Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/434849-89da-43ae-b2be-66cd01961e46/1/CUSqrH8uuymBwkdj6z1gRe-9bwY.mft
File: CUSqrH8uuymBwkdj6z1gRe-9bwY.mft (raw, json)
Hash identifier: mOy7LEFdHTH0w6nCPW6NISbphSOI+2WsBCB9v6zx5HY=
Subject key identifier: 84:1C:7A:F1:D0:A6:31:6E:73:72:5C:12:1D:42:9B:01:F8:C5:0E:2E
Authority key identifier: 09:44:AA:AC:7F:2E:BB:29:81:C2:47:63:EB:3D:60:45:EF:BD:6F:06
Certificate issuer: /CN=0944aaac7f2ebb2981c24763eb3d6045efbd6f06
Certificate serial: 019D27E0404D6A56EFD692014CF000DB8836
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CUSqrH8uuymBwkdj6z1gRe-9bwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/434849-89da-43ae-b2be-66cd01961e46/1/CUSqrH8uuymBwkdj6z1gRe-9bwY.mft
Manifest number: 0EC6
Signing time: Thu 26 Mar 2026 02:01:41 +0000
Manifest this update: Thu 26 Mar 2026 02:01:41 +0000
Manifest next update: Fri 27 Mar 2026 02:01:41 +0000
Files and hashes: 1: CUSqrH8uuymBwkdj6z1gRe-9bwY.crl (hash: F8BWIf35HNKMtbt4ygK7RAE/CpaBk3HuHk+kLeisNXA=)
2: zjvZq0qDo9Cqy2lJeksXnY5wlWg.roa (hash: R3vvsBnC8yjc/6l+ae3jOrD+eH9Ah/ka0B3qOkEBjzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/434849-89da-43ae-b2be-66cd01961e46/1/CUSqrH8uuymBwkdj6z1gRe-9bwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/434849-89da-43ae-b2be-66cd01961e46/1/CUSqrH8uuymBwkdj6z1gRe-9bwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CUSqrH8uuymBwkdj6z1gRe-9bwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:40:4d:6a:56:ef:d6:92:01:4c:f0:00:db:88:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0944aaac7f2ebb2981c24763eb3d6045efbd6f06
Validity
Not Before: Mar 26 02:01:41 2026 GMT
Not After : Mar 27 02:01:41 2026 GMT
Subject: CN=841c7af1d0a6316e73725c121d429b01f8c50e2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:49:0f:a2:5a:9b:2a:87:26:73:8a:00:f4:72:
6d:fb:33:7e:c7:95:97:e8:34:60:7d:d1:56:67:42:
01:b7:54:f8:78:90:22:b4:6f:3b:83:a4:a8:82:b6:
2c:0a:6a:5c:1b:fa:89:3d:04:02:14:38:ac:40:ae:
83:87:8b:53:fd:3a:4c:7f:7c:cc:d5:a1:d6:d8:8f:
a2:20:b6:5b:6e:6c:ba:13:aa:59:75:4e:0b:a2:49:
eb:2f:31:57:e9:46:40:25:9b:a3:e5:5b:e5:21:98:
48:8e:70:a6:c3:78:ab:c1:19:ed:7f:98:98:40:f4:
f3:0a:d5:cb:98:d2:e3:f3:94:73:2e:4b:e3:90:55:
b9:41:3f:d1:c3:c2:38:e8:a7:a8:b9:3f:70:88:d9:
9b:50:b9:24:5c:89:b8:3f:77:db:29:d8:ef:a5:41:
6c:68:b3:3b:4a:3e:35:53:a5:1a:01:44:e3:d3:b9:
44:fe:a2:38:ac:dc:77:c3:be:ad:c8:51:ea:ae:fd:
01:b9:51:0b:f5:59:0b:93:cf:24:21:fe:3e:5a:31:
95:d0:50:54:90:a2:2d:22:fc:73:41:2a:1f:44:95:
bb:c1:7f:83:6f:97:31:6c:e4:b2:df:a7:e7:7e:21:
42:df:b5:78:5e:ed:7e:43:86:cd:19:8a:d2:d2:0f:
df:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:1C:7A:F1:D0:A6:31:6E:73:72:5C:12:1D:42:9B:01:F8:C5:0E:2E
X509v3 Authority Key Identifier:
keyid:09:44:AA:AC:7F:2E:BB:29:81:C2:47:63:EB:3D:60:45:EF:BD:6F:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CUSqrH8uuymBwkdj6z1gRe-9bwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/434849-89da-43ae-b2be-66cd01961e46/1/CUSqrH8uuymBwkdj6z1gRe-9bwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/434849-89da-43ae-b2be-66cd01961e46/1/CUSqrH8uuymBwkdj6z1gRe-9bwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:6a:e2:cb:e0:ac:2b:27:8d:d3:0b:0c:61:8d:08:8b:b9:13:
34:63:82:b1:b4:27:7e:b8:35:39:a5:29:47:53:fe:c7:5c:ad:
0e:c9:a7:05:52:65:23:4c:04:68:5c:8e:b9:40:38:be:1e:1f:
ae:9f:f9:14:3d:19:6b:91:95:55:9c:af:81:ec:0f:02:ee:2a:
4f:76:4f:9e:22:21:71:aa:9f:14:22:1b:34:11:c8:80:93:f2:
b7:1f:38:83:1c:4e:d1:39:67:1d:c8:6f:a1:19:f0:d4:a4:fb:
31:22:76:33:ad:40:50:8b:2e:5e:22:85:2d:71:a1:09:78:8d:
fc:4c:44:64:33:32:e4:c6:d0:63:39:b7:39:35:f6:d1:59:5d:
ed:26:57:26:27:06:d8:0c:df:74:2a:ec:a0:36:47:d6:b4:ce:
43:c0:02:9f:0d:87:92:33:22:34:5f:a6:0f:46:c0:97:ae:98:
80:0c:f8:e0:2f:ec:28:da:55:46:d1:8d:16:37:dd:72:30:5d:
4c:30:6e:56:4a:2f:97:00:36:ed:e5:0b:a0:36:13:9a:7e:20:
ce:90:9a:34:b0:5b:0b:ee:a4:c0:22:ec:11:da:d0:7f:50:6d:
0f:99:cd:5c:be:54:d5:0a:5b:ca:96:59:bf:1d:86:4a:8d:81:
31:3f:0f:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:21:00 2026 by rpki-client