Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ee/434849-89da-43ae-b2be-66cd01961e46/1/CUSqrH8uuymBwkdj6z1gRe-9bwY.mft
File: CUSqrH8uuymBwkdj6z1gRe-9bwY.mft (raw, json)
Hash identifier: S8pae8iqBjENIjnL4qVUa7eaQo83SDMgMGDwrQg8S7Q=
Subject key identifier: 4F:66:E1:D5:F5:EB:77:7E:79:05:59:DC:F8:7C:33:47:36:2F:21:25
Authority key identifier: 09:44:AA:AC:7F:2E:BB:29:81:C2:47:63:EB:3D:60:45:EF:BD:6F:06
Certificate issuer: /CN=0944aaac7f2ebb2981c24763eb3d6045efbd6f06
Certificate serial: 01A0C6D7B4175E7C0A8BC9EB20CD19CD2BCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CUSqrH8uuymBwkdj6z1gRe-9bwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/434849-89da-43ae-b2be-66cd01961e46/1/CUSqrH8uuymBwkdj6z1gRe-9bwY.mft
Manifest number: 10A6
Signing time: Tue 22 Sep 2026 02:00:20 +0000
Manifest this update: Tue 22 Sep 2026 02:00:20 +0000
Manifest next update: Wed 23 Sep 2026 02:00:20 +0000
Files and hashes: 1: CUSqrH8uuymBwkdj6z1gRe-9bwY.crl (hash: vxHqopOQbsJ/DISpft0MXKCRfbxR7HG8yuODTIslBQo=)
2: zjvZq0qDo9Cqy2lJeksXnY5wlWg.roa (hash: R3vvsBnC8yjc/6l+ae3jOrD+eH9Ah/ka0B3qOkEBjzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/434849-89da-43ae-b2be-66cd01961e46/1/CUSqrH8uuymBwkdj6z1gRe-9bwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/434849-89da-43ae-b2be-66cd01961e46/1/CUSqrH8uuymBwkdj6z1gRe-9bwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CUSqrH8uuymBwkdj6z1gRe-9bwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:d7:b4:17:5e:7c:0a:8b:c9:eb:20:cd:19:cd:2b:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0944aaac7f2ebb2981c24763eb3d6045efbd6f06
Validity
Not Before: Sep 22 02:00:20 2026 GMT
Not After : Sep 23 02:00:20 2026 GMT
Subject: CN=4f66e1d5f5eb777e790559dcf87c3347362f2125
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:28:54:4d:35:30:1d:ea:ce:20:83:26:c6:d2:
fd:10:31:1e:a4:5b:00:61:cd:04:69:d8:bd:a4:44:
dc:b1:9a:36:00:24:23:6e:db:32:bf:d7:8f:df:25:
be:50:f7:23:08:1b:ab:91:d7:60:ec:97:5b:33:31:
3b:1b:01:63:13:7d:32:f1:02:5d:d8:64:e4:e6:74:
a8:5d:46:64:70:95:31:fe:6c:4b:90:6b:a8:c4:ff:
68:01:e6:c3:ec:22:4d:1f:50:47:b9:fd:77:53:ce:
95:0c:9a:4e:24:61:d9:ac:27:0d:0b:3c:f7:8c:8d:
e6:17:ae:4a:57:0d:af:15:1b:0b:7b:2b:11:c1:38:
75:9c:a9:df:16:9e:75:92:43:ef:a5:72:d8:47:ba:
e0:84:01:88:42:ad:52:50:ea:b9:e0:06:2b:11:27:
f8:ab:c4:97:e2:bf:e4:fb:e7:52:9c:59:4c:a9:ea:
1e:78:7c:eb:63:41:40:a5:eb:87:34:a2:9a:b0:67:
99:af:cd:e4:fd:8f:10:5a:b6:c4:91:a7:55:bb:1e:
e9:2e:37:24:49:68:df:69:82:64:d9:c3:13:de:43:
17:04:fb:75:d7:7b:cc:50:fa:f0:ee:cb:16:77:94:
86:53:7f:c9:57:1b:74:4d:27:e5:30:63:5e:42:dc:
b7:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:66:E1:D5:F5:EB:77:7E:79:05:59:DC:F8:7C:33:47:36:2F:21:25
X509v3 Authority Key Identifier:
keyid:09:44:AA:AC:7F:2E:BB:29:81:C2:47:63:EB:3D:60:45:EF:BD:6F:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CUSqrH8uuymBwkdj6z1gRe-9bwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/434849-89da-43ae-b2be-66cd01961e46/1/CUSqrH8uuymBwkdj6z1gRe-9bwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/434849-89da-43ae-b2be-66cd01961e46/1/CUSqrH8uuymBwkdj6z1gRe-9bwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:18:bb:50:57:35:26:70:7d:d7:c3:38:08:48:8c:74:42:b3:
d6:cf:4f:6a:85:62:1c:96:0a:52:d6:a4:74:4e:cf:6c:2e:d2:
ba:a7:24:be:61:ec:88:f5:a6:2a:a2:a3:4c:e9:8b:e4:73:f3:
e0:90:de:74:51:e5:42:23:f0:0c:97:d8:36:ea:1b:7c:73:5b:
04:28:74:ee:8a:ca:54:42:46:3c:a9:90:0f:dd:ee:bf:60:57:
01:25:8e:9a:40:fc:b0:07:28:38:76:57:72:6f:36:ef:ab:10:
66:58:8f:e8:df:f4:7a:bb:c5:13:08:6f:8e:c4:4f:64:12:e6:
11:c1:65:68:2f:1c:5a:0e:da:d5:62:8b:1e:03:e3:11:a5:4b:
f9:3a:e1:91:f3:b2:a3:03:27:58:7f:22:ff:5e:a8:38:92:d5:
cf:45:4d:ae:c1:dc:28:61:9b:e5:4f:1f:22:9c:98:78:94:c0:
00:fc:a5:9b:22:84:28:fe:33:bf:a4:0d:db:54:6c:78:3a:ee:
f3:91:57:00:7d:68:dd:83:e3:0a:e5:c2:d7:a5:5f:37:d7:b6:
52:b1:f0:24:af:63:2d:ea:4b:3f:01:3a:db:28:45:9e:d2:48:
a8:e4:f3:98:01:14:4c:a7:a7:61:75:dc:c6:00:45:b9:26:8b:
ab:34:8e:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 10:18:09 2026 by rpki-client