Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.mft
File: CUJF7otbpMZv4s7KZL5Gb8lvce0.mft (raw, json)
Hash identifier: O++eqj20eSElfDAk3MQN3VGfczlMs0N8mJR6K+Slcbw=
Subject key identifier: 43:E2:36:87:2B:BE:9D:4D:B9:49:01:7A:2C:B5:E3:BD:82:D2:39:2F
Authority key identifier: 09:42:45:EE:8B:5B:A4:C6:6F:E2:CE:CA:64:BE:46:6F:C9:6F:71:ED
Certificate issuer: /CN=094245ee8b5ba4c66fe2ceca64be466fc96f71ed
Certificate serial: 019E1D22742EA4E838463EF8DB0F9E283BE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CUJF7otbpMZv4s7KZL5Gb8lvce0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.mft
Manifest number: 1448
Signing time: Tue 12 May 2026 17:00:57 +0000
Manifest this update: Tue 12 May 2026 17:00:57 +0000
Manifest next update: Wed 13 May 2026 17:00:57 +0000
Files and hashes: 1: 14Ys9mltTrx3HTjwmBcjfuVTekY.roa (hash: iBB9lJSfcBZPQU6QwVO+HUBTusp2/eskLo+xXHX5mVY=)
2: CUJF7otbpMZv4s7KZL5Gb8lvce0.crl (hash: e+f3iy1JnSK6qqAWzWc47X5N0/DTW+OMuWj7TuwZs4o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CUJF7otbpMZv4s7KZL5Gb8lvce0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:74:2e:a4:e8:38:46:3e:f8:db:0f:9e:28:3b:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=094245ee8b5ba4c66fe2ceca64be466fc96f71ed
Validity
Not Before: May 12 17:00:57 2026 GMT
Not After : May 13 17:00:57 2026 GMT
Subject: CN=43e236872bbe9d4db949017a2cb5e3bd82d2392f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:9a:28:6e:4c:b1:df:f6:6c:a0:b1:6c:68:91:
91:c0:4c:ca:af:6c:e2:56:28:40:ba:10:9c:cc:e9:
64:eb:d7:27:7e:03:67:f3:26:bd:a9:31:fc:88:a1:
6f:3a:24:d8:57:b0:7b:8c:35:ca:37:63:d0:84:4d:
13:a0:31:00:7c:47:69:58:3f:b0:4d:ed:2f:e2:64:
18:ee:cf:de:f5:8e:c1:07:e0:ff:8a:8e:6d:a6:71:
74:c0:cb:b6:3a:4d:a4:49:cb:f2:07:b6:24:75:0f:
3c:19:b0:c9:f1:a1:4c:bf:39:29:92:f6:69:e3:04:
76:8e:31:f1:16:e1:0d:c5:9a:36:ed:66:ae:78:43:
e6:12:8a:68:8b:e8:5f:bb:a8:dd:92:df:90:d1:f8:
76:32:fb:7b:fe:b2:e7:d6:76:c9:32:62:3a:62:1f:
97:90:08:32:d1:3f:80:c6:de:76:7c:43:6d:02:ca:
50:e8:9c:93:06:dc:e9:09:5a:fd:c7:08:45:2e:83:
50:71:7e:b6:3f:07:ed:52:10:dc:b8:85:23:78:23:
df:92:76:a3:6e:16:18:dd:b6:e1:40:d8:ae:fe:7e:
b4:e1:d6:5c:a8:e9:e6:07:89:50:af:a2:dd:6e:75:
3b:1b:6f:9d:e8:f3:14:44:da:1f:10:d7:ec:11:d0:
03:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:E2:36:87:2B:BE:9D:4D:B9:49:01:7A:2C:B5:E3:BD:82:D2:39:2F
X509v3 Authority Key Identifier:
keyid:09:42:45:EE:8B:5B:A4:C6:6F:E2:CE:CA:64:BE:46:6F:C9:6F:71:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CUJF7otbpMZv4s7KZL5Gb8lvce0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:d9:ca:bb:cf:80:c4:b6:b8:a2:d4:36:4f:f1:62:b1:0a:18:
7d:2b:90:21:1c:9c:b6:73:dd:e6:a1:f5:01:d1:b2:b2:31:52:
ba:8a:9d:6f:3c:b4:8c:b6:ed:8c:ba:e6:de:62:8b:06:48:32:
78:3b:51:60:18:06:4d:1f:1d:f8:f0:57:14:00:8b:f9:b3:07:
3a:91:ba:6f:88:25:d9:9c:11:c0:49:40:98:a6:59:5d:4f:de:
cb:67:e5:82:3e:f0:1d:8f:70:3a:ba:03:b0:ae:df:36:2c:e0:
71:72:e9:c7:6a:dd:17:28:3e:5f:c5:79:e5:25:f7:70:5f:23:
28:44:03:b1:db:f3:dc:9f:2a:36:40:2e:8a:14:5f:3f:84:76:
f1:f3:a3:41:f0:71:c1:e8:b1:a7:ae:19:a2:3c:f1:86:62:25:
63:d7:7d:8a:eb:62:fd:95:49:83:73:3d:93:89:31:ab:27:81:
5d:e3:e1:82:50:dc:01:75:8d:6c:5c:06:75:c0:30:fa:77:2f:
d8:9f:6e:d3:dd:e8:19:05:45:dc:6c:4d:90:2b:47:b8:48:07:
5b:77:27:06:8e:fc:dd:04:6f:8e:9b:c3:db:06:80:23:85:54:
14:3f:9a:34:07:13:4e:63:23:1c:5a:ce:80:db:00:d8:02:2b:
7f:51:52:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:03:45 2026 by rpki-client