Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.mft
File: CUJF7otbpMZv4s7KZL5Gb8lvce0.mft (raw, json)
Hash identifier: IASeyPiWu81c2L2Ri2m3HhKmcm0c/ExqBGpUUo2hQok=
Subject key identifier: 99:A3:A9:C9:35:64:B8:DC:CC:7F:0D:CA:7C:E5:B4:3B:D9:1B:2A:A6
Authority key identifier: 09:42:45:EE:8B:5B:A4:C6:6F:E2:CE:CA:64:BE:46:6F:C9:6F:71:ED
Certificate issuer: /CN=094245ee8b5ba4c66fe2ceca64be466fc96f71ed
Certificate serial: 019CE635D8475926F8DD9CFC1F49F88D7625
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CUJF7otbpMZv4s7KZL5Gb8lvce0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.mft
Manifest number: 13A7
Signing time: Fri 13 Mar 2026 08:00:14 +0000
Manifest this update: Fri 13 Mar 2026 08:00:14 +0000
Manifest next update: Sat 14 Mar 2026 08:00:14 +0000
Files and hashes: 1: 14Ys9mltTrx3HTjwmBcjfuVTekY.roa (hash: iBB9lJSfcBZPQU6QwVO+HUBTusp2/eskLo+xXHX5mVY=)
2: CUJF7otbpMZv4s7KZL5Gb8lvce0.crl (hash: G9fCo7zASixoATLUecDkG+EVQQvpWWkEK8G8VYUxibk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CUJF7otbpMZv4s7KZL5Gb8lvce0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e6:35:d8:47:59:26:f8:dd:9c:fc:1f:49:f8:8d:76:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=094245ee8b5ba4c66fe2ceca64be466fc96f71ed
Validity
Not Before: Mar 13 08:00:14 2026 GMT
Not After : Mar 14 08:00:14 2026 GMT
Subject: CN=99a3a9c93564b8dccc7f0dca7ce5b43bd91b2aa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1c:9f:3d:a0:f3:8d:52:0c:ec:8f:35:73:b7:
2d:9b:36:3c:39:13:1d:bd:00:f9:95:bb:c5:15:93:
43:56:ba:1d:78:f1:e3:59:33:8d:58:21:fa:d3:da:
ee:02:d9:84:9c:ab:bb:24:3d:00:62:70:db:0d:9a:
c9:35:22:5a:61:37:43:01:4f:9f:3d:6d:a8:71:7b:
e3:a5:ed:ce:b7:7d:80:18:b3:f0:08:ca:dc:d2:35:
1f:6b:4a:00:30:53:a4:3f:ed:96:3c:71:42:93:55:
bc:49:ad:24:da:31:f5:6f:59:23:d2:4e:0f:35:6a:
ac:bf:0c:15:c7:c2:f9:ea:11:d5:8f:b0:13:66:cd:
40:09:87:6c:ef:8f:1e:dd:cd:6d:fa:b3:e8:94:95:
6b:dd:60:46:3d:b0:3d:26:bc:4b:3e:47:5d:a2:16:
00:ff:4c:f4:77:eb:43:c6:7b:9f:44:86:e9:14:84:
31:f7:7a:56:d6:3f:22:1e:44:ae:28:56:61:52:6b:
52:a4:cb:5b:aa:e8:a9:8e:5d:4c:2d:57:09:b7:8a:
e3:c3:42:d9:3f:f6:3e:93:d0:2b:66:e5:f6:b7:33:
f9:ce:dc:4f:b2:55:df:f1:23:11:88:58:c0:2c:2e:
89:83:c1:90:0a:8e:95:04:e0:f4:40:d0:4a:92:ab:
7a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:A3:A9:C9:35:64:B8:DC:CC:7F:0D:CA:7C:E5:B4:3B:D9:1B:2A:A6
X509v3 Authority Key Identifier:
keyid:09:42:45:EE:8B:5B:A4:C6:6F:E2:CE:CA:64:BE:46:6F:C9:6F:71:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CUJF7otbpMZv4s7KZL5Gb8lvce0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:71:d4:2e:9a:a2:f8:e1:98:7a:a4:f4:d6:33:e5:22:99:55:
9c:18:5a:0c:29:df:89:8d:60:51:51:8f:1c:9e:7f:b0:38:cd:
5c:b4:7f:c1:51:c5:a9:46:ac:41:82:86:d6:0d:b6:e0:c6:80:
42:d9:a4:98:d6:09:a8:1f:8a:9c:3c:c0:cc:b6:4f:02:a2:b6:
fa:55:21:c2:20:ca:2e:ee:a4:4d:e8:a0:c6:52:e3:36:47:67:
cb:6c:5e:e7:ec:39:f8:f3:5e:e6:88:94:66:09:3d:ee:15:10:
6d:39:41:a8:98:e4:76:15:5c:41:5f:f3:ad:ba:d0:26:09:60:
44:5f:d1:dc:f1:66:f6:46:42:34:16:b8:ee:c2:82:1a:07:74:
e0:06:d0:82:cc:c7:d3:88:4d:d5:d9:47:9e:ef:ed:5f:92:7d:
27:d3:c5:ae:6e:72:2f:bd:3b:ae:d1:59:66:b7:64:25:92:21:
2a:4d:01:fc:e0:a6:19:53:48:b3:a2:7d:8c:bc:a2:0b:e6:9c:
fa:f0:e7:86:ed:1b:e9:00:58:9f:ae:64:b6:94:92:74:df:d6:
d0:4c:5c:e1:ec:82:88:62:58:77:65:91:a0:73:37:fb:35:09:
8e:36:d9:19:03:b8:0d:43:12:ad:ff:d8:f4:71:d8:d1:05:3f:
57:c3:e7:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzmNdhHWSb43Zz8H0n4jXYlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5NDI0NWVlOGI1YmE0YzY2ZmUyY2VjYTY0YmU0NjZmYzk2
ZjcxZWQwHhcNMjYwMzEzMDgwMDE0WhcNMjYwMzE0MDgwMDE0WjAzMTEwLwYDVQQD
Eyg5OWEzYTljOTM1NjRiOGRjY2M3ZjBkY2E3Y2U1YjQzYmQ5MWIyYWE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxhyfPaDzjVIM7I81c7ctmzY8ORMd
vQD5lbvFFZNDVrodePHjWTONWCH609ruAtmEnKu7JD0AYnDbDZrJNSJaYTdDAU+f
PW2ocXvjpe3Ot32AGLPwCMrc0jUfa0oAMFOkP+2WPHFCk1W8Sa0k2jH1b1kj0k4P
NWqsvwwVx8L56hHVj7ATZs1ACYds748e3c1t+rPolJVr3WBGPbA9JrxLPkddohYA
/0z0d+tDxnufRIbpFIQx93pW1j8iHkSuKFZhUmtSpMtbquipjl1MLVcJt4rjw0LZ
P/Y+k9ArZuX2tzP5ztxPslXf8SMRiFjALC6Jg8GQCo6VBOD0QNBKkqt6/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJmjqck1ZLjczH8NynzltDvZGyqmMB8GA1UdIwQY
MBaAFAlCRe6LW6TGb+LOymS+Rm/Jb3HtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1VKRjdvdGJwTVp2NHM3S1pMNUdiOGx2Y2UwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9iZGQ0M2YtNDUyOC00YzkyLTg4YmEt
NTZlN2Y5M2RjZGJmLzEvQ1VKRjdvdGJwTVp2NHM3S1pMNUdiOGx2Y2UwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9iZGQ0M2YtNDUyOC00YzkyLTg4YmEtNTZlN2Y5M2RjZGJm
LzEvQ1VKRjdvdGJwTVp2NHM3S1pMNUdiOGx2Y2UwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPnHULpqi
+OGYeqT01jPlIplVnBhaDCnfiY1gUVGPHJ5/sDjNXLR/wVHFqUasQYKG1g224MaA
QtmkmNYJqB+KnDzAzLZPAqK2+lUhwiDKLu6kTeigxlLjNkdny2xe5+w5+PNe5oiU
Zgk97hUQbTlBqJjkdhVcQV/zrbrQJglgRF/R3PFm9kZCNBa47sKCGgd04AbQgszH
04hN1dlHnu/tX5J9J9PFrm5yL707rtFZZrdkJZIhKk0B/OCmGVNIs6J9jLyiC+ac
+vDnhu0b6QBYn65ktpSSdN/W0Exc4eyCiGJYd2WRoHM3+zUJjjbZGQO4DUMSrf/Y
9HHY0QU/V8PnWg==
-----END CERTIFICATE-----
Generated at Fri Mar 13 14:33:44 2026 by rpki-client