Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/e112fc-05ef-4f1f-85be-7c9e684ccce2/1/CuQnEByy4r1WUITeZHH260jST5Y.mft
File: CuQnEByy4r1WUITeZHH260jST5Y.mft (raw, json)
Hash identifier: MK7DObQqJFZ+d2moXseHQvRCeZ7lpju44PN8FmLz/6A=
Subject key identifier: F4:CB:30:B3:13:AF:B8:A5:88:92:8E:71:C7:44:B5:8D:E8:16:A9:C5
Authority key identifier: 0A:E4:27:10:1C:B2:E2:BD:56:50:84:DE:64:71:F6:EB:48:D2:4F:96
Certificate issuer: /CN=0ae427101cb2e2bd565084de6471f6eb48d24f96
Certificate serial: 019E303BC0473FC1C252E45DAF72CA4680E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CuQnEByy4r1WUITeZHH260jST5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/e112fc-05ef-4f1f-85be-7c9e684ccce2/1/CuQnEByy4r1WUITeZHH260jST5Y.mft
Manifest number: 0EAE
Signing time: Sat 16 May 2026 10:01:22 +0000
Manifest this update: Sat 16 May 2026 10:01:22 +0000
Manifest next update: Sun 17 May 2026 10:01:22 +0000
Files and hashes: 1: CuQnEByy4r1WUITeZHH260jST5Y.crl (hash: PvQ9Ds22L/i+awdyMUJFTTUfuZUXJUlXVn0H6TJl24o=)
2: uhdMtBOA3cYoynFIaKtZYsj7lSg.roa (hash: VF0DL8K8+TXT+eVaeExhkpXzBIJGAgs45oDbj/IFdpY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/e112fc-05ef-4f1f-85be-7c9e684ccce2/1/CuQnEByy4r1WUITeZHH260jST5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/e112fc-05ef-4f1f-85be-7c9e684ccce2/1/CuQnEByy4r1WUITeZHH260jST5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/CuQnEByy4r1WUITeZHH260jST5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 10:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:3b:c0:47:3f:c1:c2:52:e4:5d:af:72:ca:46:80:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ae427101cb2e2bd565084de6471f6eb48d24f96
Validity
Not Before: May 16 10:01:22 2026 GMT
Not After : May 17 10:01:22 2026 GMT
Subject: CN=f4cb30b313afb8a588928e71c744b58de816a9c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d9:8e:d2:6e:57:6e:50:ce:ee:45:80:bb:02:
2a:f7:bf:d6:40:22:b4:5a:ef:ff:13:1f:10:85:d1:
34:3e:4c:2e:ef:86:f3:60:20:b9:66:a8:ef:94:72:
84:d8:d2:c2:bf:f5:d5:81:55:1c:78:6b:ce:9d:a3:
8c:f4:79:44:20:5a:38:d7:b4:fa:78:40:d8:f3:57:
c0:4f:69:74:9f:37:23:ed:99:98:63:dc:e4:b9:7a:
15:56:1b:6d:03:03:ab:45:59:ee:ab:c8:d7:2f:c6:
7f:01:53:7f:4b:7d:ae:38:51:e9:99:19:5c:3b:76:
bb:2d:55:ef:88:71:a0:a9:1f:c0:4a:e7:41:f6:36:
d5:4c:e8:ac:13:23:b2:ae:df:4a:c0:7e:f1:65:54:
ce:50:48:b3:6a:75:7c:c5:21:0c:1a:4a:01:8a:5d:
97:4d:a4:dc:0b:9c:57:3d:03:6d:03:92:77:e4:96:
4c:bd:20:c8:4e:46:96:fa:92:bd:58:4d:fe:87:b6:
5d:f4:19:ba:77:e7:18:ea:16:17:b0:13:cd:f6:5f:
05:aa:27:75:d0:cf:6e:8f:77:89:a2:52:a1:c1:bb:
1a:01:cf:72:35:09:26:53:1a:0f:2c:bc:86:d6:b6:
13:4b:59:c6:96:64:89:3c:51:df:f2:19:32:24:bd:
03:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:CB:30:B3:13:AF:B8:A5:88:92:8E:71:C7:44:B5:8D:E8:16:A9:C5
X509v3 Authority Key Identifier:
keyid:0A:E4:27:10:1C:B2:E2:BD:56:50:84:DE:64:71:F6:EB:48:D2:4F:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CuQnEByy4r1WUITeZHH260jST5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/e112fc-05ef-4f1f-85be-7c9e684ccce2/1/CuQnEByy4r1WUITeZHH260jST5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/e112fc-05ef-4f1f-85be-7c9e684ccce2/1/CuQnEByy4r1WUITeZHH260jST5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:07:20:34:db:d4:79:a5:9f:5c:8d:ac:8a:49:52:5e:37:16:
0b:2b:e2:bd:3a:99:82:dc:30:fb:80:d4:30:5c:6b:af:34:7b:
cc:5f:73:55:c1:bc:c8:37:a8:52:5c:64:9e:4f:76:33:e0:e4:
b9:71:14:b6:1f:58:cd:4d:4b:cc:b5:d6:9c:87:f8:41:ed:62:
d8:30:b8:a9:92:b4:88:53:61:91:16:d7:37:b0:50:93:49:33:
9f:b1:b0:42:ea:04:80:f1:2d:1b:a1:2b:c2:5e:61:a7:f8:4a:
e7:31:1f:d8:1a:61:48:00:f8:40:c1:f5:49:1d:8e:85:11:d4:
41:52:3b:88:42:3c:3a:bf:79:bc:02:96:33:e3:db:36:58:aa:
f8:8e:69:f9:48:94:c5:b1:7c:2d:38:07:c2:63:21:27:91:3d:
97:92:81:17:22:31:15:9b:6e:1f:42:83:b3:e2:78:ed:ee:97:
c8:11:bc:92:b7:84:65:cc:fc:3b:1b:93:1d:4e:4b:fa:c1:1d:
a2:b7:6d:00:a7:19:6f:33:f9:76:3d:64:5f:54:44:f5:88:e8:
c7:e6:bd:a8:9c:ca:65:48:ef:34:9c:83:35:84:57:3e:b6:3f:
3a:a0:7b:05:4b:5d:7d:08:d2:38:6f:46:06:ea:66:83:82:50:
6d:d1:84:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 19:30:25 2026 by rpki-client