Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/eae3d7-eee8-421e-80d9-982cce868ffa/1/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.mft
File: CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.mft (raw, json)
Hash identifier: 7XXlpM2U6uJnfjV/qQSTEfXMeWE8m30gNgFzJI23PAg=
Subject key identifier: F5:4B:F5:9C:26:8D:B4:1F:F9:22:92:7F:C0:F3:ED:21:55:60:26:0F
Authority key identifier: 09:4E:A1:CF:4F:DC:34:75:C1:F2:8D:61:1C:1F:18:FE:02:7C:10:98
Certificate issuer: /CN=094ea1cf4fdc3475c1f28d611c1f18fe027c1098
Certificate serial: 019D2A7292BA7C7C441113AB916FD64D10E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/eae3d7-eee8-421e-80d9-982cce868ffa/1/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 14:00:44 +0000
Manifest this update: Thu 26 Mar 2026 14:00:44 +0000
Manifest next update: Fri 27 Mar 2026 14:00:44 +0000
Files and hashes: 1: CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.crl (hash: oXzCwpAuuWRvvCb/ycgFzhnLsaZjSxD7ep2DPosFGpw=)
2: WnQNBeJ77W1lWNnHWWSvM1zW9Ss.roa (hash: 4WNmsHvXiTbK61q93ojoVESn4x/SoVpSfuMXeeNjBw0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/eae3d7-eee8-421e-80d9-982cce868ffa/1/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/eae3d7-eee8-421e-80d9-982cce868ffa/1/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 14:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:92:ba:7c:7c:44:11:13:ab:91:6f:d6:4d:10:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=094ea1cf4fdc3475c1f28d611c1f18fe027c1098
Validity
Not Before: Mar 26 14:00:44 2026 GMT
Not After : Mar 27 14:00:44 2026 GMT
Subject: CN=f54bf59c268db41ff922927fc0f3ed215560260f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:91:69:9e:d6:a1:46:d0:d6:85:13:7e:29:5e:
99:be:de:0e:ab:92:ab:b8:54:5e:e5:62:96:ea:91:
89:89:c2:06:fd:e6:b9:88:3b:af:23:1a:e7:95:f9:
d7:d3:99:b2:6d:e7:99:60:57:9e:b7:c8:b9:80:46:
8d:6f:35:fc:81:2c:e2:5d:9b:77:ca:54:15:ed:c9:
ea:68:e1:fd:92:5b:45:5b:b2:44:e0:e0:93:4d:c2:
8a:f9:33:7d:86:c7:99:a2:c1:fe:f4:b4:2b:b9:48:
a7:2b:5e:92:8d:a5:05:db:8b:ac:02:5d:e1:1c:46:
23:f3:77:5a:87:d5:bf:b2:99:29:26:15:ca:2e:6f:
5e:de:25:c0:29:26:de:d6:e8:1b:0f:8b:53:60:26:
6f:4e:ad:0d:d6:1e:3c:b1:77:eb:42:d4:59:bf:b3:
c1:1b:eb:7b:bb:da:82:25:69:1a:c2:f2:b6:03:5e:
c2:63:26:2e:e8:79:3c:47:53:a9:cd:d4:d9:39:30:
4f:b4:ee:c1:15:49:5e:0a:f5:76:1a:84:60:af:72:
86:f9:0f:8a:15:c3:63:5f:f9:1c:1d:cf:53:8f:4c:
f9:3b:42:50:d8:a2:e7:a5:e2:02:d9:c7:8f:2e:27:
bc:c2:cb:9c:08:f3:a3:23:3f:ee:ac:20:2a:a3:4c:
d5:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:4B:F5:9C:26:8D:B4:1F:F9:22:92:7F:C0:F3:ED:21:55:60:26:0F
X509v3 Authority Key Identifier:
keyid:09:4E:A1:CF:4F:DC:34:75:C1:F2:8D:61:1C:1F:18:FE:02:7C:10:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/eae3d7-eee8-421e-80d9-982cce868ffa/1/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/eae3d7-eee8-421e-80d9-982cce868ffa/1/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:26:95:8d:77:19:61:05:05:01:12:f6:03:46:4b:43:05:6a:
6c:bb:1a:c8:ca:cb:b1:45:ae:7e:cd:b7:b6:8c:6a:71:a3:c2:
bf:b2:f3:5d:87:84:eb:ce:f1:69:13:0e:3e:fd:08:f3:1e:32:
c3:e4:fb:78:d8:60:5b:a2:20:77:66:ad:e9:bc:92:02:ca:64:
2d:6b:22:01:5f:9e:34:f9:cd:20:9f:b3:b9:52:9a:80:4c:c7:
70:0b:ba:85:22:0e:30:5b:0d:fd:c6:3d:d9:39:01:c9:40:d8:
b3:f8:0b:50:42:72:fe:df:e1:15:1d:1a:10:05:54:8c:2d:3f:
52:69:b4:32:69:fe:bc:ba:5b:62:3e:29:36:76:f8:09:76:6e:
ba:16:7d:50:63:dc:6f:65:15:46:ec:4a:52:aa:89:e8:a9:6d:
0d:b4:98:86:58:97:6f:9b:4e:88:5e:00:a6:e7:02:0c:5a:67:
cd:0c:73:4a:3b:ac:73:38:4e:63:d2:5c:4c:bb:3f:ad:60:f6:
8a:d2:11:81:1e:17:09:c3:06:03:3d:f8:8f:a0:9b:78:af:ba:
0e:8a:47:56:e8:93:ce:36:7b:87:4d:96:2c:26:0f:86:0a:67:
38:85:e8:8a:11:64:c0:e5:bc:89:cf:03:c3:09:23:5f:f8:81:
ce:4e:04:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:05:17 2026 by rpki-client