Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.mft
File: 1-cuQlMt82hOL0BABPrnswzGQMEE.mft (raw, json)
Hash identifier: F+ajsT82zC63mreIlu/CpD+WkSZ0P05rehrnneoNd7Q=
Subject key identifier: FA:C1:9A:7A:C7:77:82:31:38:D2:23:6D:A0:78:71:7D:23:C2:55:70
Authority key identifier: F9:CB:90:94:CB:7C:DA:13:8B:D0:10:01:3E:B9:EC:C3:31:90:30:41
Certificate issuer: /CN=f9cb9094cb7cda138bd010013eb9ecc331903041
Certificate serial: 019D2A04637726204C852ED23FA0736B7340
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-cuQlMt82hOL0BABPrnswzGQMEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.mft
Manifest number: 188B
Signing time: Thu 26 Mar 2026 12:00:23 +0000
Manifest this update: Thu 26 Mar 2026 12:00:23 +0000
Manifest next update: Fri 27 Mar 2026 12:00:23 +0000
Files and hashes: 1: 1-cuQlMt82hOL0BABPrnswzGQMEE.crl (hash: mRzLEY7RaBUhxOojzkC6ea7ta9S44pZaXm3puaGY90Q=)
2: Qk5MpNdRL52qvitv9k0XvdvcapI.roa (hash: vbB6JQXbd3WJ1/NPtyFdfR5AK1sMZwRoGAo5/Aa6H5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-cuQlMt82hOL0BABPrnswzGQMEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 12:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:63:77:26:20:4c:85:2e:d2:3f:a0:73:6b:73:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9cb9094cb7cda138bd010013eb9ecc331903041
Validity
Not Before: Mar 26 12:00:23 2026 GMT
Not After : Mar 27 12:00:23 2026 GMT
Subject: CN=fac19a7ac777823138d2236da078717d23c25570
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:da:93:c1:c7:58:d1:98:14:d9:78:f9:6b:4d:
8f:d2:bd:d8:32:a8:5f:22:a8:2e:a1:82:fc:18:56:
81:6a:36:57:5e:10:85:e3:d9:e7:9d:2f:73:29:ad:
b1:e1:fe:86:15:f8:ee:a6:40:ed:93:9d:93:f5:07:
4c:a1:29:fe:1e:6f:d0:a4:19:e4:8f:f6:1b:87:40:
4c:69:da:44:8e:9c:5b:6c:2d:93:01:ed:f2:9f:a2:
db:63:16:e6:f5:23:52:8b:08:28:c8:93:f7:6a:a5:
15:86:4f:a9:cc:46:86:7c:11:94:5e:06:24:36:9e:
d0:40:06:e8:83:ee:1c:59:7a:b7:a9:41:f5:2a:e5:
fc:f2:9a:9f:bd:68:9b:4e:bb:61:88:88:fc:89:b1:
8d:9f:77:8c:14:f7:39:4f:a2:34:89:94:01:54:0f:
76:1d:38:ab:a5:36:0d:dd:7b:0b:4c:93:96:5c:8f:
cd:7e:4d:a5:18:3f:df:7c:63:1d:04:6f:68:49:b9:
d2:41:83:02:97:67:20:2c:8d:10:95:39:cb:89:f8:
25:8d:4d:a2:11:93:0a:78:05:b5:f7:af:df:aa:22:
bb:9d:c2:3a:d7:ec:3f:ee:c1:64:30:83:97:d3:9b:
09:1a:e6:fb:71:b1:86:6d:9b:20:d5:61:bc:69:55:
ae:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:C1:9A:7A:C7:77:82:31:38:D2:23:6D:A0:78:71:7D:23:C2:55:70
X509v3 Authority Key Identifier:
keyid:F9:CB:90:94:CB:7C:DA:13:8B:D0:10:01:3E:B9:EC:C3:31:90:30:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-cuQlMt82hOL0BABPrnswzGQMEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:6c:d9:02:6a:63:38:a0:d8:17:de:48:ba:4a:f5:fd:82:8c:
54:7f:ba:38:de:dd:4b:61:b0:89:a8:0f:97:55:13:c9:1c:ae:
1f:7d:f7:95:f5:ee:2c:45:0a:5a:b6:4c:c4:c5:23:39:8a:6c:
d1:ef:47:ca:a9:a2:f5:a4:6e:64:9a:d3:8b:ee:fe:5b:0e:4e:
67:e2:d6:bc:15:65:e9:1f:20:8d:37:07:7e:75:c1:26:83:7c:
ef:c1:dd:1d:39:15:10:65:dc:51:95:24:8a:63:24:83:21:1e:
33:d2:9d:ab:ff:c7:34:69:1b:28:19:25:80:4d:e9:2d:67:27:
04:4a:6f:4a:48:5c:a1:bb:3b:ab:26:9d:36:17:19:b3:9e:3a:
fe:dc:3d:b1:82:53:ff:3e:2a:8d:b9:06:d4:c4:87:76:cf:ff:
27:76:73:a1:38:8e:03:93:03:61:9d:b2:c0:55:78:0b:c3:1a:
d6:d4:9b:40:60:bd:94:5e:82:33:8e:75:18:81:16:7a:50:d9:
df:e7:cb:1a:d0:21:5c:6a:e6:c9:2a:ad:9f:80:5a:cd:7f:da:
c8:5a:0b:c7:e8:a5:a4:ef:c0:ba:b4:d8:47:00:2f:9e:71:c1:
c6:85:6d:23:f2:bd:b3:f9:83:7d:7b:50:a5:43:d0:50:8b:62:
a5:e9:3c:b0
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ0qBGN3JiBMhS7SP6Bza3NAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5Y2I5MDk0Y2I3Y2RhMTM4YmQwMTAwMTNlYjllY2MzMzE5
MDMwNDEwHhcNMjYwMzI2MTIwMDIzWhcNMjYwMzI3MTIwMDIzWjAzMTEwLwYDVQQD
EyhmYWMxOWE3YWM3Nzc4MjMxMzhkMjIzNmRhMDc4NzE3ZDIzYzI1NTcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg9qTwcdY0ZgU2Xj5a02P0r3YMqhf
IqguoYL8GFaBajZXXhCF49nnnS9zKa2x4f6GFfjupkDtk52T9QdMoSn+Hm/QpBnk
j/Ybh0BMadpEjpxbbC2TAe3yn6LbYxbm9SNSiwgoyJP3aqUVhk+pzEaGfBGUXgYk
Np7QQAbog+4cWXq3qUH1KuX88pqfvWibTrthiIj8ibGNn3eMFPc5T6I0iZQBVA92
HTirpTYN3XsLTJOWXI/Nfk2lGD/ffGMdBG9oSbnSQYMCl2cgLI0QlTnLifgljU2i
EZMKeAW196/fqiK7ncI61+w/7sFkMIOX05sJGub7cbGGbZsg1WG8aVWuIQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFPrBmnrHd4IxONIjbaB4cX0jwlVwMB8GA1UdIwQY
MBaAFPnLkJTLfNoTi9AQAT657MMxkDBBMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1jdVFsTXQ4MmhPTDBCQUJQcm5zd3pHUU1FRS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWEvNjI0NTQ2LTRhYzgtNGRiZS04Njk3
LWFhY2U4NzhiYWI2NS8xLzEtY3VRbE10ODJoT0wwQkFCUHJuc3d6R1FNRUUubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2VhLzYyNDU0Ni00YWM4LTRkYmUtODY5Ny1hYWNlODc4YmFi
NjUvMS8xLWN1UWxNdDgyaE9MMEJBQlBybnN3ekdRTUVFLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF2zZ
AmpjOKDYF95Iukr1/YKMVH+6ON7dS2GwiagPl1UTyRyuH333lfXuLEUKWrZMxMUj
OYps0e9Hyqmi9aRuZJrTi+7+Ww5OZ+LWvBVl6R8gjTcHfnXBJoN878HdHTkVEGXc
UZUkimMkgyEeM9Kdq//HNGkbKBklgE3pLWcnBEpvSkhcobs7qyadNhcZs546/tw9
sYJT/z4qjbkG1MSHds//J3ZzoTiOA5MDYZ2ywFV4C8Ma1tSbQGC9lF6CM451GIEW
elDZ3+fLGtAhXGrmySqtn4BazX/ayFoLx+ilpO/AurTYRwAvnnHBxoVtI/K9s/mD
fXtQpUPQUItipek8sA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 20:27:14 2026 by rpki-client