Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/434849-89da-43ae-b2be-66cd01961e46/1/CUSqrH8uuymBwkdj6z1gRe-9bwY.mft
File: CUSqrH8uuymBwkdj6z1gRe-9bwY.mft (raw, json)
Hash identifier: rGd+2eEdIb9E8w/8Fc7GIMT/rIQbcdjNJ3WHMko3raY=
Subject key identifier: A3:E9:AC:5F:C9:83:7D:74:C1:E7:1B:70:E7:3C:1A:A2:6B:B2:F0:C8
Authority key identifier: 09:44:AA:AC:7F:2E:BB:29:81:C2:47:63:EB:3D:60:45:EF:BD:6F:06
Certificate issuer: /CN=0944aaac7f2ebb2981c24763eb3d6045efbd6f06
Certificate serial: 019CAC46A0B0FDC4AC64E11C956E01B7DA37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CUSqrH8uuymBwkdj6z1gRe-9bwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/434849-89da-43ae-b2be-66cd01961e46/1/CUSqrH8uuymBwkdj6z1gRe-9bwY.mft
Manifest number: 0E86
Signing time: Mon 02 Mar 2026 02:00:35 +0000
Manifest this update: Mon 02 Mar 2026 02:00:35 +0000
Manifest next update: Tue 03 Mar 2026 02:00:35 +0000
Files and hashes: 1: CUSqrH8uuymBwkdj6z1gRe-9bwY.crl (hash: GIrhKd4qqluCxCy5YVscgGIqlN3LG+bbhcT3MQ/muKk=)
2: zjvZq0qDo9Cqy2lJeksXnY5wlWg.roa (hash: R3vvsBnC8yjc/6l+ae3jOrD+eH9Ah/ka0B3qOkEBjzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/434849-89da-43ae-b2be-66cd01961e46/1/CUSqrH8uuymBwkdj6z1gRe-9bwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/434849-89da-43ae-b2be-66cd01961e46/1/CUSqrH8uuymBwkdj6z1gRe-9bwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CUSqrH8uuymBwkdj6z1gRe-9bwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:a0:b0:fd:c4:ac:64:e1:1c:95:6e:01:b7:da:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0944aaac7f2ebb2981c24763eb3d6045efbd6f06
Validity
Not Before: Mar 2 02:00:35 2026 GMT
Not After : Mar 3 02:00:35 2026 GMT
Subject: CN=a3e9ac5fc9837d74c1e71b70e73c1aa26bb2f0c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:aa:40:06:cf:96:a3:28:6b:bf:6e:e7:8b:74:
30:c4:79:73:bd:6b:d9:bc:3d:a8:4e:83:1d:06:aa:
73:b7:dd:9a:e6:b2:70:ca:f0:5a:0a:5a:da:cc:ee:
65:cf:25:d0:58:e2:e6:22:f9:1f:a1:cd:2f:15:15:
40:4e:ec:df:66:00:cb:e8:63:3e:c4:76:90:e9:fc:
6e:e5:10:16:c6:07:92:dd:b7:bc:f2:3e:05:7d:fc:
86:03:9e:a3:8c:79:f3:99:e8:fd:72:99:50:21:20:
e1:8f:31:e5:06:1e:39:16:aa:61:eb:88:cc:82:6f:
b5:ed:05:76:92:25:18:0d:7d:b7:6c:46:5f:5f:49:
4e:92:98:fe:c4:f5:22:38:1f:a8:e3:72:59:0b:55:
46:b5:61:53:df:ce:c9:c2:c4:35:b1:6a:25:ac:0d:
df:6d:c2:6a:9b:c1:71:02:03:5f:83:98:08:47:a5:
ca:26:d4:17:d0:9b:66:3c:22:30:49:be:dd:41:5f:
fd:2b:ef:7c:a1:81:ab:eb:f2:b9:ba:a2:2d:64:81:
3b:83:76:d7:34:b5:fd:ce:eb:f8:6d:4c:a3:3b:f5:
70:be:45:a1:a2:bb:a1:f5:de:96:53:85:44:36:17:
bc:7e:8b:68:24:02:68:c1:ed:b3:a1:62:16:98:45:
15:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:E9:AC:5F:C9:83:7D:74:C1:E7:1B:70:E7:3C:1A:A2:6B:B2:F0:C8
X509v3 Authority Key Identifier:
keyid:09:44:AA:AC:7F:2E:BB:29:81:C2:47:63:EB:3D:60:45:EF:BD:6F:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CUSqrH8uuymBwkdj6z1gRe-9bwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/434849-89da-43ae-b2be-66cd01961e46/1/CUSqrH8uuymBwkdj6z1gRe-9bwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/434849-89da-43ae-b2be-66cd01961e46/1/CUSqrH8uuymBwkdj6z1gRe-9bwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:73:00:92:2e:da:b3:1c:fa:de:35:a1:0a:ea:96:ef:2c:5f:
b8:68:b5:ca:d7:1f:93:e2:4b:7a:83:9f:99:80:0a:54:4a:13:
7b:77:80:36:54:f8:01:3a:a6:73:18:53:92:4e:5e:6d:76:31:
7e:73:df:34:44:63:b7:3f:05:9f:13:81:c3:93:b3:8f:a2:f2:
e9:c5:d0:15:cb:57:b5:da:ea:d9:df:7a:98:71:98:97:73:ef:
04:57:21:0a:53:35:68:ed:d5:a7:b5:fa:e0:a5:82:1d:81:66:
d6:5e:0c:9e:4a:58:45:ca:4a:03:21:98:0d:88:eb:f5:6e:39:
ce:87:13:c7:c3:56:76:3e:a9:ae:2c:3c:9e:ec:e1:ff:13:1d:
de:20:88:d1:99:10:2f:24:93:93:d4:80:8a:96:a9:a0:be:23:
8a:89:2d:07:44:1e:74:3a:a3:c3:fd:51:e7:7e:8f:38:81:1b:
2b:7f:3b:a7:4b:61:2e:6b:86:f4:37:36:6f:d9:c6:b8:7e:3c:
e8:cc:d2:ee:74:b5:dc:ef:37:90:42:74:cd:ea:a2:8e:fc:26:
62:e0:a4:8a:b3:da:b3:64:c0:64:dd:4f:7c:86:63:5b:d7:cb:
3d:d2:61:54:f1:ef:24:44:27:bb:35:3e:fe:b5:7a:2c:2a:e5:
43:38:4f:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:06:06 2026 by rpki-client