:
ba:aa:d0:38:f3:6d:41:5e:65:26:70:5a:cd:7f:0e:31:6a:87:
8f:a8:ec:de:af:c1:fa:31:a7:95:db:30:c1:66:9a:c0:c4:e1:
c5:b9:aa:c7:fe:67:e2:7f:21:5d:e6:2f:7a:f4:9f:69:b1:71:
a9:35:a6:2a:35:59:b5:c4:23:55:ef:f5:74:5e:99:df:27:ba:
3d:c4:ca:58:fa:1f:9b:64:31:9b:d8:48:08:0d:02:7f:8c:51:
f4:2b:48:1f:14:50:cd:40:b1:5a:41:b6:16:d0:7e:7b:a5:cc:
10:24:a9:cd:ff:27:17:b0:42:37:65:a8:98:2c:94:ec:3c:47:
4f:d0:7a:af:9a:c9:34:b9:50:33:3f:c4:bc:66:fc:a9:e8:1f:
47:b0:3b:3c:7a:39:b0:4e:b8:99:36:7a:7f:d8:e7:86:07:fd:
ca:0f:f7:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:42:46 2026 by rpki-client