Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/434849-89da-43ae-b2be-66cd01961e46/1/CUSqrH8uuymBwkdj6z1gRe-9bwY.mft
File: CUSqrH8uuymBwkdj6z1gRe-9bwY.mft (raw, json)
Hash identifier: WEnj+PwAmD2wvAj8QhYeCrZmHx6ZA+awFWdGG53JjlU=
Subject key identifier: AC:CA:CE:70:80:7F:4C:DE:AD:DB:DD:92:7A:81:8B:66:61:5B:EC:2B
Authority key identifier: 09:44:AA:AC:7F:2E:BB:29:81:C2:47:63:EB:3D:60:45:EF:BD:6F:06
Certificate issuer: /CN=0944aaac7f2ebb2981c24763eb3d6045efbd6f06
Certificate serial: 019F8FECBB6C7A1CF26C23B49E5D07EC11A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CUSqrH8uuymBwkdj6z1gRe-9bwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/434849-89da-43ae-b2be-66cd01961e46/1/CUSqrH8uuymBwkdj6z1gRe-9bwY.mft
Manifest number: 1005
Signing time: Thu 23 Jul 2026 17:01:24 +0000
Manifest this update: Thu 23 Jul 2026 17:01:24 +0000
Manifest next update: Fri 24 Jul 2026 17:01:24 +0000
Files and hashes: 1: CUSqrH8uuymBwkdj6z1gRe-9bwY.crl (hash: WvjTujx83j25Ax/fYrG35TbfY8UzVSUQVkcD5Ixmrp4=)
2: zjvZq0qDo9Cqy2lJeksXnY5wlWg.roa (hash: R3vvsBnC8yjc/6l+ae3jOrD+eH9Ah/ka0B3qOkEBjzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/434849-89da-43ae-b2be-66cd01961e46/1/CUSqrH8uuymBwkdj6z1gRe-9bwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/434849-89da-43ae-b2be-66cd01961e46/1/CUSqrH8uuymBwkdj6z1gRe-9bwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CUSqrH8uuymBwkdj6z1gRe-9bwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:ec:bb:6c:7a:1c:f2:6c:23:b4:9e:5d:07:ec:11:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0944aaac7f2ebb2981c24763eb3d6045efbd6f06
Validity
Not Before: Jul 23 17:01:24 2026 GMT
Not After : Jul 24 17:01:24 2026 GMT
Subject: CN=accace70807f4cdeaddbdd927a818b66615bec2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:07:52:5d:52:6a:f2:b1:0d:42:66:02:45:96:
be:91:38:2f:02:f5:8b:44:21:f5:dd:eb:f7:27:73:
de:35:24:6c:22:63:d0:47:06:33:5f:ac:23:de:96:
9e:5f:88:ae:c3:7c:65:ce:f0:70:68:b3:2f:8f:13:
27:94:31:3a:fc:d0:fe:7f:3b:e2:54:90:cc:2e:22:
05:96:bb:58:2b:f1:a5:eb:67:54:ca:cc:0a:9a:bc:
ab:11:5e:35:53:5e:ea:b4:49:2b:fa:ae:6a:b0:d2:
27:da:9f:16:7e:96:e9:03:4c:2b:8b:93:b8:59:87:
49:f3:a5:b3:da:24:a2:55:47:9a:5c:ed:92:5e:56:
e5:ad:b4:23:84:fa:9a:4b:a5:1b:89:ea:40:be:c9:
e1:d5:17:a5:85:45:11:c2:cd:1a:b8:cd:4a:c9:d0:
b5:88:e8:10:84:bb:f9:eb:a0:61:a4:60:2b:7d:65:
73:40:e0:14:f3:20:ba:69:26:b4:b4:a3:cd:6e:fb:
6e:c2:0d:7e:7c:18:ac:ed:e1:34:dc:ca:b8:5f:7f:
2c:8a:1d:2b:cc:ee:cd:60:af:29:2d:68:ee:6f:67:
9d:dd:c1:37:c0:ca:0c:ad:41:73:cf:1b:1d:8d:8f:
ea:68:1b:ca:e1:35:c7:22:33:34:54:6c:10:23:3a:
04:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:CA:CE:70:80:7F:4C:DE:AD:DB:DD:92:7A:81:8B:66:61:5B:EC:2B
X509v3 Authority Key Identifier:
keyid:09:44:AA:AC:7F:2E:BB:29:81:C2:47:63:EB:3D:60:45:EF:BD:6F:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CUSqrH8uuymBwkdj6z1gRe-9bwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/434849-89da-43ae-b2be-66cd01961e46/1/CUSqrH8uuymBwkdj6z1gRe-9bwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/434849-89da-43ae-b2be-66cd01961e46/1/CUSqrH8uuymBwkdj6z1gRe-9bwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:f7:88:b4:cd:a6:8c:49:e0:1c:a8:5c:c4:83:30:89:a6:07:
25:db:3e:9c:d0:cc:50:64:49:49:8c:f3:12:1b:0d:91:73:86:
35:7e:0e:0a:62:36:48:83:1a:5a:ef:7f:ca:9e:83:5c:dd:46:
c2:b3:98:e1:5c:5d:ee:b5:7d:f3:e4:e0:65:c4:d9:fe:75:8f:
21:45:d3:e0:68:d9:28:63:c6:09:0f:a3:09:77:e5:8f:1b:90:
cf:ce:04:eb:e3:68:ae:3a:55:a9:10:46:e0:e2:80:34:2f:a8:
86:1e:1c:e0:f8:f1:11:f8:b9:d3:63:f6:c5:34:38:9e:1b:15:
e4:56:36:37:15:3f:f7:4b:3b:6d:05:ed:07:15:50:06:43:48:
f2:2e:71:52:3e:48:72:69:9f:fd:79:78:41:4e:40:48:0f:05:
bf:68:e7:5d:9c:08:f3:b8:00:be:f9:dc:14:1a:d0:df:36:ba:
3d:a4:f9:db:fd:80:99:a4:ff:a6:0c:fa:b5:22:f2:e1:f5:60:
5c:23:1a:3d:77:7f:60:5f:b3:05:b6:c6:a3:f9:e0:a5:cb:8e:
c7:a3:9f:7b:94:4b:af:e6:b4:b9:c5:d9:57:15:f6:8b:c4:96:
52:ca:7b:57:10:1d:34:5a:2f:e7:8f:3d:86:64:78:8c:49:28:
f4:c5:c0:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:49:36 2026 by rpki-client