Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.mft
File: 1-cuQlMt82hOL0BABPrnswzGQMEE.mft (raw, json)
Hash identifier: O0Q3A0q4DjBpvIGVMAUzwifgrP7iZ7dUl8IClqgrM4Q=
Subject key identifier: 29:AB:42:C5:67:53:AD:47:CE:CD:CE:8A:47:61:D0:C4:16:CC:DA:58
Authority key identifier: F9:CB:90:94:CB:7C:DA:13:8B:D0:10:01:3E:B9:EC:C3:31:90:30:41
Certificate issuer: /CN=f9cb9094cb7cda138bd010013eb9ecc331903041
Certificate serial: 019F1867575482B989B2B360C4C71ACEE2B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-cuQlMt82hOL0BABPrnswzGQMEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.mft
Manifest number: 198B
Signing time: Tue 30 Jun 2026 12:00:53 +0000
Manifest this update: Tue 30 Jun 2026 12:00:53 +0000
Manifest next update: Wed 01 Jul 2026 12:00:53 +0000
Files and hashes: 1: 1-cuQlMt82hOL0BABPrnswzGQMEE.crl (hash: ssseiU2IB4HKY0cYtF3THfAvtCoI4gifWkmj7UZz6fo=)
2: Qk5MpNdRL52qvitv9k0XvdvcapI.roa (hash: vbB6JQXbd3WJ1/NPtyFdfR5AK1sMZwRoGAo5/Aa6H5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-cuQlMt82hOL0BABPrnswzGQMEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:67:57:54:82:b9:89:b2:b3:60:c4:c7:1a:ce:e2:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9cb9094cb7cda138bd010013eb9ecc331903041
Validity
Not Before: Jun 30 12:00:53 2026 GMT
Not After : Jul 1 12:00:53 2026 GMT
Subject: CN=29ab42c56753ad47cecdce8a4761d0c416ccda58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:20:bd:cb:52:4d:dd:70:31:4e:5d:cf:ef:a8:
38:e8:7c:54:bc:f1:7d:98:0d:b3:1a:9a:d1:ca:2b:
da:fb:ad:bb:e4:f2:b4:26:57:97:1c:0d:d4:07:d6:
7a:35:87:cb:d2:67:f3:85:55:1d:c2:9f:39:71:7a:
2a:b5:0c:33:03:03:3f:25:4a:c2:de:b5:8a:7c:e7:
67:e4:cb:f6:5f:e0:98:bb:4e:89:5b:b5:5d:89:b0:
88:44:a1:70:08:b0:eb:27:cc:b5:5e:66:4d:5d:c7:
70:cc:5d:98:c1:a4:cd:05:e4:3e:e5:b8:f0:9e:6f:
47:c7:97:70:3b:34:37:e7:a0:20:e4:92:71:c2:43:
51:60:9d:98:89:80:50:b9:65:00:bc:9e:5d:66:8d:
ef:52:f0:b2:05:2c:11:a7:e7:78:b7:f6:67:c0:cd:
68:a0:be:98:d1:1e:40:f4:e3:dc:2b:8c:03:32:3c:
c6:db:4c:c9:bd:65:d3:77:b4:3a:2b:7c:f9:dc:99:
17:0d:a6:b5:37:11:8a:93:e0:83:4c:67:ea:c6:08:
46:02:87:81:85:a5:fa:2e:6d:c5:28:e5:53:cc:58:
b7:9c:e3:f7:c3:61:c3:f4:9d:15:5e:d0:a1:52:80:
0c:84:d5:e2:89:df:7b:4c:47:57:3a:ed:e0:36:50:
b5:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:AB:42:C5:67:53:AD:47:CE:CD:CE:8A:47:61:D0:C4:16:CC:DA:58
X509v3 Authority Key Identifier:
keyid:F9:CB:90:94:CB:7C:DA:13:8B:D0:10:01:3E:B9:EC:C3:31:90:30:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-cuQlMt82hOL0BABPrnswzGQMEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:25:1b:1d:ac:38:e7:1e:ca:ba:94:92:39:bd:d4:1c:e7:6f:
45:b4:e0:6f:4b:98:69:8b:ae:dc:dc:81:16:ca:0b:90:6e:0b:
e2:10:a7:92:a5:35:80:f0:33:4e:59:35:51:af:7e:4a:c7:cd:
2e:aa:51:08:a1:44:26:bb:88:dc:f0:06:cc:65:5a:c6:38:9a:
09:98:47:d3:dd:1e:ce:12:cb:47:5d:aa:b0:57:76:9f:1b:a9:
7c:8b:21:fb:57:9b:71:d8:d9:39:81:3f:6d:9f:51:0c:a4:98:
bd:e6:52:69:e8:80:0b:62:38:50:9a:8e:13:53:05:a1:04:21:
55:0b:a6:21:3b:86:fb:dc:8a:2f:c6:ec:8e:40:1c:13:60:f5:
8d:74:cf:81:01:0a:82:fe:3c:46:18:4c:30:63:43:ff:c7:5f:
c2:cb:38:0b:29:48:3b:0d:7e:55:1a:5b:8d:bb:09:95:ed:7e:
50:fa:0a:b8:f1:c3:21:b9:98:64:8a:7f:68:eb:12:f5:d9:ea:
68:5e:4f:b1:c3:d1:b5:31:84:64:0a:ed:ea:99:67:12:be:8a:
b6:32:09:4a:80:3c:7b:78:79:32:89:e6:4c:78:da:d8:95:0e:
00:53:ba:8c:89:e5:85:11:12:c2:98:02:9d:60:00:7d:31:21:
36:06:a3:bd
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ8YZ1dUgrmJsrNgxMcazuK4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5Y2I5MDk0Y2I3Y2RhMTM4YmQwMTAwMTNlYjllY2MzMzE5
MDMwNDEwHhcNMjYwNjMwMTIwMDUzWhcNMjYwNzAxMTIwMDUzWjAzMTEwLwYDVQQD
EygyOWFiNDJjNTY3NTNhZDQ3Y2VjZGNlOGE0NzYxZDBjNDE2Y2NkYTU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3SC9y1JN3XAxTl3P76g46HxUvPF9
mA2zGprRyiva+6275PK0JleXHA3UB9Z6NYfL0mfzhVUdwp85cXoqtQwzAwM/JUrC
3rWKfOdn5Mv2X+CYu06JW7VdibCIRKFwCLDrJ8y1XmZNXcdwzF2YwaTNBeQ+5bjw
nm9Hx5dwOzQ356Ag5JJxwkNRYJ2YiYBQuWUAvJ5dZo3vUvCyBSwRp+d4t/ZnwM1o
oL6Y0R5A9OPcK4wDMjzG20zJvWXTd7Q6K3z53JkXDaa1NxGKk+CDTGfqxghGAoeB
haX6Lm3FKOVTzFi3nOP3w2HD9J0VXtChUoAMhNXiid97TEdXOu3gNlC1hwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFCmrQsVnU61Hzs3Oikdh0MQWzNpYMB8GA1UdIwQY
MBaAFPnLkJTLfNoTi9AQAT657MMxkDBBMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1jdVFsTXQ4MmhPTDBCQUJQcm5zd3pHUU1FRS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWEvNjI0NTQ2LTRhYzgtNGRiZS04Njk3
LWFhY2U4NzhiYWI2NS8xLzEtY3VRbE10ODJoT0wwQkFCUHJuc3d6R1FNRUUubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2VhLzYyNDU0Ni00YWM4LTRkYmUtODY5Ny1hYWNlODc4YmFi
NjUvMS8xLWN1UWxNdDgyaE9MMEJBQlBybnN3ekdRTUVFLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyCUb
Haw45x7KupSSOb3UHOdvRbTgb0uYaYuu3NyBFsoLkG4L4hCnkqU1gPAzTlk1Ua9+
SsfNLqpRCKFEJruI3PAGzGVaxjiaCZhH090ezhLLR12qsFd2nxupfIsh+1ebcdjZ
OYE/bZ9RDKSYveZSaeiAC2I4UJqOE1MFoQQhVQumITuG+9yKL8bsjkAcE2D1jXTP
gQEKgv48RhhMMGND/8dfwss4CylIOw1+VRpbjbsJle1+UPoKuPHDIbmYZIp/aOsS
9dnqaF5PscPRtTGEZArt6plnEr6KtjIJSoA8e3h5MonmTHja2JUOAFO6jInlhRES
wpgCnWAAfTEhNgajvQ==
-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:20 2026 by rpki-client