Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/92bbbf-9f93-4741-8682-f1e8bd74180c/1/cuE5FfobxXn1hW9Y7LJHhjeaXUg.mft
File: cuE5FfobxXn1hW9Y7LJHhjeaXUg.mft (raw, json)
Hash identifier: cyz7D5drs0brV0FBTcIn1HuZ4W3udoEfN1kZV/RHirA=
Subject key identifier: 7B:97:8A:40:E4:4B:E1:FA:56:86:F7:E5:F8:FA:D5:E3:6E:11:41:C8
Authority key identifier: 72:E1:39:15:FA:1B:C5:79:F5:85:6F:58:EC:B2:47:86:37:9A:5D:48
Certificate issuer: /CN=72e13915fa1bc579f5856f58ecb24786379a5d48
Certificate serial: 019D382DCC1FDF153D2FF57C4AA7AAB86827
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cuE5FfobxXn1hW9Y7LJHhjeaXUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/92bbbf-9f93-4741-8682-f1e8bd74180c/1/cuE5FfobxXn1hW9Y7LJHhjeaXUg.mft
Manifest number: 0348
Signing time: Sun 29 Mar 2026 06:00:18 +0000
Manifest this update: Sun 29 Mar 2026 06:00:18 +0000
Manifest next update: Mon 30 Mar 2026 06:00:18 +0000
Files and hashes: 1: 1tgtjL3B3YdYAU03MUR31VYv6CI.roa (hash: 16zjErqZd+Fe3OsAh8pnaOrjHjMKr/IPGlIT7NNIBL0=)
2: cuE5FfobxXn1hW9Y7LJHhjeaXUg.crl (hash: xk/bWp9LMH0hUo85BJrJTXfQIIVkBCejyV/nQ/ZF6zA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/92bbbf-9f93-4741-8682-f1e8bd74180c/1/cuE5FfobxXn1hW9Y7LJHhjeaXUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/92bbbf-9f93-4741-8682-f1e8bd74180c/1/cuE5FfobxXn1hW9Y7LJHhjeaXUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/cuE5FfobxXn1hW9Y7LJHhjeaXUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2d:cc:1f:df:15:3d:2f:f5:7c:4a:a7:aa:b8:68:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72e13915fa1bc579f5856f58ecb24786379a5d48
Validity
Not Before: Mar 29 06:00:18 2026 GMT
Not After : Mar 30 06:00:18 2026 GMT
Subject: CN=7b978a40e44be1fa5686f7e5f8fad5e36e1141c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c3:46:78:8d:87:b7:60:34:06:73:7d:fa:ad:
87:12:eb:47:3a:19:05:62:87:6e:9e:ff:d7:c8:cb:
9e:1a:00:6b:48:3d:4e:35:d6:ec:c8:fc:ee:85:6c:
66:40:b0:be:91:78:14:5d:0a:24:6a:2c:5f:44:b4:
76:35:72:57:11:1f:4f:21:e4:7d:a9:1e:b2:3f:2e:
70:6e:1d:b7:d8:2d:53:3a:96:32:41:ef:b2:a3:d2:
4a:fd:cf:6a:fd:a9:4f:9f:46:a4:3d:50:2f:76:3e:
e8:00:d2:f7:d7:06:4b:b5:6b:95:86:59:4d:4e:3d:
48:5f:f2:d7:bd:67:8e:2b:f7:9d:22:f7:b4:b8:01:
5b:12:2f:55:dc:65:e8:fc:b7:52:52:9c:b7:9b:3b:
54:d6:b6:99:88:88:80:c5:8a:96:e6:cc:07:bc:41:
0b:8f:c5:23:da:8b:ac:03:38:18:84:cf:bc:16:4d:
47:b1:c8:fb:33:d1:c0:0e:61:fb:4e:91:43:86:af:
d5:d6:e9:ae:15:35:3b:60:e7:72:c6:1c:1d:77:8f:
c8:79:f7:f7:f7:b7:71:28:90:5f:c7:c3:6f:d3:c6:
0f:dd:5e:ba:3c:6d:6d:58:b2:26:73:d9:4d:97:69:
a0:d7:7b:bc:08:3f:00:1e:fd:91:7d:59:67:79:ca:
b9:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:97:8A:40:E4:4B:E1:FA:56:86:F7:E5:F8:FA:D5:E3:6E:11:41:C8
X509v3 Authority Key Identifier:
keyid:72:E1:39:15:FA:1B:C5:79:F5:85:6F:58:EC:B2:47:86:37:9A:5D:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cuE5FfobxXn1hW9Y7LJHhjeaXUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/92bbbf-9f93-4741-8682-f1e8bd74180c/1/cuE5FfobxXn1hW9Y7LJHhjeaXUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/92bbbf-9f93-4741-8682-f1e8bd74180c/1/cuE5FfobxXn1hW9Y7LJHhjeaXUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:2e:f7:f5:c2:7c:d1:ae:4f:82:ce:ed:10:db:db:8a:b2:12:
34:c6:54:70:5f:3a:94:5d:3e:69:ac:61:c2:fc:aa:1d:4d:7a:
14:c0:a3:76:56:92:0f:f5:38:64:cc:bd:6a:36:09:6c:49:ab:
16:1a:81:08:f6:48:b5:5e:49:8b:b4:5d:fb:30:56:75:79:eb:
4a:01:46:4a:ed:37:52:e7:01:3d:b4:ea:ed:2a:3d:12:ed:9c:
a1:c1:9a:c3:7b:0c:74:04:15:2f:a1:10:b1:58:33:d7:0c:53:
ff:11:8a:b5:95:db:ac:07:9a:f8:9a:77:56:62:d1:cb:e1:ab:
47:38:0e:1f:0c:fd:ae:98:41:03:14:bf:7b:3a:49:65:c0:54:
c8:a3:6d:13:87:75:9b:27:cf:bb:a8:d5:31:f9:93:07:fd:c9:
8f:7c:6d:69:8b:19:97:63:85:4b:6f:76:ca:5b:03:fc:6b:68:
68:d4:50:9d:15:f0:7d:61:3b:2b:61:9a:4d:7a:b2:25:41:bb:
6a:76:ce:aa:4c:f3:e9:71:f6:dd:ce:07:e7:99:69:b2:e1:22:
52:64:89:b1:9c:7c:5f:96:9a:df:64:ce:c0:fd:71:89:c5:20:
48:62:32:ee:f5:1b:c9:ea:11:fe:9d:72:ca:d4:7c:09:38:74:
f3:63:ec:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:41:17 2026 by rpki-client