
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/33fb0f-8275-4461-8e70-f6c2cd67f859/1/cuWI2kps8EE_-zAWvkZ47Jmpjfk.mft
File: cuWI2kps8EE_-zAWvkZ47Jmpjfk.mft (raw, json)
Hash identifier: 2g1wh2dT4V0UwEazXhcjzAsC8Zq3mafoYco/CEQb6Rw=
Subject key identifier: D2:DE:34:90:39:39:FA:1F:22:91:2C:A3:E6:07:1F:1C:5F:E3:1A:B9
Authority key identifier: 72:E5:88:DA:4A:6C:F0:41:3F:FB:30:16:BE:46:78:EC:99:A9:8D:F9
Certificate issuer: /CN=72e588da4a6cf0413ffb3016be4678ec99a98df9
Certificate serial: 019CAC0F9B718EBB24016079F8C031DD93FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cuWI2kps8EE_-zAWvkZ47Jmpjfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/33fb0f-8275-4461-8e70-f6c2cd67f859/1/cuWI2kps8EE_-zAWvkZ47Jmpjfk.mft
Manifest number: 0917
Signing time: Mon 02 Mar 2026 01:00:29 +0000
Manifest this update: Mon 02 Mar 2026 01:00:29 +0000
Manifest next update: Tue 03 Mar 2026 01:00:29 +0000
Files and hashes: 1: cuWI2kps8EE_-zAWvkZ47Jmpjfk.crl (hash: ZJNMXLkUe739KtH7YgEU4w0lBsij73TOXAIwayzxARM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/33fb0f-8275-4461-8e70-f6c2cd67f859/1/cuWI2kps8EE_-zAWvkZ47Jmpjfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/33fb0f-8275-4461-8e70-f6c2cd67f859/1/cuWI2kps8EE_-zAWvkZ47Jmpjfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/cuWI2kps8EE_-zAWvkZ47Jmpjfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:9b:71:8e:bb:24:01:60:79:f8:c0:31:dd:93:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72e588da4a6cf0413ffb3016be4678ec99a98df9
Validity
Not Before: Mar 2 01:00:29 2026 GMT
Not After : Mar 3 01:00:29 2026 GMT
Subject: CN=d2de34903939fa1f22912ca3e6071f1c5fe31ab9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:04:84:d8:6f:ed:6b:c3:0b:81:94:f1:49:70:
2e:ff:81:4e:cf:cd:55:27:0c:90:6c:00:22:90:26:
a2:1e:f9:0d:eb:d2:dd:72:64:d6:34:ce:3d:70:e0:
d5:de:1a:3e:cf:90:16:4e:93:a5:a1:d0:f1:e8:8d:
ad:4f:1c:ad:53:bd:fa:95:c0:fa:62:c0:1b:8d:8a:
07:ec:05:d7:ed:0d:d1:38:a0:31:1c:44:fc:b0:fa:
14:23:ba:c1:3e:ab:14:f6:d7:40:53:0c:10:0b:ce:
32:dc:d0:0e:27:5e:8e:2f:b2:b3:15:ba:1c:38:19:
79:ea:6e:6e:da:88:1c:9c:27:6c:be:62:bb:bc:17:
57:a8:c8:68:5c:e4:89:a8:0c:53:f0:c8:13:01:82:
d7:7b:f6:0c:65:25:eb:61:c3:95:52:1d:3e:ee:4e:
a1:2e:68:e4:86:92:aa:25:97:78:4f:11:03:5f:db:
e4:e7:93:88:ef:0b:d3:ae:23:51:88:98:01:bc:8c:
72:95:9f:1c:62:24:97:bb:c9:5d:05:c1:7a:5b:57:
64:19:dd:68:f6:63:29:a8:1c:52:ea:d3:14:2c:0e:
fd:ec:8f:f6:19:eb:c5:0b:26:55:ff:ef:38:a3:01:
a1:70:91:ae:2f:08:1b:90:39:05:76:73:b8:49:f6:
9e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:DE:34:90:39:39:FA:1F:22:91:2C:A3:E6:07:1F:1C:5F:E3:1A:B9
X509v3 Authority Key Identifier:
keyid:72:E5:88:DA:4A:6C:F0:41:3F:FB:30:16:BE:46:78:EC:99:A9:8D:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cuWI2kps8EE_-zAWvkZ47Jmpjfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/33fb0f-8275-4461-8e70-f6c2cd67f859/1/cuWI2kps8EE_-zAWvkZ47Jmpjfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/33fb0f-8275-4461-8e70-f6c2cd67f859/1/cuWI2kps8EE_-zAWvkZ47Jmpjfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:c4:2e:12:b3:c6:39:89:e9:e3:8b:a3:bc:41:f3:27:5a:f6:
83:d3:aa:d0:6c:e7:2e:22:c7:8f:c6:cd:75:23:95:fb:a1:f2:
16:9d:73:f1:57:82:03:0a:da:c0:06:38:15:cf:ec:c6:5e:76:
72:fa:bb:c8:57:96:b4:36:f0:1c:15:94:80:8b:f6:f1:0b:be:
36:a2:b2:03:29:ba:b3:a6:5a:2b:b5:23:51:a1:48:19:e7:61:
40:0c:b9:f5:c0:27:0b:cd:d3:72:e1:38:b9:30:0f:c6:d3:bf:
52:91:57:24:98:da:50:d4:5e:e4:22:44:f7:ea:c5:dc:bb:50:
0b:ad:71:2f:8d:98:24:e2:ca:b6:4e:fb:4e:cd:c0:fb:3b:94:
90:2e:2b:5b:b9:c1:75:a0:3d:f5:ce:a6:78:83:36:a5:63:5b:
94:2a:0a:15:ef:37:c9:2d:1d:a4:bd:c1:a2:b8:af:c3:5d:b0:
14:b7:e5:c7:5e:07:02:71:af:5c:42:64:ad:70:75:fe:02:63:
a6:24:31:48:4c:29:c9:66:60:98:b5:47:0e:e3:ae:71:60:b1:
eb:14:f1:4a:dd:59:15:be:75:21:8d:6d:c3:f4:4b:87:bc:21:
b2:04:f1:07:29:30:c5:33:4a:dd:98:75:da:76:7a:f4:9d:51:
75:c7:b7:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:38:47 2026 by rpki-client