Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/33fb0f-8275-4461-8e70-f6c2cd67f859/1/cuWI2kps8EE_-zAWvkZ47Jmpjfk.mft
File: cuWI2kps8EE_-zAWvkZ47Jmpjfk.mft (raw, json)
Hash identifier: YWniJ4I3PrXQnyy4DvYmZTpu4byVcQh+4URiY2cJQzE=
Subject key identifier: 2F:35:3D:D2:D8:BF:AF:4A:AE:B5:D3:14:50:CC:50:CC:F8:63:96:4A
Authority key identifier: 72:E5:88:DA:4A:6C:F0:41:3F:FB:30:16:BE:46:78:EC:99:A9:8D:F9
Certificate issuer: /CN=72e588da4a6cf0413ffb3016be4678ec99a98df9
Certificate serial: 019D371BE1B29A13CD8E481661B615D647AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cuWI2kps8EE_-zAWvkZ47Jmpjfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/33fb0f-8275-4461-8e70-f6c2cd67f859/1/cuWI2kps8EE_-zAWvkZ47Jmpjfk.mft
Manifest number: 095F
Signing time: Sun 29 Mar 2026 01:01:07 +0000
Manifest this update: Sun 29 Mar 2026 01:01:07 +0000
Manifest next update: Mon 30 Mar 2026 01:01:07 +0000
Files and hashes: 1: cuWI2kps8EE_-zAWvkZ47Jmpjfk.crl (hash: 4VACt5TB+Fjyjo1rVYPy1C7t8YBgyrGeLkO2e/48Pss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/33fb0f-8275-4461-8e70-f6c2cd67f859/1/cuWI2kps8EE_-zAWvkZ47Jmpjfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/33fb0f-8275-4461-8e70-f6c2cd67f859/1/cuWI2kps8EE_-zAWvkZ47Jmpjfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/cuWI2kps8EE_-zAWvkZ47Jmpjfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:e1:b2:9a:13:cd:8e:48:16:61:b6:15:d6:47:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72e588da4a6cf0413ffb3016be4678ec99a98df9
Validity
Not Before: Mar 29 01:01:07 2026 GMT
Not After : Mar 30 01:01:07 2026 GMT
Subject: CN=2f353dd2d8bfaf4aaeb5d31450cc50ccf863964a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:12:d0:23:2a:aa:da:cf:d3:4a:4e:e2:a0:db:
1f:f5:99:f7:85:13:57:1e:5d:4e:f1:22:c4:5b:d6:
56:f7:4b:00:73:4e:ec:5d:16:78:ac:ba:7d:46:76:
c2:2a:a0:25:e5:e4:f5:07:92:ca:b0:e4:5f:a5:e1:
a9:c8:d1:68:4f:3b:79:8a:56:b0:d0:11:53:97:95:
89:ba:42:52:81:c4:96:ae:6d:66:7a:f3:ff:5f:12:
b1:df:95:6e:57:6c:3f:9a:dd:96:1d:cb:1b:2c:d7:
25:29:46:12:47:ef:d7:5c:8f:12:e6:83:c3:93:2f:
7e:55:d4:cc:2a:c5:ce:b9:de:64:85:49:cd:75:da:
24:4a:e7:9e:26:e5:95:93:b6:fe:31:4d:8e:3b:a7:
30:90:f3:89:4e:db:ba:a5:e9:d8:36:c7:36:45:62:
53:00:53:c8:b3:8c:d6:9f:b5:dd:2d:27:49:9a:ef:
7e:ff:05:cc:07:51:b3:30:b7:56:46:03:c6:9d:ec:
d6:e0:2a:ca:8e:14:13:55:72:68:01:88:c2:25:8b:
06:e9:b7:f7:11:63:1d:a3:03:34:d8:3b:9a:b3:ab:
95:ff:d8:1b:ca:d5:e0:8a:73:ae:ac:d6:ec:e1:e7:
67:c8:74:12:60:48:9f:5b:63:95:7f:26:71:73:3b:
01:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:35:3D:D2:D8:BF:AF:4A:AE:B5:D3:14:50:CC:50:CC:F8:63:96:4A
X509v3 Authority Key Identifier:
keyid:72:E5:88:DA:4A:6C:F0:41:3F:FB:30:16:BE:46:78:EC:99:A9:8D:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cuWI2kps8EE_-zAWvkZ47Jmpjfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/33fb0f-8275-4461-8e70-f6c2cd67f859/1/cuWI2kps8EE_-zAWvkZ47Jmpjfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/33fb0f-8275-4461-8e70-f6c2cd67f859/1/cuWI2kps8EE_-zAWvkZ47Jmpjfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:70:5c:32:eb:93:24:37:61:9d:bc:fa:35:71:62:2a:6f:03:
da:66:d2:bb:f5:50:96:d8:79:23:d8:72:ae:b2:77:a4:f8:b1:
8f:a9:f7:54:9e:5b:af:24:a1:ed:14:df:09:5c:d7:57:41:ca:
e0:2e:b8:0f:74:74:fc:a5:49:ae:1b:1f:58:c7:bc:bd:d4:71:
59:c4:13:a3:4d:1b:16:e4:71:1e:bd:e3:87:25:92:c0:e1:61:
db:8c:05:6e:8f:dc:5a:08:71:f0:9d:34:1b:e5:50:25:03:44:
38:82:3f:6a:9a:21:c0:30:d6:a0:cb:2c:7a:d5:8c:1d:06:43:
0e:c6:02:99:cf:0a:db:15:db:85:2c:5d:8f:4f:17:c1:24:c5:
e0:18:63:57:5d:53:95:e0:50:92:fa:c0:81:3e:06:fc:9a:89:
67:b9:fa:75:4c:57:80:34:e3:32:da:4d:12:75:e6:fd:f1:e5:
32:56:13:b9:87:23:ce:4c:9e:e8:51:4e:fe:14:99:58:1a:be:
85:52:50:28:9f:50:2a:47:bf:53:1b:74:4d:e7:b5:c4:bc:c7:
87:51:34:5b:ab:ac:0c:6f:e4:13:d5:ed:f4:1b:ea:a9:e6:cb:
05:59:08:f4:8d:2b:6e:de:7f:6e:37:9a:54:fe:61:59:e5:97:
43:fc:9d:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03G+GymhPNjkgWYbYV1kerMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyZTU4OGRhNGE2Y2YwNDEzZmZiMzAxNmJlNDY3OGVjOTlh
OThkZjkwHhcNMjYwMzI5MDEwMTA3WhcNMjYwMzMwMDEwMTA3WjAzMTEwLwYDVQQD
EygyZjM1M2RkMmQ4YmZhZjRhYWViNWQzMTQ1MGNjNTBjY2Y4NjM5NjRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxLQIyqq2s/TSk7ioNsf9Zn3hRNX
Hl1O8SLEW9ZW90sAc07sXRZ4rLp9RnbCKqAl5eT1B5LKsORfpeGpyNFoTzt5ilaw
0BFTl5WJukJSgcSWrm1mevP/XxKx35VuV2w/mt2WHcsbLNclKUYSR+/XXI8S5oPD
ky9+VdTMKsXOud5khUnNddokSueeJuWVk7b+MU2OO6cwkPOJTtu6penYNsc2RWJT
AFPIs4zWn7XdLSdJmu9+/wXMB1GzMLdWRgPGnezW4CrKjhQTVXJoAYjCJYsG6bf3
EWMdowM02Duas6uV/9gbytXginOurNbs4ednyHQSYEifW2OVfyZxczsBuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC81PdLYv69KrrXTFFDMUMz4Y5ZKMB8GA1UdIwQY
MBaAFHLliNpKbPBBP/swFr5GeOyZqY35MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3VXSTJrcHM4RUVfLXpBV3ZrWjQ3Sm1wamZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS8zM2ZiMGYtODI3NS00NDYxLThlNzAt
ZjZjMmNkNjdmODU5LzEvY3VXSTJrcHM4RUVfLXpBV3ZrWjQ3Sm1wamZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS8zM2ZiMGYtODI3NS00NDYxLThlNzAtZjZjMmNkNjdmODU5
LzEvY3VXSTJrcHM4RUVfLXpBV3ZrWjQ3Sm1wamZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvHBcMuuT
JDdhnbz6NXFiKm8D2mbSu/VQlth5I9hyrrJ3pPixj6n3VJ5brySh7RTfCVzXV0HK
4C64D3R0/KVJrhsfWMe8vdRxWcQTo00bFuRxHr3jhyWSwOFh24wFbo/cWghx8J00
G+VQJQNEOII/apohwDDWoMssetWMHQZDDsYCmc8K2xXbhSxdj08XwSTF4BhjV11T
leBQkvrAgT4G/JqJZ7n6dUxXgDTjMtpNEnXm/fHlMlYTuYcjzkye6FFO/hSZWBq+
hVJQKJ9QKke/Uxt0Tee1xLzHh1E0W6usDG/kE9Xt9BvqqebLBVkI9I0rbt5/bjea
VP5hWeWXQ/ydqw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:14:23 2026 by rpki-client