Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/66b74c-81c1-410e-957d-a8d65dccb96b/1/cuS6-Zq4QBKRMyhf6a17g_0TDDk.mft
File: cuS6-Zq4QBKRMyhf6a17g_0TDDk.mft (raw, json)
Hash identifier: XPr6BFpkeLErydEq3M6Z0X4pm5PAqbsBHGz/tT0kxbg=
Subject key identifier: 12:FC:08:41:69:BC:52:12:74:F4:E6:EF:59:10:64:21:06:5E:B7:99
Authority key identifier: 72:E4:BA:F9:9A:B8:40:12:91:33:28:5F:E9:AD:7B:83:FD:13:0C:39
Certificate issuer: /CN=72e4baf99ab840129133285fe9ad7b83fd130c39
Certificate serial: 019D28BB91C0A7563610B0D21E3C058D2C59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cuS6-Zq4QBKRMyhf6a17g_0TDDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/66b74c-81c1-410e-957d-a8d65dccb96b/1/cuS6-Zq4QBKRMyhf6a17g_0TDDk.mft
Manifest number: 1895
Signing time: Thu 26 Mar 2026 06:01:14 +0000
Manifest this update: Thu 26 Mar 2026 06:01:14 +0000
Manifest next update: Fri 27 Mar 2026 06:01:14 +0000
Files and hashes: 1: 1E2GfXyPoyKCnvX8Op-67NNeeII.roa (hash: N8Q/qvAY27SFiMXr6tcvfagA2n7ieRadFl4CNkx0CiQ=)
2: cuS6-Zq4QBKRMyhf6a17g_0TDDk.crl (hash: dCHn6Zk2tC9kHXxdYbsX+k87C9lM7Z/6DdDFA9BjghY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/66b74c-81c1-410e-957d-a8d65dccb96b/1/cuS6-Zq4QBKRMyhf6a17g_0TDDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/66b74c-81c1-410e-957d-a8d65dccb96b/1/cuS6-Zq4QBKRMyhf6a17g_0TDDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/cuS6-Zq4QBKRMyhf6a17g_0TDDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:91:c0:a7:56:36:10:b0:d2:1e:3c:05:8d:2c:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72e4baf99ab840129133285fe9ad7b83fd130c39
Validity
Not Before: Mar 26 06:01:14 2026 GMT
Not After : Mar 27 06:01:14 2026 GMT
Subject: CN=12fc084169bc521274f4e6ef59106421065eb799
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:74:9e:58:ab:3c:cc:f2:2c:69:04:62:37:c7:
8b:87:aa:41:cc:63:41:7b:f8:38:73:f4:3a:3b:c1:
bd:a9:a6:97:c3:32:e0:72:80:85:4b:ff:cb:46:82:
e8:97:4d:44:29:47:c8:be:dc:b1:44:82:99:d7:9d:
a7:15:6e:c0:05:1f:82:5f:51:78:3c:55:1c:ea:c7:
d8:c1:87:ac:49:3d:f1:95:e4:8a:c2:84:4e:0a:df:
18:3a:51:4b:eb:f6:a1:76:16:18:12:6b:d7:ae:fd:
d9:78:6c:79:b1:2c:e7:df:32:3f:4f:28:d6:5c:a5:
5e:81:5e:d0:5e:4e:a6:e2:28:9a:f3:b4:c3:ca:1b:
32:c4:bc:30:46:ec:49:ae:df:cc:3b:6c:d7:77:52:
19:d2:0d:f4:d9:c0:18:a9:47:f9:df:bc:7f:07:3a:
11:17:e1:01:d8:0b:2b:c1:fb:50:06:7f:46:5c:11:
49:67:c1:fe:c5:aa:90:b8:99:5c:20:1c:15:ab:29:
c2:f3:26:86:5b:86:66:ef:a7:46:b5:44:99:e6:78:
ee:99:82:72:90:b1:03:c2:38:b3:85:d3:75:76:e3:
33:f8:29:17:fc:c5:c3:3a:31:48:f4:ef:b5:d7:93:
94:33:43:4a:d1:a8:23:69:48:a8:d8:ab:ca:fa:02:
45:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:FC:08:41:69:BC:52:12:74:F4:E6:EF:59:10:64:21:06:5E:B7:99
X509v3 Authority Key Identifier:
keyid:72:E4:BA:F9:9A:B8:40:12:91:33:28:5F:E9:AD:7B:83:FD:13:0C:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cuS6-Zq4QBKRMyhf6a17g_0TDDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/66b74c-81c1-410e-957d-a8d65dccb96b/1/cuS6-Zq4QBKRMyhf6a17g_0TDDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/66b74c-81c1-410e-957d-a8d65dccb96b/1/cuS6-Zq4QBKRMyhf6a17g_0TDDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:ad:56:77:6f:7b:50:3b:2d:eb:1c:34:4a:18:16:be:b4:51:
19:ab:1d:28:71:97:51:e6:6e:ad:bb:c3:6a:4d:fa:30:de:a9:
0e:69:0a:97:18:45:1d:ba:41:8d:bb:de:f8:3f:c6:c2:cf:08:
79:70:d4:46:7e:58:aa:f2:1d:1b:eb:fe:66:13:18:30:9d:ef:
9e:71:f6:bf:e3:16:ba:f8:c2:9d:53:b0:fd:9a:f3:81:ce:58:
de:09:f5:41:30:7d:81:29:33:ce:3c:47:0f:21:24:59:03:7d:
18:d5:e3:04:90:1e:19:5c:91:05:b7:70:91:f9:9c:1e:80:f3:
c4:2a:9b:a8:14:3e:19:5b:49:83:76:fc:93:0d:88:58:f3:ed:
3a:68:71:0d:59:fa:1c:80:a7:e3:14:12:19:1f:9a:95:13:0b:
c9:59:1a:d6:3d:54:99:92:25:78:37:47:27:67:7b:5a:22:d8:
be:11:8e:17:ea:5f:5b:67:66:c4:2c:89:f4:83:d1:32:48:8c:
ce:be:bb:04:00:96:c4:c0:9c:e0:71:f9:21:ec:79:2a:c3:9d:
9f:2d:94:65:c5:dd:4c:82:d9:6d:b2:c5:80:f6:c8:68:a3:f0:
f4:d9:94:46:98:36:da:ff:d5:ce:bd:84:83:aa:d2:4c:ae:39:
30:02:75:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:17:12 2026 by rpki-client