Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.mft
File: CuS8lAHZ-HdyyMnGmDQHdRL0JhE.mft (raw, json)
Hash identifier: Qhwjz7svy/n0+kXBy9BJ24LlIc3zWIW66Wp5dbBoJk8=
Subject key identifier: AF:48:9E:44:7F:69:71:67:6E:2C:A8:5A:32:CC:D4:E9:64:76:80:7D
Authority key identifier: 0A:E4:BC:94:01:D9:F8:77:72:C8:C9:C6:98:34:07:75:12:F4:26:11
Certificate issuer: /CN=0ae4bc9401d9f87772c8c9c69834077512f42611
Certificate serial: 019E2091E38AEAAC975C930CD65B14718E34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.mft
Manifest number: 0201
Signing time: Wed 13 May 2026 09:01:32 +0000
Manifest this update: Wed 13 May 2026 09:01:32 +0000
Manifest next update: Thu 14 May 2026 09:01:32 +0000
Files and hashes: 1: CuS8lAHZ-HdyyMnGmDQHdRL0JhE.crl (hash: 4OzdwsN3onDGjiW6SXDkdNkdn5AD9QxOsmf78WPLTDg=)
2: IrAmy11rZJI6T7b9TOqwrK9lVyU.roa (hash: h9URKcjvU/CcITMUnrMcCY/cFNmMmE8d3RdTZSBmw+I=)
3: wfpLWZRqjYyqOYG4nZjXl1hddKM.roa (hash: tBG35yaSr292GrQvLa8I1LIYccs3GlTu5MD9aZU7b9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:91:e3:8a:ea:ac:97:5c:93:0c:d6:5b:14:71:8e:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ae4bc9401d9f87772c8c9c69834077512f42611
Validity
Not Before: May 13 09:01:32 2026 GMT
Not After : May 14 09:01:32 2026 GMT
Subject: CN=af489e447f6971676e2ca85a32ccd4e96476807d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:8e:5e:26:d1:3c:71:84:cb:25:62:a6:a4:9d:
be:b7:5f:d4:05:5f:cd:57:5c:2a:3a:c8:58:b2:1a:
22:1c:55:cc:96:c1:19:41:f4:51:a5:2e:ba:26:19:
79:73:60:0c:95:de:68:5f:a1:b2:2c:58:d1:68:da:
33:af:b5:24:51:a7:df:9b:87:58:86:be:9d:1c:c2:
2c:37:ed:c0:7c:00:63:9b:e6:9c:42:d2:a5:16:84:
b8:92:79:bd:54:e5:92:d3:89:75:a3:b9:39:69:4e:
cb:6f:80:bc:7f:49:7b:5f:e2:44:dc:18:56:49:76:
23:42:e0:38:e5:8e:5a:df:53:c0:c3:70:5b:0c:27:
47:b4:a6:df:04:85:b5:b3:54:e3:d7:9a:77:84:db:
6c:cc:72:25:28:36:06:28:b9:1f:0b:21:7d:99:42:
f2:74:55:a4:b8:d2:70:02:c8:ed:57:d9:6b:4f:a6:
42:90:f9:99:6d:f7:c0:e5:b4:63:06:9c:38:28:3b:
7d:78:bb:57:73:31:d3:15:8f:26:dc:b1:fc:6b:d5:
bf:46:fd:92:09:6e:bd:e7:c4:ab:f9:fb:a4:80:55:
0a:19:8c:2e:9a:c5:22:11:82:9f:85:c4:cb:57:ba:
fb:12:1a:e9:1e:e5:07:c8:31:df:f2:76:b9:c0:78:
18:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:48:9E:44:7F:69:71:67:6E:2C:A8:5A:32:CC:D4:E9:64:76:80:7D
X509v3 Authority Key Identifier:
keyid:0A:E4:BC:94:01:D9:F8:77:72:C8:C9:C6:98:34:07:75:12:F4:26:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:04:cf:21:50:d8:de:06:e9:8d:b2:53:10:a6:88:aa:5c:d5:
eb:d5:ad:8b:ce:a2:4b:51:51:90:d6:89:d8:2b:4e:bf:72:34:
03:6f:b2:b0:59:d9:ba:57:48:38:f7:df:2d:d4:41:56:d7:f8:
fb:cb:96:8e:90:8d:be:41:89:8d:b6:02:f0:ff:c0:4c:6a:01:
0a:0b:f5:9f:60:bf:c7:0c:25:5b:db:17:b2:ac:af:d4:da:58:
bb:90:43:2a:9b:73:2b:c3:26:a5:9b:64:4d:e0:eb:04:95:a4:
8e:7f:d5:a0:35:8f:ba:43:82:ba:85:74:f5:c9:82:3f:4b:58:
70:04:19:73:8e:9b:eb:79:be:5f:38:62:fe:62:99:36:98:19:
75:ba:cf:34:e1:4a:da:78:62:8a:b4:f2:21:e7:2f:e0:71:42:
4b:01:c5:ec:8b:34:90:68:7c:4d:a8:77:71:c9:0e:1f:76:d9:
ac:c4:c4:a4:08:4e:97:12:8c:16:11:50:b8:f8:6c:e4:94:98:
37:b3:5b:96:5b:1c:a6:a8:db:92:bf:81:e7:23:5f:16:da:4e:
c2:55:1d:9e:ad:95:63:ea:61:3b:52:24:d5:d8:6a:ad:b3:7c:
79:06:b9:a8:97:04:23:65:4f:84:d7:3b:45:b7:87:c1:36:56:
93:28:3e:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:24:47 2026 by rpki-client