Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/606939-cc69-4cfa-843e-50b64cbd0fe1/1/CUsU8URwOb33-d7l-ik4XB3OlZ0.mft
File: CUsU8URwOb33-d7l-ik4XB3OlZ0.mft (raw, json)
Hash identifier: gPm1t5pKAAONb6X1NZ3QafX9SQgix/R4xvi9jqhrG/I=
Subject key identifier: 05:CB:D5:1F:51:46:E6:A7:33:65:F4:71:29:CC:9B:33:C5:A0:43:65
Authority key identifier: 09:4B:14:F1:44:70:39:BD:F7:F9:DE:E5:FA:29:38:5C:1D:CE:95:9D
Certificate issuer: /CN=094b14f1447039bdf7f9dee5fa29385c1dce959d
Certificate serial: 019F90FEFC644B5291F6446169942FB55925
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CUsU8URwOb33-d7l-ik4XB3OlZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/606939-cc69-4cfa-843e-50b64cbd0fe1/1/CUsU8URwOb33-d7l-ik4XB3OlZ0.mft
Manifest number: 1955
Signing time: Thu 23 Jul 2026 22:00:57 +0000
Manifest this update: Thu 23 Jul 2026 22:00:57 +0000
Manifest next update: Fri 24 Jul 2026 22:00:57 +0000
Files and hashes: 1: CUsU8URwOb33-d7l-ik4XB3OlZ0.crl (hash: +QOD9NYo3eYitG+0noRhNhu4Gm7FTVK6qDVme8FQhZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/606939-cc69-4cfa-843e-50b64cbd0fe1/1/CUsU8URwOb33-d7l-ik4XB3OlZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/606939-cc69-4cfa-843e-50b64cbd0fe1/1/CUsU8URwOb33-d7l-ik4XB3OlZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CUsU8URwOb33-d7l-ik4XB3OlZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:fe:fc:64:4b:52:91:f6:44:61:69:94:2f:b5:59:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=094b14f1447039bdf7f9dee5fa29385c1dce959d
Validity
Not Before: Jul 23 22:00:57 2026 GMT
Not After : Jul 24 22:00:57 2026 GMT
Subject: CN=05cbd51f5146e6a73365f47129cc9b33c5a04365
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:17:f2:1c:d4:20:ab:70:c6:77:7a:ec:6c:ff:
b0:d9:17:d7:85:38:99:c5:86:ec:bf:d3:33:17:cc:
80:8a:8a:cf:f8:c8:de:39:11:0e:9c:ce:f7:33:7d:
60:b8:0c:a9:8a:62:ec:ac:6e:ea:bd:e8:d3:df:fb:
93:74:ad:2d:5f:a5:8b:8f:63:ab:2e:a4:38:74:e0:
b0:ba:07:f7:58:24:4d:33:83:4f:35:43:0e:f7:0c:
b6:21:f1:88:0b:1f:ea:53:42:18:24:d6:7d:6d:8d:
16:b8:97:95:4b:e3:9d:d8:1d:a7:42:d6:70:97:08:
4f:87:e6:3b:a9:9e:7a:ba:8c:c4:f1:8a:7a:6c:de:
e4:be:97:42:37:4f:bb:b0:6d:cc:de:0d:a8:4a:42:
f6:d6:bd:d8:36:69:58:63:60:39:61:7f:38:99:73:
78:d8:bc:46:d0:1c:23:0e:4e:c9:4a:97:13:e9:f2:
8a:63:d0:fe:35:d1:0c:b4:6d:2d:3d:6f:0e:cd:a2:
46:49:0d:4d:2d:0f:f5:11:05:63:09:91:86:a7:77:
5c:a8:24:37:9d:33:35:72:d8:cf:9b:47:96:51:60:
da:54:63:77:9c:74:aa:20:b8:61:ce:4a:03:af:f6:
44:a7:76:3c:dc:5f:55:4f:59:4f:83:42:0f:54:14:
41:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:CB:D5:1F:51:46:E6:A7:33:65:F4:71:29:CC:9B:33:C5:A0:43:65
X509v3 Authority Key Identifier:
keyid:09:4B:14:F1:44:70:39:BD:F7:F9:DE:E5:FA:29:38:5C:1D:CE:95:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CUsU8URwOb33-d7l-ik4XB3OlZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/606939-cc69-4cfa-843e-50b64cbd0fe1/1/CUsU8URwOb33-d7l-ik4XB3OlZ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/606939-cc69-4cfa-843e-50b64cbd0fe1/1/CUsU8URwOb33-d7l-ik4XB3OlZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:10:3b:20:27:70:92:7f:a7:f6:e9:06:37:25:9f:6c:e6:19:
a9:02:b8:10:a5:cd:2e:a6:3e:9f:55:b2:99:a0:6f:f5:dc:cc:
52:cb:b0:72:fa:4c:1f:cf:76:a0:53:49:95:cb:9d:6e:11:32:
3f:92:92:b6:fa:a6:ff:1a:0e:37:67:5b:39:b5:95:cb:19:9f:
08:76:f6:f3:a1:0d:6b:1b:5a:74:0e:11:d0:93:ed:f5:e9:91:
d8:81:77:e2:06:c2:7e:37:4b:43:7c:25:e3:52:0f:0f:fd:49:
93:92:b4:1d:7b:8c:17:31:1e:ce:c8:1a:ed:c7:a0:c4:e6:f4:
da:fc:36:55:35:cb:74:02:94:7d:af:ed:be:52:d3:75:da:0d:
95:2e:d8:8c:8d:91:26:2c:59:ff:84:d5:9d:68:20:8a:30:7b:
eb:13:cf:0a:05:a2:ff:30:d9:40:84:9b:d5:75:88:8c:37:46:
b5:15:ad:b5:7a:31:ed:71:cd:ae:e0:2c:96:29:bf:4d:6c:9d:
82:02:7f:2a:51:43:30:36:0f:6c:47:4d:e5:13:d1:42:4b:2d:
7d:3b:1e:eb:36:fe:74:4c:d4:f9:ec:56:09:5f:7e:b2:da:39:
96:bf:9a:12:fd:c6:ad:b1:ba:f9:3a:17:b4:e0:0f:c9:ab:eb:
42:29:ad:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:58:43 2026 by rpki-client