Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.mft
File: CuS8lAHZ-HdyyMnGmDQHdRL0JhE.mft (raw, json)
Hash identifier: ek4UkBiSWYW2fDmwA1SKVSDUn4tSAbR1BxNnAZrgVRo=
Subject key identifier: 62:A8:99:93:0A:0B:8E:D2:F2:34:CF:C8:40:81:57:ED:C9:DF:3C:45
Authority key identifier: 0A:E4:BC:94:01:D9:F8:77:72:C8:C9:C6:98:34:07:75:12:F4:26:11
Certificate issuer: /CN=0ae4bc9401d9f87772c8c9c69834077512f42611
Certificate serial: 01A0DA5FAF57C4F937D68DE8E74AD2C9DE38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.mft
Manifest number: 036D
Signing time: Fri 25 Sep 2026 21:01:38 +0000
Manifest this update: Fri 25 Sep 2026 21:01:38 +0000
Manifest next update: Sat 26 Sep 2026 21:01:38 +0000
Files and hashes: 1: CuS8lAHZ-HdyyMnGmDQHdRL0JhE.crl (hash: YX8A7hocrs6m2TKrpQfTDWFL+XxsMZ1Pie6ocIH91m4=)
2: XnXJKqTzXUegKaYr4g7Xyqqne1k.roa (hash: CQReL6no3oMoU4ZSnWxS6igEc/veiJgwlMJ/ZxyLRAE=)
3: cnsxttgiA36XaxV7JTaPeGuyqcc.roa (hash: sGH8WpARX1yy3ntIk+i6n6hKVKz1lO8h7OZfbTYPFoA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:5f:af:57:c4:f9:37:d6:8d:e8:e7:4a:d2:c9:de:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ae4bc9401d9f87772c8c9c69834077512f42611
Validity
Not Before: Sep 25 21:01:38 2026 GMT
Not After : Sep 26 21:01:38 2026 GMT
Subject: CN=62a899930a0b8ed2f234cfc8408157edc9df3c45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fd:71:cf:89:ff:5c:55:08:60:97:a3:38:8e:
78:4a:e2:e7:3d:e9:ca:7d:0c:0b:2b:6d:e5:39:6b:
c7:61:83:00:99:bd:14:41:8f:b6:27:52:38:9f:c7:
dc:4a:98:f1:29:aa:4d:f2:06:98:17:d7:94:ae:9b:
29:54:e3:91:de:24:28:ef:17:97:49:38:af:c4:3a:
cb:45:19:9a:71:62:1b:4e:df:47:b1:cd:8e:6c:3d:
78:a3:cc:78:42:56:8e:ea:89:3a:12:d6:e8:a8:bb:
aa:da:9f:a6:88:57:88:33:d8:49:d8:41:83:b5:90:
4e:da:a0:f2:0a:4f:0b:10:16:ab:f2:ba:57:80:69:
2c:80:70:51:ab:e3:14:c8:60:1f:9f:98:0a:8d:d8:
58:f5:d8:78:0c:ad:c3:a0:e1:70:e7:96:91:5a:b0:
b3:f2:e1:b3:10:ba:23:40:b0:a9:f5:19:6a:a6:bc:
06:fc:ce:e7:55:e0:6b:91:d9:59:c5:0e:3d:67:e9:
ea:e3:94:84:4e:9a:13:44:19:91:63:c7:63:24:28:
bf:fd:79:6e:3a:92:73:96:5a:70:66:21:75:b8:8a:
22:80:50:1f:21:b2:bd:8e:96:01:b3:5b:1a:46:3d:
b4:7f:a6:27:14:e0:45:b2:1c:cf:bf:ce:9a:2b:f8:
84:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:A8:99:93:0A:0B:8E:D2:F2:34:CF:C8:40:81:57:ED:C9:DF:3C:45
X509v3 Authority Key Identifier:
keyid:0A:E4:BC:94:01:D9:F8:77:72:C8:C9:C6:98:34:07:75:12:F4:26:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:d5:65:91:7b:e3:15:94:59:5c:99:25:e6:8c:97:3c:07:3f:
51:8b:97:2d:70:73:73:b8:48:70:b9:f9:3b:a9:44:83:b3:f9:
68:80:01:52:dc:a0:13:8a:33:7a:28:af:c6:42:28:cb:d2:3e:
66:90:5a:30:b3:a8:9f:f2:fd:b8:7b:b9:d0:31:db:a5:c0:58:
c6:02:54:e2:0f:47:e7:41:c9:45:c1:bf:57:6a:12:69:c4:2b:
e2:57:c6:96:7c:d4:82:54:84:ef:ae:4a:7d:e8:ba:32:5e:23:
16:6f:76:68:a5:2d:73:e6:1e:a9:85:c5:f2:32:39:07:e0:e0:
d7:c2:33:a3:5d:05:ef:32:e6:b2:50:ec:0d:d8:69:53:92:fb:
c3:54:fa:27:c6:46:5a:f8:f1:45:3f:83:fa:bc:5c:7e:82:fa:
5a:c1:8d:cd:58:c3:66:5d:52:b4:16:2e:33:ee:15:0a:b9:30:
c2:fb:6e:51:9a:15:16:4f:65:0b:e6:0d:25:d7:f1:19:f1:38:
3d:f6:ba:c3:98:bf:84:30:c2:0b:11:f6:33:37:0d:d6:7e:5f:
45:61:d1:9c:04:6b:7d:15:a9:9d:bd:56:a2:c7:34:0b:b0:dd:
2c:15:0c:59:5e:e6:f9:04:94:16:2f:58:43:8f:42:ab:33:bb:
c7:32:b6:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDaX69XxPk31o3o50rSyd44MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhZTRiYzk0MDFkOWY4Nzc3MmM4YzljNjk4MzQwNzc1MTJm
NDI2MTEwHhcNMjYwOTI1MjEwMTM4WhcNMjYwOTI2MjEwMTM4WjAzMTEwLwYDVQQD
Eyg2MmE4OTk5MzBhMGI4ZWQyZjIzNGNmYzg0MDgxNTdlZGM5ZGYzYzQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/1xz4n/XFUIYJejOI54SuLnPenK
fQwLK23lOWvHYYMAmb0UQY+2J1I4n8fcSpjxKapN8gaYF9eUrpspVOOR3iQo7xeX
STivxDrLRRmacWIbTt9Hsc2ObD14o8x4QlaO6ok6EtboqLuq2p+miFeIM9hJ2EGD
tZBO2qDyCk8LEBar8rpXgGksgHBRq+MUyGAfn5gKjdhY9dh4DK3DoOFw55aRWrCz
8uGzELojQLCp9RlqprwG/M7nVeBrkdlZxQ49Z+nq45SETpoTRBmRY8djJCi//Xlu
OpJzllpwZiF1uIoigFAfIbK9jpYBs1saRj20f6YnFOBFshzPv86aK/iETQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGKomZMKC47S8jTPyECBV+3J3zxFMB8GA1UdIwQY
MBaAFArkvJQB2fh3csjJxpg0B3US9CYRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3VTOGxBSFotSGR5eU1uR21EUUhkUkwwSmhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9hNDA3YTAtOGJjMS00NDE2LTk0Mzct
MjQyNDY2ODJiZjAwLzEvQ3VTOGxBSFotSGR5eU1uR21EUUhkUkwwSmhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC9hNDA3YTAtOGJjMS00NDE2LTk0MzctMjQyNDY2ODJiZjAw
LzEvQ3VTOGxBSFotSGR5eU1uR21EUUhkUkwwSmhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATtVlkXvj
FZRZXJkl5oyXPAc/UYuXLXBzc7hIcLn5O6lEg7P5aIABUtygE4ozeiivxkIoy9I+
ZpBaMLOon/L9uHu50DHbpcBYxgJU4g9H50HJRcG/V2oSacQr4lfGlnzUglSE765K
fei6Ml4jFm92aKUtc+YeqYXF8jI5B+Dg18Izo10F7zLmslDsDdhpU5L7w1T6J8ZG
WvjxRT+D+rxcfoL6WsGNzVjDZl1StBYuM+4VCrkwwvtuUZoVFk9lC+YNJdfxGfE4
Pfa6w5i/hDDCCxH2MzcN1n5fRWHRnARrfRWpnb1Wosc0C7DdLBUMWV7m+QSUFi9Y
Q49CqzO7xzK2OA==
-----END CERTIFICATE-----
Generated at Sat Sep 26 03:19:33 2026 by rpki-client