Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/e18c2d-64ff-44e8-8eef-b9c89b9b1f65/1/CuGlto7Kdo8hGkjoVtf1g_kOdec.mft
File: CuGlto7Kdo8hGkjoVtf1g_kOdec.mft (raw, json)
Hash identifier: 6Yurw7RtbRfTAHJ9OwFKTSUB4n/7+/ZAbnWWH1IDrfE=
Subject key identifier: AA:F3:BD:C1:A3:2B:F4:89:EF:C6:E8:EC:70:D7:CF:B5:0F:AA:5D:35
Authority key identifier: 0A:E1:A5:B6:8E:CA:76:8F:21:1A:48:E8:56:D7:F5:83:F9:0E:75:E7
Certificate issuer: /CN=0ae1a5b68eca768f211a48e856d7f583f90e75e7
Certificate serial: 019D2997A11BAC257F76E2A3D2E4BC3A46FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CuGlto7Kdo8hGkjoVtf1g_kOdec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/e18c2d-64ff-44e8-8eef-b9c89b9b1f65/1/CuGlto7Kdo8hGkjoVtf1g_kOdec.mft
Manifest number: 1632
Signing time: Thu 26 Mar 2026 10:01:36 +0000
Manifest this update: Thu 26 Mar 2026 10:01:36 +0000
Manifest next update: Fri 27 Mar 2026 10:01:36 +0000
Files and hashes: 1: CuGlto7Kdo8hGkjoVtf1g_kOdec.crl (hash: KMgG6PIR6PnAST+4vXvKwKjHvGgyIdcOQuXDHBT7OFU=)
2: EP3_Y_2rIqHTOMptiyzO0uUUxw0.roa (hash: cbNaVlReRWd6gx/q6NH3r5/UXA7TpZqlkYS//LHJrhs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/e18c2d-64ff-44e8-8eef-b9c89b9b1f65/1/CuGlto7Kdo8hGkjoVtf1g_kOdec.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/e18c2d-64ff-44e8-8eef-b9c89b9b1f65/1/CuGlto7Kdo8hGkjoVtf1g_kOdec.mft
rsync://rpki.ripe.net/repository/DEFAULT/CuGlto7Kdo8hGkjoVtf1g_kOdec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:a1:1b:ac:25:7f:76:e2:a3:d2:e4:bc:3a:46:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ae1a5b68eca768f211a48e856d7f583f90e75e7
Validity
Not Before: Mar 26 10:01:36 2026 GMT
Not After : Mar 27 10:01:36 2026 GMT
Subject: CN=aaf3bdc1a32bf489efc6e8ec70d7cfb50faa5d35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:22:f3:96:84:1f:87:96:b9:0d:93:06:9e:7d:
1d:6a:b8:28:a5:a9:8d:5b:f7:3d:8f:e9:f2:e7:48:
e0:31:8e:9c:d1:8c:0d:a2:a5:05:b6:7d:3e:cc:6a:
bb:85:cc:dd:d7:21:4e:50:55:c1:05:2a:60:d0:a4:
d9:0c:ec:e5:85:6c:c1:69:b9:2f:19:4b:29:f2:73:
7c:6b:69:fe:f2:8e:a7:b9:17:ee:8e:02:fb:99:ce:
07:c3:e4:2b:4b:94:a1:2d:7d:52:0f:88:d1:14:9c:
9f:4d:ab:57:68:88:a2:36:d9:13:bf:c6:40:2e:d9:
ed:8d:6b:55:42:b4:9a:9d:ba:a9:de:08:22:1e:1a:
fa:90:9c:a9:c6:b2:e1:d1:9e:43:9c:a7:10:84:10:
62:2a:36:3c:b2:ca:b5:37:d1:f4:d5:ab:21:51:e7:
c2:13:0d:1d:ad:15:7d:f7:1d:f7:43:7b:08:ca:a6:
34:e5:1e:f6:3b:f6:4f:7a:52:c1:86:a1:90:03:c1:
c8:72:44:f3:d5:0b:9e:06:66:a2:4e:8e:82:ef:92:
b1:35:3c:32:52:2d:11:eb:dd:c0:7f:7f:3c:98:e2:
e3:81:bb:d1:98:f7:f9:fe:c7:57:6f:12:08:91:58:
3a:2a:8e:f2:c2:95:5b:86:a6:cf:ed:ba:a7:84:ff:
ff:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:F3:BD:C1:A3:2B:F4:89:EF:C6:E8:EC:70:D7:CF:B5:0F:AA:5D:35
X509v3 Authority Key Identifier:
keyid:0A:E1:A5:B6:8E:CA:76:8F:21:1A:48:E8:56:D7:F5:83:F9:0E:75:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CuGlto7Kdo8hGkjoVtf1g_kOdec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/e18c2d-64ff-44e8-8eef-b9c89b9b1f65/1/CuGlto7Kdo8hGkjoVtf1g_kOdec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/e18c2d-64ff-44e8-8eef-b9c89b9b1f65/1/CuGlto7Kdo8hGkjoVtf1g_kOdec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:1f:86:73:a6:3e:75:48:f4:79:9d:6a:e3:e1:7b:17:9a:76:
cc:5e:2e:2b:fb:15:5d:bc:6c:ff:58:d4:1f:c7:9e:5b:77:59:
27:fd:53:90:57:46:a8:e3:ce:1f:8e:0a:90:0e:da:e0:cd:19:
38:10:72:8b:6d:fd:55:dd:d5:ee:f7:a6:7d:af:e5:21:9d:0e:
17:d8:26:36:f2:6a:67:e7:73:46:9e:86:52:4e:43:d1:d5:eb:
93:03:2a:bc:4f:ab:bc:3e:5b:b2:16:b4:88:ff:e4:4b:0d:0f:
6c:e2:13:01:19:de:a0:5d:a5:64:03:be:00:3e:ac:2d:0d:df:
8e:5c:aa:93:ab:bb:0f:e3:ac:14:d5:8b:0b:be:1f:9b:bf:75:
94:66:6d:b3:ce:2e:b7:85:3f:79:9b:fe:03:ee:82:81:0d:f8:
52:b0:cd:de:97:69:60:cc:9e:00:29:ff:de:c3:62:de:b0:ca:
0d:4d:a1:d3:ff:2e:ef:20:d0:5f:67:4a:f3:7f:64:30:e6:32:
d6:7a:b8:55:41:f0:f5:94:3b:93:97:d9:8e:c3:94:44:d7:48:
72:2a:d1:b1:9b:f7:0f:31:44:e1:46:cb:35:0f:2c:fd:5a:23:
9b:a5:c4:58:f0:51:e6:a5:3b:65:10:4c:57:7c:be:b8:19:3a:
31:93:ac:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pl6EbrCV/duKj0uS8Okb+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhZTFhNWI2OGVjYTc2OGYyMTFhNDhlODU2ZDdmNTgzZjkw
ZTc1ZTcwHhcNMjYwMzI2MTAwMTM2WhcNMjYwMzI3MTAwMTM2WjAzMTEwLwYDVQQD
EyhhYWYzYmRjMWEzMmJmNDg5ZWZjNmU4ZWM3MGQ3Y2ZiNTBmYWE1ZDM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxCLzloQfh5a5DZMGnn0dargopamN
W/c9j+ny50jgMY6c0YwNoqUFtn0+zGq7hczd1yFOUFXBBSpg0KTZDOzlhWzBabkv
GUsp8nN8a2n+8o6nuRfujgL7mc4Hw+QrS5ShLX1SD4jRFJyfTatXaIiiNtkTv8ZA
LtntjWtVQrSanbqp3ggiHhr6kJypxrLh0Z5DnKcQhBBiKjY8ssq1N9H01ashUefC
Ew0drRV99x33Q3sIyqY05R72O/ZPelLBhqGQA8HIckTz1QueBmaiTo6C75KxNTwy
Ui0R693Af388mOLjgbvRmPf5/sdXbxIIkVg6Ko7ywpVbhqbP7bqnhP//QwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKrzvcGjK/SJ78bo7HDXz7UPql01MB8GA1UdIwQY
MBaAFArhpbaOynaPIRpI6FbX9YP5DnXnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3VHbHRvN0tkbzhoR2tqb1Z0ZjFnX2tPZGVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9lMThjMmQtNjRmZi00NGU4LThlZWYt
YjljODliOWIxZjY1LzEvQ3VHbHRvN0tkbzhoR2tqb1Z0ZjFnX2tPZGVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC9lMThjMmQtNjRmZi00NGU4LThlZWYtYjljODliOWIxZjY1
LzEvQ3VHbHRvN0tkbzhoR2tqb1Z0ZjFnX2tPZGVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGh+Gc6Y+
dUj0eZ1q4+F7F5p2zF4uK/sVXbxs/1jUH8eeW3dZJ/1TkFdGqOPOH44KkA7a4M0Z
OBByi239Vd3V7vemfa/lIZ0OF9gmNvJqZ+dzRp6GUk5D0dXrkwMqvE+rvD5bsha0
iP/kSw0PbOITARneoF2lZAO+AD6sLQ3fjlyqk6u7D+OsFNWLC74fm791lGZts84u
t4U/eZv+A+6CgQ34UrDN3pdpYMyeACn/3sNi3rDKDU2h0/8u7yDQX2dK839kMOYy
1nq4VUHw9ZQ7k5fZjsOURNdIcirRsZv3DzFE4UbLNQ8s/Vojm6XEWPBR5qU7ZRBM
V3y+uBk6MZOsZQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:55:57 2026 by rpki-client