Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/470cb8-eb6a-4934-9d47-968d0c7f22bb/1/cuW1e7OY1eGDmj_kJU33DXEs4Uo.mft
File: cuW1e7OY1eGDmj_kJU33DXEs4Uo.mft (raw, json)
Hash identifier: 6SCjJuWYpyzz+5afjkgkxujkff0Y0szyE0Ulfo9oxGw=
Subject key identifier: B3:DD:87:85:CB:59:54:64:79:A3:2B:BF:77:8B:6B:9F:9C:A9:A2:75
Authority key identifier: 72:E5:B5:7B:B3:98:D5:E1:83:9A:3F:E4:25:4D:F7:0D:71:2C:E1:4A
Certificate issuer: /CN=72e5b57bb398d5e1839a3fe4254df70d712ce14a
Certificate serial: 019D988667C3227FEB53E544F229ABDCDB7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cuW1e7OY1eGDmj_kJU33DXEs4Uo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/470cb8-eb6a-4934-9d47-968d0c7f22bb/1/cuW1e7OY1eGDmj_kJU33DXEs4Uo.mft
Manifest number: 0AE8
Signing time: Thu 16 Apr 2026 23:00:38 +0000
Manifest this update: Thu 16 Apr 2026 23:00:38 +0000
Manifest next update: Fri 17 Apr 2026 23:00:38 +0000
Files and hashes: 1: RIVpRVcoTiPM597Ay6ktG1nRpoI.roa (hash: 8WsKosIyT+/va+/3Ff2UyTN4wl8h0E62UrDqXKvX/7s=)
2: cuW1e7OY1eGDmj_kJU33DXEs4Uo.crl (hash: nfKxMVNqiufxohwQV78BnSRx26XIw6qXkOof+D0PTho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/470cb8-eb6a-4934-9d47-968d0c7f22bb/1/cuW1e7OY1eGDmj_kJU33DXEs4Uo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/470cb8-eb6a-4934-9d47-968d0c7f22bb/1/cuW1e7OY1eGDmj_kJU33DXEs4Uo.mft
rsync://rpki.ripe.net/repository/DEFAULT/cuW1e7OY1eGDmj_kJU33DXEs4Uo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:67:c3:22:7f:eb:53:e5:44:f2:29:ab:dc:db:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72e5b57bb398d5e1839a3fe4254df70d712ce14a
Validity
Not Before: Apr 16 23:00:38 2026 GMT
Not After : Apr 17 23:00:38 2026 GMT
Subject: CN=b3dd8785cb59546479a32bbf778b6b9f9ca9a275
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e1:3e:ff:d5:5a:b5:8b:b5:26:75:94:a4:8f:
aa:d7:74:22:21:5f:6e:05:5e:05:04:1e:4f:8a:4c:
96:ed:3e:9f:ee:5b:cf:78:ac:d3:f3:3a:a1:2f:67:
4b:c0:42:23:7b:e7:62:bc:2b:92:b7:04:1a:1a:87:
83:e5:ae:3a:2b:a3:1a:bf:62:ac:b2:87:bf:71:5e:
dc:da:c2:68:97:89:49:98:8e:02:65:67:85:75:9a:
93:ba:13:93:27:f3:91:7a:f7:15:a0:23:f7:38:97:
5d:9d:09:57:a7:ff:a6:f2:36:35:41:31:b8:84:46:
bc:8e:00:17:22:3b:b6:e0:9c:42:6f:0c:e0:b1:cd:
f0:8b:42:25:da:c8:8e:98:d1:eb:1c:c9:a8:33:8e:
b2:af:04:db:23:67:de:cf:a0:75:4d:6f:88:a7:9f:
bf:ce:d1:f0:58:ce:25:db:ed:06:15:69:c3:d0:70:
71:29:57:83:00:69:d1:68:df:e0:9e:41:71:78:11:
3c:8f:07:52:d9:ca:aa:e0:84:fd:43:d2:64:78:41:
99:04:db:34:f9:ef:38:f1:4e:ef:dc:68:2c:ad:86:
29:87:d4:56:7e:5b:e0:75:36:29:4e:75:b3:97:f9:
8a:45:fe:81:29:d6:de:9a:c0:61:5c:9a:69:fd:24:
d8:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:DD:87:85:CB:59:54:64:79:A3:2B:BF:77:8B:6B:9F:9C:A9:A2:75
X509v3 Authority Key Identifier:
keyid:72:E5:B5:7B:B3:98:D5:E1:83:9A:3F:E4:25:4D:F7:0D:71:2C:E1:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cuW1e7OY1eGDmj_kJU33DXEs4Uo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/470cb8-eb6a-4934-9d47-968d0c7f22bb/1/cuW1e7OY1eGDmj_kJU33DXEs4Uo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/470cb8-eb6a-4934-9d47-968d0c7f22bb/1/cuW1e7OY1eGDmj_kJU33DXEs4Uo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:a4:ed:35:22:37:50:e2:67:68:ad:89:6f:80:d5:3b:83:35:
05:5b:3b:e1:49:64:3c:8e:f4:d2:89:e2:ea:c1:36:5a:bd:60:
a9:cc:f5:6b:95:2e:71:ec:06:e8:55:77:17:c2:50:e9:c6:6f:
90:78:13:22:93:8a:b2:57:61:85:bc:42:90:ef:65:3f:5e:30:
8b:8f:5a:f7:f4:80:ea:32:2a:3d:2c:1a:06:53:7a:48:de:cd:
69:52:a2:c9:72:a9:0d:3e:e6:fa:fe:99:df:84:c9:b1:8e:47:
4c:1c:1d:75:c3:af:a0:53:55:c3:13:4c:23:30:6b:81:4c:31:
27:1f:52:eb:5e:3a:79:fa:9f:b2:18:6e:56:3a:be:a4:45:fe:
24:05:06:c7:3e:fd:cc:c1:b1:a3:2c:ef:29:03:97:c3:95:9e:
cb:8a:3e:16:fd:90:e7:87:d0:71:f8:e5:29:b3:8e:cb:bd:17:
a3:90:8d:08:24:12:cd:77:8f:09:58:d3:da:53:3d:ca:07:5d:
d5:7d:83:8c:31:90:ac:20:5e:cf:35:f1:a6:54:7c:ba:5e:3e:
2e:54:4d:bf:4b:cf:09:c7:1f:fb:f4:51:16:4d:0e:05:b7:23:
41:03:4e:d7:b9:90:c4:89:60:d6:26:2a:b3:e0:e9:18:c1:fc:
69:c3:79:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:33:21 2026 by rpki-client