Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.mft
File: 1-cuQlMt82hOL0BABPrnswzGQMEE.mft (raw, json)
Hash identifier: MOtmqI/8wq+L2d3JDcVI5gxcZ8cxOrHFq2XgRbfKiOA=
Subject key identifier: 2D:CC:1A:4B:2C:A4:4E:2C:A4:A3:AE:66:B3:CE:74:19:3B:3C:16:BD
Authority key identifier: F9:CB:90:94:CB:7C:DA:13:8B:D0:10:01:3E:B9:EC:C3:31:90:30:41
Certificate issuer: /CN=f9cb9094cb7cda138bd010013eb9ecc331903041
Certificate serial: 019D37896A6DA0197FA00A8AAF44646DA178
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-cuQlMt82hOL0BABPrnswzGQMEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 03:00:45 +0000
Manifest this update: Sun 29 Mar 2026 03:00:45 +0000
Manifest next update: Mon 30 Mar 2026 03:00:45 +0000
Files and hashes: 1: 1-cuQlMt82hOL0BABPrnswzGQMEE.crl (hash: qRq4MsuEW/r99LWgg3w7kTrGPw/LhuAel5T0MqidIWg=)
2: Qk5MpNdRL52qvitv9k0XvdvcapI.roa (hash: vbB6JQXbd3WJ1/NPtyFdfR5AK1sMZwRoGAo5/Aa6H5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-cuQlMt82hOL0BABPrnswzGQMEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:6a:6d:a0:19:7f:a0:0a:8a:af:44:64:6d:a1:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9cb9094cb7cda138bd010013eb9ecc331903041
Validity
Not Before: Mar 29 03:00:45 2026 GMT
Not After : Mar 30 03:00:45 2026 GMT
Subject: CN=2dcc1a4b2ca44e2ca4a3ae66b3ce74193b3c16bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:9f:23:f6:28:11:9a:64:2e:81:20:53:a5:b3:
9e:62:9c:90:e3:78:45:f9:9d:84:b6:90:00:9d:8e:
fe:8b:b3:9f:da:01:7b:b0:d1:be:7c:a0:95:b4:5d:
6b:e7:fb:f1:63:e9:fb:ca:ec:c9:f4:cd:10:42:c2:
09:37:85:dc:13:2e:fa:5e:9a:08:44:ae:f5:cf:53:
a1:3f:ef:5e:ad:7e:fc:6d:73:ff:4b:f6:b6:49:e3:
a6:8f:fa:ec:3b:0f:6a:2a:99:04:36:40:37:af:3d:
18:8a:ab:ad:48:ad:08:6d:c8:1a:4c:bd:3e:cd:d7:
93:e5:0e:ef:fd:f6:f9:75:86:68:38:10:c0:b3:12:
19:60:61:15:f2:c8:23:f8:79:bd:30:77:3c:e7:7c:
53:10:92:a7:cf:c8:1f:22:ae:e5:a7:db:7b:e8:0b:
38:1d:84:1f:67:54:2c:b4:a8:3b:41:5c:a3:c5:e6:
56:fa:25:50:51:aa:28:3f:9d:d0:27:bd:68:50:41:
75:c0:86:40:67:32:39:24:82:26:89:12:ee:86:e0:
48:c2:04:68:2d:ce:54:d9:29:f6:29:60:e3:d0:f7:
54:ee:2a:c7:63:9a:f9:b3:a3:28:63:33:1e:cf:db:
4f:ee:a0:a4:8a:f5:2c:fa:ae:67:e4:94:38:2e:dd:
02:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:CC:1A:4B:2C:A4:4E:2C:A4:A3:AE:66:B3:CE:74:19:3B:3C:16:BD
X509v3 Authority Key Identifier:
keyid:F9:CB:90:94:CB:7C:DA:13:8B:D0:10:01:3E:B9:EC:C3:31:90:30:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-cuQlMt82hOL0BABPrnswzGQMEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:69:a2:4b:99:07:27:e9:43:21:80:47:18:6f:17:03:d6:77:
f0:e8:9f:60:1d:84:da:97:b6:5e:0d:ad:65:a3:6a:c8:07:4f:
1f:c6:d9:8b:88:e6:94:9f:20:ef:f5:37:6b:af:1d:1c:36:b8:
da:5f:1d:45:a2:60:a3:b7:53:4b:0f:f2:71:07:ab:c6:65:91:
e8:3e:a7:46:6b:27:ac:d1:91:76:8d:a5:48:a8:93:64:56:9b:
7c:c4:ee:b3:39:61:02:16:ff:9c:a5:7d:49:c5:e3:8e:51:6a:
dd:46:dc:e7:f7:1f:8d:b3:25:49:5d:ac:ef:4d:6b:00:10:76:
92:7a:55:24:35:a3:cd:08:94:0e:77:cc:4d:e5:9c:ca:36:6a:
a3:c9:c0:b9:8b:50:d4:40:5a:f7:80:d5:e7:a5:c4:a6:a3:11:
d3:33:51:6a:e1:1b:7b:bc:0b:b4:31:59:81:0c:dc:8b:03:dd:
3d:6a:ea:5b:19:cb:34:24:a8:f9:ea:11:f7:ae:dd:9e:de:0f:
f7:64:45:71:78:f1:d1:57:a1:47:9c:85:e0:d7:6b:a6:b0:4c:
f2:5f:11:6f:ba:a9:4a:9c:8b:26:a6:bf:88:04:5f:b0:31:eb:
91:98:df:7e:31:86:41:fc:d9:41:d7:46:35:54:b7:f6:e6:c6:
c1:3b:a9:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:45:50 2026 by rpki-client