Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.mft
File: CUJF7otbpMZv4s7KZL5Gb8lvce0.mft (raw, json)
Hash identifier: 0aaB5gJCMXVSJknRtmsVwsoPwrbGZNqTLDWUq+vWQbM=
Subject key identifier: 89:47:3E:FF:89:6A:D0:3C:72:48:AA:77:5D:0B:9B:EC:02:32:BA:A5
Authority key identifier: 09:42:45:EE:8B:5B:A4:C6:6F:E2:CE:CA:64:BE:46:6F:C9:6F:71:ED
Certificate issuer: /CN=094245ee8b5ba4c66fe2ceca64be466fc96f71ed
Certificate serial: 01A13E952ADD3084A6E41151DEBE9179C473
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CUJF7otbpMZv4s7KZL5Gb8lvce0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.mft
Manifest number: 15E7
Signing time: Thu 15 Oct 2026 08:02:05 +0000
Manifest this update: Thu 15 Oct 2026 08:02:05 +0000
Manifest next update: Fri 16 Oct 2026 08:02:05 +0000
Files and hashes: 1: 14Ys9mltTrx3HTjwmBcjfuVTekY.roa (hash: iBB9lJSfcBZPQU6QwVO+HUBTusp2/eskLo+xXHX5mVY=)
2: CUJF7otbpMZv4s7KZL5Gb8lvce0.crl (hash: zu5eHwJaWZAa0kaFRaQW/s8v2FvvCyXN0OfuijPgxww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CUJF7otbpMZv4s7KZL5Gb8lvce0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:95:2a:dd:30:84:a6:e4:11:51:de:be:91:79:c4:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=094245ee8b5ba4c66fe2ceca64be466fc96f71ed
Validity
Not Before: Oct 15 08:02:05 2026 GMT
Not After : Oct 16 08:02:05 2026 GMT
Subject: CN=89473eff896ad03c7248aa775d0b9bec0232baa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a6:7b:45:aa:1b:f4:32:2b:26:be:75:fd:28:
95:69:8a:ba:70:ed:43:8a:71:89:02:32:ca:98:59:
ce:f7:17:d5:b4:94:8c:6c:bd:58:06:23:c7:93:61:
9b:20:0c:ca:5a:4b:dc:84:bb:28:65:cf:d8:f7:7e:
df:cb:7f:1d:b5:b3:28:05:00:d4:07:1a:47:06:ff:
64:5f:86:9a:e8:09:b9:da:f6:02:6a:8f:ae:22:1c:
72:2e:ae:09:16:bd:57:dd:4e:03:5c:df:f7:27:d3:
41:eb:4b:ad:98:b3:51:eb:da:69:47:68:55:bf:81:
1d:97:a6:c7:5e:6b:60:02:c8:50:5c:1a:57:df:1a:
71:b6:65:07:a9:71:0b:ec:1f:f9:3f:d7:1a:23:b2:
4e:5b:d6:15:d5:b0:5e:cb:fe:50:8b:55:07:84:3f:
f8:5e:6a:5b:7b:14:de:7a:ff:5d:7a:63:98:86:83:
59:29:a8:b6:d5:be:6e:15:12:ad:2c:a4:e6:7d:e2:
28:1b:52:b3:83:3c:d2:c1:9f:81:23:f5:62:fd:ed:
46:07:08:30:8d:f7:4b:b9:76:2d:2b:a5:43:09:79:
26:ee:29:13:ed:66:dd:85:46:a4:a8:69:8e:d8:5b:
88:c2:b8:ca:3c:9e:d0:18:71:0f:47:2f:f7:f6:79:
b3:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:47:3E:FF:89:6A:D0:3C:72:48:AA:77:5D:0B:9B:EC:02:32:BA:A5
X509v3 Authority Key Identifier:
keyid:09:42:45:EE:8B:5B:A4:C6:6F:E2:CE:CA:64:BE:46:6F:C9:6F:71:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CUJF7otbpMZv4s7KZL5Gb8lvce0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d9:a2:68:19:0e:0c:3f:a8:42:e0:a0:4c:16:3c:cf:00:7f:c5:
54:eb:48:b9:fe:28:f7:53:d1:ff:42:8a:73:33:ac:94:86:44:
6f:4f:16:d1:2c:64:68:a8:14:df:e8:7a:27:59:5b:23:ad:b7:
41:4a:63:f9:23:b2:a2:d5:da:64:a8:ec:8c:44:ca:e4:3f:97:
a2:3b:53:26:95:f6:43:28:82:d8:66:73:15:f0:a5:8a:32:b0:
3d:a1:f7:b2:ac:13:15:10:12:81:df:8e:ea:9b:c3:b7:5e:e0:
51:a3:54:d4:56:c8:9e:e3:d0:12:15:eb:56:9d:39:11:5c:db:
70:36:34:f0:a4:91:58:13:d8:16:0c:d4:ef:66:a1:a2:55:9c:
49:c7:2d:1c:18:4a:d7:f0:91:6a:4c:6a:0c:d6:fb:f0:7e:75:
11:f4:94:0d:e0:14:10:de:76:14:61:6b:d6:44:d5:56:86:58:
04:f2:80:f8:69:8c:ee:a5:40:f7:86:87:78:6f:9b:ef:f6:58:
60:d0:8a:ea:6f:bb:cf:bf:ca:dc:d2:02:9f:82:69:53:12:ee:
37:e9:b0:68:28:7b:d9:c5:27:89:cd:dc:46:55:c6:9b:21:ef:
a2:77:c4:35:6f:8b:17:11:47:c9:5d:22:96:25:d2:ec:0f:bd:
c7:ee:70:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE+lSrdMISm5BFR3r6RecRzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5NDI0NWVlOGI1YmE0YzY2ZmUyY2VjYTY0YmU0NjZmYzk2
ZjcxZWQwHhcNMjYxMDE1MDgwMjA1WhcNMjYxMDE2MDgwMjA1WjAzMTEwLwYDVQQD
Eyg4OTQ3M2VmZjg5NmFkMDNjNzI0OGFhNzc1ZDBiOWJlYzAyMzJiYWE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqZ7Raob9DIrJr51/SiVaYq6cO1D
inGJAjLKmFnO9xfVtJSMbL1YBiPHk2GbIAzKWkvchLsoZc/Y937fy38dtbMoBQDU
BxpHBv9kX4aa6Am52vYCao+uIhxyLq4JFr1X3U4DXN/3J9NB60utmLNR69ppR2hV
v4Edl6bHXmtgAshQXBpX3xpxtmUHqXEL7B/5P9caI7JOW9YV1bBey/5Qi1UHhD/4
XmpbexTeev9demOYhoNZKai21b5uFRKtLKTmfeIoG1KzgzzSwZ+BI/Vi/e1GBwgw
jfdLuXYtK6VDCXkm7ikT7WbdhUakqGmO2FuIwrjKPJ7QGHEPRy/39nmz9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIlHPv+JatA8ckiqd10Lm+wCMrqlMB8GA1UdIwQY
MBaAFAlCRe6LW6TGb+LOymS+Rm/Jb3HtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1VKRjdvdGJwTVp2NHM3S1pMNUdiOGx2Y2UwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9iZGQ0M2YtNDUyOC00YzkyLTg4YmEt
NTZlN2Y5M2RjZGJmLzEvQ1VKRjdvdGJwTVp2NHM3S1pMNUdiOGx2Y2UwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9iZGQ0M2YtNDUyOC00YzkyLTg4YmEtNTZlN2Y5M2RjZGJm
LzEvQ1VKRjdvdGJwTVp2NHM3S1pMNUdiOGx2Y2UwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2aJoGQ4M
P6hC4KBMFjzPAH/FVOtIuf4o91PR/0KKczOslIZEb08W0SxkaKgU3+h6J1lbI623
QUpj+SOyotXaZKjsjETK5D+XojtTJpX2QyiC2GZzFfClijKwPaH3sqwTFRASgd+O
6pvDt17gUaNU1FbInuPQEhXrVp05EVzbcDY08KSRWBPYFgzU72aholWcScctHBhK
1/CRakxqDNb78H51EfSUDeAUEN52FGFr1kTVVoZYBPKA+GmM7qVA94aHeG+b7/ZY
YNCK6m+7z7/K3NICn4JpUxLuN+mwaCh72cUnic3cRlXGmyHvonfENW+LFxFHyV0i
liXS7A+9x+5wQw==
-----END CERTIFICATE-----
Generated at Thu Oct 15 10:26:52 2026 by rpki-client