Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.mft
File: CuS8lAHZ-HdyyMnGmDQHdRL0JhE.mft (raw, json)
Hash identifier: lnm0x+SdVjCDFJL5dFMIop/UQsvfON2kXcoHUKjADOc=
Subject key identifier: 5E:B9:4D:35:96:E5:F7:3D:2A:F2:27:BF:BE:E5:75:2D:BD:7F:A5:C0
Authority key identifier: 0A:E4:BC:94:01:D9:F8:77:72:C8:C9:C6:98:34:07:75:12:F4:26:11
Certificate issuer: /CN=0ae4bc9401d9f87772c8c9c69834077512f42611
Certificate serial: 019CE2226D73C98CABD159267AC45FAD6FDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.mft
Manifest number: 0158
Signing time: Thu 12 Mar 2026 13:00:32 +0000
Manifest this update: Thu 12 Mar 2026 13:00:32 +0000
Manifest next update: Fri 13 Mar 2026 13:00:32 +0000
Files and hashes: 1: CuS8lAHZ-HdyyMnGmDQHdRL0JhE.crl (hash: n2lLG5KwRx5CWM3db2jML7daOPottsP40rELzkP1tKQ=)
2: Yfjs6TdYq1sgdFM7cqb-qtekrNU.roa (hash: P4sQK9USZfTa1aICp1B8s88VX1ymEKIke0FrnNDds28=)
3: lN94pD7ai5OUJubsRp4mNzHp4U0.roa (hash: Kg4NFToY9jwNR516lKmTZhRo725Vd2ZsUfAcCos3+og=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 13:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e2:22:6d:73:c9:8c:ab:d1:59:26:7a:c4:5f:ad:6f:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ae4bc9401d9f87772c8c9c69834077512f42611
Validity
Not Before: Mar 12 13:00:32 2026 GMT
Not After : Mar 13 13:00:32 2026 GMT
Subject: CN=5eb94d3596e5f73d2af227bfbee5752dbd7fa5c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ab:72:f6:0c:d9:12:d3:f6:1b:00:e5:a0:88:
ce:88:c3:4a:24:6b:5b:5a:1a:ae:8e:f6:85:7d:c2:
95:17:3e:64:01:9e:9c:c8:ab:9c:eb:4b:ee:c3:15:
cc:54:81:f1:ee:03:67:c7:c1:27:3e:96:83:01:37:
66:09:e5:b0:f5:b8:87:77:4f:80:c3:06:6c:39:11:
8f:de:e4:f2:c1:ab:fb:5f:41:18:ab:db:d6:07:6f:
63:23:48:a9:9d:14:be:23:c5:09:1b:59:26:70:df:
8c:d1:3a:19:95:e2:db:61:ab:5e:96:65:41:fd:5a:
10:20:20:c8:69:3b:3d:c6:88:ca:33:65:32:8e:5b:
16:57:16:5d:6c:22:29:0c:4e:f8:c7:e0:f6:ed:96:
d0:f0:3c:3b:c1:1e:06:20:3c:43:0b:19:e5:e0:f6:
9b:59:19:12:6b:c4:92:0e:97:18:05:6b:63:39:c2:
eb:0d:e3:77:51:18:e5:42:10:67:68:4d:67:a4:9e:
a7:0c:b6:ae:c0:66:c3:e7:54:e3:cb:46:f9:23:8a:
fd:c6:6c:c8:d0:e0:eb:3f:75:bd:7a:6d:11:8a:ca:
7f:7a:2b:e4:93:54:96:df:ab:05:7f:44:87:b2:be:
41:9a:f4:16:67:da:fa:8a:f2:7d:62:90:54:2b:a1:
a3:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:B9:4D:35:96:E5:F7:3D:2A:F2:27:BF:BE:E5:75:2D:BD:7F:A5:C0
X509v3 Authority Key Identifier:
keyid:0A:E4:BC:94:01:D9:F8:77:72:C8:C9:C6:98:34:07:75:12:F4:26:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:eb:8a:78:93:13:b1:40:9c:24:ba:cc:3f:fe:af:d7:05:38:
52:e5:2b:74:7b:ad:51:29:82:a7:7e:52:a2:aa:90:fc:19:aa:
a4:5d:ef:c6:c0:c2:ec:3b:4e:ae:1f:10:b4:56:36:46:bb:85:
3d:8d:d8:db:2e:19:30:ee:94:29:14:84:e3:c7:c5:b9:64:95:
19:77:c1:12:94:13:14:22:bf:6b:59:9f:98:97:51:e3:a2:b1:
89:90:0e:4b:94:50:48:0f:9e:12:1d:70:ea:6b:a4:bb:60:b1:
5d:62:ce:e6:69:2c:ab:52:f1:9d:dc:e9:83:ec:74:68:3f:36:
40:2e:67:69:80:f2:d8:ae:7d:78:a4:62:1d:da:9a:61:dc:f9:
9c:22:79:64:53:5d:d2:40:81:5a:cd:c2:20:fd:ee:45:b6:07:
68:f2:ac:2c:42:1f:eb:34:c8:30:27:09:4d:c8:d7:d0:8a:3a:
15:4f:48:95:6a:f0:3e:ec:f4:50:41:4a:e5:b2:c9:8e:eb:2e:
d6:db:f5:8a:d1:db:6c:b9:57:64:22:66:69:44:63:c7:31:f5:
ce:0e:29:5a:71:68:3a:39:30:4e:70:c9:f4:6a:ca:c7:94:77:
24:6a:55:5c:6f:f5:df:22:17:8f:10:ba:52:90:64:6d:04:5c:
c6:54:88:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 20:10:21 2026 by rpki-client