Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.mft
File: 1-cuQlMt82hOL0BABPrnswzGQMEE.mft (raw, json)
Hash identifier: NxSalu2RFbMHc4kAecM9SowIj4/tQ8cZr3VRezN7m3U=
Subject key identifier: 28:73:6D:ED:3A:25:A9:10:FF:3F:B0:0B:88:36:37:CD:2A:40:A6:F0
Authority key identifier: F9:CB:90:94:CB:7C:DA:13:8B:D0:10:01:3E:B9:EC:C3:31:90:30:41
Certificate issuer: /CN=f9cb9094cb7cda138bd010013eb9ecc331903041
Certificate serial: 019CAA8FCEE587FA11B387EFEFB23F88C760
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-cuQlMt82hOL0BABPrnswzGQMEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.mft
Manifest number: 1849
Signing time: Sun 01 Mar 2026 18:01:17 +0000
Manifest this update: Sun 01 Mar 2026 18:01:17 +0000
Manifest next update: Mon 02 Mar 2026 18:01:17 +0000
Files and hashes: 1: 1-cuQlMt82hOL0BABPrnswzGQMEE.crl (hash: j0sGvDs8jon/ZJeCVAYcIy64Kbo+am/Fh1IVB8QI39M=)
2: Qk5MpNdRL52qvitv9k0XvdvcapI.roa (hash: vbB6JQXbd3WJ1/NPtyFdfR5AK1sMZwRoGAo5/Aa6H5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-cuQlMt82hOL0BABPrnswzGQMEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:ce:e5:87:fa:11:b3:87:ef:ef:b2:3f:88:c7:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9cb9094cb7cda138bd010013eb9ecc331903041
Validity
Not Before: Mar 1 18:01:17 2026 GMT
Not After : Mar 2 18:01:17 2026 GMT
Subject: CN=28736ded3a25a910ff3fb00b883637cd2a40a6f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:6b:43:8e:b7:bb:b9:4f:ee:95:7d:54:11:fa:
14:75:31:2e:bf:1a:5c:5a:d0:2c:5c:77:35:a5:d2:
41:ea:38:a2:10:e6:7f:bf:d8:de:4d:36:91:f5:48:
20:a3:f2:77:de:78:e2:e7:9c:c5:85:23:79:9a:fb:
56:f3:47:02:5c:60:bc:b4:99:e7:ed:5a:16:d5:f8:
6e:19:5b:0e:5f:82:b9:f7:d9:c3:3d:81:25:c2:24:
22:92:8d:7f:12:4f:09:e7:96:b8:cf:50:e9:c6:70:
c9:34:e9:74:82:9a:d8:e1:a8:5c:be:da:62:b1:87:
9c:83:4a:37:47:f1:ba:85:9b:ae:01:e9:80:d7:f6:
be:36:3b:ad:4d:bb:2c:4e:a3:a9:cc:dd:b7:47:f4:
40:21:99:99:de:04:23:f0:df:2b:39:cc:84:4a:55:
19:4e:e1:0f:e2:a9:c8:b5:8e:a7:d8:2f:17:62:9f:
22:81:76:1f:75:b7:02:2d:33:ee:b7:4c:81:f4:36:
92:a4:0c:c7:77:ae:a3:f1:bd:53:36:cb:8e:eb:5e:
a6:8f:3e:d5:20:11:9f:8d:57:9d:a1:a5:d9:c8:5f:
33:25:54:61:66:3e:31:25:e8:37:a3:4b:24:e2:c8:
17:b8:82:11:c7:cd:d1:e7:43:bc:83:b8:bb:f2:21:
90:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:73:6D:ED:3A:25:A9:10:FF:3F:B0:0B:88:36:37:CD:2A:40:A6:F0
X509v3 Authority Key Identifier:
keyid:F9:CB:90:94:CB:7C:DA:13:8B:D0:10:01:3E:B9:EC:C3:31:90:30:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-cuQlMt82hOL0BABPrnswzGQMEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:d1:03:96:b0:f1:da:cc:2d:00:71:70:59:fd:be:cb:73:23:
de:92:c8:1a:06:d1:74:1d:2f:1b:ff:f4:46:fd:b7:fd:da:e9:
7b:43:1a:c8:e8:43:ea:13:a2:0a:e9:0a:ed:e4:09:64:d9:23:
20:53:a0:f7:20:36:42:04:8b:9f:6a:9c:e0:7e:07:ff:4e:f7:
55:68:dc:49:38:1d:c7:20:ad:6a:f9:8f:9f:5c:41:c2:3b:e6:
79:ad:51:ce:11:66:db:00:df:d2:0c:8a:f1:8d:c1:e0:09:92:
67:27:c8:57:36:65:a5:af:c0:da:aa:3a:d3:c5:dd:3c:72:06:
7a:aa:63:36:a8:39:a6:fd:3f:f0:34:32:36:64:07:fc:66:a8:
2f:da:9b:eb:34:c4:3a:4c:d1:95:74:4c:bd:31:8b:b9:af:79:
49:00:9e:29:fb:c6:37:6a:9b:94:af:aa:5f:ff:26:55:91:37:
fe:3f:88:1e:f0:ca:c5:d1:60:b5:22:c2:be:86:3e:e0:0e:85:
60:d6:59:74:e3:a2:9a:74:fb:92:8e:25:d4:9a:58:b9:da:ae:
d0:0a:c4:5f:9c:a2:59:9d:fc:e7:d8:da:c0:f5:82:08:f4:95:
6b:5d:56:4c:5f:03:da:d8:89:76:a3:5a:f7:62:fb:39:4e:14:
18:3d:4d:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:41:49 2026 by rpki-client