Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/470cb8-eb6a-4934-9d47-968d0c7f22bb/1/cuW1e7OY1eGDmj_kJU33DXEs4Uo.mft
File: cuW1e7OY1eGDmj_kJU33DXEs4Uo.mft (raw, json)
Hash identifier: c7sS2JpFSdOBelhlprWtod+CAwE8baoLEI0GBYq+dtM=
Subject key identifier: D6:16:C9:8E:70:0C:69:4C:4A:A5:1B:B6:DD:B2:50:20:FF:98:E5:E6
Authority key identifier: 72:E5:B5:7B:B3:98:D5:E1:83:9A:3F:E4:25:4D:F7:0D:71:2C:E1:4A
Certificate issuer: /CN=72e5b57bb398d5e1839a3fe4254df70d712ce14a
Certificate serial: 019D2884DB2291656480F7DF56F7DE03A2F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cuW1e7OY1eGDmj_kJU33DXEs4Uo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/470cb8-eb6a-4934-9d47-968d0c7f22bb/1/cuW1e7OY1eGDmj_kJU33DXEs4Uo.mft
Manifest number: 0AAE
Signing time: Thu 26 Mar 2026 05:01:28 +0000
Manifest this update: Thu 26 Mar 2026 05:01:28 +0000
Manifest next update: Fri 27 Mar 2026 05:01:28 +0000
Files and hashes: 1: RIVpRVcoTiPM597Ay6ktG1nRpoI.roa (hash: 8WsKosIyT+/va+/3Ff2UyTN4wl8h0E62UrDqXKvX/7s=)
2: cuW1e7OY1eGDmj_kJU33DXEs4Uo.crl (hash: HY+s1WCdM3CFh91oMobsSfsKBrmZ0nZUw0XpFo2mPqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/470cb8-eb6a-4934-9d47-968d0c7f22bb/1/cuW1e7OY1eGDmj_kJU33DXEs4Uo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/470cb8-eb6a-4934-9d47-968d0c7f22bb/1/cuW1e7OY1eGDmj_kJU33DXEs4Uo.mft
rsync://rpki.ripe.net/repository/DEFAULT/cuW1e7OY1eGDmj_kJU33DXEs4Uo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 05:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:db:22:91:65:64:80:f7:df:56:f7:de:03:a2:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72e5b57bb398d5e1839a3fe4254df70d712ce14a
Validity
Not Before: Mar 26 05:01:28 2026 GMT
Not After : Mar 27 05:01:28 2026 GMT
Subject: CN=d616c98e700c694c4aa51bb6ddb25020ff98e5e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:96:fc:a0:8c:7e:5f:a2:19:ce:09:60:d5:ff:
9a:8a:b3:26:07:a0:3a:86:c4:95:f2:f1:1d:fb:4b:
2a:87:ef:6d:f8:4a:9f:83:12:89:26:b5:e4:8e:6e:
58:86:ac:c2:e5:25:64:1b:93:24:ab:4e:fa:5d:e6:
00:f3:57:54:c1:a2:f0:b2:ae:12:ef:23:ac:fe:ba:
1d:67:16:8e:d4:9f:3e:3c:2a:e7:77:17:a9:90:b9:
29:38:ce:b5:b1:30:03:2e:03:07:8e:67:8e:b5:b8:
54:ea:81:c9:a3:69:47:ed:ce:c2:ea:f7:a6:df:cd:
c6:e0:67:06:0e:76:60:c9:26:e5:9c:df:ed:51:06:
19:b1:e5:a9:a7:83:69:60:d2:10:f3:1d:c3:93:ab:
86:77:b4:66:9d:eb:6a:6e:3a:7a:1b:1f:96:2b:d2:
e6:40:d9:6e:f0:8c:72:46:b6:4b:3b:9a:c0:bc:18:
24:c8:97:f1:f1:82:21:b9:eb:14:58:89:1b:45:5b:
50:27:20:cf:61:47:fb:df:0a:da:28:42:a4:74:ca:
c8:6e:50:81:a9:50:b0:54:91:c7:97:95:22:aa:fa:
69:0e:cd:fb:3e:ba:fb:bb:85:dc:e6:f4:e6:8b:20:
36:84:66:58:f7:a4:5d:08:19:5e:e1:62:7f:7c:da:
04:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:16:C9:8E:70:0C:69:4C:4A:A5:1B:B6:DD:B2:50:20:FF:98:E5:E6
X509v3 Authority Key Identifier:
keyid:72:E5:B5:7B:B3:98:D5:E1:83:9A:3F:E4:25:4D:F7:0D:71:2C:E1:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cuW1e7OY1eGDmj_kJU33DXEs4Uo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/470cb8-eb6a-4934-9d47-968d0c7f22bb/1/cuW1e7OY1eGDmj_kJU33DXEs4Uo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/470cb8-eb6a-4934-9d47-968d0c7f22bb/1/cuW1e7OY1eGDmj_kJU33DXEs4Uo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:6c:6e:2c:6d:47:5c:cb:73:c6:bd:df:a3:2b:5d:ee:db:60:
8e:ff:1f:f0:f6:a9:12:29:74:92:52:1f:b9:71:85:f5:4b:b3:
bb:ba:c3:55:2b:0d:cb:2e:24:c0:ee:75:2a:c3:37:c6:6a:92:
e8:11:b9:01:4d:be:41:fd:f3:86:18:b5:5e:8d:81:dc:74:e5:
4b:f0:f2:c8:50:a7:55:25:75:2d:e3:b7:db:74:b4:2b:e2:93:
27:ac:67:39:f9:dd:71:1f:db:ca:69:e0:9d:da:8d:ee:87:1d:
da:55:cc:c0:0a:61:d2:ef:81:21:30:a5:d3:a8:82:a2:53:b4:
74:74:a9:89:1d:c2:d5:44:da:bf:0b:6f:f6:88:fe:a1:d7:57:
94:2c:04:ef:de:8d:74:e2:a2:22:af:db:65:5d:20:58:dc:36:
1d:1c:bf:9e:b2:2f:d9:50:5e:59:3a:2c:cb:55:6e:0b:4e:ad:
0d:81:01:1f:ef:e5:83:ea:b8:03:e2:da:8f:64:42:46:95:b7:
30:10:be:0b:74:43:9d:8d:d1:2d:50:8e:10:65:b8:df:9f:97:
40:32:85:6c:3f:ed:8a:e1:78:6c:4f:6c:61:7f:ff:52:df:71:
af:ad:39:21:fd:92:ed:bc:3f:24:2a:31:bc:d7:d8:84:c8:c7:
de:25:8e:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:57:48 2026 by rpki-client