Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/eae3d7-eee8-421e-80d9-982cce868ffa/1/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.mft
File: CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.mft (raw, json)
Hash identifier: Y9ok7ssy79sYMIyVPt65Jzn9SG/8Nz++3oQ8RLmAi1U=
Subject key identifier: C8:68:ED:41:F5:83:F8:E2:4A:67:DA:6B:4C:6D:11:5F:35:CB:92:89
Authority key identifier: 09:4E:A1:CF:4F:DC:34:75:C1:F2:8D:61:1C:1F:18:FE:02:7C:10:98
Certificate issuer: /CN=094ea1cf4fdc3475c1f28d611c1f18fe027c1098
Certificate serial: 019D988673CF9D434FE6F0EE0B2113772426
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/eae3d7-eee8-421e-80d9-982cce868ffa/1/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.mft
Manifest number: 18C0
Signing time: Thu 16 Apr 2026 23:00:41 +0000
Manifest this update: Thu 16 Apr 2026 23:00:41 +0000
Manifest next update: Fri 17 Apr 2026 23:00:41 +0000
Files and hashes: 1: CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.crl (hash: nbvn2lZ1dOY4du4DSr2+dsXBVpoQLorgnPOzgGmYNdA=)
2: WnQNBeJ77W1lWNnHWWSvM1zW9Ss.roa (hash: 4WNmsHvXiTbK61q93ojoVESn4x/SoVpSfuMXeeNjBw0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/eae3d7-eee8-421e-80d9-982cce868ffa/1/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/eae3d7-eee8-421e-80d9-982cce868ffa/1/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:73:cf:9d:43:4f:e6:f0:ee:0b:21:13:77:24:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=094ea1cf4fdc3475c1f28d611c1f18fe027c1098
Validity
Not Before: Apr 16 23:00:41 2026 GMT
Not After : Apr 17 23:00:41 2026 GMT
Subject: CN=c868ed41f583f8e24a67da6b4c6d115f35cb9289
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:1e:da:a2:5b:57:07:2b:08:dd:c9:a7:e2:4b:
97:2c:38:76:4f:6f:96:ca:80:67:2a:97:b5:72:e5:
39:93:9a:a2:6c:3e:b0:c7:14:cf:33:6c:a6:12:3c:
00:06:5a:32:7f:6f:eb:3d:d9:9b:e4:a2:b8:03:05:
38:07:22:59:b4:dc:49:92:bc:01:a2:ac:63:a2:ca:
d3:02:60:43:a7:d7:a2:47:9a:72:b3:a4:19:1f:e0:
24:53:8e:dc:f9:d8:ce:fd:44:ba:57:22:99:d1:c1:
21:b4:3a:f8:2f:e4:ca:a6:10:08:42:92:e1:c6:cf:
2e:fd:0e:fe:e6:84:34:95:78:1d:b7:65:0d:ec:d7:
e8:5b:3a:19:94:5d:9b:94:c5:af:80:f9:be:b6:08:
26:cd:95:cf:d8:bf:67:23:05:a1:5f:9a:92:9e:12:
83:26:01:5d:f9:65:da:23:38:16:5f:7e:ee:36:69:
93:67:b4:2d:ca:1e:45:4a:04:60:ab:a9:f6:42:cd:
90:84:73:21:9b:bb:8f:df:58:21:a1:46:35:e3:85:
2a:e9:27:bd:ee:6c:cc:31:79:30:a3:72:f7:37:d2:
9b:15:3f:bd:74:c5:a3:9b:f5:2f:8e:d9:38:f0:f1:
e6:4e:48:7b:a7:9d:ce:64:72:1d:7d:6f:d5:89:35:
e0:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:68:ED:41:F5:83:F8:E2:4A:67:DA:6B:4C:6D:11:5F:35:CB:92:89
X509v3 Authority Key Identifier:
keyid:09:4E:A1:CF:4F:DC:34:75:C1:F2:8D:61:1C:1F:18:FE:02:7C:10:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/eae3d7-eee8-421e-80d9-982cce868ffa/1/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/eae3d7-eee8-421e-80d9-982cce868ffa/1/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:6c:aa:38:3b:b1:4b:43:88:2b:d3:c1:6d:7e:d8:0e:08:98:
65:05:be:67:df:ba:53:b6:b2:9e:9a:9d:05:a3:7d:83:52:7f:
9f:38:28:ab:cb:cb:84:eb:2c:fd:8a:5a:d5:05:93:02:7c:06:
6a:e8:41:85:d2:59:8b:16:67:bc:d1:65:3b:64:fa:b1:6c:63:
dd:e6:b6:0d:77:dd:4b:9b:25:0d:cc:52:db:ae:4b:d1:9e:89:
7d:0c:5f:c3:8c:91:c1:50:13:c3:c2:a1:8d:4d:c9:d4:3f:8c:
8d:ad:39:04:96:10:7e:ed:86:0e:60:9a:38:58:c8:3b:82:3e:
33:ac:72:99:19:49:43:65:34:1e:f7:3a:4f:42:76:d8:37:88:
c3:0d:2b:16:5d:60:5b:52:8d:6a:d3:f8:19:cf:d0:56:f7:c4:
ec:b5:0c:d5:5b:c4:1f:25:2a:64:35:52:9a:a3:77:d6:c7:05:
57:0c:f0:7d:d1:8c:dd:9c:35:2b:6f:60:d3:2d:c6:9c:eb:aa:
07:1d:b9:ba:8c:dc:8c:1d:9c:85:b8:61:b2:41:35:f4:f0:9c:
86:2c:04:6d:e2:95:4a:a9:a0:e8:0a:a7:23:2d:12:d7:bb:dc:
bd:dc:55:dd:56:fe:27:62:bb:11:56:a7:60:98:40:79:e5:81:
1a:9f:59:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:50:02 2026 by rpki-client