Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/434849-89da-43ae-b2be-66cd01961e46/1/CUSqrH8uuymBwkdj6z1gRe-9bwY.mft
File: CUSqrH8uuymBwkdj6z1gRe-9bwY.mft (raw, json)
Hash identifier: m4D5/wjYaaHZCQqgCFTve5e6HmP6GUPF2FOucJdSDB8=
Subject key identifier: D7:51:DD:49:4F:D0:05:25:BE:5F:9A:EF:52:FC:90:84:86:FC:69:29
Authority key identifier: 09:44:AA:AC:7F:2E:BB:29:81:C2:47:63:EB:3D:60:45:EF:BD:6F:06
Certificate issuer: /CN=0944aaac7f2ebb2981c24763eb3d6045efbd6f06
Certificate serial: 019FACE443255B339015B18441128539D0F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CUSqrH8uuymBwkdj6z1gRe-9bwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/434849-89da-43ae-b2be-66cd01961e46/1/CUSqrH8uuymBwkdj6z1gRe-9bwY.mft
Manifest number: 1014
Signing time: Wed 29 Jul 2026 08:01:08 +0000
Manifest this update: Wed 29 Jul 2026 08:01:08 +0000
Manifest next update: Thu 30 Jul 2026 08:01:08 +0000
Files and hashes: 1: CUSqrH8uuymBwkdj6z1gRe-9bwY.crl (hash: Rhgay7ptjuDZKjacfF2bq2JYt+fDdESImupFj0znbKU=)
2: zjvZq0qDo9Cqy2lJeksXnY5wlWg.roa (hash: R3vvsBnC8yjc/6l+ae3jOrD+eH9Ah/ka0B3qOkEBjzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/434849-89da-43ae-b2be-66cd01961e46/1/CUSqrH8uuymBwkdj6z1gRe-9bwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/434849-89da-43ae-b2be-66cd01961e46/1/CUSqrH8uuymBwkdj6z1gRe-9bwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CUSqrH8uuymBwkdj6z1gRe-9bwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:e4:43:25:5b:33:90:15:b1:84:41:12:85:39:d0:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0944aaac7f2ebb2981c24763eb3d6045efbd6f06
Validity
Not Before: Jul 29 08:01:08 2026 GMT
Not After : Jul 30 08:01:08 2026 GMT
Subject: CN=d751dd494fd00525be5f9aef52fc908486fc6929
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:02:d0:23:38:63:2a:8d:50:53:7f:7f:ad:a5:
72:b9:12:ce:0f:71:e1:96:ab:3a:1f:c3:3e:90:a2:
e7:40:d8:46:b3:75:2c:27:bf:34:b5:24:39:b1:61:
c3:a1:06:ff:af:d4:5b:f7:6a:b7:c9:b0:ce:24:c4:
38:f4:53:9a:31:3f:68:22:2b:c4:71:1a:bc:72:94:
24:66:8c:cb:10:34:4b:d4:7f:13:07:51:f0:8b:ff:
57:ca:a9:03:11:86:01:c1:8c:fb:53:e3:8f:10:1f:
94:d5:06:24:20:37:b9:22:a9:28:5c:c0:b6:a2:2f:
73:a2:d4:14:4f:8b:88:ce:66:4a:18:48:72:d7:b7:
06:0c:87:2d:c4:49:23:a9:16:56:f8:a5:84:c5:a5:
95:5a:b8:3e:f1:7a:f7:f3:37:50:72:60:ef:ef:ec:
35:b9:73:18:e2:2e:09:1f:48:bc:0d:22:46:01:58:
d7:7f:60:26:30:00:59:51:ce:e5:23:cb:98:0b:9e:
a0:39:a0:14:43:72:46:1f:4b:76:46:25:e9:b2:e9:
ff:9f:4c:e1:21:00:35:c9:60:2b:d3:c3:bf:ed:83:
fa:24:9e:2d:01:66:72:36:58:22:1d:e1:2a:b0:1f:
2f:3a:3a:b3:4e:d6:c7:c8:f9:57:08:d6:7d:6c:61:
89:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:51:DD:49:4F:D0:05:25:BE:5F:9A:EF:52:FC:90:84:86:FC:69:29
X509v3 Authority Key Identifier:
keyid:09:44:AA:AC:7F:2E:BB:29:81:C2:47:63:EB:3D:60:45:EF:BD:6F:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CUSqrH8uuymBwkdj6z1gRe-9bwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/434849-89da-43ae-b2be-66cd01961e46/1/CUSqrH8uuymBwkdj6z1gRe-9bwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/434849-89da-43ae-b2be-66cd01961e46/1/CUSqrH8uuymBwkdj6z1gRe-9bwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:5c:5d:47:2f:0f:a5:4b:f7:ae:26:61:07:ec:0c:62:b6:4d:
bb:ea:ed:cc:85:7b:93:04:dc:ce:59:6c:26:d4:2d:5a:2e:ee:
79:fa:a9:14:b1:90:25:d3:1d:ab:e2:19:6c:b2:ae:25:cd:6f:
9d:cc:0a:b4:c6:f1:eb:34:93:36:7b:d2:a5:6b:47:3b:8a:0d:
42:b4:8f:ff:6b:23:45:5c:c2:07:b5:18:73:26:db:65:9a:b8:
ec:5a:2a:99:18:bc:43:51:7c:61:5e:28:d6:51:f1:26:e1:c4:
ba:9a:1b:66:2d:60:7a:97:c0:80:96:de:58:49:0c:09:47:3c:
ec:7b:f4:78:4e:0b:b7:56:a6:02:5d:2f:b9:91:a6:42:2c:e5:
4c:2a:ef:bc:61:03:a9:fa:b5:dc:14:c9:e4:b5:8b:65:eb:6c:
de:05:f9:16:a4:d5:0e:05:20:0b:6d:e0:6f:f9:bc:fb:eb:0a:
e0:31:29:86:2d:05:61:c7:19:d0:21:6b:b5:90:61:c9:00:f0:
c5:3e:b6:56:3e:82:75:b3:b5:1a:61:80:4a:b5:fa:59:cc:9c:
b5:75:85:1a:98:27:62:83:ec:fa:18:99:89:be:84:51:22:73:
bb:da:4a:36:d5:62:71:35:13:82:e8:0a:12:f9:06:8a:76:a0:
9a:b5:0a:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:12:58 2026 by rpki-client