Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/606939-cc69-4cfa-843e-50b64cbd0fe1/1/CUsU8URwOb33-d7l-ik4XB3OlZ0.mft
File: CUsU8URwOb33-d7l-ik4XB3OlZ0.mft (raw, json)
Hash identifier: IR7ctbBH275PwJQrYeeuUxjhhqIuUg83Dv/FxgMEDk8=
Subject key identifier: DC:CA:CC:AD:FF:D6:65:43:56:B5:3C:F8:B2:9A:3D:D1:EB:E1:59:FC
Authority key identifier: 09:4B:14:F1:44:70:39:BD:F7:F9:DE:E5:FA:29:38:5C:1D:CE:95:9D
Certificate issuer: /CN=094b14f1447039bdf7f9dee5fa29385c1dce959d
Certificate serial: 01A13FA78E45A7E93B2645FC29EB8CE3758F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CUsU8URwOb33-d7l-ik4XB3OlZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/606939-cc69-4cfa-843e-50b64cbd0fe1/1/CUsU8URwOb33-d7l-ik4XB3OlZ0.mft
Manifest number: 1A34
Signing time: Thu 15 Oct 2026 13:01:47 +0000
Manifest this update: Thu 15 Oct 2026 13:01:47 +0000
Manifest next update: Fri 16 Oct 2026 13:01:47 +0000
Files and hashes: 1: CUsU8URwOb33-d7l-ik4XB3OlZ0.crl (hash: bgBsXGiA3ShGK2hdVmPjTenI6UzgqAUZ2lqZ2/+ZWLY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/606939-cc69-4cfa-843e-50b64cbd0fe1/1/CUsU8URwOb33-d7l-ik4XB3OlZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/606939-cc69-4cfa-843e-50b64cbd0fe1/1/CUsU8URwOb33-d7l-ik4XB3OlZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CUsU8URwOb33-d7l-ik4XB3OlZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:a7:8e:45:a7:e9:3b:26:45:fc:29:eb:8c:e3:75:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=094b14f1447039bdf7f9dee5fa29385c1dce959d
Validity
Not Before: Oct 15 13:01:47 2026 GMT
Not After : Oct 16 13:01:47 2026 GMT
Subject: CN=dccaccadffd6654356b53cf8b29a3dd1ebe159fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:b5:cc:25:22:fd:71:4c:96:67:7b:ac:b7:69:
34:ed:7f:ad:12:9f:0b:36:f6:f4:06:82:96:0f:1e:
42:17:df:31:ec:aa:09:12:42:07:58:05:d0:17:ca:
43:00:3e:3c:2f:cd:4e:34:33:a5:98:5f:8b:d3:87:
3e:e0:3e:b3:62:56:7f:15:25:d2:5d:2e:25:18:c2:
00:8e:80:ec:36:ef:e3:eb:41:e7:19:02:e9:1e:ea:
11:a4:4c:96:fd:81:f1:9e:18:69:fb:0f:f3:5c:15:
40:c7:62:b4:a2:08:49:2d:05:c2:a3:ef:4d:0b:4a:
46:7f:09:51:4f:bd:2f:ad:39:a5:41:fc:36:39:1c:
54:cf:a2:12:aa:1d:eb:59:54:9f:49:52:8f:f3:8d:
bc:eb:cf:01:2d:76:3f:a5:09:2b:e0:f4:e1:d9:11:
b6:4f:e6:e9:22:66:45:bc:df:b6:49:e4:a1:06:77:
f9:5c:7e:73:e0:39:56:82:fd:ef:b5:ff:cd:a4:04:
c5:a7:1e:2a:ab:46:24:87:7d:b5:db:06:97:08:d4:
a5:c0:de:e7:53:67:7b:f5:bb:35:42:75:de:8f:ae:
b8:c0:52:23:21:f9:9c:a6:e9:35:f5:fd:88:0a:1a:
d0:7d:18:9b:a3:95:d1:3b:65:e9:52:81:a9:db:1c:
05:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:CA:CC:AD:FF:D6:65:43:56:B5:3C:F8:B2:9A:3D:D1:EB:E1:59:FC
X509v3 Authority Key Identifier:
keyid:09:4B:14:F1:44:70:39:BD:F7:F9:DE:E5:FA:29:38:5C:1D:CE:95:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CUsU8URwOb33-d7l-ik4XB3OlZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/606939-cc69-4cfa-843e-50b64cbd0fe1/1/CUsU8URwOb33-d7l-ik4XB3OlZ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/606939-cc69-4cfa-843e-50b64cbd0fe1/1/CUsU8URwOb33-d7l-ik4XB3OlZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:40:a0:9c:25:8e:d6:4d:47:d6:73:97:46:32:87:72:84:9d:
02:fc:71:f8:f6:ad:98:64:34:f9:26:6d:5e:77:06:32:ec:52:
f3:77:25:ab:bb:15:9a:d3:45:f1:a7:05:0e:23:77:61:ee:5b:
81:af:16:bc:73:d8:67:da:35:ab:11:a0:c6:32:fd:a9:4b:49:
7d:1b:9c:68:f5:87:0b:fb:ba:33:4b:d1:a3:82:47:3f:5a:be:
a9:a3:fa:ef:91:ce:ac:16:1f:6b:91:6b:37:1d:25:cc:1c:ee:
ba:84:12:91:b4:7b:02:ba:61:f8:c6:19:2c:0c:fd:fd:ef:f9:
1b:aa:7d:f0:ed:0a:e7:9b:f9:8f:63:e3:86:52:cc:9c:49:87:
4a:6e:e7:0c:40:8e:04:f6:71:a3:b4:65:fa:1e:45:f5:62:c9:
b6:cf:67:c9:41:ee:d2:1f:b2:d4:ce:37:52:32:33:18:57:c1:
f0:c4:7b:0c:98:40:5c:b9:d3:17:65:bd:61:97:45:1c:4e:ca:
03:74:2d:ec:79:bc:bc:c5:18:f0:a6:23:cc:f7:be:81:62:77:
d4:62:fb:8b:da:9e:2d:14:a9:ad:e2:19:a7:86:e6:7c:68:3b:
de:5b:35:2b:65:a0:44:7c:a7:c7:aa:18:8b:d0:83:b7:9e:ed:
fe:5b:56:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE/p45Fp+k7JkX8KeuM43WPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5NGIxNGYxNDQ3MDM5YmRmN2Y5ZGVlNWZhMjkzODVjMWRj
ZTk1OWQwHhcNMjYxMDE1MTMwMTQ3WhcNMjYxMDE2MTMwMTQ3WjAzMTEwLwYDVQQD
EyhkY2NhY2NhZGZmZDY2NTQzNTZiNTNjZjhiMjlhM2RkMWViZTE1OWZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+LXMJSL9cUyWZ3ust2k07X+tEp8L
Nvb0BoKWDx5CF98x7KoJEkIHWAXQF8pDAD48L81ONDOlmF+L04c+4D6zYlZ/FSXS
XS4lGMIAjoDsNu/j60HnGQLpHuoRpEyW/YHxnhhp+w/zXBVAx2K0oghJLQXCo+9N
C0pGfwlRT70vrTmlQfw2ORxUz6ISqh3rWVSfSVKP8428688BLXY/pQkr4PTh2RG2
T+bpImZFvN+2SeShBnf5XH5z4DlWgv3vtf/NpATFpx4qq0Ykh3212waXCNSlwN7n
U2d79bs1QnXej664wFIjIfmcpuk19f2IChrQfRibo5XRO2XpUoGp2xwFxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNzKzK3/1mVDVrU8+LKaPdHr4Vn8MB8GA1UdIwQY
MBaAFAlLFPFEcDm99/ne5fopOFwdzpWdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1VzVThVUndPYjMzLWQ3bC1pazRYQjNPbFowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi82MDY5MzktY2M2OS00Y2ZhLTg0M2Ut
NTBiNjRjYmQwZmUxLzEvQ1VzVThVUndPYjMzLWQ3bC1pazRYQjNPbFowLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi82MDY5MzktY2M2OS00Y2ZhLTg0M2UtNTBiNjRjYmQwZmUx
LzEvQ1VzVThVUndPYjMzLWQ3bC1pazRYQjNPbFowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzkCgnCWO
1k1H1nOXRjKHcoSdAvxx+PatmGQ0+SZtXncGMuxS83clq7sVmtNF8acFDiN3Ye5b
ga8WvHPYZ9o1qxGgxjL9qUtJfRucaPWHC/u6M0vRo4JHP1q+qaP675HOrBYfa5Fr
Nx0lzBzuuoQSkbR7Arph+MYZLAz9/e/5G6p98O0K55v5j2PjhlLMnEmHSm7nDECO
BPZxo7Rl+h5F9WLJts9nyUHu0h+y1M43UjIzGFfB8MR7DJhAXLnTF2W9YZdFHE7K
A3Qt7Hm8vMUY8KYjzPe+gWJ31GL7i9qeLRSpreIZp4bmfGg73ls1K2WgRHynx6oY
i9CDt57t/ltW0A==
-----END CERTIFICATE-----
Generated at Thu Oct 15 18:23:59 2026 by rpki-client