Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/66b74c-81c1-410e-957d-a8d65dccb96b/1/cuS6-Zq4QBKRMyhf6a17g_0TDDk.mft
File: cuS6-Zq4QBKRMyhf6a17g_0TDDk.mft (raw, json)
Hash identifier: 1u6237OUspPqTUM29LX31wQUX8kzi+mQ3pIC8Q6n0Ls=
Subject key identifier: 3D:1E:B4:8C:4C:D9:46:9E:1C:AA:62:DC:C1:00:12:E6:5A:AE:2A:3B
Authority key identifier: 72:E4:BA:F9:9A:B8:40:12:91:33:28:5F:E9:AD:7B:83:FD:13:0C:39
Certificate issuer: /CN=72e4baf99ab840129133285fe9ad7b83fd130c39
Certificate serial: 019D382EA087A4ED9CA4D22A9532DD42F4DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cuS6-Zq4QBKRMyhf6a17g_0TDDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/66b74c-81c1-410e-957d-a8d65dccb96b/1/cuS6-Zq4QBKRMyhf6a17g_0TDDk.mft
Manifest number: 189D
Signing time: Sun 29 Mar 2026 06:01:12 +0000
Manifest this update: Sun 29 Mar 2026 06:01:12 +0000
Manifest next update: Mon 30 Mar 2026 06:01:12 +0000
Files and hashes: 1: 1E2GfXyPoyKCnvX8Op-67NNeeII.roa (hash: N8Q/qvAY27SFiMXr6tcvfagA2n7ieRadFl4CNkx0CiQ=)
2: cuS6-Zq4QBKRMyhf6a17g_0TDDk.crl (hash: 4CQ4oiv5vl2fr1j3rCEfYLIM1M8OGxtKv5dhneE3GIE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/66b74c-81c1-410e-957d-a8d65dccb96b/1/cuS6-Zq4QBKRMyhf6a17g_0TDDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/66b74c-81c1-410e-957d-a8d65dccb96b/1/cuS6-Zq4QBKRMyhf6a17g_0TDDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/cuS6-Zq4QBKRMyhf6a17g_0TDDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:a0:87:a4:ed:9c:a4:d2:2a:95:32:dd:42:f4:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72e4baf99ab840129133285fe9ad7b83fd130c39
Validity
Not Before: Mar 29 06:01:12 2026 GMT
Not After : Mar 30 06:01:12 2026 GMT
Subject: CN=3d1eb48c4cd9469e1caa62dcc10012e65aae2a3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c3:08:a3:ce:27:e0:c9:84:d2:20:03:18:b8:
d0:2c:e9:72:92:6e:3b:a2:bc:fb:18:e1:35:f1:6f:
23:f9:8c:5c:3b:aa:e2:94:86:82:cb:b9:d2:f3:4e:
cc:6d:f0:a2:89:71:10:59:ce:7a:c7:0b:b8:5c:41:
f3:20:4f:0b:5d:38:ca:27:5c:19:9f:2e:85:2f:81:
9a:66:d5:b9:8f:b2:9f:2e:69:4e:e9:e2:d0:a1:e0:
0f:eb:12:14:06:cd:fc:cf:b3:c6:7c:13:d7:c8:a5:
13:6c:b7:d9:44:51:d0:24:6d:0c:60:1f:1b:84:c1:
a0:9e:f8:ae:6e:c4:37:79:cd:5d:e9:11:81:ed:fc:
64:69:9a:89:23:7c:79:b7:21:a3:e9:1c:b6:0c:60:
96:95:16:0d:fa:97:55:93:2d:39:48:7b:08:a7:0c:
18:7d:10:4f:b2:3f:10:c6:d9:9b:f5:7c:58:89:af:
76:e6:a3:3e:15:2a:f8:24:6e:6c:50:2d:e7:91:28:
2b:ee:d8:04:cd:14:12:06:02:b5:b5:f0:73:20:54:
26:1a:e7:5a:22:75:53:bf:31:e7:dc:10:dc:0c:e1:
9b:f7:67:49:fb:1b:88:a4:8a:d9:b2:ee:2e:12:d7:
11:44:71:c8:ff:bb:a8:45:05:67:30:1a:50:8e:5f:
5b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:1E:B4:8C:4C:D9:46:9E:1C:AA:62:DC:C1:00:12:E6:5A:AE:2A:3B
X509v3 Authority Key Identifier:
keyid:72:E4:BA:F9:9A:B8:40:12:91:33:28:5F:E9:AD:7B:83:FD:13:0C:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cuS6-Zq4QBKRMyhf6a17g_0TDDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/66b74c-81c1-410e-957d-a8d65dccb96b/1/cuS6-Zq4QBKRMyhf6a17g_0TDDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/66b74c-81c1-410e-957d-a8d65dccb96b/1/cuS6-Zq4QBKRMyhf6a17g_0TDDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:37:02:50:d6:4b:76:e5:e5:47:59:a7:6f:91:ac:bd:67:65:
19:c1:79:bc:b0:bb:9f:83:4d:47:a1:ed:65:8c:de:30:ae:55:
aa:b4:db:79:e2:ec:0e:38:00:1d:ed:64:9c:15:60:44:cc:0c:
aa:6f:43:93:88:eb:01:b6:ea:fe:e9:66:a6:b1:6c:fe:70:03:
91:ae:a1:1d:08:0e:57:08:bb:5e:66:00:25:16:61:4f:07:a7:
fc:42:9e:92:69:c2:77:fe:03:75:f3:63:df:18:56:c4:c4:52:
2c:fe:64:4b:3c:90:28:58:76:65:c9:f3:c9:d6:4e:13:3f:4f:
c6:11:fb:51:94:5a:26:1d:89:29:b7:72:5f:38:01:c6:e3:a6:
91:8f:28:ff:b4:95:27:60:c8:f7:7b:ad:69:df:a3:1b:08:2b:
9e:f3:d2:08:8d:fe:4a:4d:f3:2d:cc:39:fa:e9:19:e9:c6:62:
7b:0b:3c:48:ed:ce:fc:f1:40:1c:c9:a4:75:ef:85:6c:92:53:
73:99:1c:93:08:8e:52:45:26:d8:9b:e9:9b:fe:9b:4c:35:7d:
05:8e:70:ca:49:b0:0e:5f:ed:1e:2e:8f:2f:8c:05:f3:ec:54:
cc:5d:bb:74:f3:f9:e7:b1:44:99:91:49:2b:0c:fe:a4:81:80:
bb:27:0d:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:26 2026 by rpki-client