Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/e18c2d-64ff-44e8-8eef-b9c89b9b1f65/1/CuGlto7Kdo8hGkjoVtf1g_kOdec.mft
File: CuGlto7Kdo8hGkjoVtf1g_kOdec.mft (raw, json)
Hash identifier: ty3NFfp/hvmBU6RS4meCO1G/rhzryVw1t7z1hKu+1zE=
Subject key identifier: B4:6A:B6:C2:90:77:07:0C:E8:74:21:99:A2:A2:9C:2D:EB:EC:80:36
Authority key identifier: 0A:E1:A5:B6:8E:CA:76:8F:21:1A:48:E8:56:D7:F5:83:F9:0E:75:E7
Certificate issuer: /CN=0ae1a5b68eca768f211a48e856d7f583f90e75e7
Certificate serial: 019DDF1FA47888841103935F687C06900B32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CuGlto7Kdo8hGkjoVtf1g_kOdec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/e18c2d-64ff-44e8-8eef-b9c89b9b1f65/1/CuGlto7Kdo8hGkjoVtf1g_kOdec.mft
Manifest number: 1690
Signing time: Thu 30 Apr 2026 16:01:26 +0000
Manifest this update: Thu 30 Apr 2026 16:01:26 +0000
Manifest next update: Fri 01 May 2026 16:01:26 +0000
Files and hashes: 1: CuGlto7Kdo8hGkjoVtf1g_kOdec.crl (hash: NNNjQ5WG3CbPCq+qQNV0p3kVN1HHMtNs47Hkcontv5U=)
2: EP3_Y_2rIqHTOMptiyzO0uUUxw0.roa (hash: cbNaVlReRWd6gx/q6NH3r5/UXA7TpZqlkYS//LHJrhs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/e18c2d-64ff-44e8-8eef-b9c89b9b1f65/1/CuGlto7Kdo8hGkjoVtf1g_kOdec.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/e18c2d-64ff-44e8-8eef-b9c89b9b1f65/1/CuGlto7Kdo8hGkjoVtf1g_kOdec.mft
rsync://rpki.ripe.net/repository/DEFAULT/CuGlto7Kdo8hGkjoVtf1g_kOdec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 14:07:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:df:1f:a4:78:88:84:11:03:93:5f:68:7c:06:90:0b:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ae1a5b68eca768f211a48e856d7f583f90e75e7
Validity
Not Before: Apr 30 16:01:26 2026 GMT
Not After : May 1 16:01:26 2026 GMT
Subject: CN=b46ab6c29077070ce8742199a2a29c2debec8036
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:e4:07:de:bd:49:aa:93:a4:75:11:1e:b3:29:
cd:7e:e4:46:07:36:6e:1a:19:c3:6f:fe:81:9e:da:
ad:b8:6f:7a:57:c7:55:5e:e5:ce:06:01:c2:21:01:
9d:cb:da:3b:15:e2:dc:d5:e2:02:ea:f6:52:25:3a:
69:46:33:2c:2e:a2:fd:27:7d:e7:2f:42:be:00:1e:
54:55:59:f9:87:58:b9:a8:b6:ff:9f:08:1f:b9:27:
4d:c6:67:a8:63:cc:ce:3a:49:d7:22:96:a5:e4:8d:
51:a5:2c:e1:09:25:88:f3:f3:f3:cc:c6:b6:04:d2:
fa:2c:a1:71:80:fc:36:e5:ee:d4:6e:4b:7a:42:22:
69:90:9d:6a:88:ac:b2:9e:bf:06:1d:c6:a4:8a:7f:
1e:03:e5:42:f7:78:25:01:78:a0:5c:b1:49:36:fe:
a2:b6:7e:3a:34:dc:72:93:45:05:24:bf:12:c4:2d:
90:76:4c:57:dd:97:17:5a:ac:83:cc:fe:e0:18:68:
19:98:27:8c:97:ec:25:cd:24:e9:8d:a3:c6:45:13:
65:b3:0b:8c:78:7a:76:e6:41:ca:82:56:b6:e5:a2:
74:dc:cb:78:fa:06:68:df:2b:a4:72:91:ff:f0:3a:
aa:6c:1f:71:51:6f:2f:11:45:dd:e7:20:cd:c9:26:
ba:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:6A:B6:C2:90:77:07:0C:E8:74:21:99:A2:A2:9C:2D:EB:EC:80:36
X509v3 Authority Key Identifier:
keyid:0A:E1:A5:B6:8E:CA:76:8F:21:1A:48:E8:56:D7:F5:83:F9:0E:75:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CuGlto7Kdo8hGkjoVtf1g_kOdec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/e18c2d-64ff-44e8-8eef-b9c89b9b1f65/1/CuGlto7Kdo8hGkjoVtf1g_kOdec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/e18c2d-64ff-44e8-8eef-b9c89b9b1f65/1/CuGlto7Kdo8hGkjoVtf1g_kOdec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:3b:85:04:df:55:58:42:9a:d1:c1:47:65:7c:7b:d2:15:ef:
06:6f:9e:40:f8:96:f1:74:fc:79:c1:54:05:06:79:04:f8:87:
d1:9b:c9:ad:65:b1:e8:f8:e9:00:26:fd:49:dc:6a:66:b0:0e:
5b:81:e1:ab:11:ce:c4:08:04:3a:87:33:91:d7:9c:4e:08:c7:
b9:14:d2:f1:fb:08:60:1c:d7:aa:cd:d2:c6:fb:b4:3e:38:99:
65:79:28:00:12:1a:c8:d8:17:d4:bb:0f:3b:b1:13:45:a6:41:
b3:5b:d3:9f:29:31:47:3b:7a:0e:00:d3:d6:24:2f:70:d7:bf:
92:05:9f:0c:2e:84:49:43:8f:31:25:1e:76:f3:e4:39:97:30:
4f:da:ef:d1:46:f4:0d:a5:a2:b1:d1:79:b8:e2:bf:6c:ef:c2:
1a:db:93:64:43:bb:b3:57:49:b5:49:38:17:e8:5f:4f:45:7b:
69:b8:ed:8a:6f:7c:80:a9:a9:27:cf:c6:6a:fe:c3:5f:b2:aa:
75:b7:be:40:eb:70:6f:32:21:58:10:17:8f:07:a5:01:ef:a2:
5e:6a:90:03:0c:92:d0:b6:c1:d0:b4:69:a6:f3:5a:f3:df:16:
8b:9f:02:19:06:75:5b:58:bb:b9:16:e9:d1:5a:c9:cb:f0:41:
54:52:7a:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 17:30:10 2026 by rpki-client