Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/470cb8-eb6a-4934-9d47-968d0c7f22bb/1/cuW1e7OY1eGDmj_kJU33DXEs4Uo.mft
File: cuW1e7OY1eGDmj_kJU33DXEs4Uo.mft (raw, json)
Hash identifier: RK8CJWcEuJcIJky1oMbEjkOdGvEjroP1bthE13HLOlg=
Subject key identifier: 81:D6:7F:39:05:4F:45:8B:B2:78:A4:20:D5:D7:5C:C2:92:ED:57:E0
Authority key identifier: 72:E5:B5:7B:B3:98:D5:E1:83:9A:3F:E4:25:4D:F7:0D:71:2C:E1:4A
Certificate issuer: /CN=72e5b57bb398d5e1839a3fe4254df70d712ce14a
Certificate serial: 019CC9E39BA5A32E21BD1141F602453AA79B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cuW1e7OY1eGDmj_kJU33DXEs4Uo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/470cb8-eb6a-4934-9d47-968d0c7f22bb/1/cuW1e7OY1eGDmj_kJU33DXEs4Uo.mft
Manifest number: 0A7D
Signing time: Sat 07 Mar 2026 20:01:02 +0000
Manifest this update: Sat 07 Mar 2026 20:01:02 +0000
Manifest next update: Sun 08 Mar 2026 20:01:02 +0000
Files and hashes: 1: RIVpRVcoTiPM597Ay6ktG1nRpoI.roa (hash: 8WsKosIyT+/va+/3Ff2UyTN4wl8h0E62UrDqXKvX/7s=)
2: cuW1e7OY1eGDmj_kJU33DXEs4Uo.crl (hash: XyDkKHO9ElCfNG3/5yvt3Lz/xyw3vq7EP9jdzDwdKLg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/470cb8-eb6a-4934-9d47-968d0c7f22bb/1/cuW1e7OY1eGDmj_kJU33DXEs4Uo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/470cb8-eb6a-4934-9d47-968d0c7f22bb/1/cuW1e7OY1eGDmj_kJU33DXEs4Uo.mft
rsync://rpki.ripe.net/repository/DEFAULT/cuW1e7OY1eGDmj_kJU33DXEs4Uo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 20:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c9:e3:9b:a5:a3:2e:21:bd:11:41:f6:02:45:3a:a7:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72e5b57bb398d5e1839a3fe4254df70d712ce14a
Validity
Not Before: Mar 7 20:01:02 2026 GMT
Not After : Mar 8 20:01:02 2026 GMT
Subject: CN=81d67f39054f458bb278a420d5d75cc292ed57e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:70:4a:28:21:43:34:09:76:3f:2d:11:4e:b7:
82:3c:1f:c3:07:36:5e:61:0c:7a:16:de:69:53:61:
30:09:88:8e:29:8f:54:9a:a2:53:d3:af:c8:42:7f:
74:09:4a:e1:82:2d:cc:da:63:fc:b6:ad:6d:53:5f:
20:ef:6e:d7:03:ef:5f:f5:e1:f4:34:02:66:15:5c:
4f:33:fb:b6:eb:8c:1c:a3:b5:20:cc:08:1f:a0:b2:
7b:00:ef:3f:16:b4:b7:bb:00:f8:1f:66:1a:89:07:
f2:50:6d:16:e7:66:a0:90:59:9d:5d:2d:db:70:6d:
78:8a:c5:c1:52:7f:be:d6:73:37:f2:10:db:4e:7a:
f0:0b:b0:30:a6:fd:fe:ec:c4:66:e8:d5:6e:ab:64:
82:94:70:12:16:ff:95:4c:a1:c9:31:43:29:74:6e:
36:31:b8:fc:e6:3a:3e:30:bd:d6:c8:1d:03:a0:87:
55:e8:7c:c6:2f:04:af:14:8c:be:b6:46:11:e2:fb:
e4:8f:f3:73:6a:be:00:b6:0b:52:ff:79:7f:96:ca:
02:7c:20:89:b9:e7:a0:13:6d:8e:30:1b:d0:e1:53:
26:3e:05:43:50:f8:9c:2e:96:45:6f:e0:66:90:73:
02:47:1a:26:93:2e:2d:78:d9:4c:af:f9:07:0a:2c:
cb:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:D6:7F:39:05:4F:45:8B:B2:78:A4:20:D5:D7:5C:C2:92:ED:57:E0
X509v3 Authority Key Identifier:
keyid:72:E5:B5:7B:B3:98:D5:E1:83:9A:3F:E4:25:4D:F7:0D:71:2C:E1:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cuW1e7OY1eGDmj_kJU33DXEs4Uo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/470cb8-eb6a-4934-9d47-968d0c7f22bb/1/cuW1e7OY1eGDmj_kJU33DXEs4Uo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/470cb8-eb6a-4934-9d47-968d0c7f22bb/1/cuW1e7OY1eGDmj_kJU33DXEs4Uo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:4a:73:87:be:81:17:f0:29:36:38:27:96:ac:1d:5a:ae:ed:
e4:0e:93:ff:a2:05:d3:f3:60:d5:6b:a3:87:56:01:ed:17:8a:
59:e0:66:4e:50:13:a8:0f:17:13:7d:55:8b:a0:b1:44:4c:4c:
12:83:b6:95:77:e5:cc:cb:ff:40:e1:ef:8e:f3:65:33:d7:3f:
2f:52:e9:5f:4b:fd:26:10:c5:12:d9:c6:b0:a6:48:f0:c9:14:
db:2c:94:61:ab:55:72:18:40:60:ef:ad:6b:41:f4:4e:44:09:
8b:81:a5:00:75:74:8f:0c:53:14:a0:ca:b9:5c:a2:8b:3c:30:
06:d9:41:ef:37:cd:58:db:02:d3:a4:a7:db:75:53:cc:e8:3f:
82:b2:2e:63:b9:fe:d4:7f:f6:74:48:d9:81:4c:78:00:68:ba:
9b:57:80:09:89:c8:31:6a:02:5f:78:0a:ff:84:6b:f4:59:e8:
dd:d0:3b:17:4d:e2:d4:9d:05:1d:2d:23:6c:06:3b:2c:8f:30:
27:89:c0:2c:0d:10:32:01:b3:c4:1f:a5:43:f7:ed:c0:83:83:
f0:12:94:eb:dc:a7:c0:5a:f9:57:5a:dd:7c:99:8b:6f:7b:f3:
07:2b:de:95:85:da:38:ff:e5:e9:93:4f:7a:0e:df:f9:27:2e:
3c:27:81:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 8 03:20:54 2026 by rpki-client