Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/b62878-ccc8-4d57-9fe0-7a104b80cd71/1/Cu6u4IY9HcpiT2HzmyGBx9tsuj8.mft
File: Cu6u4IY9HcpiT2HzmyGBx9tsuj8.mft (raw, json)
Hash identifier: 8Gi4xPnCCPC9UbbH6wAx+FQZmhuKwt4lrmUPr6LA9qA=
Subject key identifier: BA:5B:A5:AE:4A:81:3C:E1:EE:82:A2:5A:16:4D:35:D3:5F:74:F1:07
Authority key identifier: 0A:EE:AE:E0:86:3D:1D:CA:62:4F:61:F3:9B:21:81:C7:DB:6C:BA:3F
Certificate issuer: /CN=0aeeaee0863d1dca624f61f39b2181c7db6cba3f
Certificate serial: 019D37F7147771108164F8B6753A4CE2BB63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cu6u4IY9HcpiT2HzmyGBx9tsuj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/b62878-ccc8-4d57-9fe0-7a104b80cd71/1/Cu6u4IY9HcpiT2HzmyGBx9tsuj8.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 05:00:32 +0000
Manifest this update: Sun 29 Mar 2026 05:00:32 +0000
Manifest next update: Mon 30 Mar 2026 05:00:32 +0000
Files and hashes: 1: Cu6u4IY9HcpiT2HzmyGBx9tsuj8.crl (hash: /FvVnW122+8fcf6DV1mdE8PTu1TFYuEjc/iemoed/pw=)
2: NIC6FPNA-Rut56ZtIFRnSurvICQ.roa (hash: 5L/3wMgmUEy2dfrMAgnd99xnHhW/Bj+jZ1MWwhBuJc8=)
3: YsYMCe9LReXjPKopmUA0EjsK0dc.roa (hash: y+81aZ09kbsZWCpPgtxvvuaCFjv5jJ1HQMWCIGPci3U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/b62878-ccc8-4d57-9fe0-7a104b80cd71/1/Cu6u4IY9HcpiT2HzmyGBx9tsuj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/b62878-ccc8-4d57-9fe0-7a104b80cd71/1/Cu6u4IY9HcpiT2HzmyGBx9tsuj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cu6u4IY9HcpiT2HzmyGBx9tsuj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:14:77:71:10:81:64:f8:b6:75:3a:4c:e2:bb:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0aeeaee0863d1dca624f61f39b2181c7db6cba3f
Validity
Not Before: Mar 29 05:00:32 2026 GMT
Not After : Mar 30 05:00:32 2026 GMT
Subject: CN=ba5ba5ae4a813ce1ee82a25a164d35d35f74f107
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ae:a6:77:d9:3a:60:ad:dd:c8:89:65:27:9a:
5e:0d:da:e9:03:09:18:16:6c:12:a7:a0:a6:f8:d5:
fe:84:99:23:26:5e:97:fa:d8:e2:50:22:d1:46:34:
a7:93:20:9f:f9:69:9b:6a:92:6b:17:6b:d3:c2:27:
85:c1:2f:24:0b:74:40:0c:58:cf:0c:a3:63:64:d2:
3d:73:66:cb:00:ac:d4:dc:97:b3:02:80:e8:e0:47:
82:c8:f0:40:be:c4:3d:f5:05:86:11:44:cf:79:68:
e2:8a:ab:b0:36:a4:a7:12:9f:be:78:ec:47:9d:d3:
66:60:a8:1f:0a:7d:2c:e2:63:ab:d2:03:f8:8f:ae:
bd:dd:d4:00:3b:e5:4d:42:61:b5:6f:eb:45:4b:e8:
3f:ed:7c:7c:5f:c8:03:d6:3e:79:e5:ec:77:61:c4:
d7:ca:e7:21:4d:c4:ad:1a:ce:cb:51:36:49:8b:32:
f7:44:20:f5:f4:35:76:39:76:78:e5:a3:06:f1:ab:
10:26:65:ca:f2:67:27:3a:07:ee:6f:40:7b:99:13:
4a:bb:e4:e3:44:a0:bd:e4:48:60:39:bd:81:94:b1:
3c:e4:d3:3b:8f:3c:7f:ff:4f:3d:3c:ca:60:08:ee:
d4:0d:8d:09:af:f8:b7:e6:ef:8d:b9:bc:d3:42:05:
2b:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:5B:A5:AE:4A:81:3C:E1:EE:82:A2:5A:16:4D:35:D3:5F:74:F1:07
X509v3 Authority Key Identifier:
keyid:0A:EE:AE:E0:86:3D:1D:CA:62:4F:61:F3:9B:21:81:C7:DB:6C:BA:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cu6u4IY9HcpiT2HzmyGBx9tsuj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/b62878-ccc8-4d57-9fe0-7a104b80cd71/1/Cu6u4IY9HcpiT2HzmyGBx9tsuj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/b62878-ccc8-4d57-9fe0-7a104b80cd71/1/Cu6u4IY9HcpiT2HzmyGBx9tsuj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:a5:9c:f4:d4:ee:01:7c:fc:07:1e:bc:a4:81:7b:f1:f1:fb:
37:c0:dd:82:e0:c1:c6:47:80:51:96:8d:e2:65:b5:5a:15:d1:
4f:5c:d3:dc:fb:a4:d7:1d:f8:c2:ae:89:0a:55:28:d3:44:f2:
47:85:04:ef:44:84:e1:7a:27:56:f9:c5:c1:e2:54:d8:1e:4c:
a8:4e:53:17:66:fe:e2:4e:06:84:cc:08:62:b8:5e:5f:37:6c:
cd:4a:18:ed:68:f6:67:2c:8c:7d:91:09:38:ff:d2:6e:c6:83:
98:ce:1b:14:a1:40:b8:1f:3d:e4:2b:c4:5d:eb:4f:61:a5:f4:
7c:1b:63:00:9d:c6:c3:29:42:1f:bd:fe:27:49:b9:d6:af:a1:
30:54:8e:59:24:f5:c0:bd:22:6a:b0:a2:cb:46:d4:c0:b0:46:
6c:65:01:15:fb:4d:0d:9c:1d:0f:33:70:46:a2:ff:aa:13:49:
1c:2e:2b:be:fe:9b:41:d1:da:1b:67:f7:a7:5c:6d:25:40:66:
41:ff:8a:ea:96:0e:56:94:b8:57:ca:a2:6d:80:e8:15:7c:83:
77:e6:fa:1d:08:d5:a2:e3:f7:af:67:51:c4:8c:67:a3:17:de:
18:83:34:79:cb:b2:dd:69:4d:d7:d1:87:e1:22:64:4a:e4:32:
1d:03:6e:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ039xR3cRCBZPi2dTpM4rtjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhZWVhZWUwODYzZDFkY2E2MjRmNjFmMzliMjE4MWM3ZGI2
Y2JhM2YwHhcNMjYwMzI5MDUwMDMyWhcNMjYwMzMwMDUwMDMyWjAzMTEwLwYDVQQD
EyhiYTViYTVhZTRhODEzY2UxZWU4MmEyNWExNjRkMzVkMzVmNzRmMTA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsK6md9k6YK3dyIllJ5peDdrpAwkY
FmwSp6Cm+NX+hJkjJl6X+tjiUCLRRjSnkyCf+WmbapJrF2vTwieFwS8kC3RADFjP
DKNjZNI9c2bLAKzU3JezAoDo4EeCyPBAvsQ99QWGEUTPeWjiiquwNqSnEp++eOxH
ndNmYKgfCn0s4mOr0gP4j6693dQAO+VNQmG1b+tFS+g/7Xx8X8gD1j555ex3YcTX
yuchTcStGs7LUTZJizL3RCD19DV2OXZ45aMG8asQJmXK8mcnOgfub0B7mRNKu+Tj
RKC95EhgOb2BlLE85NM7jzx//089PMpgCO7UDY0Jr/i35u+NubzTQgUrfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLpbpa5KgTzh7oKiWhZNNdNfdPEHMB8GA1UdIwQY
MBaAFAruruCGPR3KYk9h85shgcfbbLo/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3U2dTRJWTlIY3BpVDJIem15R0J4OXRzdWo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi9iNjI4NzgtY2NjOC00ZDU3LTlmZTAt
N2ExMDRiODBjZDcxLzEvQ3U2dTRJWTlIY3BpVDJIem15R0J4OXRzdWo4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi9iNjI4NzgtY2NjOC00ZDU3LTlmZTAtN2ExMDRiODBjZDcx
LzEvQ3U2dTRJWTlIY3BpVDJIem15R0J4OXRzdWo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA6Wc9NTu
AXz8Bx68pIF78fH7N8DdguDBxkeAUZaN4mW1WhXRT1zT3Puk1x34wq6JClUo00Ty
R4UE70SE4XonVvnFweJU2B5MqE5TF2b+4k4GhMwIYrheXzdszUoY7Wj2ZyyMfZEJ
OP/SbsaDmM4bFKFAuB895CvEXetPYaX0fBtjAJ3GwylCH73+J0m51q+hMFSOWST1
wL0iarCiy0bUwLBGbGUBFftNDZwdDzNwRqL/qhNJHC4rvv6bQdHaG2f3p1xtJUBm
Qf+K6pYOVpS4V8qibYDoFXyDd+b6HQjVouP3r2dRxIxnoxfeGIM0ecuy3WlN19GH
4SJkSuQyHQNuZA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:56 2026 by rpki-client