Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/470cb8-eb6a-4934-9d47-968d0c7f22bb/1/cuW1e7OY1eGDmj_kJU33DXEs4Uo.mft
File: cuW1e7OY1eGDmj_kJU33DXEs4Uo.mft (raw, json)
Hash identifier: 5HPOeYDl+Vg25NGlBFkLWSNjIGQUlKSOKATdmm2dkq8=
Subject key identifier: CB:8A:A0:C5:4A:27:F5:1B:C6:AC:67:31:9A:11:43:5C:11:4B:74:56
Authority key identifier: 72:E5:B5:7B:B3:98:D5:E1:83:9A:3F:E4:25:4D:F7:0D:71:2C:E1:4A
Certificate issuer: /CN=72e5b57bb398d5e1839a3fe4254df70d712ce14a
Certificate serial: 019CAAFD3ABCA32B85F30212E85BCCD18A8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cuW1e7OY1eGDmj_kJU33DXEs4Uo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/470cb8-eb6a-4934-9d47-968d0c7f22bb/1/cuW1e7OY1eGDmj_kJU33DXEs4Uo.mft
Manifest number: 0A6D
Signing time: Sun 01 Mar 2026 20:00:48 +0000
Manifest this update: Sun 01 Mar 2026 20:00:48 +0000
Manifest next update: Mon 02 Mar 2026 20:00:48 +0000
Files and hashes: 1: RIVpRVcoTiPM597Ay6ktG1nRpoI.roa (hash: 8WsKosIyT+/va+/3Ff2UyTN4wl8h0E62UrDqXKvX/7s=)
2: cuW1e7OY1eGDmj_kJU33DXEs4Uo.crl (hash: TQ3wror/AuA0mu7dMTnk5E+OpTaj3e7qN2+E6VR8gsU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/470cb8-eb6a-4934-9d47-968d0c7f22bb/1/cuW1e7OY1eGDmj_kJU33DXEs4Uo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/470cb8-eb6a-4934-9d47-968d0c7f22bb/1/cuW1e7OY1eGDmj_kJU33DXEs4Uo.mft
rsync://rpki.ripe.net/repository/DEFAULT/cuW1e7OY1eGDmj_kJU33DXEs4Uo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:3a:bc:a3:2b:85:f3:02:12:e8:5b:cc:d1:8a:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72e5b57bb398d5e1839a3fe4254df70d712ce14a
Validity
Not Before: Mar 1 20:00:48 2026 GMT
Not After : Mar 2 20:00:48 2026 GMT
Subject: CN=cb8aa0c54a27f51bc6ac67319a11435c114b7456
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:67:6b:c7:85:20:f6:bf:0e:83:75:d3:5f:01:
16:a4:f6:82:c2:61:ae:c9:51:d5:8f:91:e1:26:bd:
ae:95:86:a5:07:94:2b:30:2e:59:bc:02:45:ca:c8:
4c:41:6b:e5:f9:60:f5:29:70:01:f2:60:e2:41:b1:
aa:03:53:36:ac:95:f2:cd:66:94:63:ab:4b:0f:de:
b2:04:90:0a:b1:df:ec:b5:ce:54:4e:45:f9:63:c8:
e3:15:6a:02:d5:41:9a:30:3d:c0:a0:a8:5e:7b:62:
da:dc:f6:23:95:d4:12:34:94:89:35:df:8e:e9:e1:
10:8b:1c:65:14:f6:97:b8:cc:23:8d:82:f2:89:88:
d1:6e:0f:d6:90:8c:25:82:a5:c4:85:d4:c6:f7:85:
b1:b5:d5:1c:3a:a3:ff:55:3c:4b:c9:96:b6:1c:40:
94:4c:6b:82:52:4a:54:d3:de:95:92:de:ef:7a:f8:
7a:d9:e3:2c:d4:a0:b1:ed:56:86:ae:00:ed:49:a2:
43:74:93:76:17:5a:d0:e3:0c:aa:16:74:b7:34:eb:
27:84:61:ec:1d:6b:c7:a9:83:39:a4:a3:6d:a3:a4:
22:e3:87:81:43:2f:b9:fa:6d:3d:65:a7:7a:7e:ad:
b3:cf:ba:c8:e2:82:52:73:88:13:e5:06:d7:2a:e0:
bb:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:8A:A0:C5:4A:27:F5:1B:C6:AC:67:31:9A:11:43:5C:11:4B:74:56
X509v3 Authority Key Identifier:
keyid:72:E5:B5:7B:B3:98:D5:E1:83:9A:3F:E4:25:4D:F7:0D:71:2C:E1:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cuW1e7OY1eGDmj_kJU33DXEs4Uo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/470cb8-eb6a-4934-9d47-968d0c7f22bb/1/cuW1e7OY1eGDmj_kJU33DXEs4Uo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/470cb8-eb6a-4934-9d47-968d0c7f22bb/1/cuW1e7OY1eGDmj_kJU33DXEs4Uo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:6f:35:41:90:42:ac:d7:f5:93:41:59:e5:f0:27:cb:b4:95:
63:31:71:d0:40:f5:d4:9c:cb:65:c4:2f:5b:45:32:39:d7:02:
fa:9b:41:39:5b:ec:bc:2d:dd:a5:04:2a:19:17:ff:e3:70:c4:
a9:67:4e:69:68:07:4f:35:fb:5e:44:70:be:48:45:c0:f6:82:
5f:17:85:04:c4:a8:ef:35:a6:53:51:28:de:4a:24:f3:a2:95:
3e:e1:33:02:70:18:b0:ab:5d:49:9c:5a:b7:41:b0:a3:98:1a:
d2:2d:27:b9:c9:15:db:7d:b7:ea:2b:88:68:43:78:1d:1c:cd:
c7:15:9a:56:9b:7e:c9:16:64:db:13:29:67:24:65:16:ee:a7:
d6:79:13:9b:b2:79:90:e0:3c:7a:a9:55:2f:1f:c4:44:85:18:
f5:98:2f:7f:07:b4:38:c7:49:1f:8b:5d:e0:fa:d5:7d:d6:c7:
fa:fa:ad:c9:21:81:f5:54:05:8d:63:d6:53:66:3b:4b:f0:fd:
75:aa:0e:c1:4e:f4:44:40:b0:86:3d:de:c2:ae:e3:1c:61:3e:
41:53:44:b6:c6:6f:f6:b5:fd:37:2b:5e:9e:a6:58:cf:8f:c8:
1e:5e:3d:08:f4:6e:3f:dd:16:aa:da:0d:14:ff:ea:a1:26:a6:
4b:c3:54:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:49:13 2026 by rpki-client