Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.mft
File: CUJF7otbpMZv4s7KZL5Gb8lvce0.mft (raw, json)
Hash identifier: z402zdgnkRdkbdlwJiHCa1+1C2Fcrjw22V7DYVrsLSE=
Subject key identifier: 97:3D:81:5B:51:9E:68:E6:EC:A6:A9:FF:08:73:8C:41:2B:4D:63:CC
Authority key identifier: 09:42:45:EE:8B:5B:A4:C6:6F:E2:CE:CA:64:BE:46:6F:C9:6F:71:ED
Certificate issuer: /CN=094245ee8b5ba4c66fe2ceca64be466fc96f71ed
Certificate serial: 01A001DD96952678EDA59A8A2FB1B8ED8C73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CUJF7otbpMZv4s7KZL5Gb8lvce0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.mft
Manifest number: 1543
Signing time: Fri 14 Aug 2026 20:01:34 +0000
Manifest this update: Fri 14 Aug 2026 20:01:34 +0000
Manifest next update: Sat 15 Aug 2026 20:01:34 +0000
Files and hashes: 1: 14Ys9mltTrx3HTjwmBcjfuVTekY.roa (hash: iBB9lJSfcBZPQU6QwVO+HUBTusp2/eskLo+xXHX5mVY=)
2: CUJF7otbpMZv4s7KZL5Gb8lvce0.crl (hash: eyPafbAsYf5wJ0dRfSGAlhqSeo+tS/VBkUwHCDcyjqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CUJF7otbpMZv4s7KZL5Gb8lvce0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:dd:96:95:26:78:ed:a5:9a:8a:2f:b1:b8:ed:8c:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=094245ee8b5ba4c66fe2ceca64be466fc96f71ed
Validity
Not Before: Aug 14 20:01:34 2026 GMT
Not After : Aug 15 20:01:34 2026 GMT
Subject: CN=973d815b519e68e6eca6a9ff08738c412b4d63cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:60:8c:c4:d1:03:78:5a:03:fa:97:e8:01:ba:
f7:e5:f5:57:b8:36:ad:81:94:e0:e6:c5:39:f1:80:
c2:90:94:9c:36:55:a0:5b:e9:34:df:42:97:ed:12:
4e:64:c6:f7:79:37:74:89:0b:d2:08:74:3a:4c:1f:
63:ab:7c:e1:93:9a:8d:cb:9a:7a:c3:4e:d3:a8:37:
fc:50:e1:b4:38:9d:77:0a:61:9b:ef:90:80:f6:5d:
5b:0c:0d:c7:ef:a8:f5:e5:56:71:df:f9:77:cd:6a:
9a:33:85:81:33:a6:db:e5:78:b5:0b:9e:ff:09:78:
d5:ab:d7:03:37:83:cc:d4:f6:d7:a2:2e:de:04:b1:
a6:80:df:1e:b6:c1:1b:50:76:6f:cc:01:9e:d6:b3:
38:3b:fd:51:77:98:1c:d0:0d:ba:d5:ca:56:88:82:
eb:7b:5b:72:6a:fd:6e:3c:51:db:bb:a5:b6:7f:83:
80:95:b8:ae:6b:b4:6b:51:cb:27:d2:49:9a:74:94:
25:7d:70:99:99:4b:4a:d3:04:bf:08:9c:e5:1b:9a:
3c:0f:ad:41:32:ef:cb:40:f7:7e:21:15:5e:88:9d:
13:8a:82:c1:97:5d:48:84:b3:19:c4:e0:e0:1c:77:
64:43:db:71:b7:23:bf:36:67:64:40:23:84:50:02:
97:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:3D:81:5B:51:9E:68:E6:EC:A6:A9:FF:08:73:8C:41:2B:4D:63:CC
X509v3 Authority Key Identifier:
keyid:09:42:45:EE:8B:5B:A4:C6:6F:E2:CE:CA:64:BE:46:6F:C9:6F:71:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CUJF7otbpMZv4s7KZL5Gb8lvce0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:98:b9:f4:7e:6d:5d:e7:0a:6a:14:f8:cc:4d:38:32:b5:22:
db:8c:f8:f5:7f:d6:06:9f:c8:c1:4f:bd:09:e1:ed:78:e6:0e:
1f:2c:b8:d1:49:5f:5a:c0:15:43:cc:10:d1:b4:58:bf:10:a0:
b4:6e:bc:67:8c:d0:1d:45:db:d6:82:2b:8f:d1:1b:ec:ca:e4:
87:ba:bc:02:ad:22:80:51:6c:56:5e:8d:a2:33:37:17:08:90:
12:16:f4:ab:c7:95:11:d5:11:9c:2c:f7:10:04:8f:c5:c0:80:
59:bf:a4:fa:42:74:20:e4:aa:ab:b9:eb:94:94:68:de:4d:af:
69:29:12:86:02:c3:2a:10:7c:f0:23:68:23:7d:5a:ed:92:39:
2e:a3:74:9f:4a:40:ef:b4:00:57:8f:d8:9b:dc:ce:88:70:fe:
71:6e:3e:ea:86:d3:fe:dd:6f:d8:c7:9b:e4:c2:cc:65:78:b5:
0c:36:81:1f:71:ce:a3:dd:e8:13:4a:57:66:16:80:2a:ac:ad:
c8:a7:15:79:ef:95:ed:62:51:fa:d6:d6:5c:c5:fd:b8:88:6f:
d5:78:2a:36:5e:e1:e1:14:87:d4:56:a7:9c:6e:86:60:47:75:
d4:76:48:d0:21:29:0c:b0:da:91:bb:15:18:7a:04:09:50:c3:
2b:e0:d9:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:21:23 2026 by rpki-client