Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.mft
File: 1-cuQlMt82hOL0BABPrnswzGQMEE.mft (raw, json)
Hash identifier: GLAjlZ2idwFigjDE4AMymKumRSwoh2DgjjCceBKsXgk=
Subject key identifier: 37:A7:95:C0:63:10:C6:02:0E:B9:23:5C:4D:7B:77:72:3A:19:2C:1D
Authority key identifier: F9:CB:90:94:CB:7C:DA:13:8B:D0:10:01:3E:B9:EC:C3:31:90:30:41
Certificate issuer: /CN=f9cb9094cb7cda138bd010013eb9ecc331903041
Certificate serial: 01A0D2A5BE1B833D89A876CA8A876F80AD18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-cuQlMt82hOL0BABPrnswzGQMEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.mft
Manifest number: 1A70
Signing time: Thu 24 Sep 2026 09:01:12 +0000
Manifest this update: Thu 24 Sep 2026 09:01:12 +0000
Manifest next update: Fri 25 Sep 2026 09:01:12 +0000
Files and hashes: 1: 1-cuQlMt82hOL0BABPrnswzGQMEE.crl (hash: l7aeMYhFnQRcZ+0k/qc5XYdyxtLtkhPd4e8V/gnW3xA=)
2: Qk5MpNdRL52qvitv9k0XvdvcapI.roa (hash: vbB6JQXbd3WJ1/NPtyFdfR5AK1sMZwRoGAo5/Aa6H5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-cuQlMt82hOL0BABPrnswzGQMEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:a5:be:1b:83:3d:89:a8:76:ca:8a:87:6f:80:ad:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9cb9094cb7cda138bd010013eb9ecc331903041
Validity
Not Before: Sep 24 09:01:12 2026 GMT
Not After : Sep 25 09:01:12 2026 GMT
Subject: CN=37a795c06310c6020eb9235c4d7b77723a192c1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6c:0f:31:fe:7d:a7:18:ff:0b:4c:8d:24:f3:
da:2e:29:0e:ee:61:a6:9f:c2:57:51:9d:32:f0:a4:
63:8e:91:b0:78:22:71:c3:3e:85:d3:76:f4:d9:bd:
37:ab:4a:36:c1:80:e4:4f:eb:98:50:08:21:bc:f6:
dc:05:d1:37:11:66:59:e5:96:1f:04:c1:d7:f9:40:
9a:3a:08:46:38:7b:7b:a6:74:64:40:43:64:78:8e:
cc:62:de:ec:69:23:b9:dd:2d:d0:2f:71:1f:46:10:
4e:5e:a7:fa:95:0d:c7:35:31:e0:5a:c9:45:26:46:
5d:75:5f:77:b7:81:57:e7:4d:54:8d:d0:29:e6:2e:
0b:9d:b2:17:c5:f6:41:a5:7f:19:bc:d8:7f:32:b1:
32:b5:12:34:ae:6d:a6:98:a9:38:02:cb:8d:4d:31:
65:db:9a:8b:63:8f:53:77:c4:4d:d2:8a:bb:85:ca:
9a:22:6e:a6:94:87:60:17:d1:82:60:f5:2a:e5:8d:
08:0a:64:88:67:05:b6:15:76:bb:5c:bf:e6:7e:9b:
07:db:2a:b2:ce:2e:28:80:ca:6b:51:bc:a0:50:5e:
cb:01:ec:47:e1:25:ad:a9:3e:ca:b1:0c:ed:35:75:
d1:c8:87:31:91:1d:1e:8e:c5:42:b1:28:0d:1a:06:
d4:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:A7:95:C0:63:10:C6:02:0E:B9:23:5C:4D:7B:77:72:3A:19:2C:1D
X509v3 Authority Key Identifier:
keyid:F9:CB:90:94:CB:7C:DA:13:8B:D0:10:01:3E:B9:EC:C3:31:90:30:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-cuQlMt82hOL0BABPrnswzGQMEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:52:01:ea:1a:a2:77:2d:ff:67:3f:bd:85:6c:e5:f5:16:e2:
56:80:ed:ac:0c:67:f1:b8:9f:71:da:b9:cf:29:db:c9:43:5e:
3a:d4:22:06:57:0d:22:4d:d5:65:4c:20:e6:f5:6c:a8:27:1e:
b0:3c:3d:b8:ca:5a:ce:93:68:9f:45:e2:10:f1:6c:89:1a:22:
65:51:66:b4:1e:25:c0:41:0a:7c:58:85:84:68:86:01:bd:55:
de:8f:fa:b3:ad:47:96:be:a7:6d:a4:e6:98:3e:3a:9b:9b:b0:
a3:f6:e1:5d:1e:36:e3:89:b1:33:c1:e5:06:e9:e3:28:13:c7:
51:a8:29:ec:e9:32:0d:64:b5:36:11:3f:21:c5:91:1f:c1:5a:
6c:56:17:c0:a6:bc:77:11:5c:43:dd:51:1a:d8:fa:a9:0d:2e:
95:7c:ca:63:54:f0:a8:31:1a:44:d6:e8:c0:6a:d0:ed:ba:73:
78:3e:07:5d:5a:1c:c1:f0:3c:4f:1f:e8:3f:af:c1:85:d4:39:
d6:34:12:29:5b:be:c0:95:ce:49:19:31:c6:48:ea:71:fa:fe:
b7:ad:ea:bb:79:51:86:3e:f1:1c:b9:20:74:3d:e6:53:37:60:
c3:a5:1a:8b:cb:fb:9b:8d:c4:83:1f:f1:ae:74:04:22:34:20:
cb:b8:87:97
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAaDSpb4bgz2JqHbKiodvgK0YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5Y2I5MDk0Y2I3Y2RhMTM4YmQwMTAwMTNlYjllY2MzMzE5
MDMwNDEwHhcNMjYwOTI0MDkwMTEyWhcNMjYwOTI1MDkwMTEyWjAzMTEwLwYDVQQD
EygzN2E3OTVjMDYzMTBjNjAyMGViOTIzNWM0ZDdiNzc3MjNhMTkyYzFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2wPMf59pxj/C0yNJPPaLikO7mGm
n8JXUZ0y8KRjjpGweCJxwz6F03b02b03q0o2wYDkT+uYUAghvPbcBdE3EWZZ5ZYf
BMHX+UCaOghGOHt7pnRkQENkeI7MYt7saSO53S3QL3EfRhBOXqf6lQ3HNTHgWslF
JkZddV93t4FX501UjdAp5i4LnbIXxfZBpX8ZvNh/MrEytRI0rm2mmKk4AsuNTTFl
25qLY49Td8RN0oq7hcqaIm6mlIdgF9GCYPUq5Y0ICmSIZwW2FXa7XL/mfpsH2yqy
zi4ogMprUbygUF7LAexH4SWtqT7KsQztNXXRyIcxkR0ejsVCsSgNGgbUdwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFDenlcBjEMYCDrkjXE17d3I6GSwdMB8GA1UdIwQY
MBaAFPnLkJTLfNoTi9AQAT657MMxkDBBMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1jdVFsTXQ4MmhPTDBCQUJQcm5zd3pHUU1FRS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWEvNjI0NTQ2LTRhYzgtNGRiZS04Njk3
LWFhY2U4NzhiYWI2NS8xLzEtY3VRbE10ODJoT0wwQkFCUHJuc3d6R1FNRUUubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2VhLzYyNDU0Ni00YWM4LTRkYmUtODY5Ny1hYWNlODc4YmFi
NjUvMS8xLWN1UWxNdDgyaE9MMEJBQlBybnN3ekdRTUVFLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP1IB
6hqidy3/Zz+9hWzl9RbiVoDtrAxn8bifcdq5zynbyUNeOtQiBlcNIk3VZUwg5vVs
qCcesDw9uMpazpNon0XiEPFsiRoiZVFmtB4lwEEKfFiFhGiGAb1V3o/6s61Hlr6n
baTmmD46m5uwo/bhXR4244mxM8HlBunjKBPHUagp7OkyDWS1NhE/IcWRH8FabFYX
wKa8dxFcQ91RGtj6qQ0ulXzKY1TwqDEaRNbowGrQ7bpzeD4HXVocwfA8Tx/oP6/B
hdQ51jQSKVu+wJXOSRkxxkjqcfr+t63qu3lRhj7xHLkgdD3mUzdgw6Uai8v7m43E
gx/xrnQEIjQgy7iHlw==
-----END CERTIFICATE-----
Generated at Thu Sep 24 12:50:53 2026 by rpki-client