Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/e112fc-05ef-4f1f-85be-7c9e684ccce2/1/CuQnEByy4r1WUITeZHH260jST5Y.mft
File: CuQnEByy4r1WUITeZHH260jST5Y.mft (raw, json)
Hash identifier: X6Rt2HWSPUlzw4ikNrFDoOlNRNa5USmx3W1r9vQU0Zc=
Subject key identifier: 1A:71:BB:9D:14:A9:FD:51:72:11:EE:6C:D9:FF:10:8E:C4:1B:CD:C1
Authority key identifier: 0A:E4:27:10:1C:B2:E2:BD:56:50:84:DE:64:71:F6:EB:48:D2:4F:96
Certificate issuer: /CN=0ae427101cb2e2bd565084de6471f6eb48d24f96
Certificate serial: 019E1CEBC5D126F3D8F8E68975207323302C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CuQnEByy4r1WUITeZHH260jST5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/e112fc-05ef-4f1f-85be-7c9e684ccce2/1/CuQnEByy4r1WUITeZHH260jST5Y.mft
Manifest number: 0EA4
Signing time: Tue 12 May 2026 16:01:14 +0000
Manifest this update: Tue 12 May 2026 16:01:14 +0000
Manifest next update: Wed 13 May 2026 16:01:14 +0000
Files and hashes: 1: CuQnEByy4r1WUITeZHH260jST5Y.crl (hash: 2KWZmkcVeIpe1LkXigWLGewuFLUdgxkVh49acL9dJ+g=)
2: uhdMtBOA3cYoynFIaKtZYsj7lSg.roa (hash: VF0DL8K8+TXT+eVaeExhkpXzBIJGAgs45oDbj/IFdpY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/e112fc-05ef-4f1f-85be-7c9e684ccce2/1/CuQnEByy4r1WUITeZHH260jST5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/e112fc-05ef-4f1f-85be-7c9e684ccce2/1/CuQnEByy4r1WUITeZHH260jST5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/CuQnEByy4r1WUITeZHH260jST5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:eb:c5:d1:26:f3:d8:f8:e6:89:75:20:73:23:30:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ae427101cb2e2bd565084de6471f6eb48d24f96
Validity
Not Before: May 12 16:01:14 2026 GMT
Not After : May 13 16:01:14 2026 GMT
Subject: CN=1a71bb9d14a9fd517211ee6cd9ff108ec41bcdc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:05:52:85:6b:c4:45:5e:30:f0:4a:2b:a6:85:
74:7c:83:f3:cb:ea:10:6d:44:c0:59:49:ee:51:a6:
20:5f:a9:82:d1:90:73:72:d5:78:e0:50:69:47:d0:
9b:5b:df:4d:19:01:3c:68:34:6b:e3:15:aa:1d:34:
1e:d4:b9:3c:d2:ec:76:51:c4:85:f9:d2:d8:d3:62:
1d:d7:37:00:36:ee:6e:1f:eb:1d:dd:a8:0e:46:5e:
95:f5:b5:e3:97:bc:a9:68:12:a1:39:db:48:6c:d2:
b8:5a:10:52:6a:1b:d2:a4:f8:03:4e:c8:44:cf:84:
41:21:5d:2b:5c:62:b2:1d:46:5e:51:46:17:b0:43:
3d:b7:8b:22:6f:83:60:5b:ae:42:8c:dc:fa:a1:0c:
83:5f:79:03:b6:cb:de:86:57:88:3d:d8:b7:45:a3:
a7:bc:f7:53:56:22:b5:3b:ab:01:f6:33:e7:75:fb:
14:35:84:da:2c:ca:b7:a2:17:2f:ec:71:95:48:4e:
b2:aa:17:cd:50:60:e2:39:d1:41:b8:95:57:f3:80:
29:22:90:cf:a9:f9:76:e3:f2:71:6d:63:b5:b9:d6:
7d:58:90:65:47:38:c0:b6:37:f4:bc:d3:61:93:db:
fa:18:00:bb:57:ab:b6:0b:59:55:8d:51:8c:52:11:
45:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:71:BB:9D:14:A9:FD:51:72:11:EE:6C:D9:FF:10:8E:C4:1B:CD:C1
X509v3 Authority Key Identifier:
keyid:0A:E4:27:10:1C:B2:E2:BD:56:50:84:DE:64:71:F6:EB:48:D2:4F:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CuQnEByy4r1WUITeZHH260jST5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/e112fc-05ef-4f1f-85be-7c9e684ccce2/1/CuQnEByy4r1WUITeZHH260jST5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/e112fc-05ef-4f1f-85be-7c9e684ccce2/1/CuQnEByy4r1WUITeZHH260jST5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:d8:b8:55:a0:cd:89:a5:de:1d:c9:8d:b2:b0:22:03:80:e8:
fa:a4:76:ee:70:87:5b:ec:5c:1c:68:0b:1f:d8:e3:c5:20:8d:
18:75:fc:4a:8e:c2:41:d0:bf:e8:dc:d6:87:f8:88:6f:96:fc:
32:b7:56:07:c1:2e:42:84:e7:26:8a:24:8d:44:42:f5:81:0e:
60:2a:1a:4f:fe:56:0d:60:aa:bc:b4:83:f2:6a:ea:3e:6a:0c:
64:45:da:e9:79:87:63:98:84:d4:76:b8:cf:8a:5a:ca:ad:11:
a5:26:07:75:9c:53:8f:91:6a:26:fb:bc:60:b8:18:2a:35:41:
76:4f:df:49:a7:c2:e0:03:67:16:4d:10:81:66:d1:93:38:a2:
b4:21:b5:05:7d:01:63:bd:08:2b:16:9e:14:cb:52:9b:27:44:
cc:88:89:4c:f2:a1:59:96:fb:3b:30:47:3f:ed:c0:47:be:ee:
ee:ff:4c:35:bc:ea:5f:b4:63:95:09:49:7c:61:73:2a:ae:81:
c3:5e:a9:36:1e:62:89:95:49:55:e9:89:7c:c8:c6:5a:11:1f:
66:b9:20:77:dc:4b:b2:db:66:81:36:4d:41:c0:5b:9a:78:7d:
ee:0f:84:20:e0:23:4a:77:6b:93:31:1f:0f:9a:98:66:63:07:
04:27:02:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4c68XRJvPY+OaJdSBzIzAsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhZTQyNzEwMWNiMmUyYmQ1NjUwODRkZTY0NzFmNmViNDhk
MjRmOTYwHhcNMjYwNTEyMTYwMTE0WhcNMjYwNTEzMTYwMTE0WjAzMTEwLwYDVQQD
EygxYTcxYmI5ZDE0YTlmZDUxNzIxMWVlNmNkOWZmMTA4ZWM0MWJjZGMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7gVShWvERV4w8EorpoV0fIPzy+oQ
bUTAWUnuUaYgX6mC0ZBzctV44FBpR9CbW99NGQE8aDRr4xWqHTQe1Lk80ux2UcSF
+dLY02Id1zcANu5uH+sd3agORl6V9bXjl7ypaBKhOdtIbNK4WhBSahvSpPgDTshE
z4RBIV0rXGKyHUZeUUYXsEM9t4sib4NgW65CjNz6oQyDX3kDtsvehleIPdi3RaOn
vPdTViK1O6sB9jPndfsUNYTaLMq3ohcv7HGVSE6yqhfNUGDiOdFBuJVX84ApIpDP
qfl24/JxbWO1udZ9WJBlRzjAtjf0vNNhk9v6GAC7V6u2C1lVjVGMUhFFywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBpxu50Uqf1RchHubNn/EI7EG83BMB8GA1UdIwQY
MBaAFArkJxAcsuK9VlCE3mRx9utI0k+WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3VRbkVCeXk0cjFXVUlUZVpISDI2MGpTVDVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9lMTEyZmMtMDVlZi00ZjFmLTg1YmUt
N2M5ZTY4NGNjY2UyLzEvQ3VRbkVCeXk0cjFXVUlUZVpISDI2MGpTVDVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC9lMTEyZmMtMDVlZi00ZjFmLTg1YmUtN2M5ZTY4NGNjY2Uy
LzEvQ3VRbkVCeXk0cjFXVUlUZVpISDI2MGpTVDVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr9i4VaDN
iaXeHcmNsrAiA4Do+qR27nCHW+xcHGgLH9jjxSCNGHX8So7CQdC/6NzWh/iIb5b8
MrdWB8EuQoTnJookjURC9YEOYCoaT/5WDWCqvLSD8mrqPmoMZEXa6XmHY5iE1Ha4
z4payq0RpSYHdZxTj5FqJvu8YLgYKjVBdk/fSafC4ANnFk0QgWbRkziitCG1BX0B
Y70IKxaeFMtSmydEzIiJTPKhWZb7OzBHP+3AR77u7v9MNbzqX7RjlQlJfGFzKq6B
w16pNh5iiZVJVemJfMjGWhEfZrkgd9xLsttmgTZNQcBbmnh97g+EIOAjSndrkzEf
D5qYZmMHBCcCSQ==
-----END CERTIFICATE-----
Generated at Tue May 12 21:42:41 2026 by rpki-client