Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.mft
File: 1-cuQlMt82hOL0BABPrnswzGQMEE.mft (raw, json)
Hash identifier: Y25fTTNlyhUpVZa6ncOZQRtVIDClcWgVzjTmxIMTHO0=
Subject key identifier: F2:61:51:40:39:B7:86:8F:D1:39:69:10:4D:A5:F6:07:6F:B4:E6:DD
Authority key identifier: F9:CB:90:94:CB:7C:DA:13:8B:D0:10:01:3E:B9:EC:C3:31:90:30:41
Certificate issuer: /CN=f9cb9094cb7cda138bd010013eb9ecc331903041
Certificate serial: 019CAC7E44A7842C80EA5CA3C6380B1FF84C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-cuQlMt82hOL0BABPrnswzGQMEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.mft
Manifest number: 184A
Signing time: Mon 02 Mar 2026 03:01:22 +0000
Manifest this update: Mon 02 Mar 2026 03:01:22 +0000
Manifest next update: Tue 03 Mar 2026 03:01:22 +0000
Files and hashes: 1: 1-cuQlMt82hOL0BABPrnswzGQMEE.crl (hash: VH9eLTVm0Jcg/SrkPLHw59lYzqUWzygDCVEfLtHAVnw=)
2: Qk5MpNdRL52qvitv9k0XvdvcapI.roa (hash: vbB6JQXbd3WJ1/NPtyFdfR5AK1sMZwRoGAo5/Aa6H5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-cuQlMt82hOL0BABPrnswzGQMEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:44:a7:84:2c:80:ea:5c:a3:c6:38:0b:1f:f8:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9cb9094cb7cda138bd010013eb9ecc331903041
Validity
Not Before: Mar 2 03:01:22 2026 GMT
Not After : Mar 3 03:01:22 2026 GMT
Subject: CN=f261514039b7868fd13969104da5f6076fb4e6dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:b6:c0:7b:cf:70:01:0d:6b:f1:67:09:a4:1e:
35:65:1b:39:21:0c:a3:b8:be:02:37:07:02:a3:d0:
54:7c:87:4a:b1:f4:1f:b8:b8:25:31:3d:7f:89:20:
6e:6f:e7:62:7f:12:ca:7c:7e:b0:26:49:4b:e6:fd:
ba:e9:88:8c:03:d6:00:5c:21:3b:4a:0e:88:c2:e5:
cc:7f:0e:73:b1:52:ef:95:67:23:c7:16:c2:c4:87:
de:67:89:0d:09:ad:52:e5:4b:eb:cd:e0:d0:90:77:
3d:36:a7:4e:0c:82:c4:02:ed:03:a3:c5:5e:e2:3e:
f4:fd:97:8b:93:1b:bb:1f:bd:c0:0a:92:b0:e7:97:
0b:9d:67:70:ea:cc:af:a5:15:16:ee:4e:9b:00:9e:
8e:90:44:9a:85:c0:9a:4d:17:26:9a:e9:93:af:5e:
01:03:43:55:3c:f2:a2:19:1d:c7:3d:a4:77:f4:af:
96:8d:5a:84:a5:3b:f6:ab:4b:34:35:81:c0:55:82:
b7:fd:fb:9f:80:f2:c9:c7:c7:cf:c6:7d:4a:fc:90:
2c:6f:5b:c8:b6:08:03:0e:99:c3:d3:4f:9f:aa:65:
e8:c5:d0:26:5e:a8:60:3f:83:52:41:a3:f3:25:51:
27:16:8c:ef:50:c6:9a:32:c6:29:d1:bb:56:83:77:
31:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:61:51:40:39:B7:86:8F:D1:39:69:10:4D:A5:F6:07:6F:B4:E6:DD
X509v3 Authority Key Identifier:
keyid:F9:CB:90:94:CB:7C:DA:13:8B:D0:10:01:3E:B9:EC:C3:31:90:30:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-cuQlMt82hOL0BABPrnswzGQMEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:81:5a:e1:16:74:80:eb:3f:f5:79:c5:de:fd:7a:c0:3c:9b:
da:d1:19:a2:c3:a5:a5:43:d4:31:01:f5:55:10:b3:0c:c4:04:
d5:4e:a9:20:a5:28:1b:88:3f:fa:d3:78:fa:3d:ba:63:1f:3d:
b3:f4:72:67:4e:99:5c:77:d9:75:83:f3:5c:fc:10:d9:14:70:
a1:cd:7e:e9:bc:f3:40:f3:e6:8a:05:a7:1a:bd:69:42:51:ff:
86:f7:b0:5d:66:4f:92:00:66:0f:98:bf:d0:1c:d6:f0:e8:51:
1d:7c:e3:cd:87:0c:b0:01:eb:4f:3a:6e:1f:13:d7:95:41:f6:
af:c9:49:b6:bc:c5:b5:af:ee:c6:b6:e9:d7:4f:d1:75:d2:e1:
19:3d:dd:27:b7:d2:23:c5:2f:d0:21:69:08:e1:99:49:39:00:
26:8b:93:8a:1d:2d:b4:a3:b2:1d:68:5e:f0:7b:03:ad:67:ec:
68:5e:39:f9:81:a5:e5:17:a4:80:ee:47:aa:7c:90:fe:ae:0b:
20:44:f5:18:c8:73:39:02:fb:fe:ed:94:9a:77:d6:aa:f1:15:
2c:c1:f9:62:ce:07:b7:6d:7f:e6:ad:4f:2c:c5:8a:9b:17:cc:
39:e8:0f:49:87:b6:f7:0b:be:36:89:59:67:69:23:81:b0:39:
4f:36:71:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:33:39 2026 by rpki-client