Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ee/434849-89da-43ae-b2be-66cd01961e46/1/CUSqrH8uuymBwkdj6z1gRe-9bwY.mft
File: CUSqrH8uuymBwkdj6z1gRe-9bwY.mft (raw, json)
Hash identifier: otYnm9iYig69cKV1SkH4JGXybBZ4/CaMVokoEWdd0go=
Subject key identifier: D0:7F:5A:32:A0:54:26:E9:7D:23:F1:54:55:16:24:68:36:F6:2C:81
Authority key identifier: 09:44:AA:AC:7F:2E:BB:29:81:C2:47:63:EB:3D:60:45:EF:BD:6F:06
Certificate issuer: /CN=0944aaac7f2ebb2981c24763eb3d6045efbd6f06
Certificate serial: 01A19F22EED03215538EF1F4E797CB7EA5FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CUSqrH8uuymBwkdj6z1gRe-9bwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/434849-89da-43ae-b2be-66cd01961e46/1/CUSqrH8uuymBwkdj6z1gRe-9bwY.mft
Manifest number: 1116
Signing time: Tue 03 Nov 2026 02:00:29 +0000
Manifest this update: Tue 03 Nov 2026 02:00:29 +0000
Manifest next update: Wed 04 Nov 2026 02:00:29 +0000
Files and hashes: 1: CUSqrH8uuymBwkdj6z1gRe-9bwY.crl (hash: v2hWtffy6PC7iUP699rhKpHW48aUsg2dmE9GO2a53rc=)
2: zjvZq0qDo9Cqy2lJeksXnY5wlWg.roa (hash: R3vvsBnC8yjc/6l+ae3jOrD+eH9Ah/ka0B3qOkEBjzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/434849-89da-43ae-b2be-66cd01961e46/1/CUSqrH8uuymBwkdj6z1gRe-9bwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/434849-89da-43ae-b2be-66cd01961e46/1/CUSqrH8uuymBwkdj6z1gRe-9bwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CUSqrH8uuymBwkdj6z1gRe-9bwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Nov 2026 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:9f:22:ee:d0:32:15:53:8e:f1:f4:e7:97:cb:7e:a5:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0944aaac7f2ebb2981c24763eb3d6045efbd6f06
Validity
Not Before: Nov 3 02:00:29 2026 GMT
Not After : Nov 4 02:00:29 2026 GMT
Subject: CN=d07f5a32a05426e97d23f1545516246836f62c81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b6:45:b5:ed:b3:f1:d4:56:8e:f4:2d:a0:88:
1a:01:45:8f:0a:37:92:ce:9e:7b:33:af:59:3e:c8:
78:04:f9:de:b3:71:17:d7:2f:b7:23:0a:e9:f3:20:
2f:f9:bc:9d:ea:12:b2:1a:04:f2:02:f5:71:aa:95:
d2:23:f8:85:e0:82:07:f1:17:b2:b4:b6:fa:35:20:
e1:6c:cd:51:7a:fa:14:32:cd:e0:ce:de:46:7b:22:
76:a1:00:96:b8:15:6d:db:4f:f2:0d:c1:b2:b6:9c:
55:9c:b3:29:5a:3a:2e:41:00:a1:f9:23:46:af:94:
fe:ba:e4:0f:c5:c4:42:a4:48:9b:ed:78:c2:51:7e:
eb:2a:1d:f7:d5:24:e0:a6:a5:74:fa:fc:62:a5:0c:
4b:09:9f:34:fe:a5:c0:41:ec:f2:7b:69:59:33:b3:
7e:d3:ab:07:77:c3:9f:e0:3f:49:ec:4b:36:96:25:
8c:03:16:19:9d:d7:eb:e9:f3:89:45:da:1f:a5:75:
0b:90:37:5e:07:44:37:6b:03:30:8b:07:ad:32:7f:
8f:41:94:6a:be:0b:f4:9a:d7:76:c1:e7:56:bc:cd:
2c:dd:ab:a2:34:36:47:2c:b2:a1:9f:99:1f:a3:e1:
6f:d1:20:b7:d3:1d:e1:d2:86:32:05:69:02:d3:ca:
e5:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:7F:5A:32:A0:54:26:E9:7D:23:F1:54:55:16:24:68:36:F6:2C:81
X509v3 Authority Key Identifier:
keyid:09:44:AA:AC:7F:2E:BB:29:81:C2:47:63:EB:3D:60:45:EF:BD:6F:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CUSqrH8uuymBwkdj6z1gRe-9bwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/434849-89da-43ae-b2be-66cd01961e46/1/CUSqrH8uuymBwkdj6z1gRe-9bwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/434849-89da-43ae-b2be-66cd01961e46/1/CUSqrH8uuymBwkdj6z1gRe-9bwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:03:fa:e3:c1:74:34:b4:46:c1:f1:4f:05:80:46:b9:5c:3f:
c0:23:c3:aa:31:a3:29:c3:1b:27:f9:17:03:98:13:6a:9e:ee:
bc:38:63:43:3a:59:e1:88:18:e9:40:4e:c0:0f:13:84:73:48:
aa:d0:f9:13:85:b5:31:bd:e2:a5:e2:9d:48:ad:26:9b:f1:83:
5e:26:60:75:2e:2c:41:88:cb:b3:e9:5a:70:f1:18:1e:5c:7b:
d7:7f:e2:0f:24:25:06:e8:ce:72:ee:f1:94:ec:3a:fb:d5:a0:
7f:fd:9e:34:10:17:42:10:88:2b:01:24:1d:25:b4:bf:aa:54:
44:46:5d:56:42:2a:60:52:6e:80:31:da:ba:d5:e8:eb:33:70:
33:99:1c:1f:ce:39:d3:e8:53:1a:d9:0e:40:1d:7e:be:01:6b:
8e:aa:65:45:71:e0:97:0f:33:bc:87:52:68:23:83:ea:e8:92:
27:40:cd:43:8f:29:8c:80:38:4f:a0:7b:82:0c:10:52:e2:0d:
ef:55:9d:f2:0e:d5:88:f0:0b:9a:e3:3e:e5:45:a9:af:e9:bd:
e2:83:87:c1:b5:2b:8e:84:1b:fd:bc:67:24:94:ef:2d:0f:09:
a7:d3:02:87:b5:22:c8:52:3b:0f:14:73:b0:5e:c7:d3:b9:17:
fe:07:27:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 12:07:17 2026 by rpki-client