Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/494f27-4bbc-4b38-849b-d888a0689c19/1/_cuXa7YCkhb3oq0Ft5MvSlXgz4o.mft
File: _cuXa7YCkhb3oq0Ft5MvSlXgz4o.mft (raw, json)
Hash identifier: IRQbYJWEC3uFsiZPBM7mFFo4/HZyNYWiCaCwBURBDQ4=
Subject key identifier: 05:16:24:78:E8:9A:D1:0E:E8:01:9E:E2:97:6D:0E:A3:A0:60:70:24
Authority key identifier: FD:CB:97:6B:B6:02:92:16:F7:A2:AD:05:B7:93:2F:4A:55:E0:CF:8A
Certificate issuer: /CN=fdcb976bb6029216f7a2ad05b7932f4a55e0cf8a
Certificate serial: 019D39E54ECF9CA41D56417F8327C4130312
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_cuXa7YCkhb3oq0Ft5MvSlXgz4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/494f27-4bbc-4b38-849b-d888a0689c19/1/_cuXa7YCkhb3oq0Ft5MvSlXgz4o.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 14:00:22 +0000
Manifest this update: Sun 29 Mar 2026 14:00:22 +0000
Manifest next update: Mon 30 Mar 2026 14:00:22 +0000
Files and hashes: 1: 6e2vKhHmL-ZebC_h3M0uX9UQPQE.roa (hash: MuJkDaToFHy1onqOvnRia1v4P6X9FnZyEUR50zhW13E=)
2: _cuXa7YCkhb3oq0Ft5MvSlXgz4o.crl (hash: gqUGMXa6GsMzPqHQOjLgR2rJmNKnT3aX6I3cccTy61E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/494f27-4bbc-4b38-849b-d888a0689c19/1/_cuXa7YCkhb3oq0Ft5MvSlXgz4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/494f27-4bbc-4b38-849b-d888a0689c19/1/_cuXa7YCkhb3oq0Ft5MvSlXgz4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/_cuXa7YCkhb3oq0Ft5MvSlXgz4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:4e:cf:9c:a4:1d:56:41:7f:83:27:c4:13:03:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdcb976bb6029216f7a2ad05b7932f4a55e0cf8a
Validity
Not Before: Mar 29 14:00:22 2026 GMT
Not After : Mar 30 14:00:22 2026 GMT
Subject: CN=05162478e89ad10ee8019ee2976d0ea3a0607024
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b1:1e:d1:93:31:18:73:9e:f7:e0:93:fb:f6:
bc:67:16:63:76:0f:c4:13:ca:88:8e:05:4a:23:1d:
7c:13:c5:bc:4c:f4:96:aa:21:27:af:64:15:f4:03:
cc:aa:a8:1f:ee:17:a8:34:fd:9f:8c:66:7d:51:d7:
57:d3:73:c2:e1:de:da:0a:d3:5c:83:82:19:79:09:
61:bc:de:6d:76:04:a4:ad:4a:c1:4b:88:3f:9e:81:
bf:eb:f3:ec:73:02:11:a7:b4:3c:8f:c2:ee:2a:ce:
0a:ee:a2:4f:ee:10:53:f1:2f:75:c0:7f:d4:5d:46:
b5:6b:db:7f:4e:b3:18:80:0c:ab:75:af:97:fb:46:
8c:39:92:0e:a9:96:3f:85:2e:29:2e:f3:38:b5:dd:
1a:99:45:1f:cf:5b:10:c4:f7:f3:e7:d9:69:be:26:
6d:3d:f9:de:bf:8f:a6:a6:64:82:ab:bb:f6:2a:dc:
6a:e9:96:f0:92:05:cc:4d:3b:23:9c:18:34:7a:d3:
f4:a0:bb:57:3f:91:bf:54:2f:04:b3:3d:81:af:8f:
75:6d:40:c6:91:3b:1e:6c:25:c2:71:3a:4b:3b:49:
c9:cf:1d:30:3d:5b:5e:13:17:87:1f:3a:2d:67:62:
da:2d:78:01:f5:f4:5f:e4:c1:02:73:3f:d4:9a:8d:
98:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:16:24:78:E8:9A:D1:0E:E8:01:9E:E2:97:6D:0E:A3:A0:60:70:24
X509v3 Authority Key Identifier:
keyid:FD:CB:97:6B:B6:02:92:16:F7:A2:AD:05:B7:93:2F:4A:55:E0:CF:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_cuXa7YCkhb3oq0Ft5MvSlXgz4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/494f27-4bbc-4b38-849b-d888a0689c19/1/_cuXa7YCkhb3oq0Ft5MvSlXgz4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/494f27-4bbc-4b38-849b-d888a0689c19/1/_cuXa7YCkhb3oq0Ft5MvSlXgz4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:71:8c:41:32:86:f7:34:a5:2f:b6:39:24:9d:85:59:3f:9e:
9e:d2:aa:50:3b:76:c2:73:b7:79:f8:94:73:52:f0:1b:3a:03:
c8:b2:26:fe:d5:1b:ab:ec:cc:2a:3b:49:98:a1:68:5a:6c:a4:
07:9c:d9:72:96:32:36:ef:f5:2e:db:dd:1f:4f:01:8a:0e:d0:
fa:e2:3a:2d:92:48:41:9b:f8:16:fd:96:2c:54:02:be:a2:7d:
5f:e7:82:0f:bf:88:71:b7:17:08:41:4d:e5:de:3b:68:e2:61:
4a:35:0e:fa:3a:41:0c:a2:3d:6a:f6:28:d1:93:0b:ac:45:7f:
f2:69:e0:d5:b6:89:77:77:bf:3c:13:f9:0b:92:96:94:82:87:
56:63:4a:e5:12:3b:f1:3e:64:02:01:18:12:24:24:ad:e9:07:
65:50:ff:35:69:df:ab:d7:cf:5f:04:5e:d2:46:27:63:ca:91:
e5:02:08:6d:71:b4:e8:4b:b2:3a:64:51:10:01:92:88:c0:93:
be:2d:b8:85:02:b7:4d:af:4c:fd:e0:ca:5c:c8:ab:5f:14:0a:
07:08:fb:c8:a9:3d:11:ea:d6:7f:ee:c5:c2:6e:69:f8:34:de:
89:7f:8c:01:31:63:4d:eb:a6:6d:75:5b:3e:8e:a6:db:fd:08:
92:f9:ac:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:15:22 2026 by rpki-client