Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/470cb8-eb6a-4934-9d47-968d0c7f22bb/1/cuW1e7OY1eGDmj_kJU33DXEs4Uo.mft
File: cuW1e7OY1eGDmj_kJU33DXEs4Uo.mft (raw, json)
Hash identifier: EWD20RksxA4Jq8YbK+6jMXfbSg3L2dHhCIy5NtZQeZg=
Subject key identifier: E5:4E:69:4D:63:85:9B:D4:16:06:BE:46:0D:44:9F:BE:48:5C:F5:E4
Authority key identifier: 72:E5:B5:7B:B3:98:D5:E1:83:9A:3F:E4:25:4D:F7:0D:71:2C:E1:4A
Certificate issuer: /CN=72e5b57bb398d5e1839a3fe4254df70d712ce14a
Certificate serial: 019D2A727D31A8671B6669D620D399527D56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cuW1e7OY1eGDmj_kJU33DXEs4Uo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/470cb8-eb6a-4934-9d47-968d0c7f22bb/1/cuW1e7OY1eGDmj_kJU33DXEs4Uo.mft
Manifest number: 0AAF
Signing time: Thu 26 Mar 2026 14:00:39 +0000
Manifest this update: Thu 26 Mar 2026 14:00:39 +0000
Manifest next update: Fri 27 Mar 2026 14:00:39 +0000
Files and hashes: 1: RIVpRVcoTiPM597Ay6ktG1nRpoI.roa (hash: 8WsKosIyT+/va+/3Ff2UyTN4wl8h0E62UrDqXKvX/7s=)
2: cuW1e7OY1eGDmj_kJU33DXEs4Uo.crl (hash: o74Frl4KlkzRN+kEFwlqv6i+qvXGAlYpIkkyeugiwxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/470cb8-eb6a-4934-9d47-968d0c7f22bb/1/cuW1e7OY1eGDmj_kJU33DXEs4Uo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/470cb8-eb6a-4934-9d47-968d0c7f22bb/1/cuW1e7OY1eGDmj_kJU33DXEs4Uo.mft
rsync://rpki.ripe.net/repository/DEFAULT/cuW1e7OY1eGDmj_kJU33DXEs4Uo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:7d:31:a8:67:1b:66:69:d6:20:d3:99:52:7d:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72e5b57bb398d5e1839a3fe4254df70d712ce14a
Validity
Not Before: Mar 26 14:00:39 2026 GMT
Not After : Mar 27 14:00:39 2026 GMT
Subject: CN=e54e694d63859bd41606be460d449fbe485cf5e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:7b:84:2f:29:5b:a2:9d:0e:f2:4b:2b:72:de:
09:44:c0:00:a6:af:96:d5:fb:55:bb:8f:7d:63:cc:
1a:d2:28:1b:1a:66:f4:62:86:44:5d:7e:50:6b:31:
ee:fb:a4:f1:25:47:ae:0b:91:31:6e:07:2b:78:de:
eb:35:a0:18:42:d1:9b:2e:e3:11:65:da:94:98:09:
b2:22:f3:a5:82:d7:27:67:c2:42:db:44:90:31:d4:
81:cf:33:b7:5b:30:2f:f5:3b:d6:b4:f7:44:ed:67:
ae:55:45:b9:03:9f:4f:06:11:30:9e:d4:8b:3a:12:
e4:7d:03:1a:de:c0:f7:65:8f:d3:3e:1b:14:3c:a7:
95:18:f2:18:dc:a1:6f:d3:27:ab:70:3c:e4:44:23:
c1:9c:4b:48:df:72:1c:46:40:15:e9:9d:81:ae:d7:
05:d9:5d:00:ee:c3:c1:64:4e:e6:82:1e:e2:69:0b:
a7:8e:65:50:c2:ce:6e:77:32:3d:aa:55:bc:09:7d:
db:2d:ce:94:13:7c:a4:a8:dc:bb:1f:8f:01:da:68:
01:61:e4:2b:af:63:36:c8:9c:03:86:47:b6:49:e4:
8a:4f:68:24:87:e6:a3:a6:cb:fa:4d:59:b5:26:98:
9e:00:31:e5:15:50:38:3a:61:bc:53:28:a9:86:6a:
3e:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:4E:69:4D:63:85:9B:D4:16:06:BE:46:0D:44:9F:BE:48:5C:F5:E4
X509v3 Authority Key Identifier:
keyid:72:E5:B5:7B:B3:98:D5:E1:83:9A:3F:E4:25:4D:F7:0D:71:2C:E1:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cuW1e7OY1eGDmj_kJU33DXEs4Uo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/470cb8-eb6a-4934-9d47-968d0c7f22bb/1/cuW1e7OY1eGDmj_kJU33DXEs4Uo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/470cb8-eb6a-4934-9d47-968d0c7f22bb/1/cuW1e7OY1eGDmj_kJU33DXEs4Uo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:f0:5f:63:7c:d6:ee:6b:3a:18:d3:3d:aa:68:bb:47:84:81:
eb:0f:b7:97:2d:0c:45:4a:5e:c0:7f:94:cf:bb:5a:b3:b2:4f:
6d:b6:c7:58:ce:81:02:63:0b:a7:72:c2:d0:3a:91:3c:ea:ce:
40:81:b9:2e:e0:34:51:45:02:64:e3:cf:17:11:50:58:e7:b1:
40:2a:cd:29:9f:b4:e3:0d:fb:c9:26:7b:fd:b4:4c:e8:32:17:
19:b8:54:77:be:08:f1:78:d9:49:c2:a0:ba:9f:b9:79:2f:32:
33:88:cd:d3:0d:b5:72:ba:1e:68:64:52:59:8f:dd:99:ba:20:
85:cd:76:37:1b:be:61:3d:88:68:f7:8d:18:95:d1:e4:94:6f:
a4:63:63:6f:9d:65:03:65:a2:17:93:b3:18:14:2c:94:16:16:
61:1b:11:d0:9d:2a:95:9f:e9:5d:c3:d5:b0:c8:5b:2d:d7:d0:
4b:17:fb:7b:ad:30:fb:97:fa:3f:f3:a6:4f:2b:b1:4e:0c:b6:
e6:5d:23:5f:68:e9:62:f5:8b:b1:6f:98:90:8d:69:a8:82:ea:
11:5d:40:7d:ac:25:56:4c:8e:cc:ab:d3:48:65:51:90:fa:ee:
33:08:81:c0:c0:20:b1:7b:98:a0:0e:80:9d:db:6e:00:56:66:
2e:9f:8d:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0qcn0xqGcbZmnWINOZUn1WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyZTViNTdiYjM5OGQ1ZTE4MzlhM2ZlNDI1NGRmNzBkNzEy
Y2UxNGEwHhcNMjYwMzI2MTQwMDM5WhcNMjYwMzI3MTQwMDM5WjAzMTEwLwYDVQQD
EyhlNTRlNjk0ZDYzODU5YmQ0MTYwNmJlNDYwZDQ0OWZiZTQ4NWNmNWU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3uELylbop0O8ksrct4JRMAApq+W
1ftVu499Y8wa0igbGmb0YoZEXX5QazHu+6TxJUeuC5ExbgcreN7rNaAYQtGbLuMR
ZdqUmAmyIvOlgtcnZ8JC20SQMdSBzzO3WzAv9TvWtPdE7WeuVUW5A59PBhEwntSL
OhLkfQMa3sD3ZY/TPhsUPKeVGPIY3KFv0yercDzkRCPBnEtI33IcRkAV6Z2BrtcF
2V0A7sPBZE7mgh7iaQunjmVQws5udzI9qlW8CX3bLc6UE3ykqNy7H48B2mgBYeQr
r2M2yJwDhke2SeSKT2gkh+ajpsv6TVm1JpieADHlFVA4OmG8Uyiphmo+rwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOVOaU1jhZvUFga+Rg1En75IXPXkMB8GA1UdIwQY
MBaAFHLltXuzmNXhg5o/5CVN9w1xLOFKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3VXMWU3T1kxZUdEbWpfa0pVMzNEWEVzNFVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS80NzBjYjgtZWI2YS00OTM0LTlkNDct
OTY4ZDBjN2YyMmJiLzEvY3VXMWU3T1kxZUdEbWpfa0pVMzNEWEVzNFVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS80NzBjYjgtZWI2YS00OTM0LTlkNDctOTY4ZDBjN2YyMmJi
LzEvY3VXMWU3T1kxZUdEbWpfa0pVMzNEWEVzNFVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPfBfY3zW
7ms6GNM9qmi7R4SB6w+3ly0MRUpewH+Uz7tas7JPbbbHWM6BAmMLp3LC0DqRPOrO
QIG5LuA0UUUCZOPPFxFQWOexQCrNKZ+04w37ySZ7/bRM6DIXGbhUd74I8XjZScKg
up+5eS8yM4jN0w21croeaGRSWY/dmboghc12Nxu+YT2IaPeNGJXR5JRvpGNjb51l
A2WiF5OzGBQslBYWYRsR0J0qlZ/pXcPVsMhbLdfQSxf7e60w+5f6P/OmTyuxTgy2
5l0jX2jpYvWLsW+YkI1pqILqEV1AfawlVkyOzKvTSGVRkPruMwiBwMAgsXuYoA6A
ndtuAFZmLp+N9A==
-----END CERTIFICATE-----
Generated at Thu Mar 26 17:20:28 2026 by rpki-client