Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/470cb8-eb6a-4934-9d47-968d0c7f22bb/1/cuW1e7OY1eGDmj_kJU33DXEs4Uo.mft
File: cuW1e7OY1eGDmj_kJU33DXEs4Uo.mft (raw, json)
Hash identifier: Nznkd6k3reBGajpkqzNFpnCMwTrMxoGJURYn2LwVoIM=
Subject key identifier: 3C:56:EB:B7:BE:4E:A1:E1:63:DF:5E:07:9E:70:F5:F6:91:92:D7:06
Authority key identifier: 72:E5:B5:7B:B3:98:D5:E1:83:9A:3F:E4:25:4D:F7:0D:71:2C:E1:4A
Certificate issuer: /CN=72e5b57bb398d5e1839a3fe4254df70d712ce14a
Certificate serial: 01A0B61B7D65D1FD452B006748C1BD09AFAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cuW1e7OY1eGDmj_kJU33DXEs4Uo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/470cb8-eb6a-4934-9d47-968d0c7f22bb/1/cuW1e7OY1eGDmj_kJU33DXEs4Uo.mft
Manifest number: 0C85
Signing time: Fri 18 Sep 2026 20:00:49 +0000
Manifest this update: Fri 18 Sep 2026 20:00:49 +0000
Manifest next update: Sat 19 Sep 2026 20:00:49 +0000
Files and hashes: 1: RIVpRVcoTiPM597Ay6ktG1nRpoI.roa (hash: 8WsKosIyT+/va+/3Ff2UyTN4wl8h0E62UrDqXKvX/7s=)
2: cuW1e7OY1eGDmj_kJU33DXEs4Uo.crl (hash: heOVif1pcs9AwUY82nUyNPvqz3+u0sssSXamu5W4wCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/470cb8-eb6a-4934-9d47-968d0c7f22bb/1/cuW1e7OY1eGDmj_kJU33DXEs4Uo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/470cb8-eb6a-4934-9d47-968d0c7f22bb/1/cuW1e7OY1eGDmj_kJU33DXEs4Uo.mft
rsync://rpki.ripe.net/repository/DEFAULT/cuW1e7OY1eGDmj_kJU33DXEs4Uo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 16:24:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b6:1b:7d:65:d1:fd:45:2b:00:67:48:c1:bd:09:af:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72e5b57bb398d5e1839a3fe4254df70d712ce14a
Validity
Not Before: Sep 18 20:00:49 2026 GMT
Not After : Sep 19 20:00:49 2026 GMT
Subject: CN=3c56ebb7be4ea1e163df5e079e70f5f69192d706
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:01:e0:41:fe:58:b2:82:52:b9:35:c0:45:65:
8f:c1:e9:72:73:b5:37:0b:c4:f2:e7:36:9a:3a:91:
85:2a:dc:65:af:49:e3:bc:71:e1:bf:cc:dc:82:7d:
3a:ea:2b:e2:f6:6c:39:e5:3f:fd:5f:56:7d:cb:98:
ae:e0:4f:bc:32:01:70:6f:0e:e9:74:03:50:cc:c2:
b2:b7:5d:e5:bd:b0:0b:d2:f2:c0:28:87:d7:55:ad:
c9:62:d9:1b:fe:85:8d:33:a9:ee:b4:fc:9b:8e:b8:
87:33:f3:08:9a:88:0f:7c:89:78:19:16:a4:dc:1b:
e8:7c:31:29:fb:eb:9d:1b:09:a6:9e:a1:a9:8e:95:
18:24:8d:cc:7c:ae:6e:08:f5:52:3e:99:6d:b2:50:
51:16:75:84:07:bf:28:83:71:bd:77:9c:78:a3:b4:
29:db:43:21:96:16:7e:2d:76:a0:02:1a:e3:99:44:
44:df:e0:4a:50:f3:69:62:b8:43:8d:2b:05:71:c1:
18:90:5b:57:3d:97:18:e1:b2:7b:68:d7:a2:64:24:
f8:91:c3:9d:5d:bd:43:36:62:88:ad:de:65:92:95:
ea:27:a8:6f:b7:5f:80:f0:0e:fe:b6:ed:9e:2d:e3:
9e:c9:19:87:34:b4:9d:a6:1e:cd:b9:f0:dd:43:31:
34:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:56:EB:B7:BE:4E:A1:E1:63:DF:5E:07:9E:70:F5:F6:91:92:D7:06
X509v3 Authority Key Identifier:
keyid:72:E5:B5:7B:B3:98:D5:E1:83:9A:3F:E4:25:4D:F7:0D:71:2C:E1:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cuW1e7OY1eGDmj_kJU33DXEs4Uo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/470cb8-eb6a-4934-9d47-968d0c7f22bb/1/cuW1e7OY1eGDmj_kJU33DXEs4Uo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/470cb8-eb6a-4934-9d47-968d0c7f22bb/1/cuW1e7OY1eGDmj_kJU33DXEs4Uo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:cc:f3:4d:ed:21:68:43:af:37:40:74:be:19:45:14:61:92:
8c:15:fb:13:06:e4:d3:f2:39:15:10:91:db:fc:4c:f5:db:61:
f2:41:e7:69:b3:06:75:09:48:f7:55:ca:7e:62:1f:c2:fc:9c:
28:85:a3:25:3c:53:3b:16:d8:ba:ca:9b:cc:31:41:81:65:e3:
e5:ba:11:be:b2:53:7d:f4:67:a6:8f:b8:ef:8b:aa:77:7d:cd:
c2:f4:cd:36:4b:0a:e3:cd:ce:22:0f:eb:5a:04:40:4f:5a:11:
ab:58:db:0e:36:67:85:eb:d5:90:15:29:6a:55:59:ad:26:66:
d2:df:81:38:34:7f:b8:ab:fe:19:b0:13:9c:15:4d:ca:a0:8e:
8f:8c:a7:48:a1:86:11:10:6a:c4:3a:4e:ec:3c:09:06:cd:a8:
66:e0:0c:e5:99:0a:58:c6:04:71:d3:8b:60:f6:a1:4c:0b:1c:
4a:5a:17:d1:14:c4:1a:2d:a1:01:7e:e4:11:36:d3:52:c6:d1:
c0:2e:04:14:03:69:78:d4:b9:f0:e2:64:92:60:cb:88:28:ee:
19:5c:e2:c9:65:11:eb:bb:36:d8:fd:0a:68:64:1c:25:7f:2d:
34:15:e0:e7:7a:a5:43:d0:a8:d9:6a:7a:fe:ea:ec:0e:81:33:
0b:ee:e9:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 23:50:43 2026 by rpki-client