Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.mft
File: CuS8lAHZ-HdyyMnGmDQHdRL0JhE.mft (raw, json)
Hash identifier: Vgf6mCzvfek7grePsa2Qxd3BQx7hc19jsglkls/CrTM=
Subject key identifier: C7:7F:41:02:83:9E:2F:94:1D:8C:16:9C:24:57:98:20:1A:C4:A8:B2
Authority key identifier: 0A:E4:BC:94:01:D9:F8:77:72:C8:C9:C6:98:34:07:75:12:F4:26:11
Certificate issuer: /CN=0ae4bc9401d9f87772c8c9c69834077512f42611
Certificate serial: 019DC9E15A08CA22D71647069391D8B1AC7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.mft
Manifest number: 01D4
Signing time: Sun 26 Apr 2026 13:01:22 +0000
Manifest this update: Sun 26 Apr 2026 13:01:22 +0000
Manifest next update: Mon 27 Apr 2026 13:01:22 +0000
Files and hashes: 1: CuS8lAHZ-HdyyMnGmDQHdRL0JhE.crl (hash: WRwtYipPAFk9AyYwooGNGREuLe0tY0zxqOsCIZmqL74=)
2: IrAmy11rZJI6T7b9TOqwrK9lVyU.roa (hash: h9URKcjvU/CcITMUnrMcCY/cFNmMmE8d3RdTZSBmw+I=)
3: opb3Dk9q7WglcwVKydeR4HMjMxM.roa (hash: 3tNhFHkdfs4fq11SDf2cq5GThxVsi6mCSUEyz5phCxY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Apr 2026 13:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:c9:e1:5a:08:ca:22:d7:16:47:06:93:91:d8:b1:ac:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ae4bc9401d9f87772c8c9c69834077512f42611
Validity
Not Before: Apr 26 13:01:22 2026 GMT
Not After : Apr 27 13:01:22 2026 GMT
Subject: CN=c77f4102839e2f941d8c169c245798201ac4a8b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:8c:16:86:ae:26:f7:c4:6a:12:1b:14:9b:b0:
00:fe:bb:bd:0f:11:eb:52:97:25:d6:79:43:11:ee:
b5:2c:15:d3:42:b3:c2:f1:6f:95:20:28:32:7f:85:
f8:61:36:02:85:ba:e2:48:3d:e1:3d:47:f4:86:fb:
b7:b7:3b:83:19:31:7a:b4:04:33:3d:4b:80:ba:48:
7b:1f:ac:1d:ec:6b:b8:fc:e8:0a:c9:46:49:2f:71:
ae:4b:39:53:70:80:fa:9c:bc:59:44:1c:87:93:16:
80:8e:4c:5a:28:fe:f4:ea:49:11:dd:6e:7f:db:6e:
64:9a:0b:4a:8b:0f:16:bf:42:47:45:37:6f:57:3f:
3b:1a:b8:c3:bf:07:81:8e:46:fe:f6:93:e1:7f:8b:
05:a3:12:72:c0:43:b0:d1:13:aa:b3:13:3c:99:12:
a8:25:cf:9c:3a:1e:e9:ae:81:ca:b0:76:c7:5c:03:
95:d6:10:a4:86:78:69:3e:b2:bf:8f:f8:c4:53:43:
de:ee:df:5c:30:1f:bc:c4:bf:b9:30:c0:d6:8d:a5:
be:b2:c0:e8:d7:17:36:95:5c:e8:bf:5f:eb:7f:2e:
eb:9b:1f:91:5a:b3:07:95:8d:d0:2c:62:cc:a1:bd:
22:1b:14:b4:63:cf:ee:ae:e5:8e:fd:32:9f:bb:9e:
2a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:7F:41:02:83:9E:2F:94:1D:8C:16:9C:24:57:98:20:1A:C4:A8:B2
X509v3 Authority Key Identifier:
keyid:0A:E4:BC:94:01:D9:F8:77:72:C8:C9:C6:98:34:07:75:12:F4:26:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:39:b5:2c:02:a2:a1:94:08:ac:13:0d:a8:b5:95:15:73:74:
ff:89:60:90:7f:ba:e0:7a:0c:0f:39:13:ec:30:67:40:42:a2:
76:3b:3a:af:17:16:b2:5c:b1:e3:5c:ab:ed:23:3e:8a:0e:24:
eb:50:9d:bc:74:09:9e:29:bb:d4:da:5b:c9:ca:48:b1:38:3e:
61:f1:54:1f:fc:cd:80:63:25:99:63:ff:5f:c2:d1:8e:48:cf:
d3:ce:06:0f:f5:f8:eb:20:ab:a8:92:d2:14:40:42:7f:b9:b8:
f2:16:52:5b:e6:c0:de:02:1e:04:ca:6d:92:81:e2:85:c2:d9:
0a:01:a4:01:02:77:c8:9d:cb:0d:5e:cf:67:83:89:e2:e5:4b:
4e:7c:3f:25:d0:d0:07:c2:22:5e:98:77:30:a4:b9:ee:27:4d:
d0:1e:49:de:fb:0d:b2:8a:03:9e:70:53:4c:4d:3b:a2:2d:d6:
0b:93:33:27:3a:ca:9d:fd:d2:83:ec:f6:db:a1:d8:a9:7d:6a:
70:bf:9a:35:54:7d:7c:28:95:d7:36:48:44:a8:67:65:b1:56:
38:c8:aa:b5:e7:c7:48:6e:ea:21:f5:ea:e9:10:1e:5b:ab:d1:
e0:c2:b0:7f:cf:71:13:6a:b9:4c:5f:e8:97:55:25:06:2f:0d:
f1:e9:8c:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3J4VoIyiLXFkcGk5HYsax+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhZTRiYzk0MDFkOWY4Nzc3MmM4YzljNjk4MzQwNzc1MTJm
NDI2MTEwHhcNMjYwNDI2MTMwMTIyWhcNMjYwNDI3MTMwMTIyWjAzMTEwLwYDVQQD
EyhjNzdmNDEwMjgzOWUyZjk0MWQ4YzE2OWMyNDU3OTgyMDFhYzRhOGIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy4wWhq4m98RqEhsUm7AA/ru9DxHr
Upcl1nlDEe61LBXTQrPC8W+VICgyf4X4YTYChbriSD3hPUf0hvu3tzuDGTF6tAQz
PUuAukh7H6wd7Gu4/OgKyUZJL3GuSzlTcID6nLxZRByHkxaAjkxaKP706kkR3W5/
225kmgtKiw8Wv0JHRTdvVz87GrjDvweBjkb+9pPhf4sFoxJywEOw0ROqsxM8mRKo
Jc+cOh7proHKsHbHXAOV1hCkhnhpPrK/j/jEU0Pe7t9cMB+8xL+5MMDWjaW+ssDo
1xc2lVzov1/rfy7rmx+RWrMHlY3QLGLMob0iGxS0Y8/uruWO/TKfu54qbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMd/QQKDni+UHYwWnCRXmCAaxKiyMB8GA1UdIwQY
MBaAFArkvJQB2fh3csjJxpg0B3US9CYRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3VTOGxBSFotSGR5eU1uR21EUUhkUkwwSmhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9hNDA3YTAtOGJjMS00NDE2LTk0Mzct
MjQyNDY2ODJiZjAwLzEvQ3VTOGxBSFotSGR5eU1uR21EUUhkUkwwSmhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC9hNDA3YTAtOGJjMS00NDE2LTk0MzctMjQyNDY2ODJiZjAw
LzEvQ3VTOGxBSFotSGR5eU1uR21EUUhkUkwwSmhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABzm1LAKi
oZQIrBMNqLWVFXN0/4lgkH+64HoMDzkT7DBnQEKidjs6rxcWslyx41yr7SM+ig4k
61CdvHQJnim71NpbycpIsTg+YfFUH/zNgGMlmWP/X8LRjkjP084GD/X46yCrqJLS
FEBCf7m48hZSW+bA3gIeBMptkoHihcLZCgGkAQJ3yJ3LDV7PZ4OJ4uVLTnw/JdDQ
B8IiXph3MKS57idN0B5J3vsNsooDnnBTTE07oi3WC5MzJzrKnf3Sg+z226HYqX1q
cL+aNVR9fCiV1zZIRKhnZbFWOMiqtefHSG7qIfXq6RAeW6vR4MKwf89xE2q5TF/o
l1UlBi8N8emMQw==
-----END CERTIFICATE-----
Generated at Sun Apr 26 22:51:56 2026 by rpki-client