Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/eae3d7-eee8-421e-80d9-982cce868ffa/1/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.mft
File: CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.mft (raw, json)
Hash identifier: wjysVMnSMTnOR6bpt36BMGmoACz8WN13BwqICysPoSA=
Subject key identifier: FC:B3:2D:90:47:45:8B:20:66:80:DE:04:DA:5A:03:D7:AB:7C:CC:D2
Authority key identifier: 09:4E:A1:CF:4F:DC:34:75:C1:F2:8D:61:1C:1F:18:FE:02:7C:10:98
Certificate issuer: /CN=094ea1cf4fdc3475c1f28d611c1f18fe027c1098
Certificate serial: 019CAAFD1D0F1D6744DE4B9B3C576DDBBDAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/eae3d7-eee8-421e-80d9-982cce868ffa/1/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.mft
Manifest number: 1845
Signing time: Sun 01 Mar 2026 20:00:40 +0000
Manifest this update: Sun 01 Mar 2026 20:00:40 +0000
Manifest next update: Mon 02 Mar 2026 20:00:40 +0000
Files and hashes: 1: CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.crl (hash: CbmZ6kcYWLjIQyAoNYfMDwNzR6Sf9yj2fxL8NRG7n2g=)
2: WnQNBeJ77W1lWNnHWWSvM1zW9Ss.roa (hash: 4WNmsHvXiTbK61q93ojoVESn4x/SoVpSfuMXeeNjBw0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/eae3d7-eee8-421e-80d9-982cce868ffa/1/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/eae3d7-eee8-421e-80d9-982cce868ffa/1/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 20:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:1d:0f:1d:67:44:de:4b:9b:3c:57:6d:db:bd:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=094ea1cf4fdc3475c1f28d611c1f18fe027c1098
Validity
Not Before: Mar 1 20:00:40 2026 GMT
Not After : Mar 2 20:00:40 2026 GMT
Subject: CN=fcb32d9047458b206680de04da5a03d7ab7cccd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a6:d8:95:ed:df:41:09:b2:96:42:e0:b7:84:
e0:d6:27:5c:2d:ed:58:c8:c4:54:99:0b:db:d0:74:
32:85:2e:b1:f9:ae:23:b4:d9:e6:0a:74:d7:31:c1:
09:ca:5d:f1:e9:a1:ba:d5:fb:ee:ef:ea:d7:6f:3d:
a2:56:88:4e:3c:25:40:94:b8:1b:68:53:f8:a2:6a:
ac:3a:f8:e3:7c:00:ca:d1:2f:6e:25:d9:6d:1e:90:
ed:83:05:d2:e3:0c:91:f0:6f:35:3b:a4:38:df:28:
42:2f:e5:7b:fb:07:af:9c:8e:ed:cb:d6:e4:56:14:
38:dc:3e:b3:2d:2c:55:fd:1f:50:aa:84:4b:27:55:
ee:43:55:45:2b:1c:3a:65:8f:3e:fd:07:ee:60:f2:
e7:03:a6:e5:84:17:0e:43:cc:51:e1:56:f6:c9:f4:
10:e4:8e:4f:4c:8a:f4:17:61:a9:33:a6:11:37:6e:
ac:86:ed:7a:63:ed:1a:d7:58:de:7b:c9:c6:05:27:
e7:16:8d:e9:ac:f0:bb:ac:86:36:e7:4c:34:f5:1f:
e3:6e:2c:a3:9e:b0:32:87:28:b5:ed:af:ef:d5:13:
e7:7e:64:47:6a:16:95:77:12:9c:c0:1b:bd:62:61:
49:14:f8:30:05:8d:66:54:dd:e3:ca:ee:c9:f1:a1:
d9:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:B3:2D:90:47:45:8B:20:66:80:DE:04:DA:5A:03:D7:AB:7C:CC:D2
X509v3 Authority Key Identifier:
keyid:09:4E:A1:CF:4F:DC:34:75:C1:F2:8D:61:1C:1F:18:FE:02:7C:10:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/eae3d7-eee8-421e-80d9-982cce868ffa/1/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/eae3d7-eee8-421e-80d9-982cce868ffa/1/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:44:0f:d3:2d:a9:f8:c6:8d:52:e2:bc:cc:9a:1f:b9:26:5e:
69:44:fa:fc:36:91:2e:dc:8f:0c:af:8d:a9:3f:c1:95:f9:45:
b6:c0:51:8b:2d:32:26:09:d7:6a:b6:8a:c8:dd:81:57:c2:2d:
ac:3f:9a:ff:2a:2b:01:5e:80:41:e9:90:b4:cb:ee:6e:91:20:
c7:f2:d0:7d:6b:89:f0:05:2c:b8:d2:1b:8d:25:ae:75:3c:f9:
52:d8:0e:72:84:e1:9d:ac:63:67:c5:71:02:af:2e:22:c9:33:
4e:e8:19:a9:4f:06:e1:d0:7f:d3:87:1c:f0:41:13:7d:b2:27:
24:3d:18:ce:53:68:a1:a2:21:a5:74:98:25:cc:67:fc:47:c5:
f9:63:63:c0:4a:25:48:d4:37:6e:4e:69:da:25:22:d3:e5:6b:
fd:f5:87:4c:f7:76:14:c8:13:46:c7:aa:1e:b6:19:e7:2f:ac:
ac:08:9a:68:29:3f:d0:b4:dc:88:ea:6d:3b:6a:ee:20:63:3a:
7a:07:f9:fb:01:bb:20:e5:4b:cc:53:62:ee:23:3c:08:c9:45:
17:86:46:59:31:9e:a7:57:87:f2:94:0d:9c:31:ad:c4:0a:23:
6c:87:c1:e5:c8:48:92:5e:d9:6d:b5:01:3b:ba:22:32:e4:f4:
ad:7a:52:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:40:24 2026 by rpki-client