Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/33fb0f-8275-4461-8e70-f6c2cd67f859/1/cuWI2kps8EE_-zAWvkZ47Jmpjfk.mft
File: cuWI2kps8EE_-zAWvkZ47Jmpjfk.mft (raw, json)
Hash identifier: Q5JDmajDLp9uq4VEAs1tazZc9VRg3KB3Np5L/aUNg1Q=
Subject key identifier: 37:67:93:83:6C:DA:E6:B6:9F:37:86:00:28:53:4B:80:1E:AF:D6:1A
Authority key identifier: 72:E5:88:DA:4A:6C:F0:41:3F:FB:30:16:BE:46:78:EC:99:A9:8D:F9
Certificate issuer: /CN=72e588da4a6cf0413ffb3016be4678ec99a98df9
Certificate serial: 019D29979BF10E5275602E1DD664C17B32E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cuWI2kps8EE_-zAWvkZ47Jmpjfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/33fb0f-8275-4461-8e70-f6c2cd67f859/1/cuWI2kps8EE_-zAWvkZ47Jmpjfk.mft
Manifest number: 0958
Signing time: Thu 26 Mar 2026 10:01:34 +0000
Manifest this update: Thu 26 Mar 2026 10:01:34 +0000
Manifest next update: Fri 27 Mar 2026 10:01:34 +0000
Files and hashes: 1: cuWI2kps8EE_-zAWvkZ47Jmpjfk.crl (hash: ql4s2ZXvoc7SIk7du0fxx+j3MAfCDP3d6wUPZaaTsHo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/33fb0f-8275-4461-8e70-f6c2cd67f859/1/cuWI2kps8EE_-zAWvkZ47Jmpjfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/33fb0f-8275-4461-8e70-f6c2cd67f859/1/cuWI2kps8EE_-zAWvkZ47Jmpjfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/cuWI2kps8EE_-zAWvkZ47Jmpjfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:9b:f1:0e:52:75:60:2e:1d:d6:64:c1:7b:32:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72e588da4a6cf0413ffb3016be4678ec99a98df9
Validity
Not Before: Mar 26 10:01:34 2026 GMT
Not After : Mar 27 10:01:34 2026 GMT
Subject: CN=376793836cdae6b69f37860028534b801eafd61a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ec:cf:0b:50:30:95:60:79:a1:3b:f4:85:9d:
fd:fa:cf:8e:c2:a8:13:b1:d4:5e:7e:c3:9c:15:1f:
32:dc:03:17:15:ef:91:61:e7:57:73:bf:5f:e9:0e:
c5:83:3d:9e:99:be:ea:f5:1e:9f:da:96:73:2a:1e:
e2:da:3e:57:9e:21:ad:21:88:75:de:d9:a6:93:76:
66:43:38:48:d4:0f:9f:e8:ae:33:f2:a4:91:d9:c6:
a6:3e:27:7e:cf:c1:98:1c:9d:e4:d4:dc:bc:71:54:
f4:5f:ea:07:81:ea:aa:6c:d9:71:8b:9f:5d:8d:27:
28:7e:f6:cd:46:fa:dd:30:54:ef:54:84:63:86:36:
2f:e5:43:54:29:e0:6a:7a:bc:27:b0:e6:13:cc:c0:
6f:22:96:53:a0:a1:73:12:f1:b0:07:80:f4:49:3b:
8c:0e:ce:d8:d3:85:d1:48:cd:5f:a2:93:79:dd:93:
54:ef:23:e4:11:cb:d3:a0:cc:28:fb:ac:b2:00:f3:
06:b8:a6:5c:6d:c6:08:58:88:40:ac:00:b8:7e:6d:
6b:f4:e7:f9:30:77:88:a2:1d:30:75:ac:00:14:38:
31:40:69:69:64:20:b2:e4:e6:e1:c7:6b:e6:fe:98:
9c:f7:48:fc:e7:48:88:8d:5b:d8:c9:55:5a:33:7b:
10:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:67:93:83:6C:DA:E6:B6:9F:37:86:00:28:53:4B:80:1E:AF:D6:1A
X509v3 Authority Key Identifier:
keyid:72:E5:88:DA:4A:6C:F0:41:3F:FB:30:16:BE:46:78:EC:99:A9:8D:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cuWI2kps8EE_-zAWvkZ47Jmpjfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/33fb0f-8275-4461-8e70-f6c2cd67f859/1/cuWI2kps8EE_-zAWvkZ47Jmpjfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/33fb0f-8275-4461-8e70-f6c2cd67f859/1/cuWI2kps8EE_-zAWvkZ47Jmpjfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:59:20:0f:a5:38:70:5b:34:a1:79:67:3f:83:f3:55:3c:9d:
a4:a3:3a:ad:a3:1c:b2:66:f4:84:1a:23:f5:e4:0b:8c:2a:a0:
35:2d:6b:93:20:36:06:04:3f:a7:6a:29:76:a8:81:ff:0e:0b:
06:8a:77:e4:1d:99:45:87:05:e2:8e:89:d1:6a:b5:b6:96:4f:
8a:96:6a:98:19:6e:d1:8c:16:56:bd:fc:37:ad:d2:31:93:9e:
05:f2:2c:95:40:22:1e:b0:9e:5c:09:a4:4d:1d:d6:9e:2c:d9:
c0:f3:37:fb:d8:d8:c2:3c:96:03:3b:c3:c7:56:ff:b2:78:aa:
16:81:f1:62:34:c1:2d:e1:5d:38:85:6a:3a:69:4d:90:c1:76:
97:aa:d5:58:92:56:94:d6:25:bd:73:a8:7e:a6:39:cf:92:29:
e2:57:df:42:91:88:0a:d5:5d:50:e7:05:59:d8:57:68:35:06:
5f:4e:62:c7:c3:97:e2:13:8e:c0:73:b6:3d:90:d7:ee:39:8c:
16:ba:c6:7e:63:1e:4b:95:b4:4e:99:dc:c9:e1:4d:5a:9c:a2:
7c:81:02:61:b6:79:02:50:33:30:4e:88:53:f4:d9:d1:dd:56:
56:64:f2:f6:fe:a3:c1:fd:53:f0:92:c8:a7:c7:4e:85:ac:c2:
d0:6d:c1:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pl5vxDlJ1YC4d1mTBezLiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyZTU4OGRhNGE2Y2YwNDEzZmZiMzAxNmJlNDY3OGVjOTlh
OThkZjkwHhcNMjYwMzI2MTAwMTM0WhcNMjYwMzI3MTAwMTM0WjAzMTEwLwYDVQQD
EygzNzY3OTM4MzZjZGFlNmI2OWYzNzg2MDAyODUzNGI4MDFlYWZkNjFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnezPC1AwlWB5oTv0hZ39+s+OwqgT
sdRefsOcFR8y3AMXFe+RYedXc79f6Q7Fgz2emb7q9R6f2pZzKh7i2j5XniGtIYh1
3tmmk3ZmQzhI1A+f6K4z8qSR2camPid+z8GYHJ3k1Ny8cVT0X+oHgeqqbNlxi59d
jScofvbNRvrdMFTvVIRjhjYv5UNUKeBqerwnsOYTzMBvIpZToKFzEvGwB4D0STuM
Ds7Y04XRSM1fopN53ZNU7yPkEcvToMwo+6yyAPMGuKZcbcYIWIhArAC4fm1r9Of5
MHeIoh0wdawAFDgxQGlpZCCy5Obhx2vm/pic90j850iIjVvYyVVaM3sQnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDdnk4Ns2ua2nzeGAChTS4Aer9YaMB8GA1UdIwQY
MBaAFHLliNpKbPBBP/swFr5GeOyZqY35MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3VXSTJrcHM4RUVfLXpBV3ZrWjQ3Sm1wamZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS8zM2ZiMGYtODI3NS00NDYxLThlNzAt
ZjZjMmNkNjdmODU5LzEvY3VXSTJrcHM4RUVfLXpBV3ZrWjQ3Sm1wamZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS8zM2ZiMGYtODI3NS00NDYxLThlNzAtZjZjMmNkNjdmODU5
LzEvY3VXSTJrcHM4RUVfLXpBV3ZrWjQ3Sm1wamZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkFkgD6U4
cFs0oXlnP4PzVTydpKM6raMcsmb0hBoj9eQLjCqgNS1rkyA2BgQ/p2opdqiB/w4L
Bop35B2ZRYcF4o6J0Wq1tpZPipZqmBlu0YwWVr38N63SMZOeBfIslUAiHrCeXAmk
TR3WnizZwPM3+9jYwjyWAzvDx1b/sniqFoHxYjTBLeFdOIVqOmlNkMF2l6rVWJJW
lNYlvXOofqY5z5Ip4lffQpGICtVdUOcFWdhXaDUGX05ix8OX4hOOwHO2PZDX7jmM
FrrGfmMeS5W0TpncyeFNWpyifIECYbZ5AlAzME6IU/TZ0d1WVmTy9v6jwf1T8JLI
p8dOhazC0G3BVg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 17:32:20 2026 by rpki-client