Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/1faa24-f086-4b48-b1bd-45527e8e44d2/1/cuEqOHb_e9ANnZ67lyqx5iHqHo0.mft
File: cuEqOHb_e9ANnZ67lyqx5iHqHo0.mft (raw, json)
Hash identifier: qD9OW8Xw8eeIth/ZCwKfIyaz/5mEJtxTGagyWh21T4M=
Subject key identifier: 87:DA:3E:5B:0B:18:15:14:A4:F1:D5:73:6D:33:79:90:4F:36:16:BC
Authority key identifier: 72:E1:2A:38:76:FF:7B:D0:0D:9D:9E:BB:97:2A:B1:E6:21:EA:1E:8D
Certificate issuer: /CN=72e12a3876ff7bd00d9d9ebb972ab1e621ea1e8d
Certificate serial: 019D371BFA86CA5D5F4DF0A996F2A8B46413
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cuEqOHb_e9ANnZ67lyqx5iHqHo0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/1faa24-f086-4b48-b1bd-45527e8e44d2/1/cuEqOHb_e9ANnZ67lyqx5iHqHo0.mft
Manifest number: 1821
Signing time: Sun 29 Mar 2026 01:01:13 +0000
Manifest this update: Sun 29 Mar 2026 01:01:13 +0000
Manifest next update: Mon 30 Mar 2026 01:01:13 +0000
Files and hashes: 1: VGyi3_XM7fe5glWnkMXs_96XfgY.roa (hash: 5b1Wuvrw9UByaw3AW1uJ5o3W+F06ZtJx4zNpuEiuZ3Q=)
2: cuEqOHb_e9ANnZ67lyqx5iHqHo0.crl (hash: GkU1XT1A5dWMUtnFQ3R+In/JA+OIfJ9D9r1aYjshOeQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/1faa24-f086-4b48-b1bd-45527e8e44d2/1/cuEqOHb_e9ANnZ67lyqx5iHqHo0.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/1faa24-f086-4b48-b1bd-45527e8e44d2/1/cuEqOHb_e9ANnZ67lyqx5iHqHo0.mft
rsync://rpki.ripe.net/repository/DEFAULT/cuEqOHb_e9ANnZ67lyqx5iHqHo0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:fa:86:ca:5d:5f:4d:f0:a9:96:f2:a8:b4:64:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72e12a3876ff7bd00d9d9ebb972ab1e621ea1e8d
Validity
Not Before: Mar 29 01:01:13 2026 GMT
Not After : Mar 30 01:01:13 2026 GMT
Subject: CN=87da3e5b0b181514a4f1d5736d3379904f3616bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b6:ab:10:b2:18:39:7f:4d:19:32:97:8e:5e:
8b:dd:48:eb:f8:47:f4:ef:86:6c:68:f2:7f:e2:dc:
c3:a0:b6:81:a8:6a:14:34:e9:38:5b:98:a2:80:2b:
4b:c6:32:91:d3:87:43:7b:85:a7:da:97:c8:a5:a4:
1c:9c:0b:ce:12:2a:95:ed:a4:11:d7:d3:ea:a3:e1:
29:c2:71:8a:f8:33:61:6c:d8:e2:76:b2:59:bc:71:
06:76:a3:9b:a9:8a:28:ac:24:8f:89:ba:7d:98:74:
ed:a4:15:6b:21:99:16:c6:fa:52:fd:85:84:f7:bd:
04:7d:93:77:79:a5:34:fc:16:15:ae:56:6c:d6:71:
00:b5:14:73:30:72:a1:8a:49:bf:3a:04:00:e3:1c:
2b:53:4c:40:5f:e1:fc:aa:19:df:b6:08:f4:7d:3b:
56:4f:fe:51:da:39:20:c9:79:e1:0e:d6:b7:59:dc:
b6:c7:27:5e:c4:37:1c:06:d0:d1:bf:21:77:b3:a9:
72:23:35:4d:cc:5d:2c:6e:7c:1c:06:e2:64:d1:4f:
73:77:96:3d:29:8d:4b:b2:e9:bb:eb:7f:84:70:f7:
6a:c7:69:e8:c6:90:3f:38:de:0a:e4:3d:26:52:be:
6c:c7:e8:db:87:92:ae:88:41:d8:85:d3:f6:90:ba:
32:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:DA:3E:5B:0B:18:15:14:A4:F1:D5:73:6D:33:79:90:4F:36:16:BC
X509v3 Authority Key Identifier:
keyid:72:E1:2A:38:76:FF:7B:D0:0D:9D:9E:BB:97:2A:B1:E6:21:EA:1E:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cuEqOHb_e9ANnZ67lyqx5iHqHo0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1faa24-f086-4b48-b1bd-45527e8e44d2/1/cuEqOHb_e9ANnZ67lyqx5iHqHo0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1faa24-f086-4b48-b1bd-45527e8e44d2/1/cuEqOHb_e9ANnZ67lyqx5iHqHo0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:8a:47:22:99:2c:35:d0:79:93:07:64:7f:6b:4a:5b:94:71:
e8:6a:ae:e0:d3:de:ec:20:07:20:8d:4d:e4:c6:11:60:b7:13:
91:16:a0:de:cb:be:aa:22:b6:2f:e9:24:a5:19:d6:36:ae:c4:
e1:7f:7e:b3:57:82:80:6b:3a:ce:8a:06:bd:82:b4:74:0d:e9:
20:a0:bd:af:5b:ee:cb:f1:1e:3a:c0:39:ea:e7:f0:eb:07:96:
e2:60:af:f5:b3:a6:83:66:3b:20:09:3b:3d:d7:43:06:72:7b:
ea:dc:e2:7d:2d:37:45:86:18:15:02:a6:f2:28:17:f3:25:b0:
75:44:86:21:dc:ba:dd:b4:ff:84:d2:4a:b0:fe:ee:a4:1b:f8:
3f:77:31:54:5c:99:ab:4e:62:d8:fa:ee:68:ad:a0:62:2d:10:
cb:37:fa:f5:c1:5e:0b:48:f7:dd:5a:00:97:5a:75:e6:bb:2a:
43:24:33:d8:d5:49:b5:35:43:cb:73:40:45:a4:95:c1:73:2b:
41:e8:20:a4:34:99:da:3e:bd:58:1b:88:18:9f:ad:62:4c:f5:
df:36:9a:20:fc:81:69:e9:7c:a7:da:1e:10:14:99:f0:da:df:
58:e6:4b:ef:8d:52:fb:9b:e4:a7:da:80:8f:c2:5a:13:2e:0a:
36:ef:dc:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:30 2026 by rpki-client