Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/eae3d7-eee8-421e-80d9-982cce868ffa/1/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.mft
File: CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.mft (raw, json)
Hash identifier: iHSB05rCw58BH/LlfMuNXmKgswNz7+Y9HIKo605k+UY=
Subject key identifier: 1B:94:BB:16:9C:21:C6:0F:F1:C5:02:41:D4:9D:4D:E5:E2:11:37:60
Authority key identifier: 09:4E:A1:CF:4F:DC:34:75:C1:F2:8D:61:1C:1F:18:FE:02:7C:10:98
Certificate issuer: /CN=094ea1cf4fdc3475c1f28d611c1f18fe027c1098
Certificate serial: 019EBE111D61902DE98DB0F6E632B2DF4177
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/eae3d7-eee8-421e-80d9-982cce868ffa/1/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.mft
Manifest number: 1958
Signing time: Fri 12 Jun 2026 23:00:53 +0000
Manifest this update: Fri 12 Jun 2026 23:00:53 +0000
Manifest next update: Sat 13 Jun 2026 23:00:53 +0000
Files and hashes: 1: CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.crl (hash: gMA/Q4njsGTg53pTzLcWnAKIY7W31Ym2BKySuO8/Utc=)
2: WnQNBeJ77W1lWNnHWWSvM1zW9Ss.roa (hash: 4WNmsHvXiTbK61q93ojoVESn4x/SoVpSfuMXeeNjBw0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/eae3d7-eee8-421e-80d9-982cce868ffa/1/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/eae3d7-eee8-421e-80d9-982cce868ffa/1/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 23:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:11:1d:61:90:2d:e9:8d:b0:f6:e6:32:b2:df:41:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=094ea1cf4fdc3475c1f28d611c1f18fe027c1098
Validity
Not Before: Jun 12 23:00:53 2026 GMT
Not After : Jun 13 23:00:53 2026 GMT
Subject: CN=1b94bb169c21c60ff1c50241d49d4de5e2113760
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:bd:9d:7d:cc:aa:3f:9d:c8:17:4a:68:45:a5:
26:52:2a:46:fe:2f:22:1e:c5:72:0e:05:91:da:53:
db:35:8b:79:fc:2e:40:4c:41:8d:4b:c2:08:86:4a:
aa:97:58:ca:5d:c5:b8:f5:6d:a2:ba:60:df:48:96:
b1:d8:80:49:d3:4f:3f:c4:ae:80:54:ee:91:76:8e:
1d:a8:f7:8e:49:71:7d:4c:e3:eb:69:f3:2e:30:c5:
57:7e:be:d4:5a:15:0c:20:eb:94:d8:ae:c5:ba:2a:
96:52:ed:6f:4b:3a:ce:ad:1e:30:57:c2:6a:28:41:
46:9a:d5:e1:d4:dd:43:3f:79:87:2b:52:34:74:2e:
da:81:40:37:67:0d:1a:b7:96:34:71:d3:2f:13:a4:
a8:48:f8:e8:46:e6:97:f3:e3:48:94:bd:df:6e:d9:
07:74:2b:da:dd:55:8e:eb:8b:6e:7e:15:30:4a:71:
73:75:74:aa:cd:74:1f:5c:00:d9:13:e1:95:c2:62:
57:75:34:f5:21:02:88:72:9e:f7:56:5f:ea:5e:80:
69:74:7d:a4:4d:fd:6e:b3:ea:49:7e:9f:3a:cb:9d:
b0:fb:2e:64:5e:74:7c:98:24:67:55:e1:7e:88:6e:
71:ce:98:5f:1d:f4:fc:91:27:70:97:68:d7:70:e0:
62:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:94:BB:16:9C:21:C6:0F:F1:C5:02:41:D4:9D:4D:E5:E2:11:37:60
X509v3 Authority Key Identifier:
keyid:09:4E:A1:CF:4F:DC:34:75:C1:F2:8D:61:1C:1F:18:FE:02:7C:10:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/eae3d7-eee8-421e-80d9-982cce868ffa/1/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/eae3d7-eee8-421e-80d9-982cce868ffa/1/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:2e:cb:40:19:51:5b:83:2a:bb:ef:12:d6:89:32:a3:1f:fb:
f4:47:4d:10:18:b9:b3:48:4c:6e:d8:85:38:40:2f:39:88:84:
b4:dd:08:71:89:d7:4f:c9:1c:2b:5b:b0:c5:66:e3:aa:55:68:
b4:90:fc:cd:49:49:64:cd:20:f8:a5:d1:ff:7c:34:e4:b5:93:
c1:5a:32:06:08:0d:00:b4:2f:30:38:59:e1:e3:6c:73:fd:36:
65:85:64:8b:2f:53:60:6a:68:b8:cc:f0:98:03:1d:c3:3c:23:
30:12:ff:93:73:53:7b:39:07:51:b0:35:cb:00:40:8f:5b:b0:
eb:36:1b:4d:0e:d3:48:f5:1a:e5:f6:03:42:5f:90:44:1c:fb:
6c:67:cb:fd:03:6d:da:09:81:48:ac:e9:bc:70:fb:c3:38:12:
4f:da:cc:60:43:f9:82:b8:b4:f0:b8:88:d6:d5:e1:9e:7e:f6:
21:13:c8:37:1a:44:0c:c1:32:b0:6c:7a:3d:7c:74:0a:0d:dd:
2a:d5:86:88:e3:ed:cc:6f:b8:0b:5f:3f:1b:7f:7d:45:b3:83:
02:5d:89:c3:bf:99:a2:91:4e:e9:6e:2d:4a:25:22:07:03:91:
74:2d:11:09:db:36:92:a4:91:b9:8c:fc:25:62:cd:34:a3:d2:
a8:37:83:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6+ER1hkC3pjbD25jKy30F3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5NGVhMWNmNGZkYzM0NzVjMWYyOGQ2MTFjMWYxOGZlMDI3
YzEwOTgwHhcNMjYwNjEyMjMwMDUzWhcNMjYwNjEzMjMwMDUzWjAzMTEwLwYDVQQD
EygxYjk0YmIxNjljMjFjNjBmZjFjNTAyNDFkNDlkNGRlNWUyMTEzNzYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAur2dfcyqP53IF0poRaUmUipG/i8i
HsVyDgWR2lPbNYt5/C5ATEGNS8IIhkqql1jKXcW49W2iumDfSJax2IBJ008/xK6A
VO6Rdo4dqPeOSXF9TOPrafMuMMVXfr7UWhUMIOuU2K7FuiqWUu1vSzrOrR4wV8Jq
KEFGmtXh1N1DP3mHK1I0dC7agUA3Zw0at5Y0cdMvE6SoSPjoRuaX8+NIlL3fbtkH
dCva3VWO64tufhUwSnFzdXSqzXQfXADZE+GVwmJXdTT1IQKIcp73Vl/qXoBpdH2k
Tf1us+pJfp86y52w+y5kXnR8mCRnVeF+iG5xzphfHfT8kSdwl2jXcOBiewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBuUuxacIcYP8cUCQdSdTeXiETdgMB8GA1UdIwQY
MBaAFAlOoc9P3DR1wfKNYRwfGP4CfBCYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1U2aHowX2NOSFhCOG8xaEhCOFlfZ0o4RUpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC9lYWUzZDctZWVlOC00MjFlLTgwZDkt
OTgyY2NlODY4ZmZhLzEvQ1U2aHowX2NOSFhCOG8xaEhCOFlfZ0o4RUpnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC9lYWUzZDctZWVlOC00MjFlLTgwZDktOTgyY2NlODY4ZmZh
LzEvQ1U2aHowX2NOSFhCOG8xaEhCOFlfZ0o4RUpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASC7LQBlR
W4Mqu+8S1okyox/79EdNEBi5s0hMbtiFOEAvOYiEtN0IcYnXT8kcK1uwxWbjqlVo
tJD8zUlJZM0g+KXR/3w05LWTwVoyBggNALQvMDhZ4eNsc/02ZYVkiy9TYGpouMzw
mAMdwzwjMBL/k3NTezkHUbA1ywBAj1uw6zYbTQ7TSPUa5fYDQl+QRBz7bGfL/QNt
2gmBSKzpvHD7wzgST9rMYEP5gri08LiI1tXhnn72IRPINxpEDMEysGx6PXx0Cg3d
KtWGiOPtzG+4C18/G399RbODAl2Jw7+ZopFO6W4tSiUiBwORdC0RCds2kqSRuYz8
JWLNNKPSqDeDFw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:20:21 2026 by rpki-client