Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.mft
File: CuS8lAHZ-HdyyMnGmDQHdRL0JhE.mft (raw, json)
Hash identifier: yKRjeoIZ8x2bsOc4zVnw+JGlexoXWDO33Kn56bbD8Rk=
Subject key identifier: 63:D9:AD:2B:2E:45:90:C1:18:65:E0:63:32:B0:20:BD:58:D4:E2:EE
Authority key identifier: 0A:E4:BC:94:01:D9:F8:77:72:C8:C9:C6:98:34:07:75:12:F4:26:11
Certificate issuer: /CN=0ae4bc9401d9f87772c8c9c69834077512f42611
Certificate serial: 019F9EF173DDAC84EC384CE5484A53699A6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.mft
Manifest number: 02C8
Signing time: Sun 26 Jul 2026 15:00:51 +0000
Manifest this update: Sun 26 Jul 2026 15:00:51 +0000
Manifest next update: Mon 27 Jul 2026 15:00:51 +0000
Files and hashes: 1: 29UYfr5_5v18Af9DbXii6GgIkoU.roa (hash: eM2YUDdVXsnw8sDquecy+R4RMk/NFhfSmEv18aSE6AA=)
2: CuS8lAHZ-HdyyMnGmDQHdRL0JhE.crl (hash: IZ/YymhUb7MvgJ1HiVuiO8W6MRfPMEVvno/k0AW5bM8=)
3: IrAmy11rZJI6T7b9TOqwrK9lVyU.roa (hash: h9URKcjvU/CcITMUnrMcCY/cFNmMmE8d3RdTZSBmw+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9e:f1:73:dd:ac:84:ec:38:4c:e5:48:4a:53:69:9a:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ae4bc9401d9f87772c8c9c69834077512f42611
Validity
Not Before: Jul 26 15:00:51 2026 GMT
Not After : Jul 27 15:00:51 2026 GMT
Subject: CN=63d9ad2b2e4590c11865e06332b020bd58d4e2ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f0:a7:f1:d0:dc:72:2c:48:63:98:0c:4f:15:
b8:52:e9:ee:9a:f6:22:43:e2:03:8a:e0:7a:6b:a3:
f7:9f:0d:ca:35:ba:15:8e:26:63:de:ab:d0:1b:52:
ee:e0:bf:c4:6d:2e:e7:f3:80:37:73:95:5a:f2:98:
ab:59:ca:9b:6d:17:27:dd:a1:cb:db:84:b2:0e:24:
4c:a4:79:04:81:45:ee:b6:7c:24:8c:eb:01:d4:cf:
b8:29:00:08:74:c6:90:d0:7a:fa:56:84:c2:63:1f:
ad:f7:7e:fe:79:d1:39:3e:e0:7d:79:2e:b1:81:50:
31:8a:a0:5d:a7:35:e5:57:8e:2e:6b:b3:41:a2:ff:
fe:cf:db:cc:e7:12:2e:f9:72:b7:43:a8:e7:b8:d4:
73:35:d1:a7:c9:fe:3c:9d:82:bf:b3:22:7a:03:ad:
fb:1a:7f:94:67:fd:5e:08:53:6d:92:f8:82:4b:ab:
d8:ed:27:5e:29:1e:b2:11:55:aa:3d:5a:08:5e:f3:
d2:44:56:77:e9:2b:ed:07:f8:4c:8a:e1:68:8f:a1:
00:85:36:b8:0b:29:f0:c5:6f:0c:b2:9f:59:61:c9:
c7:f4:ed:6d:94:41:e3:64:d4:df:2c:21:50:53:cf:
2f:dd:7c:81:7c:9a:29:22:f2:ca:8d:e3:7d:08:dd:
54:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:D9:AD:2B:2E:45:90:C1:18:65:E0:63:32:B0:20:BD:58:D4:E2:EE
X509v3 Authority Key Identifier:
keyid:0A:E4:BC:94:01:D9:F8:77:72:C8:C9:C6:98:34:07:75:12:F4:26:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:0a:53:34:87:91:d9:19:fc:0a:cf:e8:a0:da:fa:43:98:55:
69:e0:55:d0:21:e8:08:df:4f:b1:c9:ef:2e:27:09:e1:2c:79:
9f:87:32:f9:b9:e9:7c:82:8a:b3:a7:e2:e7:0d:7e:a7:6c:d8:
dc:a6:d0:11:bb:39:e9:6a:8a:6f:17:20:82:79:af:66:4e:f6:
8c:7e:0e:8d:44:3a:5c:78:8b:37:d8:ed:c4:b9:8e:7b:b1:3c:
7e:9a:93:63:74:91:d4:15:5d:c9:1d:f7:d5:8d:0e:bd:0f:6e:
d3:c0:ed:c9:49:95:00:05:6f:69:b7:e0:d0:45:3a:25:02:4c:
8c:0b:60:c0:8f:2f:94:bf:ae:a6:e7:9f:97:76:e5:1a:0f:01:
bc:6d:c9:ac:bd:d1:eb:a2:e7:45:95:2c:8a:99:b6:1e:54:ec:
5a:17:f7:72:e5:ea:03:a9:01:12:b7:7e:67:73:98:c8:fa:94:
61:9b:28:4d:0c:f4:28:3c:f7:2a:b0:45:72:d5:f1:cc:5f:85:
f2:8f:58:dc:29:b1:de:90:a2:b1:ad:fa:21:28:02:40:23:97:
cc:0c:8f:7b:cf:5b:8f:af:05:c8:b2:95:81:bd:f0:fd:e9:fb:
f7:e2:a1:aa:0e:57:52:bd:9c:59:3b:a2:92:f6:fd:ff:bf:3c:
8c:8d:ce:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 19:01:11 2026 by rpki-client