Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/434849-89da-43ae-b2be-66cd01961e46/1/CUSqrH8uuymBwkdj6z1gRe-9bwY.mft
File: CUSqrH8uuymBwkdj6z1gRe-9bwY.mft (raw, json)
Hash identifier: nKHAWIHxgEUWzgR8ysBbkmkQ15qwb+dBByyyWLDZwsk=
Subject key identifier: E4:37:57:C0:65:BF:9B:CB:33:D9:AF:38:5B:A2:75:BF:89:E1:EB:8B
Authority key identifier: 09:44:AA:AC:7F:2E:BB:29:81:C2:47:63:EB:3D:60:45:EF:BD:6F:06
Certificate issuer: /CN=0944aaac7f2ebb2981c24763eb3d6045efbd6f06
Certificate serial: 019D99D03BA3453D893C91BDFE637BC2F50B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CUSqrH8uuymBwkdj6z1gRe-9bwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/434849-89da-43ae-b2be-66cd01961e46/1/CUSqrH8uuymBwkdj6z1gRe-9bwY.mft
Manifest number: 0F01
Signing time: Fri 17 Apr 2026 05:00:53 +0000
Manifest this update: Fri 17 Apr 2026 05:00:53 +0000
Manifest next update: Sat 18 Apr 2026 05:00:53 +0000
Files and hashes: 1: CUSqrH8uuymBwkdj6z1gRe-9bwY.crl (hash: PDCaVCSMpHN/BgfndN7JMiM7Xc4pJJ6fMG4fjRvQVfs=)
2: zjvZq0qDo9Cqy2lJeksXnY5wlWg.roa (hash: R3vvsBnC8yjc/6l+ae3jOrD+eH9Ah/ka0B3qOkEBjzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/434849-89da-43ae-b2be-66cd01961e46/1/CUSqrH8uuymBwkdj6z1gRe-9bwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/434849-89da-43ae-b2be-66cd01961e46/1/CUSqrH8uuymBwkdj6z1gRe-9bwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CUSqrH8uuymBwkdj6z1gRe-9bwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:3b:a3:45:3d:89:3c:91:bd:fe:63:7b:c2:f5:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0944aaac7f2ebb2981c24763eb3d6045efbd6f06
Validity
Not Before: Apr 17 05:00:53 2026 GMT
Not After : Apr 18 05:00:53 2026 GMT
Subject: CN=e43757c065bf9bcb33d9af385ba275bf89e1eb8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:8a:75:9a:63:b8:93:b0:e6:f8:90:96:52:af:
28:42:27:b5:2b:f0:ea:5e:ae:9b:03:fa:cc:58:b5:
ce:cb:6c:54:bc:82:74:0e:40:8a:35:71:7f:13:1c:
fd:5a:8e:a5:c0:a8:01:3d:37:fb:6a:1f:93:21:72:
0d:09:15:54:6d:08:af:fb:9c:09:6b:40:1a:f1:38:
26:aa:14:bb:32:72:2c:f7:c4:f4:28:c7:a9:a5:9b:
4f:dd:f8:a0:29:ef:ad:4b:d0:c6:a9:2e:e2:29:ca:
f1:0d:3a:f7:23:fa:91:6a:33:b3:d9:9f:59:12:e3:
a3:34:0d:b4:8d:6f:60:d2:da:da:77:a7:61:48:4d:
7b:f4:9d:aa:42:04:7e:e1:0e:7d:f8:68:08:67:77:
d3:60:5a:b2:3c:4b:16:89:e5:c3:6e:aa:e3:a4:0f:
0a:b9:4b:28:4c:60:8b:51:d2:c8:dd:d6:90:f4:d1:
c1:29:f4:f9:cc:2e:ab:50:3f:53:07:ab:8d:8f:92:
f3:c7:ad:03:bd:93:a7:05:ed:ae:76:f1:80:cb:03:
11:52:ff:db:65:b6:44:09:55:b5:98:62:fd:78:28:
fd:3c:2a:f2:b5:c2:49:97:f1:dd:ec:e0:d0:ae:29:
02:98:51:54:2d:ca:d6:d8:02:68:dc:4c:0d:ec:c1:
7e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:37:57:C0:65:BF:9B:CB:33:D9:AF:38:5B:A2:75:BF:89:E1:EB:8B
X509v3 Authority Key Identifier:
keyid:09:44:AA:AC:7F:2E:BB:29:81:C2:47:63:EB:3D:60:45:EF:BD:6F:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CUSqrH8uuymBwkdj6z1gRe-9bwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/434849-89da-43ae-b2be-66cd01961e46/1/CUSqrH8uuymBwkdj6z1gRe-9bwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/434849-89da-43ae-b2be-66cd01961e46/1/CUSqrH8uuymBwkdj6z1gRe-9bwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:42:b6:c2:6b:8c:af:9c:83:59:45:57:57:b5:b0:cc:e1:fb:
a8:8e:16:0e:1b:2e:87:82:11:48:07:0f:02:d8:61:36:d0:7f:
52:f9:39:77:dd:c1:48:91:f3:02:53:39:73:4e:fa:f4:c1:b5:
1f:a3:7d:44:3f:89:71:1a:5c:df:5b:59:20:bd:6c:99:14:25:
5f:c7:9b:51:40:fc:c7:1b:32:4f:27:87:6b:de:b9:57:fb:f7:
6d:e7:47:30:b6:73:57:b4:84:50:a8:8c:0f:cf:ff:eb:6a:3a:
f6:31:63:75:30:15:9a:83:fd:d3:ca:45:a3:68:b0:59:3e:d8:
a3:05:86:ca:22:b0:35:1a:09:2d:2e:3c:ca:38:56:da:af:47:
e6:9b:1b:15:92:ac:39:91:2a:fc:4d:98:29:52:3f:a0:04:8c:
e3:5c:1b:c2:32:72:d9:9e:eb:80:2a:de:13:d6:8e:c4:88:c0:
bc:8c:31:67:b8:02:0b:36:8a:7e:ec:90:17:d7:25:5a:ae:ea:
50:d8:e3:db:d8:13:26:f4:7c:37:a8:92:b7:64:d3:38:00:f0:
ef:4b:39:f7:d6:95:ce:59:97:89:80:9a:a9:c9:bb:7e:ba:62:
c5:9b:1e:10:49:99:88:11:b6:47:fc:ad:57:55:e5:61:26:04:
58:c6:47:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:47:42 2026 by rpki-client