
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/470cb8-eb6a-4934-9d47-968d0c7f22bb/1/cuW1e7OY1eGDmj_kJU33DXEs4Uo.mft
File: cuW1e7OY1eGDmj_kJU33DXEs4Uo.mft (raw, json)
Hash identifier: /MFM3QLXDEy0bJnmcROuhztNUUEl8gvBRxQ5EfhN7vk=
Subject key identifier: 6D:1D:4E:B1:93:66:D8:09:8E:40:22:39:F8:34:AD:94:6B:9E:94:D3
Authority key identifier: 72:E5:B5:7B:B3:98:D5:E1:83:9A:3F:E4:25:4D:F7:0D:71:2C:E1:4A
Certificate issuer: /CN=72e5b57bb398d5e1839a3fe4254df70d712ce14a
Certificate serial: 01A0C96AB121F071CFCBF79F61B3EEADE723
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cuW1e7OY1eGDmj_kJU33DXEs4Uo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/470cb8-eb6a-4934-9d47-968d0c7f22bb/1/cuW1e7OY1eGDmj_kJU33DXEs4Uo.mft
Manifest number: 0C8F
Signing time: Tue 22 Sep 2026 14:00:07 +0000
Manifest this update: Tue 22 Sep 2026 14:00:07 +0000
Manifest next update: Wed 23 Sep 2026 14:00:07 +0000
Files and hashes: 1: RIVpRVcoTiPM597Ay6ktG1nRpoI.roa (hash: 8WsKosIyT+/va+/3Ff2UyTN4wl8h0E62UrDqXKvX/7s=)
2: cuW1e7OY1eGDmj_kJU33DXEs4Uo.crl (hash: +/eFXv5seXutGh8RYA/ivdcjsQqCBpqck2FI4IP7p9Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/470cb8-eb6a-4934-9d47-968d0c7f22bb/1/cuW1e7OY1eGDmj_kJU33DXEs4Uo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/470cb8-eb6a-4934-9d47-968d0c7f22bb/1/cuW1e7OY1eGDmj_kJU33DXEs4Uo.mft
rsync://rpki.ripe.net/repository/DEFAULT/cuW1e7OY1eGDmj_kJU33DXEs4Uo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:6a:b1:21:f0:71:cf:cb:f7:9f:61:b3:ee:ad:e7:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72e5b57bb398d5e1839a3fe4254df70d712ce14a
Validity
Not Before: Sep 22 14:00:07 2026 GMT
Not After : Sep 23 14:00:07 2026 GMT
Subject: CN=6d1d4eb19366d8098e402239f834ad946b9e94d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:58:46:ac:86:f6:ac:b5:c7:2c:d9:ee:44:29:
49:ba:2b:32:6b:a6:be:05:e0:bc:c9:3c:3b:c7:68:
74:34:6e:3f:f1:14:5d:1d:8a:fb:b1:cd:02:82:7a:
be:3c:b1:51:56:ed:df:05:56:85:f7:95:49:fd:d6:
d3:72:d6:6e:57:32:24:d6:af:bf:84:c4:55:9d:c0:
de:e7:58:95:f6:35:66:63:5b:0c:ce:d7:da:e7:2f:
82:ce:09:08:26:7e:b7:24:27:43:56:a0:94:db:a4:
49:42:4d:79:58:1b:ce:3b:68:88:bd:b8:cf:4b:ab:
e4:f6:81:ca:12:8f:c3:14:bb:ff:bb:41:b1:ab:a9:
53:41:c3:d3:9c:2d:08:d8:04:f9:14:f2:5b:55:38:
96:66:0c:27:0a:fb:e0:86:a9:73:90:b0:bd:cb:cb:
10:80:40:f3:3b:91:50:63:a7:04:41:6f:86:c8:31:
d2:38:bf:60:4a:9a:aa:06:d4:1a:bb:d9:dc:d0:ed:
51:90:a0:91:db:6a:2a:a7:0b:e2:83:62:1e:b6:33:
22:7b:3c:9b:e4:6d:f2:2d:47:e4:c5:90:53:a8:52:
cb:e8:ee:a1:6b:67:2b:8c:2e:2a:03:dd:0c:33:22:
75:22:72:0b:ee:57:ec:83:af:ae:57:d5:7c:6d:e1:
9a:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:1D:4E:B1:93:66:D8:09:8E:40:22:39:F8:34:AD:94:6B:9E:94:D3
X509v3 Authority Key Identifier:
keyid:72:E5:B5:7B:B3:98:D5:E1:83:9A:3F:E4:25:4D:F7:0D:71:2C:E1:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cuW1e7OY1eGDmj_kJU33DXEs4Uo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/470cb8-eb6a-4934-9d47-968d0c7f22bb/1/cuW1e7OY1eGDmj_kJU33DXEs4Uo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/470cb8-eb6a-4934-9d47-968d0c7f22bb/1/cuW1e7OY1eGDmj_kJU33DXEs4Uo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:dc:70:79:bb:37:56:c4:25:5e:4b:7f:1e:c7:4d:e6:56:d4:
92:c7:cc:ab:de:77:4c:55:3e:b8:5f:e6:6c:76:c4:5f:a5:3e:
3e:ed:7a:74:1f:3b:1d:77:73:c0:03:e0:1e:da:67:2d:e7:d8:
cd:9a:73:18:af:41:38:71:d9:f4:9e:82:04:a1:64:4a:40:c0:
8b:f0:ce:e7:a7:43:58:a6:20:04:43:27:13:70:34:32:89:58:
34:21:d7:ae:d5:01:1d:8c:95:47:43:44:36:9a:45:73:55:a5:
4d:c7:94:9a:45:f2:87:02:86:51:d0:81:df:23:40:e3:60:6b:
65:14:4e:31:cf:e9:4e:ce:0e:6d:cd:88:82:7f:53:f5:1a:e3:
84:0c:d3:90:ee:e5:4b:e7:cf:82:85:4e:eb:58:c7:1c:17:0e:
a9:78:51:13:cb:79:e8:63:02:7e:3d:e0:97:5f:82:8e:8a:83:
ec:04:87:2e:9d:6a:13:61:90:ed:a4:e9:1d:44:4b:7f:41:b2:
e4:fd:b7:26:2c:b2:a6:82:81:19:e8:07:ed:23:c6:0c:76:85:
d5:1c:e6:9d:3c:5c:92:43:19:f9:e5:11:bd:cf:ff:0c:2d:e5:
36:ca:c2:af:de:9d:cf:6b:cf:b8:a0:aa:54:ed:8f:b4:ce:e8:
88:36:4c:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:28:22 2026 by rpki-client