Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/9c7695-90e2-4825-9d85-ac0f95d8ef20/1/CuenjWwPepgBOXu51SmocVlcgEc.mft
File: CuenjWwPepgBOXu51SmocVlcgEc.mft (raw, json)
Hash identifier: 2EVLlH6/FTthTEICz3/fbGdPE/h65S62JTxlboihf9k=
Subject key identifier: A1:F6:4C:E4:B1:1B:F7:A1:8B:C0:B5:79:F9:0F:3A:FB:BF:BE:19:64
Authority key identifier: 0A:E7:A7:8D:6C:0F:7A:98:01:39:7B:B9:D5:29:A8:71:59:5C:80:47
Certificate issuer: /CN=0ae7a78d6c0f7a9801397bb9d529a871595c8047
Certificate serial: 019D2772BCC7DB1154FB1E27F916EBAE2B51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CuenjWwPepgBOXu51SmocVlcgEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/9c7695-90e2-4825-9d85-ac0f95d8ef20/1/CuenjWwPepgBOXu51SmocVlcgEc.mft
Manifest number: 0A0B
Signing time: Thu 26 Mar 2026 00:02:03 +0000
Manifest this update: Thu 26 Mar 2026 00:02:03 +0000
Manifest next update: Fri 27 Mar 2026 00:02:03 +0000
Files and hashes: 1: CuenjWwPepgBOXu51SmocVlcgEc.crl (hash: GRLatAf3n9wNSketNWthl4RsYW377gJdP8yIHVRsHQk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/9c7695-90e2-4825-9d85-ac0f95d8ef20/1/CuenjWwPepgBOXu51SmocVlcgEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/9c7695-90e2-4825-9d85-ac0f95d8ef20/1/CuenjWwPepgBOXu51SmocVlcgEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/CuenjWwPepgBOXu51SmocVlcgEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:bc:c7:db:11:54:fb:1e:27:f9:16:eb:ae:2b:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ae7a78d6c0f7a9801397bb9d529a871595c8047
Validity
Not Before: Mar 26 00:02:03 2026 GMT
Not After : Mar 27 00:02:03 2026 GMT
Subject: CN=a1f64ce4b11bf7a18bc0b579f90f3afbbfbe1964
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:28:49:0e:69:dc:f8:96:52:9b:49:24:31:5a:
e2:e3:78:77:63:11:ff:55:10:4f:64:a5:0c:c8:29:
4d:67:f6:37:01:1a:75:ca:dd:61:71:09:63:14:43:
8f:97:76:e1:bc:0e:75:57:a5:3c:21:3a:64:aa:80:
4b:a3:39:9e:7f:e4:7c:49:4c:4f:43:c2:2c:a5:5f:
21:ea:55:ef:ee:38:b9:19:98:95:31:db:96:e8:64:
16:60:e2:5c:f6:83:0d:62:80:8f:17:43:8b:13:95:
0d:82:79:e0:46:81:4e:71:26:e9:c8:b9:9a:76:5b:
a6:c2:e4:aa:e3:4f:c8:29:e1:d4:a9:d5:18:1f:88:
cc:d7:22:01:91:13:3b:42:23:3d:2d:e1:ce:78:ad:
75:b1:91:66:dd:df:ed:83:0a:86:28:10:88:e3:9b:
5c:8a:6e:f3:0f:e6:45:44:b3:67:59:b2:24:5f:2b:
7c:e8:9b:62:a3:a8:36:99:76:ae:38:6d:ad:6a:d8:
29:15:8d:ae:ab:68:ac:67:c5:72:a2:77:0d:7e:ef:
ce:e8:44:b6:2d:1d:99:5f:d7:9b:69:39:22:a0:50:
12:a1:df:13:8d:56:3e:6b:06:09:94:df:08:9e:db:
ec:93:ad:70:f9:01:bd:65:f0:48:7b:fa:49:03:18:
36:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:F6:4C:E4:B1:1B:F7:A1:8B:C0:B5:79:F9:0F:3A:FB:BF:BE:19:64
X509v3 Authority Key Identifier:
keyid:0A:E7:A7:8D:6C:0F:7A:98:01:39:7B:B9:D5:29:A8:71:59:5C:80:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CuenjWwPepgBOXu51SmocVlcgEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/9c7695-90e2-4825-9d85-ac0f95d8ef20/1/CuenjWwPepgBOXu51SmocVlcgEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/9c7695-90e2-4825-9d85-ac0f95d8ef20/1/CuenjWwPepgBOXu51SmocVlcgEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:22:69:27:74:bf:a7:95:da:c7:2f:ad:64:30:2b:89:78:d4:
cc:16:f8:4f:5f:d1:5b:b5:d3:98:22:93:f6:64:9e:dc:2d:e6:
f1:47:31:fd:04:f4:e8:48:bf:b8:90:83:de:96:e7:8b:28:79:
06:7f:af:9d:6c:25:9f:25:d1:f4:b1:e1:33:be:16:e1:a8:ed:
e6:b5:d2:e5:3f:cc:9c:a1:ba:04:00:75:d2:fd:56:66:aa:ed:
78:3a:56:6c:13:92:68:7d:a9:1f:52:dd:a2:f4:fe:65:4d:16:
d7:33:0b:14:3a:62:25:55:ca:1c:1b:80:6f:ed:b7:86:83:e1:
54:59:11:8a:36:0f:b0:f1:cf:0f:01:ad:a0:36:e3:f0:02:cd:
31:6c:2a:6d:50:49:a6:f3:34:d6:31:f3:60:ed:da:47:cb:24:
2a:b7:35:3b:cb:04:80:3f:26:5d:aa:36:91:07:69:b2:b2:6c:
79:e5:10:a4:cf:5f:c7:d6:f0:f6:a3:aa:c3:48:48:be:75:d6:
fa:0b:0b:0e:d0:0f:97:f1:af:a3:3c:9e:ed:8b:0e:82:8a:ca:
11:fa:9e:12:45:9b:78:c4:1b:51:ff:48:d5:b4:05:97:32:60:
9c:93:26:bc:9d:58:d2:12:6c:2d:89:7a:31:30:0c:e9:18:af:
91:1a:c4:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:15:53 2026 by rpki-client