Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.mft
File: 1-cuQlMt82hOL0BABPrnswzGQMEE.mft (raw, json)
Hash identifier: ba+n1g0Ddb1UC2mQb3uLG6XgCmM+UWzQgmEWI5lEPLI=
Subject key identifier: 99:13:0A:83:A8:FA:2F:F7:BA:6C:98:7F:9A:B9:AF:A4:90:4A:73:EC
Authority key identifier: F9:CB:90:94:CB:7C:DA:13:8B:D0:10:01:3E:B9:EC:C3:31:90:30:41
Certificate issuer: /CN=f9cb9094cb7cda138bd010013eb9ecc331903041
Certificate serial: 01A0E02ABCA32F5BB3E49337929220913FA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-cuQlMt82hOL0BABPrnswzGQMEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.mft
Manifest number: 1A77
Signing time: Sun 27 Sep 2026 00:01:32 +0000
Manifest this update: Sun 27 Sep 2026 00:01:32 +0000
Manifest next update: Mon 28 Sep 2026 00:01:32 +0000
Files and hashes: 1: 1-cuQlMt82hOL0BABPrnswzGQMEE.crl (hash: uQQ6DwDwqs4foIgOXRK5+osI0axVnkJ/QWjmAlL3nVg=)
2: Qk5MpNdRL52qvitv9k0XvdvcapI.roa (hash: vbB6JQXbd3WJ1/NPtyFdfR5AK1sMZwRoGAo5/Aa6H5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-cuQlMt82hOL0BABPrnswzGQMEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 00:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:2a:bc:a3:2f:5b:b3:e4:93:37:92:92:20:91:3f:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9cb9094cb7cda138bd010013eb9ecc331903041
Validity
Not Before: Sep 27 00:01:32 2026 GMT
Not After : Sep 28 00:01:32 2026 GMT
Subject: CN=99130a83a8fa2ff7ba6c987f9ab9afa4904a73ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c5:22:59:b2:bd:62:24:a0:f9:b1:1d:8d:ed:
dc:dc:3e:c0:6c:a8:c7:a8:9f:0e:52:35:79:1a:89:
1b:84:68:51:25:47:cb:1e:19:88:58:23:93:a8:ba:
20:dd:4b:e5:52:22:0f:16:f2:c5:5d:53:91:1e:b0:
17:87:5c:a4:ce:67:44:93:2b:4d:fd:81:0c:c0:0d:
9b:55:85:95:c8:a2:49:71:b4:c6:ac:ce:6d:14:06:
37:67:26:41:fd:7f:de:1c:d4:dd:67:93:4c:6f:fb:
92:91:59:66:8d:59:ca:13:14:f1:96:4e:05:96:d1:
10:1f:1a:9b:1b:9e:48:6b:62:9c:eb:f2:7f:3c:99:
c8:f7:f4:cd:73:5c:83:aa:6d:cd:31:d3:29:a1:c3:
ee:4c:13:ae:ac:b8:1e:41:64:b2:22:db:0e:8b:93:
3c:40:40:1a:86:bd:69:6e:bf:4c:0e:b9:13:bd:15:
7b:2c:4b:d6:6b:5d:e5:1e:c8:15:3c:9f:42:cf:a7:
c6:3b:11:f0:55:32:68:49:00:0c:b6:d4:1b:f3:f2:
45:8c:5a:b4:71:f2:6b:74:1d:82:2e:8b:79:e2:33:
3d:8b:ad:1b:19:4b:25:0e:70:13:51:68:39:3a:89:
9f:3c:f0:4a:8e:82:68:a0:99:37:bc:03:80:f8:fc:
95:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:13:0A:83:A8:FA:2F:F7:BA:6C:98:7F:9A:B9:AF:A4:90:4A:73:EC
X509v3 Authority Key Identifier:
keyid:F9:CB:90:94:CB:7C:DA:13:8B:D0:10:01:3E:B9:EC:C3:31:90:30:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-cuQlMt82hOL0BABPrnswzGQMEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:7a:42:1b:dc:94:fc:d7:23:ad:48:2b:57:da:65:bb:cf:fa:
0a:9d:72:46:14:b1:60:43:3b:86:7d:f1:82:ed:79:89:d8:d8:
68:2d:f0:0c:fe:87:95:f9:c3:0b:2c:ef:40:a2:ec:ed:a6:85:
0f:37:53:ba:af:11:12:6a:57:f4:02:a2:19:2b:35:69:ec:69:
6a:8b:9c:1c:f6:fd:14:a5:b6:c0:df:12:85:02:53:cc:e5:7b:
43:c1:4a:d9:24:89:14:5a:20:4d:3d:47:26:00:f4:14:16:8f:
9c:86:c2:b6:c3:a2:14:04:8d:14:e7:af:5a:57:91:a0:18:41:
dc:52:2a:f2:64:ba:e2:e2:b4:3d:31:aa:44:bb:85:71:b0:b2:
0f:23:49:c5:82:20:60:ad:43:5a:1c:f8:63:7a:a0:f0:a2:d2:
74:c6:9e:7e:94:ff:a4:29:9a:34:21:b5:94:70:7a:3e:02:23:
9c:18:1b:e5:bc:08:ad:69:36:14:f2:b5:c6:d9:6f:7c:87:04:
30:43:d3:a8:03:53:cb:16:36:11:85:ff:b1:97:ed:1f:97:18:
6a:f0:61:25:96:1d:66:0d:ff:19:fc:08:22:df:62:af:18:3a:
96:12:09:51:22:e3:9f:a6:ac:48:ff:a5:07:8e:8b:99:7f:dd:
dd:9c:ad:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 06:44:12 2026 by rpki-client