Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.mft
File: CuS8lAHZ-HdyyMnGmDQHdRL0JhE.mft (raw, json)
Hash identifier: dr/P1A0PCDS5iMSpXoIc01h+3YZnybgez9N4alcLUUY=
Subject key identifier: CF:26:FF:F2:E8:E0:7C:AA:4E:4D:8D:BB:1B:65:1B:5C:7E:EF:0B:A3
Authority key identifier: 0A:E4:BC:94:01:D9:F8:77:72:C8:C9:C6:98:34:07:75:12:F4:26:11
Certificate issuer: /CN=0ae4bc9401d9f87772c8c9c69834077512f42611
Certificate serial: 01A086E689AD61C99F3B8D4CA5B06FB5EE33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.mft
Manifest number: 0341
Signing time: Wed 09 Sep 2026 16:00:50 +0000
Manifest this update: Wed 09 Sep 2026 16:00:50 +0000
Manifest next update: Thu 10 Sep 2026 16:00:50 +0000
Files and hashes: 1: CuS8lAHZ-HdyyMnGmDQHdRL0JhE.crl (hash: O1FmNRufieBh1T3iSbaOlTsr30KyEEOmfRO9s+HCjAU=)
2: IrAmy11rZJI6T7b9TOqwrK9lVyU.roa (hash: h9URKcjvU/CcITMUnrMcCY/cFNmMmE8d3RdTZSBmw+I=)
3: cnsxttgiA36XaxV7JTaPeGuyqcc.roa (hash: sGH8WpARX1yy3ntIk+i6n6hKVKz1lO8h7OZfbTYPFoA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 14:52:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:86:e6:89:ad:61:c9:9f:3b:8d:4c:a5:b0:6f:b5:ee:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ae4bc9401d9f87772c8c9c69834077512f42611
Validity
Not Before: Sep 9 16:00:50 2026 GMT
Not After : Sep 10 16:00:50 2026 GMT
Subject: CN=cf26fff2e8e07caa4e4d8dbb1b651b5c7eef0ba3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ff:4b:4a:f6:bb:18:18:47:5b:5c:99:07:81:
d0:39:28:27:30:45:85:4d:01:37:8d:d3:1b:bb:af:
51:16:5e:d0:75:53:90:7d:30:fa:01:c1:bb:8c:9e:
80:d4:10:11:74:bc:3b:18:85:01:4d:18:b6:7d:a5:
8b:7e:64:a6:c1:5f:93:b0:cf:90:f7:52:1c:c4:ff:
e3:3c:3e:29:71:0d:a1:b8:95:83:0e:1c:77:d4:e3:
e8:dc:3f:b5:05:2a:76:33:d1:33:f0:54:b3:21:13:
8e:77:16:0b:8c:ee:a8:45:da:70:34:5b:12:06:45:
cd:15:a2:8e:60:46:75:cd:2f:e3:57:df:c8:be:f2:
7d:33:a5:73:8d:3a:da:04:42:27:eb:80:dc:a0:c1:
ea:0a:1a:f9:79:4d:5f:c6:55:e8:67:68:1b:9e:58:
33:dd:f9:18:06:ee:a1:d0:cf:0a:4d:b6:21:ab:db:
0e:43:00:79:9e:f6:5e:92:a7:47:db:0a:84:1f:ca:
68:15:8f:94:0f:a6:f3:80:fe:38:06:b8:5b:e8:a9:
1f:25:54:9a:16:da:85:5f:9e:9c:97:30:d2:77:e3:
8c:e4:56:c2:65:7c:2d:1a:d2:81:b0:c7:00:d8:56:
df:7d:06:d1:ee:a4:8d:5a:6a:af:2d:a0:9c:ee:62:
45:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:26:FF:F2:E8:E0:7C:AA:4E:4D:8D:BB:1B:65:1B:5C:7E:EF:0B:A3
X509v3 Authority Key Identifier:
keyid:0A:E4:BC:94:01:D9:F8:77:72:C8:C9:C6:98:34:07:75:12:F4:26:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:51:f1:e0:2b:45:51:0e:7a:e6:cf:03:03:01:ac:8b:a2:ca:
09:ff:04:5c:e1:af:6e:27:e7:09:b6:87:26:2e:64:3d:36:dc:
6b:72:18:2f:a1:55:dc:c7:3d:13:51:20:ef:c4:9d:36:f7:e4:
1c:5a:14:72:7b:ae:27:80:10:e9:ad:64:03:35:ff:c0:33:c8:
bf:1d:b4:8f:56:80:9e:93:44:f0:ea:98:5e:48:16:6f:60:57:
4a:f2:01:b8:80:c2:df:73:72:ae:fc:27:25:da:82:2b:94:75:
10:36:a8:6b:5c:6f:15:20:32:98:1b:6b:e4:94:7e:f6:3e:11:
1f:c9:85:41:72:14:83:aa:ea:27:43:ef:10:2a:eb:bc:40:2e:
ca:27:83:8c:64:da:96:29:47:4e:8d:40:17:59:80:d8:43:76:
fb:f4:85:de:65:62:80:bd:2c:c7:21:e3:07:89:34:e3:fd:c2:
b6:0b:7d:72:c6:be:12:d2:7e:74:43:d1:b2:e7:ac:3f:38:c5:
18:67:e8:9c:f9:a3:e1:ea:b7:92:e0:ba:8f:ac:3a:d8:22:49:
9d:70:66:20:1a:ad:f9:0f:64:2b:51:1d:1e:08:80:ba:24:26:
2f:1c:92:2e:e2:c3:b8:20:20:c2:82:0b:dd:ae:90:3d:53:b0:
e7:51:05:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 00:08:20 2026 by rpki-client