Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/eae3d7-eee8-421e-80d9-982cce868ffa/1/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.mft
File: CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.mft (raw, json)
Hash identifier: dkMC3Wcx2/pZ92Myb0J/vLUZyuzpouFGBsg7rRdkkHo=
Subject key identifier: 19:2E:7C:BE:8D:B9:E0:16:7C:82:4B:3B:49:E6:8E:F6:8D:63:4F:39
Authority key identifier: 09:4E:A1:CF:4F:DC:34:75:C1:F2:8D:61:1C:1F:18:FE:02:7C:10:98
Certificate issuer: /CN=094ea1cf4fdc3475c1f28d611c1f18fe027c1098
Certificate serial: 019D39E54CEAC1CCA3E73C7380E31293D4AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/eae3d7-eee8-421e-80d9-982cce868ffa/1/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 14:00:21 +0000
Manifest this update: Sun 29 Mar 2026 14:00:21 +0000
Manifest next update: Mon 30 Mar 2026 14:00:21 +0000
Files and hashes: 1: CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.crl (hash: oe8h+8lCeVFOIEUfmclTeBDTYqqRFkh7eVITbJk3bm8=)
2: WnQNBeJ77W1lWNnHWWSvM1zW9Ss.roa (hash: 4WNmsHvXiTbK61q93ojoVESn4x/SoVpSfuMXeeNjBw0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/eae3d7-eee8-421e-80d9-982cce868ffa/1/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/eae3d7-eee8-421e-80d9-982cce868ffa/1/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 14:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:4c:ea:c1:cc:a3:e7:3c:73:80:e3:12:93:d4:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=094ea1cf4fdc3475c1f28d611c1f18fe027c1098
Validity
Not Before: Mar 29 14:00:21 2026 GMT
Not After : Mar 30 14:00:21 2026 GMT
Subject: CN=192e7cbe8db9e0167c824b3b49e68ef68d634f39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:0d:fc:35:21:bd:86:8e:f6:fa:54:6e:0f:87:
b9:fa:4c:ba:8c:83:7c:ed:a8:ee:ca:7b:56:bc:46:
24:a7:66:db:f5:72:ad:b0:97:5b:11:75:d6:df:24:
a6:ff:a7:7b:16:89:71:a1:c7:2d:50:42:69:96:14:
86:34:1c:c0:7c:33:69:bc:ad:a8:df:05:e8:26:aa:
9e:06:a1:d0:c3:cc:11:6d:d8:61:1a:32:89:52:60:
70:72:7f:0b:11:ba:f2:2b:71:fb:63:f3:1a:2c:23:
d5:0a:52:68:ee:de:d3:e4:a6:06:5e:44:2d:9b:c1:
df:d9:01:ba:2b:df:90:59:91:56:ea:09:97:c0:af:
e2:31:de:39:97:20:32:9c:6c:45:fa:d5:02:24:e0:
ab:67:e2:5a:cd:47:8a:3b:ff:de:41:de:7e:c6:09:
b4:d6:f4:ea:d2:bd:73:2e:ef:52:f4:45:df:bd:53:
d1:15:b4:66:81:05:22:e3:d7:60:15:c4:8e:f0:d4:
64:de:ca:89:7c:de:e7:66:4e:34:f0:c6:d9:c8:a4:
9b:9b:6c:d9:31:5d:7c:75:09:b3:ba:6e:82:09:9c:
32:62:b0:bd:0e:d6:07:9f:36:9c:68:73:0f:0e:fe:
07:78:97:d5:5d:00:f1:4d:9a:61:99:ab:7d:4d:25:
2d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:2E:7C:BE:8D:B9:E0:16:7C:82:4B:3B:49:E6:8E:F6:8D:63:4F:39
X509v3 Authority Key Identifier:
keyid:09:4E:A1:CF:4F:DC:34:75:C1:F2:8D:61:1C:1F:18:FE:02:7C:10:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/eae3d7-eee8-421e-80d9-982cce868ffa/1/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/eae3d7-eee8-421e-80d9-982cce868ffa/1/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:f4:0e:27:bc:56:f8:a0:46:3d:fa:b1:54:bf:96:c8:ab:15:
13:14:a7:77:b6:fe:d6:5a:62:09:b6:4e:b0:fa:c6:44:5b:5c:
ad:a1:37:ff:dd:68:18:4c:a5:17:ab:d5:7e:4a:a7:de:d8:f5:
81:0d:24:a0:96:a3:83:ec:c8:e1:1a:ba:db:19:5f:07:63:13:
a9:6e:bc:c0:dc:2c:75:38:c8:85:5e:1b:af:86:da:84:f1:40:
c4:a8:66:39:73:b2:85:48:ec:59:2a:cf:59:37:1c:88:11:dc:
ab:52:41:78:a0:e9:cb:ec:73:8a:93:40:bd:bc:08:c7:77:66:
df:7c:99:16:aa:85:a0:6b:b0:28:45:1d:00:b4:bd:5b:39:bc:
66:1b:b2:98:85:17:f0:3c:da:ad:9d:6d:e0:40:0e:83:2a:c6:
5a:b9:93:f6:58:44:fb:b7:90:06:e8:96:b8:49:bc:4c:7e:0f:
f1:8b:8e:bf:10:c4:cc:79:56:dc:34:b5:91:35:c4:ed:d3:7d:
2d:43:ea:f2:72:fb:4c:33:f3:25:22:07:ff:84:c0:f7:4b:73:
ee:8e:84:b3:2a:10:53:8a:9d:2e:ec:ba:10:2b:62:3f:8f:25:
db:32:6d:98:10:e4:c1:24:3d:d5:d7:f5:2b:84:cd:26:e8:4a:
00:13:1e:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:51:18 2026 by rpki-client