Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/e112fc-05ef-4f1f-85be-7c9e684ccce2/1/CuQnEByy4r1WUITeZHH260jST5Y.mft
File: CuQnEByy4r1WUITeZHH260jST5Y.mft (raw, json)
Hash identifier: CFTgX76VBphkYmy/sRqRDSEAMupoLn4wtZDjODyIdjU=
Subject key identifier: 2D:3A:B2:97:A9:66:5A:53:87:EB:35:0E:79:4C:F3:19:96:19:5C:55
Authority key identifier: 0A:E4:27:10:1C:B2:E2:BD:56:50:84:DE:64:71:F6:EB:48:D2:4F:96
Certificate issuer: /CN=0ae427101cb2e2bd565084de6471f6eb48d24f96
Certificate serial: 019D2996D23ABF52EAE2EFBFB69755B1839C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CuQnEByy4r1WUITeZHH260jST5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/e112fc-05ef-4f1f-85be-7c9e684ccce2/1/CuQnEByy4r1WUITeZHH260jST5Y.mft
Manifest number: 0E26
Signing time: Thu 26 Mar 2026 10:00:43 +0000
Manifest this update: Thu 26 Mar 2026 10:00:43 +0000
Manifest next update: Fri 27 Mar 2026 10:00:43 +0000
Files and hashes: 1: CuQnEByy4r1WUITeZHH260jST5Y.crl (hash: kJr/LzhnX5iE0V0lth36SCgij3FUXRclWHr6ll18Rho=)
2: uhdMtBOA3cYoynFIaKtZYsj7lSg.roa (hash: VF0DL8K8+TXT+eVaeExhkpXzBIJGAgs45oDbj/IFdpY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/e112fc-05ef-4f1f-85be-7c9e684ccce2/1/CuQnEByy4r1WUITeZHH260jST5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/e112fc-05ef-4f1f-85be-7c9e684ccce2/1/CuQnEByy4r1WUITeZHH260jST5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/CuQnEByy4r1WUITeZHH260jST5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:96:d2:3a:bf:52:ea:e2:ef:bf:b6:97:55:b1:83:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ae427101cb2e2bd565084de6471f6eb48d24f96
Validity
Not Before: Mar 26 10:00:43 2026 GMT
Not After : Mar 27 10:00:43 2026 GMT
Subject: CN=2d3ab297a9665a5387eb350e794cf31996195c55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:a4:b3:50:fc:93:27:42:78:93:d8:a0:03:f5:
36:f3:6c:c9:1d:20:c9:d9:8e:3d:c5:f6:17:19:4b:
de:02:84:9f:8c:a1:ba:75:18:3e:24:fc:78:e2:ba:
17:48:ae:89:2c:12:f6:16:7b:96:37:d8:c9:1b:ca:
33:db:b0:c6:f9:e3:4f:b7:5d:32:1f:91:6b:da:e9:
d5:f1:3d:1f:89:e9:09:be:6e:c3:00:8f:27:e2:ce:
d2:7e:6e:81:5c:13:76:8d:e8:37:dc:43:61:b1:e8:
a2:c3:b7:c0:c5:6e:6f:5c:6b:0f:a3:1d:2c:a9:d8:
6d:f5:60:fb:5d:ae:33:82:60:8c:5b:9f:26:e4:26:
a0:d7:6b:9c:8d:5f:2f:43:b2:25:dc:2d:77:00:b3:
f8:ac:ed:a4:e7:05:99:bb:f2:8f:40:72:42:f2:1a:
47:6b:4d:5e:6a:e1:0e:25:5c:5a:48:13:e3:9e:2c:
1e:66:99:6a:21:df:90:13:76:23:67:e8:25:e9:a2:
29:c4:9f:cc:9d:34:9a:d9:17:6b:b5:e8:bc:68:ee:
ad:a9:63:d2:5b:77:89:d8:10:76:b8:78:63:93:c1:
c8:80:d0:a7:47:1b:ea:d1:de:89:92:a6:ef:41:23:
58:70:fd:3c:92:25:f1:67:84:ce:23:52:c3:fa:81:
aa:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:3A:B2:97:A9:66:5A:53:87:EB:35:0E:79:4C:F3:19:96:19:5C:55
X509v3 Authority Key Identifier:
keyid:0A:E4:27:10:1C:B2:E2:BD:56:50:84:DE:64:71:F6:EB:48:D2:4F:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CuQnEByy4r1WUITeZHH260jST5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/e112fc-05ef-4f1f-85be-7c9e684ccce2/1/CuQnEByy4r1WUITeZHH260jST5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/e112fc-05ef-4f1f-85be-7c9e684ccce2/1/CuQnEByy4r1WUITeZHH260jST5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:9b:6b:4f:6b:1e:f1:2a:97:5b:81:f2:a1:a1:60:83:85:06:
dc:a1:b5:57:02:17:3d:99:ec:4f:14:99:f0:c8:f9:a8:3e:78:
0e:4c:49:7d:d0:f3:08:29:2c:9d:1f:33:3b:cb:8f:8a:b1:31:
a0:a9:9b:86:1c:a4:28:9d:b5:32:47:3b:f6:3a:5f:73:e4:88:
a6:37:f5:67:dc:c4:c3:21:8a:30:0a:a8:dd:1e:a1:87:45:ac:
b0:cb:5b:2d:fd:3b:89:8c:c8:c4:dd:89:7f:e7:ad:0e:1d:2e:
47:a5:64:99:b5:02:3b:e9:49:14:be:7d:73:27:a6:18:44:3d:
7f:ab:07:be:9e:7c:2a:d5:1c:9a:80:88:6b:10:c9:fe:f4:9f:
db:dc:a7:a3:4b:55:67:96:0a:a5:25:52:04:32:1a:b0:8e:f1:
84:17:88:e7:4b:f1:de:b3:3c:05:82:00:8b:1d:47:27:ae:03:
bc:b3:a7:dc:09:b5:ae:55:98:97:34:3a:75:cf:0d:e6:c1:1c:
3c:a4:c4:02:23:99:69:6a:64:3f:e4:cf:61:aa:38:6e:94:cf:
7f:a5:4a:6f:08:34:5e:7a:09:7d:c4:b4:9f:8b:62:84:01:ce:
4b:1d:35:20:f1:9e:18:41:6a:81:9c:11:25:1e:8c:26:ab:d3:
54:9b:c4:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:51:38 2026 by rpki-client