Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ee/434849-89da-43ae-b2be-66cd01961e46/1/CUSqrH8uuymBwkdj6z1gRe-9bwY.mft
File: CUSqrH8uuymBwkdj6z1gRe-9bwY.mft (raw, json)
Hash identifier: 6ubyie4kle7p5fIJzyWEB7VOYGXTWqDpRonAeD+REl0=
Subject key identifier: 64:64:D4:7A:91:0D:8F:94:A4:17:5C:A9:4C:01:AE:85:65:E4:D9:7F
Authority key identifier: 09:44:AA:AC:7F:2E:BB:29:81:C2:47:63:EB:3D:60:45:EF:BD:6F:06
Certificate issuer: /CN=0944aaac7f2ebb2981c24763eb3d6045efbd6f06
Certificate serial: 01A1A6DD5D03628336D10C12A38B0E469A70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CUSqrH8uuymBwkdj6z1gRe-9bwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/434849-89da-43ae-b2be-66cd01961e46/1/CUSqrH8uuymBwkdj6z1gRe-9bwY.mft
Manifest number: 111A
Signing time: Wed 04 Nov 2026 14:01:27 +0000
Manifest this update: Wed 04 Nov 2026 14:01:27 +0000
Manifest next update: Thu 05 Nov 2026 14:01:27 +0000
Files and hashes: 1: CUSqrH8uuymBwkdj6z1gRe-9bwY.crl (hash: OnIm5bI9FehmmyVuRNxs5UzcSD5L3BzRuW9fzRjCX5g=)
2: zjvZq0qDo9Cqy2lJeksXnY5wlWg.roa (hash: R3vvsBnC8yjc/6l+ae3jOrD+eH9Ah/ka0B3qOkEBjzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/434849-89da-43ae-b2be-66cd01961e46/1/CUSqrH8uuymBwkdj6z1gRe-9bwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/434849-89da-43ae-b2be-66cd01961e46/1/CUSqrH8uuymBwkdj6z1gRe-9bwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CUSqrH8uuymBwkdj6z1gRe-9bwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 10:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a6:dd:5d:03:62:83:36:d1:0c:12:a3:8b:0e:46:9a:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0944aaac7f2ebb2981c24763eb3d6045efbd6f06
Validity
Not Before: Nov 4 14:01:27 2026 GMT
Not After : Nov 5 14:01:27 2026 GMT
Subject: CN=6464d47a910d8f94a4175ca94c01ae8565e4d97f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:59:51:72:9f:1b:ad:f5:f6:26:b2:25:44:e1:
72:6b:1a:7f:20:f8:08:96:88:56:8b:95:51:77:9e:
4e:f5:78:14:fb:21:8e:91:69:33:a0:6a:85:ee:92:
94:d9:9e:98:9a:46:4c:03:22:2d:32:b8:a9:dc:45:
98:7c:ef:d1:c5:2a:92:bc:39:2b:12:31:98:68:d1:
c4:28:da:66:67:56:db:e7:6c:00:46:e7:01:5f:fa:
2a:db:b8:26:54:ec:b7:63:55:7e:30:02:d5:39:f1:
56:ad:dc:d5:c4:6e:da:18:29:bd:eb:99:8c:03:c9:
6d:da:c8:6f:59:0b:1c:d9:e1:46:8f:75:fd:73:db:
7b:2b:be:fa:67:64:78:fc:e5:77:1b:08:ba:27:9b:
d8:da:0d:26:b1:7d:30:86:fc:19:0d:42:f6:7a:59:
49:c2:13:b6:01:95:d3:34:e9:d5:87:b1:2b:f7:d7:
61:bd:36:11:a5:ac:03:e3:10:ad:5f:d3:51:e9:97:
96:d7:71:c4:69:68:54:53:f3:33:a7:37:74:a9:94:
ab:57:57:37:fe:2f:25:59:9c:13:fb:6b:ba:a5:4d:
09:f0:ae:72:ce:b8:e8:67:89:74:68:f3:b9:12:01:
48:93:66:93:e1:8b:dc:15:06:7b:7a:41:a2:2e:8c:
b8:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:64:D4:7A:91:0D:8F:94:A4:17:5C:A9:4C:01:AE:85:65:E4:D9:7F
X509v3 Authority Key Identifier:
keyid:09:44:AA:AC:7F:2E:BB:29:81:C2:47:63:EB:3D:60:45:EF:BD:6F:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CUSqrH8uuymBwkdj6z1gRe-9bwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/434849-89da-43ae-b2be-66cd01961e46/1/CUSqrH8uuymBwkdj6z1gRe-9bwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/434849-89da-43ae-b2be-66cd01961e46/1/CUSqrH8uuymBwkdj6z1gRe-9bwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:57:8e:1e:02:bc:46:70:38:3a:42:05:99:c0:06:df:1e:9b:
dc:fe:f5:57:89:c1:d7:35:4f:17:fc:22:d5:28:17:5c:7a:81:
5e:5e:e4:8e:44:e1:c0:a8:56:b4:f9:9e:21:ed:21:91:f9:e3:
de:96:a7:7c:44:91:80:47:07:34:27:08:6e:7c:8a:b1:ce:61:
da:c5:7c:0c:3e:a1:dd:64:80:f3:48:45:69:80:fd:81:49:98:
92:8b:ed:8d:38:11:be:53:94:dd:37:82:d9:5d:01:f6:f4:ff:
be:06:7a:df:05:3a:ae:69:00:8b:44:87:cf:51:db:7a:ce:88:
8d:1c:b4:ea:9a:82:c7:51:a4:30:e5:2a:d4:92:6f:9e:4f:2d:
c9:24:c8:78:d7:47:c7:03:37:fe:49:6b:64:69:97:b3:fa:0c:
af:31:80:ba:5f:b7:9d:a1:ad:fe:b4:15:e1:09:d1:f7:68:f7:
3b:09:d8:ff:ea:1e:67:f4:b3:54:44:21:da:ac:d0:33:0b:20:
06:fa:60:a5:9d:ec:24:49:c9:c3:ef:ea:e4:11:44:0b:d2:e4:
27:75:ed:06:63:8b:ea:83:64:f0:d6:ea:c1:05:3c:d2:0b:83:
8d:1e:db:e2:af:51:0b:b8:39:0a:33:e2:0d:0f:9a:92:9d:c7:
07:f3:b5:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 20:28:59 2026 by rpki-client