Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.mft
File: CuS8lAHZ-HdyyMnGmDQHdRL0JhE.mft (raw, json)
Hash identifier: VPlm0B+lqx7HHrZD4DRNX4RDQa6fsSE9TnI/Kpe9WoE=
Subject key identifier: 2C:AE:9A:71:5B:C9:09:43:4E:9F:C0:20:A7:51:E4:A9:4E:A6:C6:7A
Authority key identifier: 0A:E4:BC:94:01:D9:F8:77:72:C8:C9:C6:98:34:07:75:12:F4:26:11
Certificate issuer: /CN=0ae4bc9401d9f87772c8c9c69834077512f42611
Certificate serial: 019EB62081D314E396239B02323DEC988D22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.mft
Manifest number: 024F
Signing time: Thu 11 Jun 2026 10:00:44 +0000
Manifest this update: Thu 11 Jun 2026 10:00:44 +0000
Manifest next update: Fri 12 Jun 2026 10:00:44 +0000
Files and hashes: 1: CuS8lAHZ-HdyyMnGmDQHdRL0JhE.crl (hash: A4IhU4ObYTeX4pJSBEcnHLILK4i+a6gyUApoEpJSo0A=)
2: IrAmy11rZJI6T7b9TOqwrK9lVyU.roa (hash: h9URKcjvU/CcITMUnrMcCY/cFNmMmE8d3RdTZSBmw+I=)
3: PeGqvcvoQwIlcxZ0yNmi59c1yzQ.roa (hash: 50M9/kQdJNFZZaEeJg52nYi4ikYT+HD/jZQVEJxVekQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 08:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b6:20:81:d3:14:e3:96:23:9b:02:32:3d:ec:98:8d:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ae4bc9401d9f87772c8c9c69834077512f42611
Validity
Not Before: Jun 11 10:00:44 2026 GMT
Not After : Jun 12 10:00:44 2026 GMT
Subject: CN=2cae9a715bc909434e9fc020a751e4a94ea6c67a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:36:fe:b1:24:70:d4:ff:c3:72:73:f4:fe:87:
6e:f9:bc:05:e1:95:58:9b:52:4e:7a:3b:2f:4d:6f:
56:ae:5a:fe:33:54:d9:82:40:fd:30:df:01:bd:c8:
77:54:3c:6e:90:dd:23:ee:d8:c5:9b:b9:12:7f:fb:
4c:16:27:ec:00:05:00:d7:9a:ad:1c:da:5c:82:44:
ee:72:60:bc:8f:9b:1c:24:3a:14:4a:66:44:21:91:
9b:c7:9d:50:05:33:61:65:fe:7e:4e:94:f0:47:90:
bc:7d:4a:57:9c:53:0b:8e:8f:86:19:9e:97:11:bb:
ab:bd:b4:8f:3f:ac:63:81:e0:17:ad:98:58:88:49:
13:d8:4e:13:98:dd:d3:ed:86:e6:2b:d0:a0:42:52:
8e:5f:9e:ec:96:38:1f:a2:02:c5:ae:f3:a4:e4:88:
90:48:06:6a:16:e0:e9:a0:16:d2:22:30:f8:af:a2:
2c:3f:4a:af:6b:c4:25:67:4b:4b:ab:cb:8f:c3:4a:
28:f0:6a:84:ae:da:59:8c:92:5d:9c:bb:13:f1:82:
c9:50:82:4a:f5:ab:cd:d2:30:3c:61:5f:b2:1c:ad:
2c:ee:02:7f:15:9a:fc:52:dc:fb:4e:ab:80:85:87:
97:e1:90:e6:fd:30:96:83:55:43:54:af:fe:ac:52:
98:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:AE:9A:71:5B:C9:09:43:4E:9F:C0:20:A7:51:E4:A9:4E:A6:C6:7A
X509v3 Authority Key Identifier:
keyid:0A:E4:BC:94:01:D9:F8:77:72:C8:C9:C6:98:34:07:75:12:F4:26:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:3f:61:98:fe:3f:db:97:70:01:a2:de:12:f2:e9:ad:8e:b9:
49:a6:0b:21:b7:35:31:31:74:0c:a5:68:45:3f:98:6d:46:29:
2e:27:28:ba:2c:63:36:2e:e6:b8:04:ed:2d:94:27:f1:a1:01:
cb:4c:4c:34:4d:de:c7:3a:10:cc:b0:73:02:b8:06:cb:7d:fe:
f2:45:02:c4:fd:6f:d6:8e:71:2e:54:e3:f3:cc:e2:8c:9a:4f:
4c:90:fa:01:5f:ae:05:d4:1a:f8:bf:eb:23:ea:a0:aa:a6:a8:
ef:84:bd:f8:4f:e0:76:15:87:1a:0d:62:81:36:4f:04:c7:94:
5e:26:6d:5f:fb:81:5d:18:f6:a8:62:6b:d7:bf:5f:5d:f7:14:
53:b4:10:76:5d:3e:73:b8:fd:1a:a8:24:c1:e4:39:78:85:a0:
d9:80:64:48:16:16:b0:93:28:85:11:80:48:5a:10:34:c8:32:
60:a4:22:0b:09:51:fb:2d:9c:c8:0a:f4:d2:be:9a:58:27:a2:
6c:bd:82:4c:a9:e6:71:23:c9:22:4d:74:eb:9b:63:22:02:c3:
83:5e:d3:05:31:71:e7:38:0b:26:e1:13:d4:32:f7:15:2c:e3:
e8:e9:7a:40:92:c9:30:36:02:10:57:d7:1b:17:c2:05:29:2e:
0a:39:2e:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 13:10:13 2026 by rpki-client