Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/606939-cc69-4cfa-843e-50b64cbd0fe1/1/CUsU8URwOb33-d7l-ik4XB3OlZ0.mft
File: CUsU8URwOb33-d7l-ik4XB3OlZ0.mft (raw, json)
Hash identifier: QNNBt2k+Gi/DgzXzZ/bOoAsKh02dr8I900so/n0dnoQ=
Subject key identifier: 25:2F:A7:25:EC:8F:11:0C:FB:25:8F:5E:78:34:47:85:F3:FD:F7:6A
Authority key identifier: 09:4B:14:F1:44:70:39:BD:F7:F9:DE:E5:FA:29:38:5C:1D:CE:95:9D
Certificate issuer: /CN=094b14f1447039bdf7f9dee5fa29385c1dce959d
Certificate serial: 01A0DD29514A384FC84E8E2D014D2E0F3332
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CUsU8URwOb33-d7l-ik4XB3OlZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/606939-cc69-4cfa-843e-50b64cbd0fe1/1/CUsU8URwOb33-d7l-ik4XB3OlZ0.mft
Manifest number: 1A01
Signing time: Sat 26 Sep 2026 10:01:07 +0000
Manifest this update: Sat 26 Sep 2026 10:01:07 +0000
Manifest next update: Sun 27 Sep 2026 10:01:07 +0000
Files and hashes: 1: CUsU8URwOb33-d7l-ik4XB3OlZ0.crl (hash: B7hQpxXe8t5b+YZl8obxx7PW2x8uueegbweSn3LksV0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/606939-cc69-4cfa-843e-50b64cbd0fe1/1/CUsU8URwOb33-d7l-ik4XB3OlZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/606939-cc69-4cfa-843e-50b64cbd0fe1/1/CUsU8URwOb33-d7l-ik4XB3OlZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CUsU8URwOb33-d7l-ik4XB3OlZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 09:18:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:29:51:4a:38:4f:c8:4e:8e:2d:01:4d:2e:0f:33:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=094b14f1447039bdf7f9dee5fa29385c1dce959d
Validity
Not Before: Sep 26 10:01:07 2026 GMT
Not After : Sep 27 10:01:07 2026 GMT
Subject: CN=252fa725ec8f110cfb258f5e78344785f3fdf76a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6c:f5:5b:12:a9:97:ab:82:f6:21:02:25:6e:
85:d7:bb:96:72:3d:25:95:e8:15:21:35:f4:9c:5e:
cd:4b:e2:80:38:de:96:1d:c6:75:a1:27:e9:f2:fa:
76:9f:ea:dc:17:d0:18:09:33:d3:78:db:4f:94:f0:
7c:a9:3a:82:f1:9b:a6:c7:ff:9f:d3:6c:8e:29:95:
4d:ad:27:da:5d:60:50:04:74:55:72:db:f9:6e:8b:
99:4d:42:a1:72:21:38:d2:98:b1:23:fa:27:28:cd:
95:37:8d:ec:95:9b:28:4e:d6:2f:12:69:70:53:86:
9b:9f:d5:3b:49:2b:83:92:0b:05:a7:2d:0d:e3:44:
ed:e8:43:e0:2f:4d:0c:33:4d:f4:73:ef:20:a0:06:
22:21:8e:b5:b7:90:1b:f4:85:a4:92:98:56:f8:16:
d3:5e:6e:cb:10:c5:42:1d:30:ea:8e:3b:53:6c:a9:
cf:0d:89:4e:df:a8:4b:70:af:44:15:23:8e:25:bb:
b6:e6:28:1a:90:c3:e8:a1:68:7d:b3:b2:d4:ff:33:
ae:3e:93:f2:fa:9d:41:ca:0f:fe:90:fe:cb:e5:a7:
e1:a1:f0:4e:c9:ae:b5:8a:4d:c0:33:3f:97:fa:18:
e9:dd:b2:dc:c8:cb:da:7b:1e:1f:e6:6d:2e:00:31:
a2:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:2F:A7:25:EC:8F:11:0C:FB:25:8F:5E:78:34:47:85:F3:FD:F7:6A
X509v3 Authority Key Identifier:
keyid:09:4B:14:F1:44:70:39:BD:F7:F9:DE:E5:FA:29:38:5C:1D:CE:95:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CUsU8URwOb33-d7l-ik4XB3OlZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/606939-cc69-4cfa-843e-50b64cbd0fe1/1/CUsU8URwOb33-d7l-ik4XB3OlZ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/606939-cc69-4cfa-843e-50b64cbd0fe1/1/CUsU8URwOb33-d7l-ik4XB3OlZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:11:5f:c2:ef:34:2a:0b:e2:07:c4:51:5f:72:15:08:ec:d9:
12:ed:21:61:9c:45:ed:19:70:75:3a:27:f2:59:f5:8d:8f:ed:
fa:0e:2d:76:b2:ee:b9:3c:08:a8:90:b3:1b:d2:2c:b7:24:4a:
1d:b8:e5:04:98:cb:2a:b8:44:12:4b:83:71:df:fa:2b:36:51:
2b:b4:08:65:54:c0:76:46:9e:03:cd:0b:b4:c3:75:8e:a3:45:
34:02:67:5a:31:b2:bc:3a:c3:1a:66:a8:0e:93:ed:4d:a8:09:
08:13:c5:61:49:ce:7d:ac:c9:01:81:4f:c8:55:03:7e:ab:5a:
09:f1:42:f0:4e:e1:b3:d7:ee:83:15:01:09:80:a9:81:b1:1f:
a2:7c:c7:af:1a:99:72:0f:bf:7b:26:55:e1:ee:c1:5f:4b:89:
d6:db:5a:ed:2a:2f:75:b5:55:f5:59:fd:c8:82:d1:d1:f4:90:
1d:ab:cc:fb:4c:e6:ee:ed:c2:df:c7:2b:bb:88:35:9f:64:ca:
b0:5b:10:7f:60:b2:b4:51:5f:46:ef:ce:6d:6b:63:0c:2b:d3:
cc:bc:78:d4:a3:02:6b:75:03:81:f5:77:ac:3a:f7:d7:72:cd:
a2:9a:02:9c:60:93:eb:b9:aa:67:c5:40:cb:2c:e5:24:3e:10:
f3:b9:e2:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 15:40:17 2026 by rpki-client