Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e5/c09c64-0baf-4b07-8d29-473851709c58/1/curcen7OR31fTXdyQ7YPK7u3VgM.mft
File: curcen7OR31fTXdyQ7YPK7u3VgM.mft (raw, json)
Hash identifier: 0pb9ylMwGLjo7vw90FqikkPWvnO6ygi9GA0P3iAlM+Q=
Subject key identifier: DC:2E:08:79:B9:72:0E:CC:5B:C5:DF:AD:39:5A:E2:5B:66:37:1E:87
Authority key identifier: 72:EA:DC:7A:7E:CE:47:7D:5F:4D:77:72:43:B6:0F:2B:BB:B7:56:03
Certificate issuer: /CN=72eadc7a7ece477d5f4d777243b60f2bbbb75603
Certificate serial: 01A1219CEA58E502B059956C8A77468F6848
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/curcen7OR31fTXdyQ7YPK7u3VgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/c09c64-0baf-4b07-8d29-473851709c58/1/curcen7OR31fTXdyQ7YPK7u3VgM.mft
Manifest number: 0D00
Signing time: Fri 09 Oct 2026 17:01:33 +0000
Manifest this update: Fri 09 Oct 2026 17:01:33 +0000
Manifest next update: Sat 10 Oct 2026 17:01:33 +0000
Files and hashes: 1: G3RuhmzfG29w9YFS7oTygz6W0Vw.roa (hash: JX85b3D4X40BgCYerPxa2mnW3gNxZep/hukddR8oH8k=)
2: curcen7OR31fTXdyQ7YPK7u3VgM.crl (hash: Ce/jYEYxESuhim90KhKkXWIJTAoAFfasRp1nnwG9CXM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/c09c64-0baf-4b07-8d29-473851709c58/1/curcen7OR31fTXdyQ7YPK7u3VgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/c09c64-0baf-4b07-8d29-473851709c58/1/curcen7OR31fTXdyQ7YPK7u3VgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/curcen7OR31fTXdyQ7YPK7u3VgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 13:28:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:21:9c:ea:58:e5:02:b0:59:95:6c:8a:77:46:8f:68:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72eadc7a7ece477d5f4d777243b60f2bbbb75603
Validity
Not Before: Oct 9 17:01:33 2026 GMT
Not After : Oct 10 17:01:33 2026 GMT
Subject: CN=dc2e0879b9720ecc5bc5dfad395ae25b66371e87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ac:28:3f:d4:4b:50:08:56:9d:87:4d:42:4c:
5b:ab:ed:a6:31:86:2f:4b:3e:e9:d9:5c:9c:ad:db:
8d:15:bc:3c:0f:f3:00:29:d6:96:18:6c:34:d9:a0:
86:6a:26:c3:ca:91:93:c4:a5:8a:98:82:6e:2a:3d:
df:0f:f6:14:8d:20:b3:bb:0c:5a:de:33:b3:5e:b9:
ae:27:9d:a6:06:77:1f:6b:ff:59:81:db:69:1a:93:
41:31:f7:76:88:5f:41:00:a8:12:6a:0a:91:dc:bd:
ec:29:f0:87:40:04:87:15:2e:e9:1c:30:81:ea:de:
66:03:51:7f:5b:aa:77:95:f6:f1:ab:cb:42:02:f5:
9c:d8:6b:e8:a5:a7:66:21:54:52:fb:87:c1:d6:5d:
57:b4:0e:ed:35:8c:db:7d:ee:ce:af:af:08:33:b7:
ef:25:d2:c2:77:e0:d6:78:a4:9c:b2:93:ff:3e:5b:
d7:c9:db:e2:a5:70:40:72:6a:57:d3:6a:d2:dd:3f:
85:b3:b1:12:91:83:41:14:b6:ac:5a:4e:3d:1c:17:
52:d5:f9:67:4e:f2:7b:f8:56:7f:d0:7e:4f:88:42:
3a:c6:20:01:3d:74:cf:ad:95:f5:0e:61:bc:81:26:
98:5f:5d:d8:56:dc:c8:f1:b5:4f:bf:6f:6e:d8:87:
58:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:2E:08:79:B9:72:0E:CC:5B:C5:DF:AD:39:5A:E2:5B:66:37:1E:87
X509v3 Authority Key Identifier:
keyid:72:EA:DC:7A:7E:CE:47:7D:5F:4D:77:72:43:B6:0F:2B:BB:B7:56:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/curcen7OR31fTXdyQ7YPK7u3VgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c09c64-0baf-4b07-8d29-473851709c58/1/curcen7OR31fTXdyQ7YPK7u3VgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c09c64-0baf-4b07-8d29-473851709c58/1/curcen7OR31fTXdyQ7YPK7u3VgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:49:76:cd:33:24:6a:46:76:2e:ca:5a:24:c1:76:2e:3e:33:
b6:47:46:c4:09:47:89:bd:d7:56:8f:73:65:ee:fb:49:ad:09:
a7:d0:6a:78:5a:db:ee:74:c7:1f:d0:27:07:71:0f:f8:63:d6:
bb:a3:96:d3:ed:0c:f5:72:69:b1:e9:16:f7:3f:9e:9f:4f:91:
c2:93:7f:e3:db:af:e8:7f:02:14:d1:b7:b0:73:b7:61:ef:4e:
44:29:fa:e6:3b:29:81:1a:47:51:b5:fe:56:26:34:05:61:04:
1f:74:46:8f:dc:ca:e8:32:04:bb:44:b3:f1:d1:79:71:4b:64:
a3:d1:94:f9:25:7d:17:82:5c:8e:a0:99:22:1b:83:7d:99:e9:
24:ea:47:0d:b9:0e:07:62:42:6b:80:4a:58:30:7f:d8:f1:09:
00:ff:34:40:f7:ab:25:9a:55:35:ba:77:8d:ef:a3:21:1f:f5:
84:7d:51:6b:d7:f3:3a:4b:26:d6:a1:4a:74:dc:a3:40:81:4b:
aa:c0:5a:3d:79:01:df:73:2e:f3:9a:61:45:a8:54:74:a0:39:
d9:b1:3c:a1:d1:51:11:eb:f0:6a:4a:f5:10:e0:61:51:76:0b:
f4:9c:1f:3f:da:c6:72:f6:31:a0:cc:61:ca:16:e5:4d:92:2d:
48:a9:cf:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 22:40:10 2026 by rpki-client