Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/434efd-ee54-4bcd-8141-c9f7c0e7acc6/1/cuv4F-GpLzzX9J32oxwmX_5HgAg.mft
File: cuv4F-GpLzzX9J32oxwmX_5HgAg.mft (raw, json)
Hash identifier: czpOQh7WYHkZP1BhxqiarB5wADa4KJLGPOvEGS6U/iE=
Subject key identifier: 60:9E:F1:B7:A4:20:0A:0A:35:C7:E0:11:DB:6F:05:A9:D6:3E:57:88
Authority key identifier: 72:EB:F8:17:E1:A9:2F:3C:D7:F4:9D:F6:A3:1C:26:5F:FE:47:80:08
Certificate issuer: /CN=72ebf817e1a92f3cd7f49df6a31c265ffe478008
Certificate serial: 019DECDB2A6F3EC5818123FE23942A2E4151
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cuv4F-GpLzzX9J32oxwmX_5HgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/434efd-ee54-4bcd-8141-c9f7c0e7acc6/1/cuv4F-GpLzzX9J32oxwmX_5HgAg.mft
Manifest number: 01CD
Signing time: Sun 03 May 2026 08:01:19 +0000
Manifest this update: Sun 03 May 2026 08:01:19 +0000
Manifest next update: Mon 04 May 2026 08:01:19 +0000
Files and hashes: 1: 1y5lvBRirf64QUUNUs-wPlahoEo.roa (hash: LhMcKD7g9vzXQej5bGx62E/rTFGZbxyNoCRC/nLvA8U=)
2: QV7nlixfPKhI7EyPWNfAD7Hr-34.roa (hash: RcoZUOLY0DZ86B3NQRroG5VCtYfjUx1K45ubhmkvdMY=)
3: cuv4F-GpLzzX9J32oxwmX_5HgAg.crl (hash: AuYUHXCFfOHaaF+vWhGgpSvP4L06V6KyAf7zMpme+Wc=)
4: gs8em47DaB3LrlDmXLkgpxaB21Q.roa (hash: cb+0Kb2KZEjJwHjkLW7WFeSKNJZu/ACiHcXkWiE0wNU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/434efd-ee54-4bcd-8141-c9f7c0e7acc6/1/cuv4F-GpLzzX9J32oxwmX_5HgAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/434efd-ee54-4bcd-8141-c9f7c0e7acc6/1/cuv4F-GpLzzX9J32oxwmX_5HgAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/cuv4F-GpLzzX9J32oxwmX_5HgAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 04 May 2026 08:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ec:db:2a:6f:3e:c5:81:81:23:fe:23:94:2a:2e:41:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72ebf817e1a92f3cd7f49df6a31c265ffe478008
Validity
Not Before: May 3 08:01:19 2026 GMT
Not After : May 4 08:01:19 2026 GMT
Subject: CN=609ef1b7a4200a0a35c7e011db6f05a9d63e5788
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:40:d3:aa:9b:aa:e1:60:22:62:3e:c0:2c:43:
86:8a:48:49:5d:db:2e:82:4d:e9:56:f6:23:e2:9a:
9e:fa:a1:30:95:c5:d2:40:76:6f:77:b3:52:c6:02:
36:88:36:c7:f5:39:d3:ac:91:46:ed:be:f4:db:a0:
39:72:16:79:3b:b2:41:b4:51:f3:b4:cf:f7:3d:dd:
16:57:d2:64:73:0a:11:0b:a4:ca:3d:6a:b7:e5:a3:
0d:a1:21:d9:b1:c8:a3:ee:27:97:2b:c7:80:6b:58:
62:05:79:63:ae:02:60:c9:23:28:28:a9:21:3f:59:
dc:e2:7a:31:47:35:2c:e6:32:54:a8:cf:5f:7f:18:
24:f2:2e:6d:98:18:88:68:ee:4b:27:a0:9d:b2:06:
d1:39:d4:d3:c1:8a:35:1c:a6:ae:14:41:89:cf:ec:
c4:96:6e:e5:8e:08:f3:27:94:6b:2d:8b:90:ae:71:
87:6c:ed:08:2f:55:75:16:a7:df:cf:e5:3a:a5:5d:
41:98:f8:c7:3d:d7:0f:04:a3:3a:e6:96:27:43:6a:
94:93:86:c1:43:fd:2b:02:48:c9:8e:71:3e:2c:bd:
84:90:9a:de:c9:86:22:e0:20:51:c2:1b:2a:89:54:
3c:a9:2d:b8:b8:18:02:36:82:73:41:f7:97:3e:f8:
e9:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:9E:F1:B7:A4:20:0A:0A:35:C7:E0:11:DB:6F:05:A9:D6:3E:57:88
X509v3 Authority Key Identifier:
keyid:72:EB:F8:17:E1:A9:2F:3C:D7:F4:9D:F6:A3:1C:26:5F:FE:47:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cuv4F-GpLzzX9J32oxwmX_5HgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/434efd-ee54-4bcd-8141-c9f7c0e7acc6/1/cuv4F-GpLzzX9J32oxwmX_5HgAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/434efd-ee54-4bcd-8141-c9f7c0e7acc6/1/cuv4F-GpLzzX9J32oxwmX_5HgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:c2:b3:e9:d8:a5:0a:b5:be:c3:f3:dc:bd:88:39:84:44:6f:
e5:54:d1:0d:94:31:61:62:b2:e8:a9:c7:76:4e:86:5c:4a:33:
75:74:1c:1a:f7:28:b9:56:f7:0e:f3:ef:e5:3b:86:d6:77:e2:
81:8e:8c:7d:07:2c:0e:80:23:89:bf:a9:a3:f1:31:5e:0a:6c:
4d:41:38:bc:8e:c3:4e:54:a9:c3:06:52:ba:26:f5:09:65:c5:
bb:7c:c6:f6:cc:39:ce:ee:5a:88:5d:ef:c5:5d:9b:f7:db:78:
da:62:f1:ac:dc:7b:2e:07:3e:e2:f2:31:78:4a:86:9d:3e:1d:
05:09:9b:40:d4:f8:94:a4:67:91:0e:64:01:07:3c:bd:05:3b:
0f:ee:f3:c5:9e:f5:78:b2:0e:2e:82:b8:6c:57:77:38:a0:21:
e3:ed:a0:67:63:de:3b:88:05:3e:97:d9:50:17:5f:67:6e:51:
1c:bb:33:9c:68:d7:b9:a1:21:fe:68:d6:6c:60:6d:fe:a6:ef:
e6:79:25:12:32:db:03:e6:eb:87:73:d2:06:45:c7:52:ef:1f:
8c:41:da:b4:23:18:f1:e9:45:ae:e3:8d:db:d4:8a:8f:72:1a:
9f:df:44:ee:f2:9d:2b:99:d6:06:86:29:05:25:46:ad:2c:f2:
92:c1:c8:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3s2ypvPsWBgSP+I5QqLkFRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyZWJmODE3ZTFhOTJmM2NkN2Y0OWRmNmEzMWMyNjVmZmU0
NzgwMDgwHhcNMjYwNTAzMDgwMTE5WhcNMjYwNTA0MDgwMTE5WjAzMTEwLwYDVQQD
Eyg2MDllZjFiN2E0MjAwYTBhMzVjN2UwMTFkYjZmMDVhOWQ2M2U1Nzg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0EDTqpuq4WAiYj7ALEOGikhJXdsu
gk3pVvYj4pqe+qEwlcXSQHZvd7NSxgI2iDbH9TnTrJFG7b7026A5chZ5O7JBtFHz
tM/3Pd0WV9JkcwoRC6TKPWq35aMNoSHZscij7ieXK8eAa1hiBXljrgJgySMoKKkh
P1nc4noxRzUs5jJUqM9ffxgk8i5tmBiIaO5LJ6CdsgbROdTTwYo1HKauFEGJz+zE
lm7ljgjzJ5RrLYuQrnGHbO0IL1V1Fqffz+U6pV1BmPjHPdcPBKM65pYnQ2qUk4bB
Q/0rAkjJjnE+LL2EkJreyYYi4CBRwhsqiVQ8qS24uBgCNoJzQfeXPvjpowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGCe8bekIAoKNcfgEdtvBanWPleIMB8GA1UdIwQY
MBaAFHLr+BfhqS881/Sd9qMcJl/+R4AIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3V2NEYtR3BMenpYOUozMm94d21YXzVIZ0FnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC80MzRlZmQtZWU1NC00YmNkLTgxNDEt
YzlmN2MwZTdhY2M2LzEvY3V2NEYtR3BMenpYOUozMm94d21YXzVIZ0FnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC80MzRlZmQtZWU1NC00YmNkLTgxNDEtYzlmN2MwZTdhY2M2
LzEvY3V2NEYtR3BMenpYOUozMm94d21YXzVIZ0FnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuMKz6dil
CrW+w/PcvYg5hERv5VTRDZQxYWKy6KnHdk6GXEozdXQcGvcouVb3DvPv5TuG1nfi
gY6MfQcsDoAjib+po/ExXgpsTUE4vI7DTlSpwwZSuib1CWXFu3zG9sw5zu5aiF3v
xV2b99t42mLxrNx7Lgc+4vIxeEqGnT4dBQmbQNT4lKRnkQ5kAQc8vQU7D+7zxZ71
eLIOLoK4bFd3OKAh4+2gZ2PeO4gFPpfZUBdfZ25RHLsznGjXuaEh/mjWbGBt/qbv
5nklEjLbA+brh3PSBkXHUu8fjEHatCMY8elFruON29SKj3Ian99E7vKdK5nWBoYp
BSVGrSzyksHIIA==
-----END CERTIFICATE-----
Generated at Sun May 3 17:08:07 2026 by rpki-client