Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/434849-89da-43ae-b2be-66cd01961e46/1/CUSqrH8uuymBwkdj6z1gRe-9bwY.mft
File: CUSqrH8uuymBwkdj6z1gRe-9bwY.mft (raw, json)
Hash identifier: 8zSv7hU8hxS+fWdyEsM0/0tNh+ZXZtq9p3DNyS1ISgg=
Subject key identifier: 1B:E9:D9:C3:39:4E:EF:69:D5:AE:75:EB:23:16:5B:75:E6:6D:14:22
Authority key identifier: 09:44:AA:AC:7F:2E:BB:29:81:C2:47:63:EB:3D:60:45:EF:BD:6F:06
Certificate issuer: /CN=0944aaac7f2ebb2981c24763eb3d6045efbd6f06
Certificate serial: 019FA33BB460B9D1F6005D53F9B1644BCB2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CUSqrH8uuymBwkdj6z1gRe-9bwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/434849-89da-43ae-b2be-66cd01961e46/1/CUSqrH8uuymBwkdj6z1gRe-9bwY.mft
Manifest number: 100F
Signing time: Mon 27 Jul 2026 11:00:26 +0000
Manifest this update: Mon 27 Jul 2026 11:00:26 +0000
Manifest next update: Tue 28 Jul 2026 11:00:26 +0000
Files and hashes: 1: CUSqrH8uuymBwkdj6z1gRe-9bwY.crl (hash: TzJxRMqxbTsQCpjDkulPm5EhwrNABdSD3OZNZv4egnQ=)
2: zjvZq0qDo9Cqy2lJeksXnY5wlWg.roa (hash: R3vvsBnC8yjc/6l+ae3jOrD+eH9Ah/ka0B3qOkEBjzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/434849-89da-43ae-b2be-66cd01961e46/1/CUSqrH8uuymBwkdj6z1gRe-9bwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/434849-89da-43ae-b2be-66cd01961e46/1/CUSqrH8uuymBwkdj6z1gRe-9bwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CUSqrH8uuymBwkdj6z1gRe-9bwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 11:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:3b:b4:60:b9:d1:f6:00:5d:53:f9:b1:64:4b:cb:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0944aaac7f2ebb2981c24763eb3d6045efbd6f06
Validity
Not Before: Jul 27 11:00:26 2026 GMT
Not After : Jul 28 11:00:26 2026 GMT
Subject: CN=1be9d9c3394eef69d5ae75eb23165b75e66d1422
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:1e:67:b7:b6:3b:b0:1c:a6:5f:7d:41:85:74:
0a:d3:41:fe:c5:c4:bf:1d:c0:66:2e:f2:a1:65:15:
2b:a6:4a:2a:42:84:8f:53:6d:f7:79:76:a6:ef:88:
55:5c:4b:51:a8:96:61:1d:a5:06:c5:01:f2:77:5c:
62:b7:5b:e9:4e:8e:61:1c:d9:c2:a3:c8:f7:74:c2:
d0:a6:3f:b7:83:ec:31:5c:ac:2f:4e:a8:d5:96:37:
91:98:fa:c2:04:2c:f0:a5:5b:c5:4b:56:49:5a:60:
22:76:29:58:d9:4e:3e:7c:55:d3:30:a9:b5:9e:42:
58:b4:31:ba:38:ee:00:d7:cd:89:e9:a7:2b:02:e9:
1d:4d:99:4d:b7:94:ff:d2:fd:c8:6f:8f:2d:15:3e:
6f:f2:c9:38:54:4e:66:0f:59:f1:43:79:fa:16:d4:
89:bb:9d:c5:b6:ef:3c:4e:9d:e0:02:36:59:d9:33:
d9:73:93:65:79:07:2b:a0:9d:f1:cd:69:a7:17:e2:
19:04:54:5b:22:34:e5:d5:d6:53:8e:6b:d3:82:f8:
f5:13:dc:46:53:6b:45:9e:f7:b3:f1:ee:c8:3d:31:
b0:57:64:35:4d:5b:b9:d6:64:69:58:8f:be:e1:44:
f3:22:dc:d5:96:c6:76:e8:66:4a:20:7c:e3:5c:b3:
7b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:E9:D9:C3:39:4E:EF:69:D5:AE:75:EB:23:16:5B:75:E6:6D:14:22
X509v3 Authority Key Identifier:
keyid:09:44:AA:AC:7F:2E:BB:29:81:C2:47:63:EB:3D:60:45:EF:BD:6F:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CUSqrH8uuymBwkdj6z1gRe-9bwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/434849-89da-43ae-b2be-66cd01961e46/1/CUSqrH8uuymBwkdj6z1gRe-9bwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/434849-89da-43ae-b2be-66cd01961e46/1/CUSqrH8uuymBwkdj6z1gRe-9bwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:71:8e:73:dd:52:1a:3a:da:e2:53:ba:3f:40:8d:1b:fc:7c:
34:b8:7c:ad:60:bf:09:ea:38:fd:47:64:3a:e7:d0:06:71:cf:
06:a4:aa:91:78:ea:19:77:79:09:f8:fb:81:6d:1c:2b:25:2b:
28:90:9e:47:d3:78:f8:27:18:88:5c:72:e6:31:50:76:d2:8b:
66:11:ea:02:47:52:75:a8:bc:cc:0e:d8:99:86:f9:4d:a6:de:
2b:aa:9f:4a:42:b7:3f:52:15:f5:03:2a:3e:47:95:8b:52:55:
c6:5b:48:42:76:0b:a1:f5:57:1e:9f:a9:fe:ad:f5:13:40:b3:
e6:76:0b:cc:5b:7c:e6:ff:30:f1:09:d2:b7:8d:08:8b:de:ec:
a6:5d:57:e4:62:0c:64:3d:ba:b9:13:0e:6a:4d:a4:89:83:06:
38:f9:61:4e:fe:71:e7:3b:41:65:08:a6:5b:61:3f:72:1a:42:
70:60:35:ca:3b:ea:e3:45:6e:bc:66:ba:47:85:ec:3c:df:7d:
39:4b:e8:e7:7b:65:61:ca:83:1b:94:b6:93:ac:d9:1e:42:52:
77:13:ee:c9:74:10:ff:0a:a7:a7:52:5e:5c:78:ad:19:a6:60:
dc:b3:67:35:5a:a9:ca:5f:3e:7c:2e:e7:ff:91:78:de:05:91:
c7:8f:97:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+jO7RgudH2AF1T+bFkS8sqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5NDRhYWFjN2YyZWJiMjk4MWMyNDc2M2ViM2Q2MDQ1ZWZi
ZDZmMDYwHhcNMjYwNzI3MTEwMDI2WhcNMjYwNzI4MTEwMDI2WjAzMTEwLwYDVQQD
EygxYmU5ZDljMzM5NGVlZjY5ZDVhZTc1ZWIyMzE2NWI3NWU2NmQxNDIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxx5nt7Y7sBymX31BhXQK00H+xcS/
HcBmLvKhZRUrpkoqQoSPU233eXam74hVXEtRqJZhHaUGxQHyd1xit1vpTo5hHNnC
o8j3dMLQpj+3g+wxXKwvTqjVljeRmPrCBCzwpVvFS1ZJWmAidilY2U4+fFXTMKm1
nkJYtDG6OO4A182J6acrAukdTZlNt5T/0v3Ib48tFT5v8sk4VE5mD1nxQ3n6FtSJ
u53Ftu88Tp3gAjZZ2TPZc5NleQcroJ3xzWmnF+IZBFRbIjTl1dZTjmvTgvj1E9xG
U2tFnvez8e7IPTGwV2Q1TVu51mRpWI++4UTzItzVlsZ26GZKIHzjXLN7+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBvp2cM5Tu9p1a516yMWW3XmbRQiMB8GA1UdIwQY
MBaAFAlEqqx/LrspgcJHY+s9YEXvvW8GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1VTcXJIOHV1eW1Cd2tkajZ6MWdSZS05YndZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS80MzQ4NDktODlkYS00M2FlLWIyYmUt
NjZjZDAxOTYxZTQ2LzEvQ1VTcXJIOHV1eW1Cd2tkajZ6MWdSZS05YndZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS80MzQ4NDktODlkYS00M2FlLWIyYmUtNjZjZDAxOTYxZTQ2
LzEvQ1VTcXJIOHV1eW1Cd2tkajZ6MWdSZS05YndZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH3GOc91S
Gjra4lO6P0CNG/x8NLh8rWC/Ceo4/UdkOufQBnHPBqSqkXjqGXd5Cfj7gW0cKyUr
KJCeR9N4+CcYiFxy5jFQdtKLZhHqAkdSdai8zA7YmYb5TabeK6qfSkK3P1IV9QMq
PkeVi1JVxltIQnYLofVXHp+p/q31E0Cz5nYLzFt85v8w8QnSt40Ii97spl1X5GIM
ZD26uRMOak2kiYMGOPlhTv5x5ztBZQimW2E/chpCcGA1yjvq40VuvGa6R4XsPN99
OUvo53tlYcqDG5S2k6zZHkJSdxPuyXQQ/wqnp1JeXHitGaZg3LNnNVqpyl8+fC7n
/5F43gWRx4+X/A==
-----END CERTIFICATE-----
Generated at Mon Jul 27 20:32:49 2026 by rpki-client