Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ee/434849-89da-43ae-b2be-66cd01961e46/1/CUSqrH8uuymBwkdj6z1gRe-9bwY.mft
File: CUSqrH8uuymBwkdj6z1gRe-9bwY.mft (raw, json)
Hash identifier: qQ1Yusr3fXb6Xxhkc2vZIeps80LWTug44RHnwTcAfjM=
Subject key identifier: 55:EE:29:14:2A:19:7F:60:5A:E3:BF:8B:FE:AB:7F:A7:60:5D:84:7F
Authority key identifier: 09:44:AA:AC:7F:2E:BB:29:81:C2:47:63:EB:3D:60:45:EF:BD:6F:06
Certificate issuer: /CN=0944aaac7f2ebb2981c24763eb3d6045efbd6f06
Certificate serial: 01A094A1F84098B3446997650EF7100A69EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CUSqrH8uuymBwkdj6z1gRe-9bwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/434849-89da-43ae-b2be-66cd01961e46/1/CUSqrH8uuymBwkdj6z1gRe-9bwY.mft
Manifest number: 108C
Signing time: Sat 12 Sep 2026 08:00:37 +0000
Manifest this update: Sat 12 Sep 2026 08:00:37 +0000
Manifest next update: Sun 13 Sep 2026 08:00:37 +0000
Files and hashes: 1: CUSqrH8uuymBwkdj6z1gRe-9bwY.crl (hash: O+uplBqEM/eUXNEzsvYqN2D5uH/M9HWbP6mCpj3O3UE=)
2: zjvZq0qDo9Cqy2lJeksXnY5wlWg.roa (hash: R3vvsBnC8yjc/6l+ae3jOrD+eH9Ah/ka0B3qOkEBjzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/434849-89da-43ae-b2be-66cd01961e46/1/CUSqrH8uuymBwkdj6z1gRe-9bwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/434849-89da-43ae-b2be-66cd01961e46/1/CUSqrH8uuymBwkdj6z1gRe-9bwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CUSqrH8uuymBwkdj6z1gRe-9bwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Sep 2026 06:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:94:a1:f8:40:98:b3:44:69:97:65:0e:f7:10:0a:69:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0944aaac7f2ebb2981c24763eb3d6045efbd6f06
Validity
Not Before: Sep 12 08:00:37 2026 GMT
Not After : Sep 13 08:00:37 2026 GMT
Subject: CN=55ee29142a197f605ae3bf8bfeab7fa7605d847f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:51:cd:1a:ad:ab:c0:02:5a:b0:06:a5:a1:fb:
97:b1:7d:8b:d6:58:63:33:e5:ab:d2:3f:f3:c0:db:
80:4f:48:03:99:16:c1:75:9e:6e:3e:f3:f9:17:5e:
57:87:80:be:03:0c:1f:1b:9f:48:08:aa:08:a7:be:
83:f8:2f:59:3c:85:6c:aa:83:ed:72:49:08:72:ee:
61:bd:1e:31:57:60:7f:cc:54:a2:33:57:76:9c:88:
bf:48:41:b1:65:1e:b2:1c:ee:c3:0a:7d:c1:b3:23:
37:4e:ab:45:8f:96:87:f3:8b:f7:45:96:88:94:6b:
fc:d6:e0:07:0c:e3:90:53:2a:a5:5b:e4:48:0b:cd:
d1:ad:d8:5f:6f:f9:07:35:11:d1:96:79:df:42:63:
2c:5e:0f:1e:a9:03:1f:15:1d:f3:c3:16:c4:7a:97:
69:00:26:90:7a:6d:8d:78:0e:ef:3a:24:61:0c:5c:
83:de:44:0e:f4:9c:eb:78:ec:ff:86:85:92:a1:46:
64:98:6c:7c:46:ba:48:56:cd:b6:38:9c:d0:6e:bd:
1b:a5:33:de:bf:31:cb:60:da:84:67:9f:80:ca:c4:
a0:92:35:7f:88:95:1e:a7:e1:a0:48:b9:6d:13:f1:
cf:aa:bd:25:69:f2:a0:d4:d9:8d:eb:1d:a2:54:43:
1c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:EE:29:14:2A:19:7F:60:5A:E3:BF:8B:FE:AB:7F:A7:60:5D:84:7F
X509v3 Authority Key Identifier:
keyid:09:44:AA:AC:7F:2E:BB:29:81:C2:47:63:EB:3D:60:45:EF:BD:6F:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CUSqrH8uuymBwkdj6z1gRe-9bwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/434849-89da-43ae-b2be-66cd01961e46/1/CUSqrH8uuymBwkdj6z1gRe-9bwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/434849-89da-43ae-b2be-66cd01961e46/1/CUSqrH8uuymBwkdj6z1gRe-9bwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:26:65:48:76:6b:32:77:78:52:30:8b:e2:b9:2c:27:5f:ef:
da:5d:84:4f:f7:25:2e:9f:79:10:58:41:1b:04:71:6b:8a:50:
fd:07:c0:b2:13:49:05:00:8c:78:d0:f7:f0:6b:1a:47:49:51:
aa:85:80:e9:92:1e:d2:7a:c7:33:6e:4b:66:06:32:2a:6d:14:
1f:fa:9f:0d:ed:dc:cc:b4:37:07:06:b8:65:f1:5d:e7:64:c9:
2b:e8:9d:ac:b2:2d:48:7c:c2:b6:a7:f8:8d:7b:3c:27:b7:b1:
df:3a:8a:cb:03:bd:43:8e:28:99:a2:8d:e9:6b:01:3e:f9:40:
d1:65:a4:66:77:1d:f8:cb:89:2d:d2:28:cd:3b:bb:64:2e:b4:
b9:da:3c:b1:fd:5a:74:5d:8b:c6:66:31:f9:0d:2e:5f:b6:47:
d9:e6:dd:30:5f:d5:4f:b4:0f:05:37:ff:92:02:47:a8:78:a8:
16:64:9b:71:1f:81:cf:4e:5d:18:68:8a:11:77:43:14:2f:cc:
43:cb:ce:e7:1a:87:cc:a1:4e:d2:1f:38:91:f6:47:65:d0:1a:
e9:71:75:13:97:5d:07:d0:ff:4e:38:3e:3c:8e:8a:0b:7c:31:
c4:c7:0e:9d:56:62:b9:ea:b8:d8:8b:47:74:ce:d7:c6:f3:a4:
b5:b4:0c:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 12 13:39:10 2026 by rpki-client