Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/fbe883-03af-4172-9081-8c994d741956/1/cUnH5wIxqJKP1dBDV6zrbMD0pps.mft
File: cUnH5wIxqJKP1dBDV6zrbMD0pps.mft (raw, json)
Hash identifier: mylzvOWwezGUM8+WuZMKslhw9B27fSDViVHJ96rn6Uk=
Subject key identifier: C8:D8:48:17:1B:94:AE:35:4C:FF:7A:CC:51:3B:D0:FA:CE:4E:38:A0
Authority key identifier: 71:49:C7:E7:02:31:A8:92:8F:D5:D0:43:57:AC:EB:6C:C0:F4:A6:9B
Certificate issuer: /CN=7149c7e70231a8928fd5d04357aceb6cc0f4a69b
Certificate serial: 019D37F6E87ACAE35C93EF45C4401D19E6DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cUnH5wIxqJKP1dBDV6zrbMD0pps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/fbe883-03af-4172-9081-8c994d741956/1/cUnH5wIxqJKP1dBDV6zrbMD0pps.mft
Manifest number: 010F
Signing time: Sun 29 Mar 2026 05:00:21 +0000
Manifest this update: Sun 29 Mar 2026 05:00:21 +0000
Manifest next update: Mon 30 Mar 2026 05:00:21 +0000
Files and hashes: 1: cUnH5wIxqJKP1dBDV6zrbMD0pps.crl (hash: Kntt54ANHvnRlUx4W/1J0sjbZikBZTy7HS7xieDqRUg=)
2: ghlhTbbLd6EaPwhS_1iYdBuSyD0.roa (hash: 0fxFwiqIoNJ/zuzpmQRPOaOizXH5J3OzKbBQv5ulBVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/fbe883-03af-4172-9081-8c994d741956/1/cUnH5wIxqJKP1dBDV6zrbMD0pps.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/fbe883-03af-4172-9081-8c994d741956/1/cUnH5wIxqJKP1dBDV6zrbMD0pps.mft
rsync://rpki.ripe.net/repository/DEFAULT/cUnH5wIxqJKP1dBDV6zrbMD0pps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f6:e8:7a:ca:e3:5c:93:ef:45:c4:40:1d:19:e6:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7149c7e70231a8928fd5d04357aceb6cc0f4a69b
Validity
Not Before: Mar 29 05:00:21 2026 GMT
Not After : Mar 30 05:00:21 2026 GMT
Subject: CN=c8d848171b94ae354cff7acc513bd0face4e38a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:24:74:2c:bc:56:52:77:42:24:fc:b9:d5:88:
d1:af:db:7e:70:29:54:dc:56:03:bf:d0:44:16:29:
fe:7f:96:bb:a4:72:3d:0c:56:6c:a5:ed:25:e3:8b:
6d:02:e3:05:9d:0b:2f:b2:d7:7d:48:6e:79:a0:1f:
22:b9:dd:d9:ec:49:43:1d:af:1e:c8:d5:20:64:7e:
01:a9:a0:ab:de:42:8c:b9:2c:39:35:78:3e:d8:f0:
50:cf:25:cf:9e:5c:a2:95:13:07:83:af:eb:f1:93:
05:87:7e:53:9a:a3:52:84:8b:66:50:67:92:3c:7e:
9c:f9:cc:ad:f8:5c:94:cb:69:eb:57:79:ab:e3:58:
bf:f4:66:45:2c:f6:7f:09:fe:d4:de:95:83:68:0f:
86:e2:f8:23:12:87:30:9d:13:ee:7a:16:5c:ee:b5:
ca:eb:d4:9a:01:14:0c:09:25:15:33:dc:9d:3c:53:
ea:11:20:7a:5c:d8:cb:2f:99:c1:a5:10:51:7f:38:
d2:1e:4e:73:b1:0d:c7:fd:b5:c2:98:86:04:9c:1c:
42:f7:63:4c:0d:e3:f5:07:5e:b6:22:73:9c:44:bf:
16:70:7b:64:8e:c8:7c:84:92:59:74:d8:10:25:16:
9c:33:68:4f:6e:db:74:03:38:18:d9:a1:c9:1f:dc:
cd:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:D8:48:17:1B:94:AE:35:4C:FF:7A:CC:51:3B:D0:FA:CE:4E:38:A0
X509v3 Authority Key Identifier:
keyid:71:49:C7:E7:02:31:A8:92:8F:D5:D0:43:57:AC:EB:6C:C0:F4:A6:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cUnH5wIxqJKP1dBDV6zrbMD0pps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/fbe883-03af-4172-9081-8c994d741956/1/cUnH5wIxqJKP1dBDV6zrbMD0pps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/fbe883-03af-4172-9081-8c994d741956/1/cUnH5wIxqJKP1dBDV6zrbMD0pps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:eb:a9:e6:87:42:f3:1d:83:91:1c:b1:24:04:10:ad:91:33:
cb:be:1e:cc:e9:f7:b9:7d:4d:35:1c:eb:4e:27:d0:0f:c7:2a:
9b:7f:be:10:f3:3b:ff:be:28:28:7a:ef:88:ef:3c:cd:64:63:
a5:b9:94:02:52:51:10:40:93:04:40:f5:0e:8a:73:2e:47:2e:
bb:2c:78:39:c1:32:46:a3:ec:42:7d:a9:56:45:af:17:af:82:
09:3c:51:62:a7:16:93:30:3e:92:63:98:70:e6:06:c2:84:3d:
99:a9:d5:8d:86:5e:2c:72:2e:c3:51:86:c0:29:57:a6:8c:79:
21:b8:c0:be:b0:02:52:27:76:5a:a1:b4:6c:be:7f:b8:68:b5:
08:94:87:ad:85:ec:54:72:43:6a:01:f8:ae:bd:0e:d4:de:d0:
ab:1c:5e:d7:df:d3:e1:5a:5e:7a:6c:ea:a0:c2:0e:32:b8:cd:
98:35:43:7d:42:df:bc:82:ef:a9:e1:0f:38:2f:7d:ec:d9:d0:
9e:8d:85:51:69:c6:ce:c5:73:c4:84:41:de:06:b2:0e:6c:3a:
f2:0e:6e:0b:81:77:72:f4:62:02:d9:1f:ff:06:c7:31:ec:ee:
ec:3a:2a:e6:26:5a:a0:7a:fd:7d:d2:37:ce:e7:df:6c:dd:1c:
7f:69:55:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:10 2026 by rpki-client