Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/e112fc-05ef-4f1f-85be-7c9e684ccce2/1/CuQnEByy4r1WUITeZHH260jST5Y.mft
File: CuQnEByy4r1WUITeZHH260jST5Y.mft (raw, json)
Hash identifier: iaNm4Q8IR8Ykywr/by1moM46NtrtTyGA4eUDp6AFuaw=
Subject key identifier: 35:2B:0E:C5:D1:81:EA:90:47:9E:5D:10:6A:E1:CD:D1:B7:49:DD:2A
Authority key identifier: 0A:E4:27:10:1C:B2:E2:BD:56:50:84:DE:64:71:F6:EB:48:D2:4F:96
Certificate issuer: /CN=0ae427101cb2e2bd565084de6471f6eb48d24f96
Certificate serial: 01A001A68066BCB887D5651F963215177EA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CuQnEByy4r1WUITeZHH260jST5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/e112fc-05ef-4f1f-85be-7c9e684ccce2/1/CuQnEByy4r1WUITeZHH260jST5Y.mft
Manifest number: 0F9F
Signing time: Fri 14 Aug 2026 19:01:24 +0000
Manifest this update: Fri 14 Aug 2026 19:01:24 +0000
Manifest next update: Sat 15 Aug 2026 19:01:24 +0000
Files and hashes: 1: CuQnEByy4r1WUITeZHH260jST5Y.crl (hash: OCAoMYPjvogjvumHs2teTJOTkWuS0HpYuivsq6f9hn8=)
2: uhdMtBOA3cYoynFIaKtZYsj7lSg.roa (hash: VF0DL8K8+TXT+eVaeExhkpXzBIJGAgs45oDbj/IFdpY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/e112fc-05ef-4f1f-85be-7c9e684ccce2/1/CuQnEByy4r1WUITeZHH260jST5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/e112fc-05ef-4f1f-85be-7c9e684ccce2/1/CuQnEByy4r1WUITeZHH260jST5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/CuQnEByy4r1WUITeZHH260jST5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:a6:80:66:bc:b8:87:d5:65:1f:96:32:15:17:7e:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ae427101cb2e2bd565084de6471f6eb48d24f96
Validity
Not Before: Aug 14 19:01:24 2026 GMT
Not After : Aug 15 19:01:24 2026 GMT
Subject: CN=352b0ec5d181ea90479e5d106ae1cdd1b749dd2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:85:3c:18:ff:5b:76:74:dc:c7:65:0e:0d:eb:
44:9a:97:47:00:33:d3:20:63:ba:b7:bc:4b:19:52:
68:f7:94:94:a4:cb:9b:b6:99:96:05:9e:bf:0c:6e:
5c:06:67:26:f8:a1:79:a3:2e:3e:8e:b7:b1:3e:38:
c9:8c:6d:2a:37:71:11:dc:92:e3:92:66:31:66:13:
13:db:fa:3e:5d:e4:84:10:b1:d9:f0:d0:80:e1:bd:
e7:ca:f8:75:1c:60:0a:dc:e1:95:90:77:18:65:01:
c8:10:1e:59:cc:3a:27:9e:68:08:a7:7e:33:c8:0d:
5d:cd:86:59:cb:2d:f3:0c:fc:fa:b4:31:fc:db:50:
16:0e:29:a8:13:80:5c:84:e1:08:42:38:e3:4d:b8:
30:7f:45:7c:49:dd:2e:fa:ff:61:91:ac:8f:47:7b:
bc:0e:11:e5:40:95:ca:7f:cc:d4:78:49:0f:b4:28:
b4:e7:e2:da:99:20:e2:a3:da:d1:a5:d0:da:ad:fa:
cf:49:7d:df:58:1b:35:7e:83:e5:3a:52:82:69:fd:
ab:0b:4e:b8:e1:5f:ba:a1:36:ae:ab:52:ea:6e:eb:
9e:ca:39:41:c7:eb:92:67:6f:68:2b:27:82:12:8a:
ec:d6:62:2c:66:b9:2e:b1:66:e8:12:4f:d4:66:58:
98:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:2B:0E:C5:D1:81:EA:90:47:9E:5D:10:6A:E1:CD:D1:B7:49:DD:2A
X509v3 Authority Key Identifier:
keyid:0A:E4:27:10:1C:B2:E2:BD:56:50:84:DE:64:71:F6:EB:48:D2:4F:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CuQnEByy4r1WUITeZHH260jST5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/e112fc-05ef-4f1f-85be-7c9e684ccce2/1/CuQnEByy4r1WUITeZHH260jST5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/e112fc-05ef-4f1f-85be-7c9e684ccce2/1/CuQnEByy4r1WUITeZHH260jST5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:53:d4:d8:95:5f:64:01:24:b6:1a:e6:99:9d:4a:7f:3f:95:
30:96:48:a1:f7:b1:eb:96:5f:2e:a2:e7:17:a8:8f:4a:32:57:
42:bd:d2:8d:5a:78:cb:bb:c5:e2:d9:4c:06:fc:df:86:d3:3c:
93:64:b3:22:8b:a3:fb:bb:30:07:4f:b5:5a:29:d4:1b:5b:11:
38:13:b9:89:b0:27:0e:6b:b0:2e:8a:5b:c6:e8:28:63:26:d7:
a4:84:18:60:60:d8:0f:77:4e:ed:29:17:9f:4d:2a:fc:dd:26:
7c:c9:73:a9:aa:1e:16:88:6a:4a:46:f8:41:a4:98:ab:4d:e8:
95:4c:b5:9d:3e:5b:7e:d7:cd:46:61:cd:28:12:7d:37:9f:8f:
85:db:9e:a8:4c:d1:ad:7a:e0:11:0a:e5:9c:19:57:01:3d:53:
c0:e2:39:0f:d7:e8:a3:11:ca:ca:21:a7:b2:5f:b0:48:50:45:
94:7a:3b:75:ff:f6:ad:91:df:5e:88:3e:7c:82:22:12:ee:29:
0a:c4:10:a2:8d:3d:46:39:78:4f:78:fb:bb:55:9b:50:4b:e9:
f4:07:ee:01:eb:d5:8c:3e:5c:69:d7:0e:73:df:83:8f:99:06:
bf:28:23:61:2a:46:c5:00:d5:20:ce:8c:dc:df:a6:46:72:44:
cf:b1:f1:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaABpoBmvLiH1WUfljIVF36iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhZTQyNzEwMWNiMmUyYmQ1NjUwODRkZTY0NzFmNmViNDhk
MjRmOTYwHhcNMjYwODE0MTkwMTI0WhcNMjYwODE1MTkwMTI0WjAzMTEwLwYDVQQD
EygzNTJiMGVjNWQxODFlYTkwNDc5ZTVkMTA2YWUxY2RkMWI3NDlkZDJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4IU8GP9bdnTcx2UODetEmpdHADPT
IGO6t7xLGVJo95SUpMubtpmWBZ6/DG5cBmcm+KF5oy4+jrexPjjJjG0qN3ER3JLj
kmYxZhMT2/o+XeSEELHZ8NCA4b3nyvh1HGAK3OGVkHcYZQHIEB5ZzDonnmgIp34z
yA1dzYZZyy3zDPz6tDH821AWDimoE4BchOEIQjjjTbgwf0V8Sd0u+v9hkayPR3u8
DhHlQJXKf8zUeEkPtCi05+LamSDio9rRpdDarfrPSX3fWBs1foPlOlKCaf2rC064
4V+6oTauq1LqbuueyjlBx+uSZ29oKyeCEors1mIsZrkusWboEk/UZliYFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDUrDsXRgeqQR55dEGrhzdG3Sd0qMB8GA1UdIwQY
MBaAFArkJxAcsuK9VlCE3mRx9utI0k+WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3VRbkVCeXk0cjFXVUlUZVpISDI2MGpTVDVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9lMTEyZmMtMDVlZi00ZjFmLTg1YmUt
N2M5ZTY4NGNjY2UyLzEvQ3VRbkVCeXk0cjFXVUlUZVpISDI2MGpTVDVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC9lMTEyZmMtMDVlZi00ZjFmLTg1YmUtN2M5ZTY4NGNjY2Uy
LzEvQ3VRbkVCeXk0cjFXVUlUZVpISDI2MGpTVDVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXVPU2JVf
ZAEkthrmmZ1Kfz+VMJZIofex65ZfLqLnF6iPSjJXQr3SjVp4y7vF4tlMBvzfhtM8
k2SzIouj+7swB0+1WinUG1sROBO5ibAnDmuwLopbxugoYybXpIQYYGDYD3dO7SkX
n00q/N0mfMlzqaoeFohqSkb4QaSYq03olUy1nT5bftfNRmHNKBJ9N5+PhdueqEzR
rXrgEQrlnBlXAT1TwOI5D9fooxHKyiGnsl+wSFBFlHo7df/2rZHfXog+fIIiEu4p
CsQQoo09Rjl4T3j7u1WbUEvp9AfuAevVjD5cadcOc9+Dj5kGvygjYSpGxQDVIM6M
3N+mRnJEz7Hxow==
-----END CERTIFICATE-----
Generated at Fri Aug 14 22:25:13 2026 by rpki-client