Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.mft
File: 1-cuQlMt82hOL0BABPrnswzGQMEE.mft (raw, json)
Hash identifier: Tej+XjVRVylIsKL9dPcgAmHuPAiuONfsK9OSPaFVu1E=
Subject key identifier: AF:63:FD:F8:EB:30:53:31:44:51:78:8A:36:02:E8:FA:78:52:CD:50
Authority key identifier: F9:CB:90:94:CB:7C:DA:13:8B:D0:10:01:3E:B9:EC:C3:31:90:30:41
Certificate issuer: /CN=f9cb9094cb7cda138bd010013eb9ecc331903041
Certificate serial: 01A12D69D1A798F9BBB67D8E8F8862F94965
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-cuQlMt82hOL0BABPrnswzGQMEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.mft
Manifest number: 1A9F
Signing time: Mon 12 Oct 2026 00:01:11 +0000
Manifest this update: Mon 12 Oct 2026 00:01:11 +0000
Manifest next update: Tue 13 Oct 2026 00:01:11 +0000
Files and hashes: 1: 1-cuQlMt82hOL0BABPrnswzGQMEE.crl (hash: QJv7fDtPbshWwHPst4xOAM1ETUKRHg3+A2H/Xv2U9q0=)
2: Qk5MpNdRL52qvitv9k0XvdvcapI.roa (hash: vbB6JQXbd3WJ1/NPtyFdfR5AK1sMZwRoGAo5/Aa6H5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-cuQlMt82hOL0BABPrnswzGQMEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 22:49:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2d:69:d1:a7:98:f9:bb:b6:7d:8e:8f:88:62:f9:49:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9cb9094cb7cda138bd010013eb9ecc331903041
Validity
Not Before: Oct 12 00:01:11 2026 GMT
Not After : Oct 13 00:01:11 2026 GMT
Subject: CN=af63fdf8eb3053314451788a3602e8fa7852cd50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:97:f9:34:83:26:c8:be:0d:15:f9:5c:c3:51:
bd:3e:eb:08:9d:71:b0:24:9c:1b:e8:96:bd:ab:1d:
c2:6b:57:51:91:7e:8a:02:b4:58:b5:8b:31:87:1c:
f3:86:06:4b:5c:1b:bc:80:7b:79:65:90:77:69:e3:
8f:7e:ee:88:8b:1d:ae:ba:d5:2b:79:9f:53:cc:c2:
19:c6:d7:7e:a4:26:3d:9b:de:af:05:12:8d:47:96:
3c:fc:37:2e:9a:25:ce:df:2d:ee:40:01:d9:88:a1:
5c:d4:8d:35:dd:ff:68:30:06:df:9d:e3:22:1a:00:
3e:27:a2:61:84:5a:91:91:4a:9a:4c:76:a5:7c:9d:
e2:ff:01:7b:4d:34:86:0e:30:90:3a:63:13:ef:ee:
d7:a7:84:e8:53:87:79:3a:f8:2f:f3:85:35:13:23:
58:bb:16:31:1a:f9:81:bd:f8:30:73:28:40:b3:21:
5b:d9:72:e8:61:9b:cd:41:2d:97:fe:b3:21:99:07:
eb:89:62:a8:42:c0:e4:78:a4:da:bb:d4:63:52:9b:
04:69:ce:9e:a8:41:78:f7:44:a1:31:87:9e:9a:11:
5a:75:5c:7c:a1:1c:71:ef:14:01:23:ca:ba:09:fd:
f0:0f:3d:c5:46:83:a2:26:6a:27:1b:42:f0:32:c3:
bb:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:63:FD:F8:EB:30:53:31:44:51:78:8A:36:02:E8:FA:78:52:CD:50
X509v3 Authority Key Identifier:
keyid:F9:CB:90:94:CB:7C:DA:13:8B:D0:10:01:3E:B9:EC:C3:31:90:30:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-cuQlMt82hOL0BABPrnswzGQMEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:9d:f0:d1:00:ba:e8:9e:5b:34:7d:ec:49:da:d7:24:3b:54:
11:9d:3a:98:4d:22:c2:77:2b:df:8b:1a:b0:8e:df:4d:a2:2e:
24:b8:97:9c:73:f4:46:70:ea:f4:e2:f9:81:ce:3a:cd:c7:30:
92:49:f3:0d:e4:a7:f4:9e:0e:bf:7e:bf:b8:0d:f0:67:16:a0:
f9:3d:7a:6d:9b:13:14:88:45:a0:8d:65:5c:a6:20:ea:9c:35:
2d:a1:16:08:b2:18:75:1d:0a:98:4e:de:d6:a5:ad:3e:ac:1e:
f6:e0:fb:b7:e4:a7:e4:b6:00:1d:f0:34:f4:47:e3:10:38:d2:
29:31:fb:b0:03:85:a5:a5:ac:26:4e:78:fd:c9:ef:55:2f:c6:
30:09:19:0f:03:98:2b:08:cd:37:91:9a:8d:5d:05:30:76:24:
16:7a:42:e8:c6:34:d6:27:17:c6:b5:18:ce:5a:f2:3b:a4:77:
6d:07:f4:46:57:a4:fc:23:96:45:52:f1:00:de:ed:31:94:cb:
09:3a:5e:f4:2e:85:6d:0f:3d:05:31:55:b5:38:78:dc:14:2c:
d9:30:2d:df:cc:10:6f:2f:f3:33:35:cf:00:48:c3:04:91:f6:
74:eb:dd:3c:d9:02:4c:3a:70:b6:08:dc:94:07:e7:69:b9:6c:
ce:8f:23:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 04:29:26 2026 by rpki-client