Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.mft
File: CuS8lAHZ-HdyyMnGmDQHdRL0JhE.mft (raw, json)
Hash identifier: NlcKhWLl6lBT41MS/YfUR6IV2SZjjn1ANFCy0bzDSjs=
Subject key identifier: A8:9B:BE:CA:A4:71:71:EC:CA:95:43:B7:7C:E6:DD:EA:FA:4C:79:0B
Authority key identifier: 0A:E4:BC:94:01:D9:F8:77:72:C8:C9:C6:98:34:07:75:12:F4:26:11
Certificate issuer: /CN=0ae4bc9401d9f87772c8c9c69834077512f42611
Certificate serial: 019D269629D71F8C76D6855492F02F081296
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.mft
Manifest number: 017D
Signing time: Wed 25 Mar 2026 20:01:08 +0000
Manifest this update: Wed 25 Mar 2026 20:01:08 +0000
Manifest next update: Thu 26 Mar 2026 20:01:08 +0000
Files and hashes: 1: CuS8lAHZ-HdyyMnGmDQHdRL0JhE.crl (hash: rugjUBKxs0IYf+Oh42IE0bffiaxfhZ32HwAOa487kn8=)
2: bzz9cqvlq5e-a-pAz9xvt6XBZ9g.roa (hash: vDlJK8ivQ4lnL3A4IV2rBMPVupODouvr4DU0qeHgnjs=)
3: yAmYfSNWOzODKeGc_F5M3KVrZmQ.roa (hash: NpQs0GFT+ff99QnnJq7YGDXMUTS5Irwxl9XQVU5oKe8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:29:d7:1f:8c:76:d6:85:54:92:f0:2f:08:12:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ae4bc9401d9f87772c8c9c69834077512f42611
Validity
Not Before: Mar 25 20:01:08 2026 GMT
Not After : Mar 26 20:01:08 2026 GMT
Subject: CN=a89bbecaa47171ecca9543b77ce6ddeafa4c790b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5d:b8:a5:39:84:e7:8e:73:e8:0d:45:8d:9b:
03:84:a0:fe:b8:b6:c5:ae:96:b9:2e:ea:e7:b1:f0:
04:b6:10:c5:0d:6a:09:43:aa:76:16:ef:ae:ee:7d:
37:c6:c5:d2:52:85:6a:dc:35:af:e7:5f:b7:44:12:
04:50:c4:a5:b9:44:2c:39:7a:5f:75:6b:b4:b2:e6:
bc:f3:bb:80:62:29:4c:98:6a:53:7e:d6:78:4b:f9:
4c:87:c0:8d:37:90:0d:ed:00:fe:3e:38:96:8e:63:
d3:48:da:e6:37:7f:59:51:34:09:90:00:c3:bd:ba:
5f:0f:6b:e1:45:12:47:db:bb:e4:17:8e:8f:37:33:
57:ac:49:80:9d:ca:42:b2:35:60:9a:39:ea:9c:92:
d8:b6:dd:ae:27:19:75:9c:a7:ea:9c:0d:be:51:79:
88:a5:5d:48:2b:d2:b8:56:d7:e8:ea:70:62:78:d6:
10:f1:7b:f2:ef:2b:5f:a3:fe:67:7c:01:fb:65:27:
54:7d:8e:6a:ad:18:2d:fa:ee:92:bd:8f:40:07:21:
0d:a2:43:52:65:0f:4d:77:47:c5:98:6e:79:a3:f7:
c8:6c:51:8b:5e:3b:29:58:3a:a3:0a:d1:dc:51:76:
fe:4d:c8:e8:2a:8d:c3:73:10:be:ff:54:ca:6c:35:
8c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:9B:BE:CA:A4:71:71:EC:CA:95:43:B7:7C:E6:DD:EA:FA:4C:79:0B
X509v3 Authority Key Identifier:
keyid:0A:E4:BC:94:01:D9:F8:77:72:C8:C9:C6:98:34:07:75:12:F4:26:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:bb:cc:a8:a4:11:8a:c1:86:fc:54:08:b7:c3:f0:91:79:68:
0d:db:4e:c3:8b:a2:c5:18:57:e1:24:73:1b:b7:5f:18:8a:21:
21:a4:2a:6d:99:65:f1:27:c0:3c:fd:37:41:de:73:96:a9:29:
1a:42:73:c0:5d:a9:bf:f7:a6:29:3f:cf:0c:b0:47:3c:27:79:
f6:85:14:b9:8a:53:85:51:ff:5b:49:8e:21:12:1b:62:60:37:
8d:9a:54:5a:61:b9:4e:42:75:19:cc:a8:ce:97:cc:8c:a0:62:
89:d8:28:87:5a:83:f0:1d:f3:ee:59:4b:55:73:36:21:07:2c:
76:6c:31:50:c1:46:88:8c:df:1e:27:c6:0c:81:21:88:d9:7c:
25:1b:03:a7:9e:56:18:fb:aa:f8:9a:e2:09:fa:e9:ed:e4:8e:
c7:47:a2:e8:ee:a2:ba:b6:3d:1d:79:25:2f:31:fb:49:b8:8c:
5b:60:f9:0a:e2:60:7e:03:ec:a0:92:31:ee:1d:f9:c0:3c:45:
5f:2a:ec:e4:7b:09:5a:11:b1:27:a1:4f:f6:cd:b4:b8:42:c4:
5f:91:bb:de:6e:6b:c1:0d:39:00:8a:dc:7f:ae:34:53:8d:d8:
f2:6f:0e:5d:39:9c:f7:7a:35:a0:9a:47:1a:1f:97:b8:4e:94:
c5:ca:72:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:22:33 2026 by rpki-client