Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.mft
File: CuS8lAHZ-HdyyMnGmDQHdRL0JhE.mft (raw, json)
Hash identifier: r5fN7Jb4euWsAtyxgjOLftPf+c1OEeN+del6yn6UpyU=
Subject key identifier: C8:E4:67:69:3E:91:F7:CB:1F:A2:C1:C1:D7:67:9B:84:1E:21:D3:38
Authority key identifier: 0A:E4:BC:94:01:D9:F8:77:72:C8:C9:C6:98:34:07:75:12:F4:26:11
Certificate issuer: /CN=0ae4bc9401d9f87772c8c9c69834077512f42611
Certificate serial: 019F8F7E9211CAD1D1C24AB1A4B0BD1604B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.mft
Manifest number: 02C0
Signing time: Thu 23 Jul 2026 15:01:04 +0000
Manifest this update: Thu 23 Jul 2026 15:01:04 +0000
Manifest next update: Fri 24 Jul 2026 15:01:04 +0000
Files and hashes: 1: 29UYfr5_5v18Af9DbXii6GgIkoU.roa (hash: eM2YUDdVXsnw8sDquecy+R4RMk/NFhfSmEv18aSE6AA=)
2: CuS8lAHZ-HdyyMnGmDQHdRL0JhE.crl (hash: V9BIYFJoYyns9klXzKnCaafwt0vWOtOZU77m5Cd0bHY=)
3: IrAmy11rZJI6T7b9TOqwrK9lVyU.roa (hash: h9URKcjvU/CcITMUnrMcCY/cFNmMmE8d3RdTZSBmw+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7e:92:11:ca:d1:d1:c2:4a:b1:a4:b0:bd:16:04:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ae4bc9401d9f87772c8c9c69834077512f42611
Validity
Not Before: Jul 23 15:01:04 2026 GMT
Not After : Jul 24 15:01:04 2026 GMT
Subject: CN=c8e467693e91f7cb1fa2c1c1d7679b841e21d338
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:df:2f:34:8e:78:14:5e:aa:39:b6:03:72:5f:
0d:2d:65:ea:65:4c:63:1e:59:62:58:77:58:79:c5:
d0:eb:a3:c4:59:48:32:f0:6d:6e:18:59:e0:ad:e5:
23:54:08:4a:ef:35:7b:38:f2:e1:f4:36:e5:ec:dc:
32:58:20:64:06:5e:08:61:ff:1b:35:ad:99:2e:cb:
37:df:c0:a3:1b:01:8e:e0:ea:27:5f:2c:67:2b:81:
fe:c1:58:11:37:0f:d2:7e:27:62:a1:9e:76:73:9f:
0b:33:b9:48:0d:ab:c8:43:4c:0b:ff:5d:a6:8a:db:
73:16:67:a3:bf:43:e6:22:95:3d:69:3e:5c:68:ec:
bd:c8:97:61:00:1e:79:77:14:6f:0c:6b:e7:f4:e8:
0b:18:a2:d2:79:92:4e:a8:60:34:0f:c7:94:4e:c0:
78:e8:ce:56:0a:5a:0b:ab:4f:34:d2:f9:d9:f1:21:
51:fc:0b:03:14:ee:af:db:3d:cb:fd:e0:ef:e5:ec:
c2:eb:07:8b:d5:51:c9:21:d6:3c:25:2a:46:69:df:
6c:ad:01:17:b8:63:27:73:8f:da:36:d8:70:54:6d:
c1:b2:1d:60:78:62:bc:a1:de:41:54:f8:70:43:81:
8b:bb:92:7a:5c:7c:ca:e0:53:d8:88:f2:e0:bb:bc:
35:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:E4:67:69:3E:91:F7:CB:1F:A2:C1:C1:D7:67:9B:84:1E:21:D3:38
X509v3 Authority Key Identifier:
keyid:0A:E4:BC:94:01:D9:F8:77:72:C8:C9:C6:98:34:07:75:12:F4:26:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:c3:12:f7:d7:92:d0:26:04:ff:3b:3a:17:5e:d0:21:5f:52:
47:93:97:4b:0e:7e:b3:55:b9:5a:82:53:21:fb:ce:1d:9f:d2:
89:8b:f6:9e:f8:98:0c:44:13:3c:90:2c:2f:33:27:07:68:3a:
8d:48:23:68:57:ab:65:df:fb:66:89:8b:85:ff:d2:a1:b9:fa:
54:f4:2a:ac:c7:90:11:8e:cb:d8:4b:2e:0b:ad:ab:8e:85:c8:
7c:08:e4:b8:88:62:37:e5:40:22:46:9b:33:ce:ad:91:c5:9e:
5c:42:82:f7:27:66:c9:fe:f3:94:6e:a6:e1:66:f7:c3:0c:ed:
1f:d8:5e:65:f0:ed:47:3a:fd:2b:bf:3f:23:28:0c:9f:8b:5a:
c2:22:6e:cd:2d:65:de:c8:ec:ba:67:02:04:1b:d8:2e:96:29:
e9:dc:4a:8a:06:02:0a:49:5b:53:3c:ed:06:a2:d2:56:60:3b:
55:42:18:de:5f:e8:b5:7a:1d:c8:aa:44:67:92:af:bb:cf:4b:
d6:55:0f:3b:f3:d0:b1:3f:39:f4:0b:75:f4:11:9f:63:65:74:
6f:eb:2b:97:36:54:96:ae:a9:9c:c5:06:31:5d:20:da:d1:d5:
f4:a2:a7:69:c2:6d:a8:5d:3f:de:21:2a:5f:de:2c:54:ac:d8:
c0:14:5b:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:53:00 2026 by rpki-client