Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/494f27-4bbc-4b38-849b-d888a0689c19/1/_cuXa7YCkhb3oq0Ft5MvSlXgz4o.mft
File: _cuXa7YCkhb3oq0Ft5MvSlXgz4o.mft (raw, json)
Hash identifier: s17GDkoQk5BWkypbPgwEq1RQIj1J9kgan9efxsl0lm8=
Subject key identifier: 1D:CA:C4:3C:46:A7:E9:06:38:A6:A5:4A:6D:8B:56:C7:55:96:77:05
Authority key identifier: FD:CB:97:6B:B6:02:92:16:F7:A2:AD:05:B7:93:2F:4A:55:E0:CF:8A
Certificate issuer: /CN=fdcb976bb6029216f7a2ad05b7932f4a55e0cf8a
Certificate serial: 01A08B9F16F992925C459B621C7CFDB01D24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_cuXa7YCkhb3oq0Ft5MvSlXgz4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/494f27-4bbc-4b38-849b-d888a0689c19/1/_cuXa7YCkhb3oq0Ft5MvSlXgz4o.mft
Manifest number: 1A48
Signing time: Thu 10 Sep 2026 14:00:54 +0000
Manifest this update: Thu 10 Sep 2026 14:00:54 +0000
Manifest next update: Fri 11 Sep 2026 14:00:54 +0000
Files and hashes: 1: 6e2vKhHmL-ZebC_h3M0uX9UQPQE.roa (hash: MuJkDaToFHy1onqOvnRia1v4P6X9FnZyEUR50zhW13E=)
2: _cuXa7YCkhb3oq0Ft5MvSlXgz4o.crl (hash: 8yZm1wsjX6E+4mYA7At9Hr9+J2TmHguaQfCnm3EjeYU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/494f27-4bbc-4b38-849b-d888a0689c19/1/_cuXa7YCkhb3oq0Ft5MvSlXgz4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/494f27-4bbc-4b38-849b-d888a0689c19/1/_cuXa7YCkhb3oq0Ft5MvSlXgz4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/_cuXa7YCkhb3oq0Ft5MvSlXgz4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:9f:16:f9:92:92:5c:45:9b:62:1c:7c:fd:b0:1d:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdcb976bb6029216f7a2ad05b7932f4a55e0cf8a
Validity
Not Before: Sep 10 14:00:54 2026 GMT
Not After : Sep 11 14:00:54 2026 GMT
Subject: CN=1dcac43c46a7e90638a6a54a6d8b56c755967705
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:02:c3:a6:68:a4:a7:0e:79:9e:de:76:01:52:
94:61:a2:c5:69:a0:4e:99:0b:07:41:41:f9:84:34:
96:25:2b:5b:3d:8f:b7:b6:4f:50:c4:b6:77:90:67:
f2:8f:df:3f:d8:df:ac:7d:93:77:39:bf:65:1c:6f:
2f:b9:bd:43:c4:f1:4d:82:5c:d6:04:da:07:7e:ae:
d0:5e:55:32:22:05:8d:ad:eb:65:89:97:0b:28:30:
48:ed:80:9a:e1:85:08:51:86:1f:45:d7:68:07:c4:
e2:d2:22:e5:01:e6:7b:ce:2a:9e:83:38:1e:6f:cc:
29:57:40:30:5a:4a:e3:df:e9:ee:75:29:68:87:25:
c1:87:2a:37:99:d9:b5:6e:b7:9c:5e:e8:4f:a0:b6:
e4:34:67:c6:3c:e8:00:cf:a0:b9:9f:b6:06:6d:d5:
3e:25:a5:14:09:c9:82:7b:4f:d8:d7:82:c9:7b:12:
cf:54:e5:34:c6:a4:8e:6e:66:be:09:6b:4a:fe:90:
39:8d:1c:0c:d0:a6:02:75:bb:55:b5:4b:11:ae:25:
78:bc:c7:6e:12:63:1e:eb:9d:e8:7b:3b:b2:0d:c3:
df:63:be:23:f7:ac:cd:20:78:e6:19:53:f2:c2:e6:
ce:7e:1b:2b:32:cb:fe:b7:99:bd:fa:a2:f9:b6:41:
83:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:CA:C4:3C:46:A7:E9:06:38:A6:A5:4A:6D:8B:56:C7:55:96:77:05
X509v3 Authority Key Identifier:
keyid:FD:CB:97:6B:B6:02:92:16:F7:A2:AD:05:B7:93:2F:4A:55:E0:CF:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_cuXa7YCkhb3oq0Ft5MvSlXgz4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/494f27-4bbc-4b38-849b-d888a0689c19/1/_cuXa7YCkhb3oq0Ft5MvSlXgz4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/494f27-4bbc-4b38-849b-d888a0689c19/1/_cuXa7YCkhb3oq0Ft5MvSlXgz4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:06:6b:24:4d:2f:97:19:34:ca:f4:58:86:e9:1d:c8:eb:c1:
3a:c4:77:60:3b:b4:53:ef:fa:ab:1e:96:cb:c8:23:73:0d:63:
f5:a4:c1:9e:e3:1b:cb:28:0d:08:cb:8b:3f:e6:aa:af:d5:d3:
0c:0c:45:44:9f:83:1a:1d:f1:77:7e:b4:2d:64:1c:32:a1:1a:
2b:10:19:28:ff:b5:d5:e0:6b:72:da:6c:30:47:fc:2e:a5:99:
28:86:33:7c:78:7c:44:96:20:47:38:bf:cc:aa:cf:89:b3:35:
12:66:d2:04:cf:47:34:33:4b:19:a8:9b:27:3a:2a:1b:d2:9b:
75:54:38:53:68:91:c4:78:e1:6c:bb:a7:62:80:76:3b:77:ee:
4d:0b:62:04:04:df:07:6c:00:3f:3b:9b:73:b4:c5:06:01:4b:
a7:21:83:00:8f:89:ce:ed:2d:31:12:98:4f:a2:85:d5:08:c7:
ea:38:f7:c9:b1:32:29:81:97:74:ac:0d:6f:81:53:70:55:be:
38:f2:e5:a0:7e:a9:87:dd:5b:81:4e:88:8e:f8:bb:08:8b:73:
9d:9e:99:9d:96:8b:3d:60:cf:57:b6:d1:54:d3:73:ab:97:3d:
1c:05:4a:0e:be:2f:e8:04:2e:fb:ce:45:be:14:44:04:4c:38:
76:6d:1d:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCLnxb5kpJcRZtiHHz9sB0kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkY2I5NzZiYjYwMjkyMTZmN2EyYWQwNWI3OTMyZjRhNTVl
MGNmOGEwHhcNMjYwOTEwMTQwMDU0WhcNMjYwOTExMTQwMDU0WjAzMTEwLwYDVQQD
EygxZGNhYzQzYzQ2YTdlOTA2MzhhNmE1NGE2ZDhiNTZjNzU1OTY3NzA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5gLDpmikpw55nt52AVKUYaLFaaBO
mQsHQUH5hDSWJStbPY+3tk9QxLZ3kGfyj98/2N+sfZN3Ob9lHG8vub1DxPFNglzW
BNoHfq7QXlUyIgWNretliZcLKDBI7YCa4YUIUYYfRddoB8Ti0iLlAeZ7ziqegzge
b8wpV0AwWkrj3+nudSlohyXBhyo3mdm1brecXuhPoLbkNGfGPOgAz6C5n7YGbdU+
JaUUCcmCe0/Y14LJexLPVOU0xqSObma+CWtK/pA5jRwM0KYCdbtVtUsRriV4vMdu
EmMe653oezuyDcPfY74j96zNIHjmGVPywubOfhsrMsv+t5m9+qL5tkGD2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB3KxDxGp+kGOKalSm2LVsdVlncFMB8GA1UdIwQY
MBaAFP3Ll2u2ApIW96KtBbeTL0pV4M+KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2N1WGE3WUNraGIzb3EwRnQ1TXZTbFhnejRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS80OTRmMjctNGJiYy00YjM4LTg0OWIt
ZDg4OGEwNjg5YzE5LzEvX2N1WGE3WUNraGIzb3EwRnQ1TXZTbFhnejRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS80OTRmMjctNGJiYy00YjM4LTg0OWItZDg4OGEwNjg5YzE5
LzEvX2N1WGE3WUNraGIzb3EwRnQ1TXZTbFhnejRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyAZrJE0v
lxk0yvRYhukdyOvBOsR3YDu0U+/6qx6Wy8gjcw1j9aTBnuMbyygNCMuLP+aqr9XT
DAxFRJ+DGh3xd360LWQcMqEaKxAZKP+11eBrctpsMEf8LqWZKIYzfHh8RJYgRzi/
zKrPibM1EmbSBM9HNDNLGaibJzoqG9KbdVQ4U2iRxHjhbLunYoB2O3fuTQtiBATf
B2wAPzubc7TFBgFLpyGDAI+Jzu0tMRKYT6KF1QjH6jj3ybEyKYGXdKwNb4FTcFW+
OPLloH6ph91bgU6Ijvi7CItznZ6ZnZaLPWDPV7bRVNNzq5c9HAVKDr4v6AQu+85F
vhREBEw4dm0dEg==
-----END CERTIFICATE-----
Generated at Thu Sep 10 22:44:55 2026 by rpki-client