Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.mft
File: CUJF7otbpMZv4s7KZL5Gb8lvce0.mft (raw, json)
Hash identifier: Fv6OMXN8y2nVvuWAFWNL94efasyh18AIly2uA/CyuVE=
Subject key identifier: 34:E5:81:C1:21:4F:EB:E7:6A:D5:E7:68:A6:9F:43:F8:E1:7F:58:BB
Authority key identifier: 09:42:45:EE:8B:5B:A4:C6:6F:E2:CE:CA:64:BE:46:6F:C9:6F:71:ED
Certificate issuer: /CN=094245ee8b5ba4c66fe2ceca64be466fc96f71ed
Certificate serial: 019F91DA4E2BF9901E0AF455E592C33BA548
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CUJF7otbpMZv4s7KZL5Gb8lvce0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.mft
Manifest number: 1509
Signing time: Fri 24 Jul 2026 02:00:30 +0000
Manifest this update: Fri 24 Jul 2026 02:00:30 +0000
Manifest next update: Sat 25 Jul 2026 02:00:30 +0000
Files and hashes: 1: 14Ys9mltTrx3HTjwmBcjfuVTekY.roa (hash: iBB9lJSfcBZPQU6QwVO+HUBTusp2/eskLo+xXHX5mVY=)
2: CUJF7otbpMZv4s7KZL5Gb8lvce0.crl (hash: 5E69nDprPs9n+zWtdNatTOMuhXDB9/VvnRuayV0P9vM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CUJF7otbpMZv4s7KZL5Gb8lvce0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:4e:2b:f9:90:1e:0a:f4:55:e5:92:c3:3b:a5:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=094245ee8b5ba4c66fe2ceca64be466fc96f71ed
Validity
Not Before: Jul 24 02:00:30 2026 GMT
Not After : Jul 25 02:00:30 2026 GMT
Subject: CN=34e581c1214febe76ad5e768a69f43f8e17f58bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c5:04:42:bb:37:56:67:50:01:e4:e0:0e:30:
d8:e3:5e:5d:79:c8:dd:66:08:23:9e:cf:fa:63:c2:
e2:cc:7b:58:a5:05:c8:d2:e8:90:7a:5d:42:14:b9:
8e:34:b7:90:5a:26:bd:a2:61:e3:96:e4:9a:63:a6:
97:98:0a:20:16:32:ee:23:46:b4:5c:36:47:0c:37:
34:1c:c7:af:7d:66:e3:80:55:57:c3:69:eb:9f:fc:
a6:df:60:dc:2e:5a:57:bf:de:92:b4:84:95:53:99:
1e:9b:84:eb:ca:4e:15:49:40:4b:ab:2b:ec:26:1e:
bb:c6:0a:89:cb:ad:8e:5e:c9:13:6a:52:be:1a:55:
2a:46:08:7b:e9:a8:9b:b0:5a:c3:fa:3d:c0:3e:dd:
38:b8:2a:24:77:f4:c6:06:47:fa:7b:33:c2:37:39:
7c:cc:46:d3:b6:c5:19:ed:ec:93:69:86:fe:f4:05:
21:c3:78:08:c0:2b:64:f4:2c:e9:62:34:9a:f3:39:
ac:e9:07:56:31:27:c6:1c:2d:73:92:fb:70:29:82:
c8:54:5c:01:02:c9:f2:15:62:29:ac:9b:6e:ab:5d:
e1:0b:1f:01:24:85:7d:d7:5e:e4:3b:74:8b:20:87:
5f:20:ac:0c:4f:22:7e:53:20:c7:e9:48:bb:f9:38:
ca:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:E5:81:C1:21:4F:EB:E7:6A:D5:E7:68:A6:9F:43:F8:E1:7F:58:BB
X509v3 Authority Key Identifier:
keyid:09:42:45:EE:8B:5B:A4:C6:6F:E2:CE:CA:64:BE:46:6F:C9:6F:71:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CUJF7otbpMZv4s7KZL5Gb8lvce0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:aa:0f:cd:27:3b:7e:af:63:e0:c6:1f:cd:4b:e8:26:6f:f4:
f1:29:49:9b:f2:e8:5f:eb:94:ed:14:74:06:d2:dc:5a:e6:cf:
c8:26:ee:a6:45:27:04:84:e3:1c:b9:51:b3:c8:e8:14:1c:2e:
2d:5b:93:ea:ac:23:eb:a7:e6:72:a8:b7:be:a2:1e:5b:ad:8d:
0a:1f:76:fd:90:2e:ca:14:7a:2c:f0:1e:15:14:c0:fc:00:71:
5f:08:d8:b1:17:20:66:ca:5f:5e:71:24:35:9f:ce:01:fd:55:
7d:9a:2d:02:a8:31:54:dd:99:3f:67:9c:31:74:fa:0b:e3:75:
ea:f8:14:11:50:8d:8b:19:93:bf:9f:51:0e:bc:ac:bc:c2:91:
49:d9:0c:7d:e3:03:c7:18:22:7a:f7:1a:94:89:1b:c0:e6:fb:
e4:a7:c1:39:31:bb:3c:ff:ef:91:bd:a9:f5:e5:d0:44:25:41:
5a:29:75:8f:56:c2:04:6f:6c:37:e3:87:90:6a:6e:e7:6a:ae:
0e:11:0c:bc:08:f8:59:63:1e:64:c1:3b:0c:f2:a9:e9:68:1b:
a4:cc:20:f2:76:8b:7d:43:6a:6a:8e:72:1f:7a:3e:07:48:c6:
4b:8a:4e:bc:2b:72:76:be:d5:9f:66:d3:78:25:a2:e9:2a:c8:
58:60:01:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:38:51 2026 by rpki-client