Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/434849-89da-43ae-b2be-66cd01961e46/1/CUSqrH8uuymBwkdj6z1gRe-9bwY.mft
File: CUSqrH8uuymBwkdj6z1gRe-9bwY.mft (raw, json)
Hash identifier: i09Xg5DUcKJdgIa/ap+UTHu7ifL0VtgCizKZl9w3By8=
Subject key identifier: 10:2E:FF:2C:E5:24:C8:E6:97:1F:91:51:76:94:AC:BE:85:AB:32:FA
Authority key identifier: 09:44:AA:AC:7F:2E:BB:29:81:C2:47:63:EB:3D:60:45:EF:BD:6F:06
Certificate issuer: /CN=0944aaac7f2ebb2981c24763eb3d6045efbd6f06
Certificate serial: 019E1D22A6E2EB7BCBA2431A76ECAE30CE2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CUSqrH8uuymBwkdj6z1gRe-9bwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/434849-89da-43ae-b2be-66cd01961e46/1/CUSqrH8uuymBwkdj6z1gRe-9bwY.mft
Manifest number: 0F45
Signing time: Tue 12 May 2026 17:01:10 +0000
Manifest this update: Tue 12 May 2026 17:01:10 +0000
Manifest next update: Wed 13 May 2026 17:01:10 +0000
Files and hashes: 1: CUSqrH8uuymBwkdj6z1gRe-9bwY.crl (hash: iKJYJjVHoroS//T0mnxHN5fEVoM9hYw1At88fuQysYA=)
2: zjvZq0qDo9Cqy2lJeksXnY5wlWg.roa (hash: R3vvsBnC8yjc/6l+ae3jOrD+eH9Ah/ka0B3qOkEBjzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/434849-89da-43ae-b2be-66cd01961e46/1/CUSqrH8uuymBwkdj6z1gRe-9bwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/434849-89da-43ae-b2be-66cd01961e46/1/CUSqrH8uuymBwkdj6z1gRe-9bwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CUSqrH8uuymBwkdj6z1gRe-9bwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:a6:e2:eb:7b:cb:a2:43:1a:76:ec:ae:30:ce:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0944aaac7f2ebb2981c24763eb3d6045efbd6f06
Validity
Not Before: May 12 17:01:10 2026 GMT
Not After : May 13 17:01:10 2026 GMT
Subject: CN=102eff2ce524c8e6971f91517694acbe85ab32fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:9e:cf:f4:e4:6d:1c:6b:9d:4c:5c:59:ac:cf:
ec:0a:ac:b1:a1:12:d8:00:03:79:8b:63:4b:7f:99:
5a:e4:95:6c:7b:25:18:98:b4:46:de:b1:ca:4d:6d:
c7:de:29:ff:7f:77:11:a7:64:25:8f:f9:af:8c:5b:
3a:4f:e6:de:64:8a:97:29:96:dd:5c:01:15:6e:5c:
38:66:9d:ad:be:06:89:79:0a:25:04:75:10:3f:97:
6a:41:10:2a:f6:2f:89:5a:00:c7:71:b4:de:ba:ff:
6c:13:9b:0c:74:3e:c7:44:de:f7:e2:ba:3b:7f:2b:
e3:f9:47:7b:79:d0:44:b9:bc:c8:3b:de:4c:a2:3f:
55:15:e1:0b:6f:ff:16:ed:a2:63:bc:d6:73:84:d7:
eb:45:e8:dd:8d:b3:41:12:96:14:ad:b2:d4:1c:ed:
10:25:99:8e:b5:cb:62:ff:97:4b:b4:40:6f:0d:cb:
ee:db:38:7b:15:a4:8f:97:de:97:bb:e2:78:a6:d0:
9c:d0:f2:d5:1f:17:79:aa:c6:b7:b3:ec:9c:f5:d5:
ef:74:d0:28:21:4e:89:26:58:00:b5:a3:b4:1b:53:
0b:4f:d9:32:a5:78:6b:68:97:73:36:e3:e9:76:9f:
e0:f2:8a:2f:ce:5c:71:d3:e3:a9:7f:a8:3a:d0:34:
df:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:2E:FF:2C:E5:24:C8:E6:97:1F:91:51:76:94:AC:BE:85:AB:32:FA
X509v3 Authority Key Identifier:
keyid:09:44:AA:AC:7F:2E:BB:29:81:C2:47:63:EB:3D:60:45:EF:BD:6F:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CUSqrH8uuymBwkdj6z1gRe-9bwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/434849-89da-43ae-b2be-66cd01961e46/1/CUSqrH8uuymBwkdj6z1gRe-9bwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/434849-89da-43ae-b2be-66cd01961e46/1/CUSqrH8uuymBwkdj6z1gRe-9bwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:41:eb:a7:2a:df:03:86:b4:70:a6:74:40:6e:d5:c0:a4:76:
77:be:0b:7e:25:a1:a3:37:ea:95:e1:3e:11:0c:25:43:21:74:
e3:b2:e5:65:ee:56:83:d6:dc:ce:2d:19:62:f2:91:fa:c1:9c:
2c:e3:c1:b6:e9:a3:86:d9:5d:66:69:09:5d:06:5c:c9:d2:cf:
ee:60:9d:bd:5c:b0:97:c4:47:21:48:47:58:be:97:64:7d:99:
b8:2d:5b:e2:30:63:1e:62:f8:e9:ed:c4:55:0f:09:f5:50:a3:
7e:3a:d5:93:3d:22:ed:3f:4b:ae:94:91:72:02:32:46:30:dd:
fa:08:aa:98:f8:a7:4a:9d:0a:8d:65:4f:5f:99:f5:51:8d:65:
25:0f:46:64:7d:29:bd:e5:f5:e0:a6:5e:76:6f:cd:e9:80:64:
55:c8:6e:e2:7a:ca:1a:fa:6d:3e:87:f1:82:d7:77:b5:a4:64:
e1:f2:e7:3b:79:e3:c6:38:d4:98:d5:c2:66:12:4d:da:18:82:
0d:1a:6b:1f:53:6a:25:63:40:67:d1:26:4c:bb:f3:5f:f7:6f:
c8:fa:dc:54:93:72:be:27:7f:5e:1b:eb:63:06:e8:73:39:b7:
5a:5c:7e:3b:41:37:1b:88:a1:df:91:c3:b2:52:d4:02:41:a8:
2b:63:13:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dIqbi63vLokMaduyuMM4rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5NDRhYWFjN2YyZWJiMjk4MWMyNDc2M2ViM2Q2MDQ1ZWZi
ZDZmMDYwHhcNMjYwNTEyMTcwMTEwWhcNMjYwNTEzMTcwMTEwWjAzMTEwLwYDVQQD
EygxMDJlZmYyY2U1MjRjOGU2OTcxZjkxNTE3Njk0YWNiZTg1YWIzMmZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJ7P9ORtHGudTFxZrM/sCqyxoRLY
AAN5i2NLf5la5JVseyUYmLRG3rHKTW3H3in/f3cRp2Qlj/mvjFs6T+beZIqXKZbd
XAEVblw4Zp2tvgaJeQolBHUQP5dqQRAq9i+JWgDHcbTeuv9sE5sMdD7HRN734ro7
fyvj+Ud7edBEubzIO95Moj9VFeELb/8W7aJjvNZzhNfrRejdjbNBEpYUrbLUHO0Q
JZmOtcti/5dLtEBvDcvu2zh7FaSPl96Xu+J4ptCc0PLVHxd5qsa3s+yc9dXvdNAo
IU6JJlgAtaO0G1MLT9kypXhraJdzNuPpdp/g8oovzlxx0+Opf6g60DTfIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBAu/yzlJMjmlx+RUXaUrL6FqzL6MB8GA1UdIwQY
MBaAFAlEqqx/LrspgcJHY+s9YEXvvW8GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1VTcXJIOHV1eW1Cd2tkajZ6MWdSZS05YndZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS80MzQ4NDktODlkYS00M2FlLWIyYmUt
NjZjZDAxOTYxZTQ2LzEvQ1VTcXJIOHV1eW1Cd2tkajZ6MWdSZS05YndZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS80MzQ4NDktODlkYS00M2FlLWIyYmUtNjZjZDAxOTYxZTQ2
LzEvQ1VTcXJIOHV1eW1Cd2tkajZ6MWdSZS05YndZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABEHrpyrf
A4a0cKZ0QG7VwKR2d74LfiWhozfqleE+EQwlQyF047LlZe5Wg9bczi0ZYvKR+sGc
LOPBtumjhtldZmkJXQZcydLP7mCdvVywl8RHIUhHWL6XZH2ZuC1b4jBjHmL46e3E
VQ8J9VCjfjrVkz0i7T9LrpSRcgIyRjDd+giqmPinSp0KjWVPX5n1UY1lJQ9GZH0p
veX14KZedm/N6YBkVchu4nrKGvptPofxgtd3taRk4fLnO3njxjjUmNXCZhJN2hiC
DRprH1NqJWNAZ9EmTLvzX/dvyPrcVJNyvid/XhvrYwboczm3Wlx+O0E3G4ih35HD
slLUAkGoK2MTNA==
-----END CERTIFICATE-----
Generated at Tue May 12 21:15:52 2026 by rpki-client