Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b0/eae3d7-eee8-421e-80d9-982cce868ffa/1/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.mft
File: CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.mft (raw, json)
Hash identifier: AMfkHUm6D1HAngmAYVXmTj7u1LMfzCUKQphO/fC6iDU=
Subject key identifier: D1:72:6E:08:56:16:D5:C5:68:EB:77:E1:33:4D:83:1D:E9:AB:62:F0
Authority key identifier: 09:4E:A1:CF:4F:DC:34:75:C1:F2:8D:61:1C:1F:18:FE:02:7C:10:98
Certificate issuer: /CN=094ea1cf4fdc3475c1f28d611c1f18fe027c1098
Certificate serial: 01A13F394EFB741A8CEB7FBB639E01F15D4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/eae3d7-eee8-421e-80d9-982cce868ffa/1/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.mft
Manifest number: 1AA4
Signing time: Thu 15 Oct 2026 11:01:22 +0000
Manifest this update: Thu 15 Oct 2026 11:01:22 +0000
Manifest next update: Fri 16 Oct 2026 11:01:22 +0000
Files and hashes: 1: CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.crl (hash: 7CmMbSN07f/8/+hjbagY2HOWAaYcItQEJ9WSLfC2H04=)
2: WnQNBeJ77W1lWNnHWWSvM1zW9Ss.roa (hash: 4WNmsHvXiTbK61q93ojoVESn4x/SoVpSfuMXeeNjBw0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/eae3d7-eee8-421e-80d9-982cce868ffa/1/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/eae3d7-eee8-421e-80d9-982cce868ffa/1/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 11:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:39:4e:fb:74:1a:8c:eb:7f:bb:63:9e:01:f1:5d:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=094ea1cf4fdc3475c1f28d611c1f18fe027c1098
Validity
Not Before: Oct 15 11:01:22 2026 GMT
Not After : Oct 16 11:01:22 2026 GMT
Subject: CN=d1726e085616d5c568eb77e1334d831de9ab62f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0d:ef:d3:58:d7:c8:b8:d7:8d:3e:ee:77:d8:
11:04:df:b7:16:1d:35:96:98:55:b1:eb:c2:1d:0d:
86:c9:5a:bf:af:c1:da:23:56:b8:09:b1:08:7a:6b:
d7:75:a1:8a:87:27:c2:1f:a9:c7:3c:17:1e:6e:6d:
74:07:9c:cd:59:22:9e:d8:d3:32:de:30:43:51:fa:
9f:cb:9f:5d:80:5e:6b:58:63:ee:b5:56:84:87:4e:
11:04:a8:99:cd:d8:3b:c7:6d:4b:3b:5e:0b:b5:32:
aa:8e:b3:42:20:30:5c:5b:2c:ca:bf:93:3f:17:31:
13:16:0e:69:5e:ee:d1:0f:c3:57:ac:4e:39:09:86:
68:a9:53:a9:dd:76:11:a7:84:c2:bc:0d:ac:63:cd:
31:c1:b0:b9:16:fc:bf:0c:ae:40:1a:9f:fa:61:3b:
c2:98:02:8a:f8:12:8e:78:ea:d8:e9:87:5d:80:31:
8a:87:e2:f1:8a:00:95:d7:da:61:49:5d:45:f0:7b:
27:e0:b5:36:a4:4b:a4:be:eb:ab:68:52:f0:47:af:
5e:f2:a9:a7:b5:f3:c9:da:46:36:26:5b:82:38:50:
b2:c2:1b:37:c3:66:0e:16:0a:8a:8c:eb:9c:48:f0:
79:68:b7:b6:e4:00:48:25:69:ba:0c:bd:f4:4b:77:
6b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:72:6E:08:56:16:D5:C5:68:EB:77:E1:33:4D:83:1D:E9:AB:62:F0
X509v3 Authority Key Identifier:
keyid:09:4E:A1:CF:4F:DC:34:75:C1:F2:8D:61:1C:1F:18:FE:02:7C:10:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/eae3d7-eee8-421e-80d9-982cce868ffa/1/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/eae3d7-eee8-421e-80d9-982cce868ffa/1/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:b3:49:0e:df:3b:f2:b2:d7:6b:34:07:76:13:c4:3f:9c:f8:
27:08:20:3f:96:64:11:0b:c1:8e:fa:16:be:c7:8e:b8:e9:81:
75:c1:a6:3e:c3:c1:2d:e4:be:47:fc:1e:8e:d9:f2:f0:6f:16:
38:2b:a7:69:1f:64:e7:9b:cd:7d:d3:d9:57:3b:6a:b6:7d:c0:
33:dc:2a:d3:88:01:75:39:de:e5:e7:eb:74:cf:98:43:6f:94:
35:15:48:9d:f0:77:72:50:79:50:bc:63:84:dc:87:c8:cd:b0:
45:4f:f5:2e:43:cc:d3:13:d8:f9:31:73:09:c2:ff:da:48:61:
d5:64:60:f6:d2:2a:c4:c8:74:86:f6:45:39:95:5d:3f:d7:29:
de:9d:66:8d:08:41:6b:c7:78:2f:88:93:85:8c:4b:9f:bf:85:
b6:31:97:05:2f:79:e6:57:b9:db:d9:02:bd:cf:57:da:e3:46:
3d:79:b5:d5:f5:f7:a7:fb:29:09:c9:52:88:a3:87:1e:c4:6c:
86:31:40:2f:ab:80:ff:22:7b:97:1f:c9:d0:d4:e1:3b:6b:a4:
33:9f:53:5f:fb:b2:60:09:28:2e:79:74:aa:8b:84:79:17:65:
3f:7d:89:85:65:af:18:ef:be:00:0d:45:a0:84:6c:17:0f:9b:
dc:90:94:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE/OU77dBqM63+7Y54B8V1LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5NGVhMWNmNGZkYzM0NzVjMWYyOGQ2MTFjMWYxOGZlMDI3
YzEwOTgwHhcNMjYxMDE1MTEwMTIyWhcNMjYxMDE2MTEwMTIyWjAzMTEwLwYDVQQD
EyhkMTcyNmUwODU2MTZkNWM1NjhlYjc3ZTEzMzRkODMxZGU5YWI2MmYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQ3v01jXyLjXjT7ud9gRBN+3Fh01
lphVsevCHQ2GyVq/r8HaI1a4CbEIemvXdaGKhyfCH6nHPBcebm10B5zNWSKe2NMy
3jBDUfqfy59dgF5rWGPutVaEh04RBKiZzdg7x21LO14LtTKqjrNCIDBcWyzKv5M/
FzETFg5pXu7RD8NXrE45CYZoqVOp3XYRp4TCvA2sY80xwbC5Fvy/DK5AGp/6YTvC
mAKK+BKOeOrY6YddgDGKh+LxigCV19phSV1F8Hsn4LU2pEukvuuraFLwR69e8qmn
tfPJ2kY2JluCOFCywhs3w2YOFgqKjOucSPB5aLe25ABIJWm6DL30S3dr5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNFybghWFtXFaOt34TNNgx3pq2LwMB8GA1UdIwQY
MBaAFAlOoc9P3DR1wfKNYRwfGP4CfBCYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1U2aHowX2NOSFhCOG8xaEhCOFlfZ0o4RUpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC9lYWUzZDctZWVlOC00MjFlLTgwZDkt
OTgyY2NlODY4ZmZhLzEvQ1U2aHowX2NOSFhCOG8xaEhCOFlfZ0o4RUpnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC9lYWUzZDctZWVlOC00MjFlLTgwZDktOTgyY2NlODY4ZmZh
LzEvQ1U2aHowX2NOSFhCOG8xaEhCOFlfZ0o4RUpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAirNJDt87
8rLXazQHdhPEP5z4JwggP5ZkEQvBjvoWvseOuOmBdcGmPsPBLeS+R/wejtny8G8W
OCunaR9k55vNfdPZVztqtn3AM9wq04gBdTne5efrdM+YQ2+UNRVInfB3clB5ULxj
hNyHyM2wRU/1LkPM0xPY+TFzCcL/2khh1WRg9tIqxMh0hvZFOZVdP9cp3p1mjQhB
a8d4L4iThYxLn7+FtjGXBS955le529kCvc9X2uNGPXm11fX3p/spCclSiKOHHsRs
hjFAL6uA/yJ7lx/J0NThO2ukM59TX/uyYAkoLnl0qouEeRdlP32JhWWvGO++AA1F
oIRsFw+b3JCU/w==
-----END CERTIFICATE-----
Generated at Thu Oct 15 20:52:29 2026 by rpki-client