Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.mft
File: CUJF7otbpMZv4s7KZL5Gb8lvce0.mft (raw, json)
Hash identifier: ubqf2i2pl3sNjkPpAJV1vzCDxDnob/7GIvUnok8TjkA=
Subject key identifier: 4F:3B:56:4B:1A:8D:19:28:24:BF:BA:93:10:51:EB:89:A5:1E:55:31
Authority key identifier: 09:42:45:EE:8B:5B:A4:C6:6F:E2:CE:CA:64:BE:46:6F:C9:6F:71:ED
Certificate issuer: /CN=094245ee8b5ba4c66fe2ceca64be466fc96f71ed
Certificate serial: 01A0CCA325F4283DEECE7E46879623C595EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CUJF7otbpMZv4s7KZL5Gb8lvce0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.mft
Manifest number: 15AC
Signing time: Wed 23 Sep 2026 05:00:39 +0000
Manifest this update: Wed 23 Sep 2026 05:00:39 +0000
Manifest next update: Thu 24 Sep 2026 05:00:39 +0000
Files and hashes: 1: 14Ys9mltTrx3HTjwmBcjfuVTekY.roa (hash: iBB9lJSfcBZPQU6QwVO+HUBTusp2/eskLo+xXHX5mVY=)
2: CUJF7otbpMZv4s7KZL5Gb8lvce0.crl (hash: f63qUt6hezivRzeVNrwYE9rXYTe6mc4nuxa3vEww/cI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CUJF7otbpMZv4s7KZL5Gb8lvce0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:a3:25:f4:28:3d:ee:ce:7e:46:87:96:23:c5:95:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=094245ee8b5ba4c66fe2ceca64be466fc96f71ed
Validity
Not Before: Sep 23 05:00:39 2026 GMT
Not After : Sep 24 05:00:39 2026 GMT
Subject: CN=4f3b564b1a8d192824bfba931051eb89a51e5531
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:59:5a:99:3a:af:73:08:76:f6:36:94:f0:66:
1e:2d:11:18:1b:72:53:69:7c:3b:2b:9d:3d:ab:79:
0c:48:2f:58:ef:cf:c0:27:15:8c:3f:7b:0f:69:a8:
51:d0:d2:06:7c:89:44:98:1f:73:d0:3a:54:44:bd:
85:99:71:a0:d2:1e:54:c9:bb:fc:2d:4c:c6:32:86:
19:93:49:fe:db:59:17:c2:4f:86:0e:f9:59:76:b7:
b9:ad:fd:d0:36:18:79:09:47:16:d8:8d:db:42:fd:
d3:2b:6b:68:f9:e7:75:a8:c1:ab:75:8d:8c:a9:54:
19:48:6b:8a:3f:78:85:02:19:06:c3:10:42:d9:c4:
da:44:43:bc:dd:7c:a4:ea:d4:03:d8:f8:fa:19:29:
8b:b5:89:2b:aa:c0:e0:c2:ea:fa:fb:74:6e:8f:25:
46:a4:0a:d0:13:8c:b3:61:50:dd:54:97:f8:66:f3:
c6:95:c4:1f:05:41:f7:19:77:82:0c:c9:6a:10:dd:
a8:d8:92:e7:1a:f8:01:79:d4:9b:b5:5c:d6:a3:d9:
74:54:78:a9:ac:05:61:80:dc:ed:04:f7:bc:7e:e3:
86:6d:cb:db:b8:de:cc:21:2d:72:bc:62:3b:33:22:
13:6b:b1:5c:55:7d:61:f6:5f:a0:fd:5e:c2:8a:ea:
b7:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:3B:56:4B:1A:8D:19:28:24:BF:BA:93:10:51:EB:89:A5:1E:55:31
X509v3 Authority Key Identifier:
keyid:09:42:45:EE:8B:5B:A4:C6:6F:E2:CE:CA:64:BE:46:6F:C9:6F:71:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CUJF7otbpMZv4s7KZL5Gb8lvce0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:ea:28:90:07:90:d5:55:48:29:08:ad:74:a0:e0:5a:df:f3:
e3:b2:80:97:4a:dd:dd:49:43:e2:e0:a0:4c:6e:4b:87:eb:98:
59:3c:d9:6f:46:b7:f2:52:c1:e4:fc:48:ae:ac:19:03:25:6f:
35:84:c6:1f:78:e1:9b:e4:79:01:dd:ab:37:a5:c4:3e:64:36:
bc:c0:82:bb:40:27:b2:c4:40:22:99:a8:c2:c4:d8:dd:da:ec:
d9:e0:ad:86:e0:a1:fc:87:ff:89:72:cf:2c:1f:e4:b5:56:25:
f1:55:9b:2d:62:16:f4:13:c8:08:f5:73:6d:01:1e:c5:6f:1e:
30:3a:41:f4:e1:8b:16:4d:d6:26:fa:f3:70:2b:be:b2:ba:e0:
d9:0b:40:f7:02:2a:a9:1c:02:00:d1:69:e8:e5:89:bd:a1:40:
99:04:2a:21:f4:6d:8c:7c:47:c1:c0:ec:27:89:b4:de:97:d0:
dd:db:ed:70:02:a7:26:8a:f0:db:08:c8:99:d2:2f:5a:b0:b2:
34:aa:08:d8:b3:4e:15:9e:ad:fd:44:ef:37:6d:7b:e3:fb:04:
52:21:9a:c0:c6:e0:0c:d6:21:63:e9:5b:9b:34:60:5c:f2:9c:
7a:ec:fa:40:2f:ba:0f:12:bd:71:14:84:8e:b3:4a:5f:a8:6b:
b4:3c:c4:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 09:12:12 2026 by rpki-client