Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/1faa24-f086-4b48-b1bd-45527e8e44d2/1/cuEqOHb_e9ANnZ67lyqx5iHqHo0.mft
File: cuEqOHb_e9ANnZ67lyqx5iHqHo0.mft (raw, json)
Hash identifier: pi7ysxU9uYEvdDODJEYZ2W61zUGTRfNCYnE7mHHVFMY=
Subject key identifier: 03:2D:E4:DE:8C:C4:6E:09:8B:C2:50:EE:C7:C7:C7:4C:F1:A7:70:29
Authority key identifier: 72:E1:2A:38:76:FF:7B:D0:0D:9D:9E:BB:97:2A:B1:E6:21:EA:1E:8D
Certificate issuer: /CN=72e12a3876ff7bd00d9d9ebb972ab1e621ea1e8d
Certificate serial: 01A0D9F1356BE29CFA21DF3668140E9D134E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cuEqOHb_e9ANnZ67lyqx5iHqHo0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/1faa24-f086-4b48-b1bd-45527e8e44d2/1/cuEqOHb_e9ANnZ67lyqx5iHqHo0.mft
Manifest number: 1A03
Signing time: Fri 25 Sep 2026 19:00:58 +0000
Manifest this update: Fri 25 Sep 2026 19:00:58 +0000
Manifest next update: Sat 26 Sep 2026 19:00:58 +0000
Files and hashes: 1: VGyi3_XM7fe5glWnkMXs_96XfgY.roa (hash: 5b1Wuvrw9UByaw3AW1uJ5o3W+F06ZtJx4zNpuEiuZ3Q=)
2: cuEqOHb_e9ANnZ67lyqx5iHqHo0.crl (hash: tjQCg0PmV8zLDPMgofrddfnVxAR1vHUyrurj2htDnQg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/1faa24-f086-4b48-b1bd-45527e8e44d2/1/cuEqOHb_e9ANnZ67lyqx5iHqHo0.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/1faa24-f086-4b48-b1bd-45527e8e44d2/1/cuEqOHb_e9ANnZ67lyqx5iHqHo0.mft
rsync://rpki.ripe.net/repository/DEFAULT/cuEqOHb_e9ANnZ67lyqx5iHqHo0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:f1:35:6b:e2:9c:fa:21:df:36:68:14:0e:9d:13:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72e12a3876ff7bd00d9d9ebb972ab1e621ea1e8d
Validity
Not Before: Sep 25 19:00:58 2026 GMT
Not After : Sep 26 19:00:58 2026 GMT
Subject: CN=032de4de8cc46e098bc250eec7c7c74cf1a77029
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:51:22:40:f1:42:2c:87:56:c5:55:5b:0e:eb:
f0:6b:14:09:db:8a:b9:fe:f6:20:d0:fd:60:2d:95:
7c:e9:9c:68:bb:58:ca:89:93:46:ae:e5:47:d7:64:
db:81:27:5e:d0:c7:4f:ee:cd:ff:65:47:fc:c3:61:
86:ea:9c:e1:ab:9d:db:46:de:08:20:c1:cd:aa:92:
fc:f7:f6:7e:40:3f:b9:72:3c:a4:93:ec:72:c9:ca:
ab:ce:68:f3:d9:fa:df:ed:7a:b5:77:df:23:9b:d1:
ad:00:26:1e:27:88:0e:f6:97:6e:ca:9e:24:90:d7:
dc:bc:d8:a3:de:9b:e7:fb:a3:c5:0c:54:aa:0f:72:
64:93:1d:ce:5e:2a:f2:5f:89:24:a6:12:cc:01:33:
4f:a9:2d:ee:75:fd:59:66:dc:13:94:3c:ef:28:43:
e5:78:42:95:48:74:27:34:78:c3:2f:d2:c6:7a:ca:
de:b2:6c:5d:c5:dd:e6:0b:b6:35:47:d9:9d:35:14:
e4:c0:7f:5d:3e:d5:56:e2:b5:72:b7:ce:5a:28:55:
f0:fc:4d:c9:9d:2d:a9:23:fd:31:16:42:cb:b1:53:
0e:fe:67:7d:81:88:b4:19:6b:a8:b6:e7:f8:be:24:
d5:08:61:97:ab:54:f0:ce:df:28:76:ed:4d:bc:f8:
fe:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:2D:E4:DE:8C:C4:6E:09:8B:C2:50:EE:C7:C7:C7:4C:F1:A7:70:29
X509v3 Authority Key Identifier:
keyid:72:E1:2A:38:76:FF:7B:D0:0D:9D:9E:BB:97:2A:B1:E6:21:EA:1E:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cuEqOHb_e9ANnZ67lyqx5iHqHo0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1faa24-f086-4b48-b1bd-45527e8e44d2/1/cuEqOHb_e9ANnZ67lyqx5iHqHo0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1faa24-f086-4b48-b1bd-45527e8e44d2/1/cuEqOHb_e9ANnZ67lyqx5iHqHo0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:47:52:fd:36:08:ca:ca:76:02:57:e9:12:9c:2b:44:3d:d7:
8e:f4:2c:c3:5a:cc:19:40:2c:1b:97:67:e6:c9:1e:6c:47:2d:
55:56:76:67:8b:69:cd:05:7e:c0:72:fe:c7:2a:8a:09:79:bb:
7b:fe:93:f0:b9:2f:3f:cb:20:ee:96:7a:ae:5c:d9:00:2d:4f:
3c:29:d2:98:8a:b8:c8:24:9e:30:4b:0d:b9:b4:58:42:be:77:
c1:87:18:e8:55:99:76:89:45:b8:87:07:e4:a5:a4:02:90:b3:
a5:b0:46:d1:55:01:ea:cf:31:54:f9:a8:c4:6f:dd:ab:fa:27:
3b:12:bd:d2:37:12:27:32:f0:c3:9a:00:17:6b:28:ca:62:ea:
51:f0:e0:62:4d:a2:a1:24:33:45:0d:46:c9:1d:98:79:16:dc:
af:1d:96:35:79:d6:28:1e:f2:d7:9f:66:5e:e0:3f:8f:34:ea:
58:cb:a5:20:28:3d:fc:f1:7a:c4:d1:ac:c8:06:f8:9a:87:41:
91:04:cb:51:7f:a7:e5:0c:2b:f4:5d:87:ed:4e:d1:56:e7:70:
af:81:42:41:8e:fa:dc:d1:3f:64:c5:4a:0c:d5:f4:71:32:01:
68:33:81:1e:19:0b:29:eb:fc:12:0b:f9:5c:aa:0d:b3:1f:3b:
cc:f2:8b:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 04:24:25 2026 by rpki-client