Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/e112fc-05ef-4f1f-85be-7c9e684ccce2/1/CuQnEByy4r1WUITeZHH260jST5Y.mft
File: CuQnEByy4r1WUITeZHH260jST5Y.mft (raw, json)
Hash identifier: ZioBr54Wyp8p3IAxR/295Mw5JcLoHLEiwWUgETeQkQ8=
Subject key identifier: A8:4B:A6:FB:FB:1F:5F:89:E7:E0:77:0A:01:C7:10:65:4E:A3:CD:60
Authority key identifier: 0A:E4:27:10:1C:B2:E2:BD:56:50:84:DE:64:71:F6:EB:48:D2:4F:96
Certificate issuer: /CN=0ae427101cb2e2bd565084de6471f6eb48d24f96
Certificate serial: 019D390993DF5CA70E9AF18FED3AE0D598D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CuQnEByy4r1WUITeZHH260jST5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/e112fc-05ef-4f1f-85be-7c9e684ccce2/1/CuQnEByy4r1WUITeZHH260jST5Y.mft
Manifest number: 0E2E
Signing time: Sun 29 Mar 2026 10:00:22 +0000
Manifest this update: Sun 29 Mar 2026 10:00:22 +0000
Manifest next update: Mon 30 Mar 2026 10:00:22 +0000
Files and hashes: 1: CuQnEByy4r1WUITeZHH260jST5Y.crl (hash: kAZErM6PHO2xnfnljU9A+El/eX7BdvAvaplnEbajmU0=)
2: uhdMtBOA3cYoynFIaKtZYsj7lSg.roa (hash: VF0DL8K8+TXT+eVaeExhkpXzBIJGAgs45oDbj/IFdpY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/e112fc-05ef-4f1f-85be-7c9e684ccce2/1/CuQnEByy4r1WUITeZHH260jST5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/e112fc-05ef-4f1f-85be-7c9e684ccce2/1/CuQnEByy4r1WUITeZHH260jST5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/CuQnEByy4r1WUITeZHH260jST5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:93:df:5c:a7:0e:9a:f1:8f:ed:3a:e0:d5:98:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ae427101cb2e2bd565084de6471f6eb48d24f96
Validity
Not Before: Mar 29 10:00:22 2026 GMT
Not After : Mar 30 10:00:22 2026 GMT
Subject: CN=a84ba6fbfb1f5f89e7e0770a01c710654ea3cd60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:cb:4f:c2:85:80:4f:35:eb:7d:29:91:83:3a:
10:df:f7:7f:e0:de:db:77:8e:6d:37:17:e9:25:6e:
b2:64:5d:ff:9b:92:72:cc:69:51:f3:69:9d:60:bc:
8c:46:85:a4:c0:8f:ea:63:2b:31:c1:9e:78:13:15:
8b:c3:cf:71:48:89:e4:a6:90:2e:f3:4d:d5:39:8f:
38:15:d3:42:63:d3:2e:72:ba:80:aa:e1:e2:a6:d7:
92:22:64:a0:6e:cc:50:43:4a:f9:82:f7:37:07:20:
73:ec:9e:05:1e:b6:b0:93:f1:a6:48:41:90:17:14:
03:fe:e3:c3:5e:21:4b:58:98:0c:f9:6a:89:b8:73:
36:c7:79:2f:fe:e8:b4:39:22:dc:a7:fd:c1:a5:a3:
03:e6:19:78:40:77:00:d4:7f:66:6f:ca:fc:0e:cf:
2c:95:13:91:5e:d8:ba:b3:0b:f0:58:ef:01:63:9d:
6d:4e:d0:3a:3f:19:53:46:6f:5a:a5:8f:dd:9c:07:
b9:94:68:dd:a2:fd:39:e4:0f:93:49:13:54:7c:9e:
62:eb:3b:8f:1d:58:c7:99:c2:7f:15:e0:bc:82:4e:
57:e6:83:47:b2:5f:7b:f2:bf:73:99:c9:01:a0:7f:
bf:12:35:0a:a5:44:1f:74:ac:2f:09:99:b5:cb:bf:
07:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:4B:A6:FB:FB:1F:5F:89:E7:E0:77:0A:01:C7:10:65:4E:A3:CD:60
X509v3 Authority Key Identifier:
keyid:0A:E4:27:10:1C:B2:E2:BD:56:50:84:DE:64:71:F6:EB:48:D2:4F:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CuQnEByy4r1WUITeZHH260jST5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/e112fc-05ef-4f1f-85be-7c9e684ccce2/1/CuQnEByy4r1WUITeZHH260jST5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/e112fc-05ef-4f1f-85be-7c9e684ccce2/1/CuQnEByy4r1WUITeZHH260jST5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:e2:e6:e2:11:cf:21:50:49:f2:33:f1:e2:c8:7d:a3:39:96:
29:21:98:34:d2:ef:c0:3f:47:bb:ea:cb:7c:3e:55:41:32:84:
b1:75:ba:30:4c:31:5e:9a:e8:00:85:dd:a7:51:ed:fa:92:91:
48:8e:25:f7:cf:a3:44:2b:14:4c:fa:4f:08:12:35:0c:f3:de:
b2:30:f9:ad:54:e6:21:9f:33:ac:d1:82:4a:1e:37:f3:15:65:
95:e9:b5:7a:14:a6:2b:bf:e3:32:9d:be:17:1f:82:9a:63:48:
30:d1:c1:e5:d4:21:ac:c2:2e:15:64:3e:c7:d1:6d:e6:1a:b6:
4e:4a:20:56:63:c7:cf:f3:23:fe:36:e8:bc:ba:39:39:b1:12:
94:9c:28:a7:58:2b:b6:c9:86:9b:fa:55:79:45:29:79:72:94:
ba:81:5b:bb:cf:16:27:a0:ec:be:d1:b9:44:a2:5a:ec:ef:0d:
4f:d3:fb:fa:5c:3f:fa:19:49:b0:67:c2:25:de:06:93:9c:4b:
2e:a5:48:14:4d:8c:a7:d5:a4:7c:67:c2:ca:f3:5c:5f:f3:fb:
f2:af:63:1d:7e:af:74:4d:11:06:47:97:6e:71:7e:89:c6:e5:
5d:83:18:b7:65:c8:d4:5e:41:6f:b1:29:bc:3e:10:03:80:ac:
b0:5c:26:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05CZPfXKcOmvGP7Trg1ZjUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhZTQyNzEwMWNiMmUyYmQ1NjUwODRkZTY0NzFmNmViNDhk
MjRmOTYwHhcNMjYwMzI5MTAwMDIyWhcNMjYwMzMwMTAwMDIyWjAzMTEwLwYDVQQD
EyhhODRiYTZmYmZiMWY1Zjg5ZTdlMDc3MGEwMWM3MTA2NTRlYTNjZDYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArstPwoWATzXrfSmRgzoQ3/d/4N7b
d45tNxfpJW6yZF3/m5JyzGlR82mdYLyMRoWkwI/qYysxwZ54ExWLw89xSInkppAu
803VOY84FdNCY9MucrqAquHipteSImSgbsxQQ0r5gvc3ByBz7J4FHrawk/GmSEGQ
FxQD/uPDXiFLWJgM+WqJuHM2x3kv/ui0OSLcp/3BpaMD5hl4QHcA1H9mb8r8Ds8s
lRORXti6swvwWO8BY51tTtA6PxlTRm9apY/dnAe5lGjdov055A+TSRNUfJ5i6zuP
HVjHmcJ/FeC8gk5X5oNHsl978r9zmckBoH+/EjUKpUQfdKwvCZm1y78HoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKhLpvv7H1+J5+B3CgHHEGVOo81gMB8GA1UdIwQY
MBaAFArkJxAcsuK9VlCE3mRx9utI0k+WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3VRbkVCeXk0cjFXVUlUZVpISDI2MGpTVDVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9lMTEyZmMtMDVlZi00ZjFmLTg1YmUt
N2M5ZTY4NGNjY2UyLzEvQ3VRbkVCeXk0cjFXVUlUZVpISDI2MGpTVDVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC9lMTEyZmMtMDVlZi00ZjFmLTg1YmUtN2M5ZTY4NGNjY2Uy
LzEvQ3VRbkVCeXk0cjFXVUlUZVpISDI2MGpTVDVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeOLm4hHP
IVBJ8jPx4sh9ozmWKSGYNNLvwD9Hu+rLfD5VQTKEsXW6MEwxXproAIXdp1Ht+pKR
SI4l98+jRCsUTPpPCBI1DPPesjD5rVTmIZ8zrNGCSh438xVllem1ehSmK7/jMp2+
Fx+CmmNIMNHB5dQhrMIuFWQ+x9Ft5hq2TkogVmPHz/Mj/jbovLo5ObESlJwop1gr
tsmGm/pVeUUpeXKUuoFbu88WJ6DsvtG5RKJa7O8NT9P7+lw/+hlJsGfCJd4Gk5xL
LqVIFE2Mp9WkfGfCyvNcX/P78q9jHX6vdE0RBkeXbnF+icblXYMYt2XI1F5Bb7Ep
vD4QA4CssFwmjA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 16:25:10 2026 by rpki-client