Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/1faa24-f086-4b48-b1bd-45527e8e44d2/1/cuEqOHb_e9ANnZ67lyqx5iHqHo0.mft
File: cuEqOHb_e9ANnZ67lyqx5iHqHo0.mft (raw, json)
Hash identifier: Aas/Xex48PUXI7DaOfi3Q8D0PJvy/zi8xPhT6pSYU6Y=
Subject key identifier: 33:34:CB:60:25:0E:B4:8B:98:74:A8:62:85:84:29:D0:89:70:86:7F
Authority key identifier: 72:E1:2A:38:76:FF:7B:D0:0D:9D:9E:BB:97:2A:B1:E6:21:EA:1E:8D
Certificate issuer: /CN=72e12a3876ff7bd00d9d9ebb972ab1e621ea1e8d
Certificate serial: 01A17E185EA6CF00FD565FB0F4952D755EDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cuEqOHb_e9ANnZ67lyqx5iHqHo0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/1faa24-f086-4b48-b1bd-45527e8e44d2/1/cuEqOHb_e9ANnZ67lyqx5iHqHo0.mft
Manifest number: 1A58
Signing time: Tue 27 Oct 2026 16:01:28 +0000
Manifest this update: Tue 27 Oct 2026 16:01:28 +0000
Manifest next update: Wed 28 Oct 2026 16:01:28 +0000
Files and hashes: 1: VGyi3_XM7fe5glWnkMXs_96XfgY.roa (hash: 5b1Wuvrw9UByaw3AW1uJ5o3W+F06ZtJx4zNpuEiuZ3Q=)
2: cuEqOHb_e9ANnZ67lyqx5iHqHo0.crl (hash: yH2V3FEbEMAuPYj9GpjAqFphRaablxDhgpGeJe1v1qo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/1faa24-f086-4b48-b1bd-45527e8e44d2/1/cuEqOHb_e9ANnZ67lyqx5iHqHo0.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/1faa24-f086-4b48-b1bd-45527e8e44d2/1/cuEqOHb_e9ANnZ67lyqx5iHqHo0.mft
rsync://rpki.ripe.net/repository/DEFAULT/cuEqOHb_e9ANnZ67lyqx5iHqHo0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:18:5e:a6:cf:00:fd:56:5f:b0:f4:95:2d:75:5e:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72e12a3876ff7bd00d9d9ebb972ab1e621ea1e8d
Validity
Not Before: Oct 27 16:01:28 2026 GMT
Not After : Oct 28 16:01:28 2026 GMT
Subject: CN=3334cb60250eb48b9874a862858429d08970867f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:cc:37:40:93:bf:83:6d:e5:00:bc:7b:7e:8f:
ec:32:38:9e:fa:ad:c6:8d:80:8c:03:c1:cc:cb:76:
3b:92:57:9a:9c:f0:cb:a2:de:6f:52:69:51:79:2f:
cb:65:59:21:e7:fe:0e:c8:01:ad:07:ee:5b:4d:5d:
b1:63:c8:27:52:21:f2:fe:2c:40:19:e5:6f:73:94:
ea:d7:b8:22:b6:d7:bc:6a:bd:d9:f4:b3:d7:f5:90:
28:ed:85:8b:8b:cf:ba:0a:d2:4d:63:40:e2:5e:fe:
05:d1:9b:c6:8a:55:db:de:8e:42:ea:98:1c:42:34:
ea:80:4d:05:e3:4c:d4:43:63:37:1e:79:fa:70:25:
9b:e9:be:20:0c:7f:91:5c:c9:0d:c7:45:dc:f7:9a:
84:e3:2f:fb:4a:01:27:7a:a8:6c:de:1f:c1:cb:83:
99:3d:75:f5:06:7b:63:d7:01:65:7c:99:88:f6:73:
93:31:a3:dc:b3:51:ea:e2:f0:e0:60:35:47:3d:62:
2e:1b:e4:2e:a7:7a:ce:f3:eb:b4:45:f4:31:b5:1f:
0b:e7:6d:23:1c:2c:66:89:78:05:c8:2a:61:ee:11:
58:60:0b:8d:6c:29:86:1c:2e:b2:f2:d8:c3:b6:51:
43:d3:fc:bc:12:eb:03:b2:64:f4:6a:b0:81:a5:04:
04:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:34:CB:60:25:0E:B4:8B:98:74:A8:62:85:84:29:D0:89:70:86:7F
X509v3 Authority Key Identifier:
keyid:72:E1:2A:38:76:FF:7B:D0:0D:9D:9E:BB:97:2A:B1:E6:21:EA:1E:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cuEqOHb_e9ANnZ67lyqx5iHqHo0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1faa24-f086-4b48-b1bd-45527e8e44d2/1/cuEqOHb_e9ANnZ67lyqx5iHqHo0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1faa24-f086-4b48-b1bd-45527e8e44d2/1/cuEqOHb_e9ANnZ67lyqx5iHqHo0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:41:30:5f:c3:31:17:43:9f:d9:dc:0b:b8:81:e3:83:df:89:
f7:2e:cb:69:0c:09:4d:86:16:cb:31:08:22:20:1b:5f:c8:d2:
13:74:5f:23:46:ce:dd:0f:06:f4:1c:4c:a0:df:4b:da:cb:0e:
fd:0e:21:53:4d:52:85:05:b8:7d:d4:c2:ed:8b:80:0e:cd:5a:
15:42:9a:29:5c:9f:d8:ad:fa:ae:78:af:2c:c0:e8:34:f4:25:
3a:d2:fd:a5:8c:d7:05:a8:aa:b2:ab:05:df:2f:2b:3c:2e:2a:
27:82:a1:72:49:6e:43:f0:55:43:84:f2:05:e1:5d:35:97:cd:
6d:70:87:f7:58:ed:21:59:1d:4b:29:50:fc:c2:e7:8e:bc:5c:
66:62:b7:bb:b3:b6:c0:c5:ab:79:4f:a3:5a:f7:eb:44:b8:df:
9e:3e:83:d1:ce:6d:b3:bc:16:43:53:0a:85:83:79:63:60:18:
0d:58:f5:c5:65:8c:ba:46:06:3f:b0:83:b8:cb:05:e4:de:23:
3c:95:90:33:b9:f1:58:a3:0a:79:0e:c5:ae:c1:f3:05:77:9d:
85:66:d8:c0:07:c5:50:a7:2b:76:48:2d:96:24:b7:af:5c:65:
ea:50:2b:fa:90:fc:be:ad:5c:ca:b9:0b:ff:3f:9a:0d:b8:1a:
8c:4c:05:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 00:50:36 2026 by rpki-client