Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.mft
File: CuS8lAHZ-HdyyMnGmDQHdRL0JhE.mft (raw, json)
Hash identifier: VRqwDwhVaDOCVX4P2ubSdEx5/rlkson/Ck4/9x76j5M=
Subject key identifier: 04:D1:AF:FE:33:C3:02:FB:32:E7:1B:07:E1:75:C6:72:2F:2F:AB:49
Authority key identifier: 0A:E4:BC:94:01:D9:F8:77:72:C8:C9:C6:98:34:07:75:12:F4:26:11
Certificate issuer: /CN=0ae4bc9401d9f87772c8c9c69834077512f42611
Certificate serial: 01A180068EA23A1B6F38AF50C2FD2658BD4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.mft
Manifest number: 03C3
Signing time: Wed 28 Oct 2026 01:01:15 +0000
Manifest this update: Wed 28 Oct 2026 01:01:15 +0000
Manifest next update: Thu 29 Oct 2026 01:01:15 +0000
Files and hashes: 1: CuS8lAHZ-HdyyMnGmDQHdRL0JhE.crl (hash: FJkyIwQrQm689mhHkehO+7rTYh49bKgNvYCjt2LkviA=)
2: XnXJKqTzXUegKaYr4g7Xyqqne1k.roa (hash: CQReL6no3oMoU4ZSnWxS6igEc/veiJgwlMJ/ZxyLRAE=)
3: YFuhprzegpzjyzRqf7NfCJJvnCU.roa (hash: g6/NKVQlpDAQFcp2/Xrt9tSnOzjcZZUj36Y74zoE9VA=)
4: cnsxttgiA36XaxV7JTaPeGuyqcc.roa (hash: sGH8WpARX1yy3ntIk+i6n6hKVKz1lO8h7OZfbTYPFoA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:80:06:8e:a2:3a:1b:6f:38:af:50:c2:fd:26:58:bd:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ae4bc9401d9f87772c8c9c69834077512f42611
Validity
Not Before: Oct 28 01:01:15 2026 GMT
Not After : Oct 29 01:01:15 2026 GMT
Subject: CN=04d1affe33c302fb32e71b07e175c6722f2fab49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:c8:4f:c0:ae:67:45:80:aa:61:60:10:cc:5c:
08:2a:0e:91:58:26:1d:c9:35:d0:8e:47:99:53:30:
e9:e4:8d:6a:94:38:e0:52:85:fd:84:10:76:ee:75:
c6:f3:11:12:76:4b:3b:05:f2:5a:b9:15:c6:1e:43:
06:3d:2b:a2:58:58:84:72:5d:a5:14:aa:a9:94:b9:
7d:75:ab:c0:8a:14:56:5c:d9:e8:26:72:44:71:78:
e3:03:3f:73:6d:1e:73:e6:06:07:b5:01:5b:09:67:
3d:b8:43:91:af:1c:0a:3f:92:80:30:06:f5:ea:6f:
82:d4:38:6c:e2:07:6b:54:46:dd:1a:bb:0e:de:0c:
2c:18:e8:36:b5:b6:3c:bf:7b:70:af:5a:95:71:19:
b6:01:e1:9e:ec:3f:34:d3:47:a6:9f:e3:b2:e7:17:
89:0b:e2:fe:e8:ec:09:8c:08:f2:28:72:e9:bb:60:
4c:f0:50:6b:04:18:33:66:45:e6:bb:3a:b5:67:a2:
0f:96:7f:38:ab:60:17:99:8a:63:93:32:1d:57:b1:
d8:49:df:02:96:06:85:86:6b:21:27:a3:1e:c2:9f:
54:1e:ea:df:0b:87:ef:b3:62:b6:f0:86:18:33:a8:
18:62:ba:36:90:47:d8:a2:2c:de:6d:e0:fe:b3:da:
5a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:D1:AF:FE:33:C3:02:FB:32:E7:1B:07:E1:75:C6:72:2F:2F:AB:49
X509v3 Authority Key Identifier:
keyid:0A:E4:BC:94:01:D9:F8:77:72:C8:C9:C6:98:34:07:75:12:F4:26:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:4f:2d:c2:6f:01:98:fb:99:86:6a:53:27:fc:89:d2:fd:41:
94:32:61:13:f0:a0:87:ec:0f:52:2d:a0:35:e0:9c:b6:79:11:
6d:00:aa:8a:a8:3d:90:ca:21:dc:3b:0b:3a:58:e9:a6:8e:b3:
56:18:cf:2f:ec:3e:21:c4:c7:13:cd:38:83:42:0a:5e:96:4d:
1e:d4:ce:f0:57:76:35:31:87:60:cf:e5:ae:85:c7:e8:89:22:
ce:e2:09:e8:49:b5:60:16:12:b0:96:ff:9c:ac:54:a4:33:3b:
d5:2a:4e:2a:c6:5a:a4:4f:c2:0f:d4:e8:cb:7e:ac:9d:41:81:
3f:86:38:5a:9e:81:83:0e:c5:dc:43:3e:af:a3:06:07:67:f2:
f2:aa:20:88:c5:2f:3c:72:7b:92:48:10:6f:7c:2b:69:6c:c8:
7e:6d:79:4d:5f:8e:43:3b:3f:a9:d7:6f:65:2b:65:35:f8:fa:
33:4d:c1:82:00:6e:7f:87:0c:cd:29:3f:b5:82:78:78:7e:93:
a3:bd:ec:81:f4:ac:a1:8c:7f:73:d9:93:e4:5d:b5:ff:54:70:
67:06:7e:ff:d7:f1:a1:37:39:e0:ee:6a:4c:d8:42:f9:b7:67:
cd:4c:33:b5:e6:8b:7f:a1:3f:d6:ad:c4:7b:a4:78:a0:27:65:
7e:22:72:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 04:52:52 2026 by rpki-client