Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.mft
File: CUJF7otbpMZv4s7KZL5Gb8lvce0.mft (raw, json)
Hash identifier: yB1kQhwOXWDqztB/f+JeP+lgOsax/HgQ78hvWrHkxRA=
Subject key identifier: E5:E5:8C:41:05:40:B2:10:81:A4:87:9E:2B:35:C9:9A:F0:A8:0B:21
Authority key identifier: 09:42:45:EE:8B:5B:A4:C6:6F:E2:CE:CA:64:BE:46:6F:C9:6F:71:ED
Certificate issuer: /CN=094245ee8b5ba4c66fe2ceca64be466fc96f71ed
Certificate serial: 019D25F20D7AFD957755993F75247A5CA063
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CUJF7otbpMZv4s7KZL5Gb8lvce0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.mft
Manifest number: 13C8
Signing time: Wed 25 Mar 2026 17:01:53 +0000
Manifest this update: Wed 25 Mar 2026 17:01:53 +0000
Manifest next update: Thu 26 Mar 2026 17:01:53 +0000
Files and hashes: 1: 14Ys9mltTrx3HTjwmBcjfuVTekY.roa (hash: iBB9lJSfcBZPQU6QwVO+HUBTusp2/eskLo+xXHX5mVY=)
2: CUJF7otbpMZv4s7KZL5Gb8lvce0.crl (hash: lPiHQeQuZqggmSHZzvIa5j+DyWGYWeE380v/JOMp2R4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CUJF7otbpMZv4s7KZL5Gb8lvce0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f2:0d:7a:fd:95:77:55:99:3f:75:24:7a:5c:a0:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=094245ee8b5ba4c66fe2ceca64be466fc96f71ed
Validity
Not Before: Mar 25 17:01:53 2026 GMT
Not After : Mar 26 17:01:53 2026 GMT
Subject: CN=e5e58c410540b21081a4879e2b35c99af0a80b21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:24:24:02:0f:54:5a:99:17:a3:fc:6e:5a:53:
2f:37:33:53:1b:85:0a:e1:0d:69:27:c2:dd:93:55:
80:60:1c:bc:ec:1d:1d:4d:a3:27:2b:67:02:b1:f6:
46:78:17:a4:b3:0b:0d:df:3c:cd:a6:5d:93:2a:ee:
04:cb:49:65:5c:fd:21:a3:25:54:f4:7a:d7:9e:10:
40:d1:0e:64:fa:b9:de:4c:3c:cb:06:1f:e5:a9:98:
63:73:de:0d:14:06:1a:47:05:7c:71:36:34:fb:50:
3f:8c:c9:a4:c7:1c:6e:c1:76:d5:9b:97:d1:42:f4:
c8:19:5c:74:7b:74:4b:20:87:9a:ad:a0:94:08:50:
14:99:d7:bc:e7:a6:81:1b:fa:ed:21:9b:e3:c0:c0:
b2:4f:a4:c2:5d:3f:da:92:ed:55:33:95:3c:8a:1f:
d8:97:46:b4:cf:f1:3d:1e:2c:07:bf:39:14:7e:65:
5d:30:6e:56:57:53:20:20:a8:f4:ec:f9:0a:d5:03:
63:b3:80:3a:dc:65:ad:8b:df:69:45:65:b8:0f:c9:
14:4c:71:8a:88:0b:46:c3:3b:ca:56:29:12:8d:15:
7a:00:f1:1c:73:28:d0:76:72:21:d0:f3:69:91:0d:
58:64:d3:af:85:4f:44:9a:93:0f:c6:1a:39:bc:8d:
cc:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:E5:8C:41:05:40:B2:10:81:A4:87:9E:2B:35:C9:9A:F0:A8:0B:21
X509v3 Authority Key Identifier:
keyid:09:42:45:EE:8B:5B:A4:C6:6F:E2:CE:CA:64:BE:46:6F:C9:6F:71:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CUJF7otbpMZv4s7KZL5Gb8lvce0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:b6:8e:e0:d3:38:9b:01:23:53:03:7f:de:cc:b6:c7:78:93:
e8:9a:bd:7e:56:9d:99:bc:31:b6:21:8e:bd:e0:2f:1d:bd:bb:
9b:e5:f8:45:a7:9a:dd:9b:1d:6c:86:66:ed:56:3c:68:dc:36:
89:2f:f9:0d:62:e1:7d:11:34:8c:58:07:8d:58:9c:f9:e5:40:
2f:b7:d1:0d:56:d4:6c:49:96:2b:5d:d2:c3:f6:73:a2:fe:14:
3d:22:5d:a6:6c:c6:bb:b6:29:db:0a:be:f9:93:42:a3:34:b0:
e7:15:e2:7e:b9:97:ba:e6:df:b4:69:36:6a:0c:bb:87:5d:00:
22:15:8c:c1:a1:15:7b:15:6b:89:9e:e4:73:60:12:0c:e5:ab:
7c:0f:87:d3:ee:f0:7a:71:0d:ee:22:e1:62:a3:48:7a:cc:2e:
96:a7:2b:7a:40:24:61:40:c6:7c:99:a8:ec:7f:83:b2:46:ce:
de:9e:e6:0f:91:87:11:51:83:76:e6:cc:7f:4e:ee:27:c4:c7:
3a:8b:e1:9e:cd:5f:cd:16:ee:63:da:00:13:91:99:44:9f:cf:
a4:00:05:ab:8e:2a:03:8d:09:b4:3e:e4:d7:2c:78:e8:cb:18:
7f:02:d5:f8:c4:0a:83:6c:15:e1:7d:1a:7e:29:88:b5:eb:22:
9c:d3:27:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:38 2026 by rpki-client