Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/78/e112fc-05ef-4f1f-85be-7c9e684ccce2/1/CuQnEByy4r1WUITeZHH260jST5Y.mft
File: CuQnEByy4r1WUITeZHH260jST5Y.mft (raw, json)
Hash identifier: VAGFAxPqQbWllceJcbrI4GS29i8wi/kCaLZWCVwoMPA=
Subject key identifier: A5:74:9E:AE:04:86:DF:E2:49:26:82:FD:22:AB:05:5F:76:B8:3B:74
Authority key identifier: 0A:E4:27:10:1C:B2:E2:BD:56:50:84:DE:64:71:F6:EB:48:D2:4F:96
Certificate issuer: /CN=0ae427101cb2e2bd565084de6471f6eb48d24f96
Certificate serial: 01A0D237AF296AB30BA98210B6B812841832
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CuQnEByy4r1WUITeZHH260jST5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/e112fc-05ef-4f1f-85be-7c9e684ccce2/1/CuQnEByy4r1WUITeZHH260jST5Y.mft
Manifest number: 100B
Signing time: Thu 24 Sep 2026 07:00:59 +0000
Manifest this update: Thu 24 Sep 2026 07:00:59 +0000
Manifest next update: Fri 25 Sep 2026 07:00:59 +0000
Files and hashes: 1: CuQnEByy4r1WUITeZHH260jST5Y.crl (hash: 1ARQDpbNkmJNU1sivr9acIcxFnsn2IKSA8oEnPPHH3s=)
2: uhdMtBOA3cYoynFIaKtZYsj7lSg.roa (hash: VF0DL8K8+TXT+eVaeExhkpXzBIJGAgs45oDbj/IFdpY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/e112fc-05ef-4f1f-85be-7c9e684ccce2/1/CuQnEByy4r1WUITeZHH260jST5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/e112fc-05ef-4f1f-85be-7c9e684ccce2/1/CuQnEByy4r1WUITeZHH260jST5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/CuQnEByy4r1WUITeZHH260jST5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 07:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:37:af:29:6a:b3:0b:a9:82:10:b6:b8:12:84:18:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ae427101cb2e2bd565084de6471f6eb48d24f96
Validity
Not Before: Sep 24 07:00:59 2026 GMT
Not After : Sep 25 07:00:59 2026 GMT
Subject: CN=a5749eae0486dfe2492682fd22ab055f76b83b74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:40:e8:f3:64:ac:d7:cf:56:18:09:c2:e0:85:
17:de:4a:9a:d1:5d:b4:ad:7e:bb:c1:e2:df:49:24:
f0:09:3b:f7:ba:f3:12:9d:75:cb:5a:e3:1d:91:92:
f9:4c:65:db:5f:ea:47:05:f2:04:f4:62:60:18:df:
a5:2e:fc:a6:63:5c:fe:76:ee:07:f0:28:b2:2e:de:
e5:d6:82:96:d7:d5:e7:39:e2:42:9a:8b:b6:84:c6:
43:69:e0:ca:52:c4:08:11:61:cd:77:1b:2f:c5:39:
7e:90:80:ee:f6:37:f7:f9:bb:3d:a8:ef:e4:6d:21:
28:a4:46:69:02:fc:29:d0:fa:88:5f:1c:1f:5e:79:
f0:81:a3:a7:2d:b5:6a:fe:b7:49:d9:74:d4:48:8c:
dd:3f:74:e6:87:cd:c2:61:45:df:2a:73:7a:52:3f:
1c:42:f5:52:8b:7e:58:7c:21:58:39:b7:4a:a5:ff:
1c:5d:36:bd:0e:c9:52:5c:a3:e5:0e:c2:b8:d9:af:
99:c2:0c:a2:63:02:45:78:6a:d1:be:bc:81:6c:ce:
b2:ef:97:61:a4:b5:65:13:d6:20:8a:b6:40:94:08:
73:0b:70:9a:25:95:62:7a:a2:20:1e:b7:9f:ea:de:
9c:37:32:6d:de:e0:ee:67:b4:d1:9c:83:71:de:80:
0b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:74:9E:AE:04:86:DF:E2:49:26:82:FD:22:AB:05:5F:76:B8:3B:74
X509v3 Authority Key Identifier:
keyid:0A:E4:27:10:1C:B2:E2:BD:56:50:84:DE:64:71:F6:EB:48:D2:4F:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CuQnEByy4r1WUITeZHH260jST5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/e112fc-05ef-4f1f-85be-7c9e684ccce2/1/CuQnEByy4r1WUITeZHH260jST5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/e112fc-05ef-4f1f-85be-7c9e684ccce2/1/CuQnEByy4r1WUITeZHH260jST5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:53:23:ac:e4:69:ad:e6:3c:2a:45:21:d6:df:20:a0:14:02:
c6:4c:ce:0b:ee:1c:92:62:b1:5b:23:eb:56:4f:d9:05:40:32:
97:d9:d3:28:f7:d8:e2:61:0c:04:28:18:61:42:75:98:f2:97:
6c:09:6d:21:eb:93:31:73:a5:c1:03:44:24:c1:cc:67:ed:22:
e1:c7:1d:2d:ee:1a:3c:7c:37:3e:83:a5:a9:90:4f:fd:32:b2:
35:05:9b:cc:d6:c8:e6:03:94:1e:c7:94:33:6f:2f:ff:ab:05:
ca:dd:43:65:b3:ce:64:01:36:b0:86:a8:5f:74:c2:2b:2c:dd:
81:04:3c:1e:d1:24:2c:cb:f0:10:9a:97:24:bb:bf:37:21:b0:
ee:64:99:26:de:a4:0f:17:29:eb:53:5f:f3:d1:d8:a1:79:37:
97:dc:d1:9c:bb:3b:9a:5d:08:1b:3e:fa:ff:ab:47:70:f3:05:
99:c3:b6:b6:1b:5e:ae:63:80:17:89:1c:ac:31:fd:12:f9:11:
02:71:f7:70:c5:e8:4c:73:68:5a:4f:81:a0:5e:37:f4:24:2d:
06:29:2d:2c:c0:ed:99:cd:b1:8f:10:c9:50:8e:04:43:69:a9:
43:96:52:d3:cb:af:f6:e0:be:d1:5c:04:76:92:fc:4e:bc:71:
2a:ae:e9:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 17:16:20 2026 by rpki-client