Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/33fb0f-8275-4461-8e70-f6c2cd67f859/1/cuWI2kps8EE_-zAWvkZ47Jmpjfk.mft
File: cuWI2kps8EE_-zAWvkZ47Jmpjfk.mft (raw, json)
Hash identifier: VDNtMR2HIGRouVyt6f6RWGqu6N9NKyE3p7sYxn5IXaA=
Subject key identifier: CA:97:1D:CD:DA:69:F7:2A:6A:50:BA:1C:74:5D:DB:B5:42:9B:7F:AA
Authority key identifier: 72:E5:88:DA:4A:6C:F0:41:3F:FB:30:16:BE:46:78:EC:99:A9:8D:F9
Certificate issuer: /CN=72e588da4a6cf0413ffb3016be4678ec99a98df9
Certificate serial: 019D99990060AA87E39138D8033A76DC23A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cuWI2kps8EE_-zAWvkZ47Jmpjfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/33fb0f-8275-4461-8e70-f6c2cd67f859/1/cuWI2kps8EE_-zAWvkZ47Jmpjfk.mft
Manifest number: 0992
Signing time: Fri 17 Apr 2026 04:00:34 +0000
Manifest this update: Fri 17 Apr 2026 04:00:34 +0000
Manifest next update: Sat 18 Apr 2026 04:00:34 +0000
Files and hashes: 1: cuWI2kps8EE_-zAWvkZ47Jmpjfk.crl (hash: qyCPM/uQep8IOyvsVhwmve0NVesMfazwH05LcDi4Fnw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/33fb0f-8275-4461-8e70-f6c2cd67f859/1/cuWI2kps8EE_-zAWvkZ47Jmpjfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/33fb0f-8275-4461-8e70-f6c2cd67f859/1/cuWI2kps8EE_-zAWvkZ47Jmpjfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/cuWI2kps8EE_-zAWvkZ47Jmpjfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:00:60:aa:87:e3:91:38:d8:03:3a:76:dc:23:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72e588da4a6cf0413ffb3016be4678ec99a98df9
Validity
Not Before: Apr 17 04:00:34 2026 GMT
Not After : Apr 18 04:00:34 2026 GMT
Subject: CN=ca971dcdda69f72a6a50ba1c745ddbb5429b7faa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:da:e2:01:67:eb:de:b1:b8:7d:ce:97:08:36:
f8:01:9c:d6:16:80:99:44:32:5a:8d:9e:35:9a:58:
57:ec:8f:e7:2f:68:0c:12:8f:e9:c9:b9:2b:72:ae:
04:bd:30:e4:85:05:73:ec:ae:c2:dc:b4:48:c3:28:
d8:6e:43:27:1d:2b:9e:5a:ef:3c:5c:99:79:ae:0e:
39:d8:43:05:cb:31:72:87:c8:9a:49:5d:e6:8d:40:
a5:ae:0d:a7:ae:08:df:eb:5d:82:f4:4d:cd:de:7e:
16:84:f2:41:b2:0a:b6:c2:58:e0:e1:b6:52:8f:93:
92:a9:96:18:d6:2b:8f:c3:17:f9:b8:21:c7:17:78:
bd:ef:a7:1e:dd:02:ce:17:5b:6e:e5:92:c3:6b:e1:
72:d8:c5:4b:7b:9b:04:4f:ee:c8:53:a1:b5:b7:db:
9e:d4:4e:ec:74:65:e3:af:8b:b5:ac:32:f6:bb:35:
74:8a:1d:0d:55:63:b2:17:1e:09:f0:ad:c2:c6:ee:
8a:8a:90:2f:75:67:36:e8:39:38:71:32:c8:91:3d:
77:c9:25:49:47:a1:b3:dc:ea:17:b5:a7:57:1c:a1:
08:c2:bd:51:2e:1d:4b:e8:fa:b0:c9:a4:29:99:a1:
e6:f0:39:77:d4:89:e8:38:97:fe:3e:6b:2c:1f:db:
a5:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:97:1D:CD:DA:69:F7:2A:6A:50:BA:1C:74:5D:DB:B5:42:9B:7F:AA
X509v3 Authority Key Identifier:
keyid:72:E5:88:DA:4A:6C:F0:41:3F:FB:30:16:BE:46:78:EC:99:A9:8D:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cuWI2kps8EE_-zAWvkZ47Jmpjfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/33fb0f-8275-4461-8e70-f6c2cd67f859/1/cuWI2kps8EE_-zAWvkZ47Jmpjfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/33fb0f-8275-4461-8e70-f6c2cd67f859/1/cuWI2kps8EE_-zAWvkZ47Jmpjfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:fe:16:90:d9:b8:19:ea:23:e3:f8:e2:71:2a:f2:b0:9f:0a:
8a:dc:3e:64:64:47:57:83:cb:b3:b0:c6:aa:92:be:21:a0:4e:
e9:59:59:5d:cf:51:3a:97:1e:fb:62:3e:ed:ff:7a:e2:e1:5f:
e8:e7:2e:aa:b8:d4:d2:32:6e:0f:15:3e:c0:01:93:43:57:47:
8b:04:14:0f:b8:67:89:84:71:7d:f6:d7:ea:f6:b4:41:ef:a2:
be:19:c7:ea:d9:4a:fc:be:9b:35:50:71:ca:40:fb:c4:eb:cd:
b6:03:d1:89:2e:bb:ed:f2:b7:40:40:68:df:64:e3:36:dc:dc:
e0:31:c9:c9:49:d4:3f:fb:00:6b:ed:c8:83:41:d1:7b:8f:99:
a6:e9:38:3f:93:88:9a:2f:41:c5:1c:e5:9d:c7:5d:50:c9:6b:
64:94:16:9f:58:a3:a1:ae:44:3d:d4:88:b7:a6:8e:0b:65:83:
b7:f7:74:a7:14:d5:ec:4a:e4:76:1d:e7:df:3b:a8:9d:83:e0:
fe:18:92:8b:45:76:a0:37:f9:8e:5f:fc:5f:4e:fa:20:22:d6:
23:53:65:91:83:30:c7:c3:93:69:31:2e:05:eb:3e:6f:dd:48:
57:ac:30:4c:86:fa:0d:54:64:ab:6e:d9:a9:53:ff:00:11:86:
92:36:d2:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZmQBgqofjkTjYAzp23COhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyZTU4OGRhNGE2Y2YwNDEzZmZiMzAxNmJlNDY3OGVjOTlh
OThkZjkwHhcNMjYwNDE3MDQwMDM0WhcNMjYwNDE4MDQwMDM0WjAzMTEwLwYDVQQD
EyhjYTk3MWRjZGRhNjlmNzJhNmE1MGJhMWM3NDVkZGJiNTQyOWI3ZmFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNriAWfr3rG4fc6XCDb4AZzWFoCZ
RDJajZ41mlhX7I/nL2gMEo/pybkrcq4EvTDkhQVz7K7C3LRIwyjYbkMnHSueWu88
XJl5rg452EMFyzFyh8iaSV3mjUClrg2nrgjf612C9E3N3n4WhPJBsgq2wljg4bZS
j5OSqZYY1iuPwxf5uCHHF3i976ce3QLOF1tu5ZLDa+Fy2MVLe5sET+7IU6G1t9ue
1E7sdGXjr4u1rDL2uzV0ih0NVWOyFx4J8K3Cxu6KipAvdWc26Dk4cTLIkT13ySVJ
R6Gz3OoXtadXHKEIwr1RLh1L6PqwyaQpmaHm8Dl31InoOJf+PmssH9ulMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMqXHc3aafcqalC6HHRd27VCm3+qMB8GA1UdIwQY
MBaAFHLliNpKbPBBP/swFr5GeOyZqY35MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3VXSTJrcHM4RUVfLXpBV3ZrWjQ3Sm1wamZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS8zM2ZiMGYtODI3NS00NDYxLThlNzAt
ZjZjMmNkNjdmODU5LzEvY3VXSTJrcHM4RUVfLXpBV3ZrWjQ3Sm1wamZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS8zM2ZiMGYtODI3NS00NDYxLThlNzAtZjZjMmNkNjdmODU5
LzEvY3VXSTJrcHM4RUVfLXpBV3ZrWjQ3Sm1wamZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgf4WkNm4
Geoj4/jicSrysJ8Kitw+ZGRHV4PLs7DGqpK+IaBO6VlZXc9ROpce+2I+7f964uFf
6OcuqrjU0jJuDxU+wAGTQ1dHiwQUD7hniYRxffbX6va0Qe+ivhnH6tlK/L6bNVBx
ykD7xOvNtgPRiS677fK3QEBo32TjNtzc4DHJyUnUP/sAa+3Ig0HRe4+Zpuk4P5OI
mi9BxRzlncddUMlrZJQWn1ijoa5EPdSIt6aOC2WDt/d0pxTV7Erkdh3n3zuonYPg
/hiSi0V2oDf5jl/8X076ICLWI1NlkYMwx8OTaTEuBes+b91IV6wwTIb6DVRkq27Z
qVP/ABGGkjbS/A==
-----END CERTIFICATE-----
Generated at Fri Apr 17 08:02:15 2026 by rpki-client