Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.mft
File: CUJF7otbpMZv4s7KZL5Gb8lvce0.mft (raw, json)
Hash identifier: TTQDKscg32Q5aSB4Q5Zpl0q9gidA+mJgeqekBG/PiHQ=
Subject key identifier: 71:12:50:38:EE:DF:70:BE:7F:56:D9:47:1E:EF:B4:65:5C:BF:99:82
Authority key identifier: 09:42:45:EE:8B:5B:A4:C6:6F:E2:CE:CA:64:BE:46:6F:C9:6F:71:ED
Certificate issuer: /CN=094245ee8b5ba4c66fe2ceca64be466fc96f71ed
Certificate serial: 019EB7A0DCD917C0D33939C65400A90C7CA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CUJF7otbpMZv4s7KZL5Gb8lvce0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.mft
Manifest number: 1498
Signing time: Thu 11 Jun 2026 17:00:33 +0000
Manifest this update: Thu 11 Jun 2026 17:00:33 +0000
Manifest next update: Fri 12 Jun 2026 17:00:33 +0000
Files and hashes: 1: 14Ys9mltTrx3HTjwmBcjfuVTekY.roa (hash: iBB9lJSfcBZPQU6QwVO+HUBTusp2/eskLo+xXHX5mVY=)
2: CUJF7otbpMZv4s7KZL5Gb8lvce0.crl (hash: 1zs90vr4dr4Fqxt9Y5Ky05Dhiv8Z2N6b91MnoLei9cM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CUJF7otbpMZv4s7KZL5Gb8lvce0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 17:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:a0:dc:d9:17:c0:d3:39:39:c6:54:00:a9:0c:7c:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=094245ee8b5ba4c66fe2ceca64be466fc96f71ed
Validity
Not Before: Jun 11 17:00:33 2026 GMT
Not After : Jun 12 17:00:33 2026 GMT
Subject: CN=71125038eedf70be7f56d9471eefb4655cbf9982
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:df:20:7a:30:08:b5:87:f9:f4:dd:2e:f9:41:
67:af:8b:49:55:4c:d9:4e:56:d2:3d:59:ce:e8:b8:
18:ff:b1:6a:50:00:6e:71:19:58:e2:73:4f:f0:35:
8a:46:79:2e:39:c8:21:ac:59:bb:b2:5e:a2:c3:1c:
62:48:2f:d0:16:f8:94:05:a8:cc:71:65:d7:e4:67:
50:bc:64:40:99:7a:62:17:9c:5f:e7:84:4d:5f:7d:
c7:9c:07:b8:ea:d6:4c:cc:92:22:73:f9:2d:61:fb:
84:de:da:54:af:45:13:cf:e5:67:2f:ad:15:64:f4:
77:5b:c1:dd:f4:4b:0a:9c:3f:e1:1a:c1:c6:c9:57:
ba:4c:c7:8b:45:b6:79:bc:24:b9:76:ef:fa:c2:d3:
b2:c9:b2:a0:45:34:6c:8f:23:e0:4e:df:3b:09:7b:
89:b5:22:4f:bc:97:d5:39:67:22:6f:c9:2b:e3:74:
2d:12:0d:31:90:e7:1b:52:4e:b4:13:7c:ce:d5:7a:
e9:e4:e2:d5:a5:38:36:2b:ee:f3:d5:42:15:df:e5:
47:ba:c9:3a:6c:20:ba:0a:a5:2e:fc:08:c7:dc:0f:
83:b8:a9:52:08:12:c2:16:f7:91:12:a7:68:ab:3d:
56:91:30:1e:9d:fa:d1:51:f1:d8:98:0f:e7:4f:33:
02:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:12:50:38:EE:DF:70:BE:7F:56:D9:47:1E:EF:B4:65:5C:BF:99:82
X509v3 Authority Key Identifier:
keyid:09:42:45:EE:8B:5B:A4:C6:6F:E2:CE:CA:64:BE:46:6F:C9:6F:71:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CUJF7otbpMZv4s7KZL5Gb8lvce0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:b5:b1:fb:2e:20:9d:6a:24:b7:8a:2d:f5:5d:8e:cf:2e:a1:
d8:16:9e:e2:88:b3:d0:be:c4:86:56:20:98:79:d4:17:a2:97:
43:92:9b:7d:af:52:09:85:89:54:a0:0c:f1:b3:db:77:3b:ae:
a8:c1:aa:7b:87:8e:03:4c:57:2e:0c:f3:6b:2b:a4:7c:33:b8:
f6:24:27:45:6d:c7:36:fc:33:a8:4a:18:e9:76:f6:4c:69:bf:
2f:80:3c:b3:03:57:81:22:9b:5a:e6:2c:1c:f2:68:9c:fe:4b:
c6:04:aa:3c:17:95:7c:f8:b4:4c:39:e0:66:b4:d0:79:98:44:
b4:01:55:a9:9d:c8:af:50:29:a9:dd:b1:6d:e6:ac:0e:b1:18:
ce:3c:cf:94:c4:31:f3:e6:e1:80:e1:e9:9d:50:48:53:15:8c:
0e:75:08:74:4b:fd:f8:fb:ad:db:78:7c:22:58:83:48:eb:5b:
4a:33:31:c7:1c:65:d8:1d:b7:8a:5a:f7:86:9c:9d:5b:94:40:
42:9b:ed:db:d7:0d:97:db:3c:6d:bf:c7:01:24:95:47:97:95:
d1:84:c0:dd:45:2b:3d:05:e4:34:f5:47:2d:34:9e:49:3d:20:
dd:a1:ff:da:38:c6:b9:04:40:0a:df:c0:5a:55:b4:5a:5c:64:
34:c9:3d:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ63oNzZF8DTOTnGVACpDHymMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5NDI0NWVlOGI1YmE0YzY2ZmUyY2VjYTY0YmU0NjZmYzk2
ZjcxZWQwHhcNMjYwNjExMTcwMDMzWhcNMjYwNjEyMTcwMDMzWjAzMTEwLwYDVQQD
Eyg3MTEyNTAzOGVlZGY3MGJlN2Y1NmQ5NDcxZWVmYjQ2NTVjYmY5OTgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4t8gejAItYf59N0u+UFnr4tJVUzZ
TlbSPVnO6LgY/7FqUABucRlY4nNP8DWKRnkuOcghrFm7sl6iwxxiSC/QFviUBajM
cWXX5GdQvGRAmXpiF5xf54RNX33HnAe46tZMzJIic/ktYfuE3tpUr0UTz+VnL60V
ZPR3W8Hd9EsKnD/hGsHGyVe6TMeLRbZ5vCS5du/6wtOyybKgRTRsjyPgTt87CXuJ
tSJPvJfVOWcib8kr43QtEg0xkOcbUk60E3zO1Xrp5OLVpTg2K+7z1UIV3+VHusk6
bCC6CqUu/AjH3A+DuKlSCBLCFveREqdoqz1WkTAenfrRUfHYmA/nTzMCHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHESUDju33C+f1bZRx7vtGVcv5mCMB8GA1UdIwQY
MBaAFAlCRe6LW6TGb+LOymS+Rm/Jb3HtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1VKRjdvdGJwTVp2NHM3S1pMNUdiOGx2Y2UwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9iZGQ0M2YtNDUyOC00YzkyLTg4YmEt
NTZlN2Y5M2RjZGJmLzEvQ1VKRjdvdGJwTVp2NHM3S1pMNUdiOGx2Y2UwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9iZGQ0M2YtNDUyOC00YzkyLTg4YmEtNTZlN2Y5M2RjZGJm
LzEvQ1VKRjdvdGJwTVp2NHM3S1pMNUdiOGx2Y2UwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApLWx+y4g
nWokt4ot9V2Ozy6h2Bae4oiz0L7EhlYgmHnUF6KXQ5Kbfa9SCYWJVKAM8bPbdzuu
qMGqe4eOA0xXLgzzayukfDO49iQnRW3HNvwzqEoY6Xb2TGm/L4A8swNXgSKbWuYs
HPJonP5LxgSqPBeVfPi0TDngZrTQeZhEtAFVqZ3Ir1Apqd2xbeasDrEYzjzPlMQx
8+bhgOHpnVBIUxWMDnUIdEv9+Put23h8IliDSOtbSjMxxxxl2B23ilr3hpydW5RA
Qpvt29cNl9s8bb/HASSVR5eV0YTA3UUrPQXkNPVHLTSeST0g3aH/2jjGuQRACt/A
WlW0WlxkNMk91g==
-----END CERTIFICATE-----
Generated at Fri Jun 12 02:13:11 2026 by rpki-client