Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.mft
File: cugftc8PsyxFdfhBOsvUGqhLgvQ.mft (raw, json)
Hash identifier: x54tqalVcfZecbGHACIPZb5zWDRr5xmvINmULleN9fE=
Subject key identifier: B4:6C:29:D0:E8:85:D4:F4:25:D6:DD:52:5C:48:2F:E4:3B:E5:99:80
Authority key identifier: 72:E8:1F:B5:CF:0F:B3:2C:45:75:F8:41:3A:CB:D4:1A:A8:4B:82:F4
Certificate issuer: /CN=72e81fb5cf0fb32c4575f8413acbd41aa84b82f4
Certificate serial: 019D069CF67E7B29C5441DEC961C922A8EF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cugftc8PsyxFdfhBOsvUGqhLgvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.mft
Manifest number: 188E
Signing time: Thu 19 Mar 2026 15:00:43 +0000
Manifest this update: Thu 19 Mar 2026 15:00:43 +0000
Manifest next update: Fri 20 Mar 2026 15:00:43 +0000
Files and hashes: 1: X2OTWa0EkhOAb_VJ7xVPW1Ibpws.roa (hash: NNuFryogVqVrL2X7dVkBYvwMuGxY6cTW/9r6oXN/lRU=)
2: cugftc8PsyxFdfhBOsvUGqhLgvQ.crl (hash: nzZOS+G5wxheBOlUHvebiFjADcAUZNMUp15Am20Tb/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/cugftc8PsyxFdfhBOsvUGqhLgvQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Mar 2026 15:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:06:9c:f6:7e:7b:29:c5:44:1d:ec:96:1c:92:2a:8e:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72e81fb5cf0fb32c4575f8413acbd41aa84b82f4
Validity
Not Before: Mar 19 15:00:43 2026 GMT
Not After : Mar 20 15:00:43 2026 GMT
Subject: CN=b46c29d0e885d4f425d6dd525c482fe43be59980
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:54:a9:16:74:4d:8d:f9:3f:25:b7:ff:52:ae:
c2:40:69:6c:97:4e:07:71:ae:b3:7a:4a:13:2d:43:
80:cb:2d:3c:fc:bb:68:48:28:75:bc:6a:90:6f:12:
fe:a2:66:50:84:f9:91:98:54:eb:ea:83:ce:9c:73:
63:3c:b7:70:45:1e:7e:6f:1e:e8:6e:6a:ff:28:90:
c5:e8:57:92:12:0e:76:25:77:76:c1:7b:3d:80:47:
52:54:1c:9f:18:98:c7:1a:e7:76:22:a6:c0:a0:48:
c7:ad:5c:bc:ab:ad:9d:8b:af:69:c5:1e:4e:c4:c0:
f5:70:5d:b0:1d:54:86:91:37:9f:58:5e:5b:2f:70:
7a:e8:b0:77:bd:f2:81:69:7c:f7:4b:3c:81:bf:ba:
f6:89:4b:c5:b3:cb:88:4b:c3:42:09:dd:52:24:bd:
db:04:46:8c:2d:8d:87:df:72:03:ac:0f:33:f6:88:
05:7f:49:b7:0e:90:ee:e5:17:7b:50:82:7e:4e:58:
63:e3:1c:ff:b0:21:56:e7:8b:83:d0:e5:66:e0:90:
21:44:7b:44:70:36:0d:a5:b5:8a:68:bb:31:4f:95:
43:9b:82:8a:32:fa:ef:b3:64:a1:54:1d:d1:25:b1:
2c:13:7c:71:1f:62:df:70:8f:99:35:8b:fb:87:d3:
38:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:6C:29:D0:E8:85:D4:F4:25:D6:DD:52:5C:48:2F:E4:3B:E5:99:80
X509v3 Authority Key Identifier:
keyid:72:E8:1F:B5:CF:0F:B3:2C:45:75:F8:41:3A:CB:D4:1A:A8:4B:82:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cugftc8PsyxFdfhBOsvUGqhLgvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:93:60:ee:9a:d8:7e:71:45:b2:0c:32:8f:92:8c:46:39:f4:
e1:f0:77:df:df:b9:33:4c:f5:55:ac:c7:a4:9b:be:6d:67:76:
85:51:c9:33:c3:e6:0b:d7:85:6f:12:04:c5:87:1a:bd:3e:a6:
bd:33:2a:29:df:84:e6:8f:93:8b:6d:51:6e:32:26:e7:97:8e:
04:42:8c:30:0f:2c:c9:5f:f9:db:c4:15:d0:54:c0:82:f6:73:
0b:d2:27:4c:72:ad:71:c6:d6:28:2a:7b:d7:e6:b8:0c:0e:9e:
bd:5c:ec:96:b0:d4:0c:b1:ce:01:b0:f5:9d:1b:65:d7:a1:91:
ca:27:65:c3:eb:e0:08:54:a9:b4:aa:98:84:1d:d7:ff:c0:0b:
f6:1e:c0:77:fd:dd:6e:1a:1a:c5:d9:c5:9e:a6:aa:84:fc:83:
27:35:58:48:f2:87:4d:4a:99:d1:47:19:3d:03:9a:14:f1:a6:
99:78:e8:27:55:dd:fa:4a:d3:29:2e:d3:36:71:32:7d:70:c7:
aa:85:91:f6:fd:26:62:ca:dd:ab:2b:cf:24:27:a6:97:bc:1b:
e4:55:d5:91:4e:fd:ad:de:8d:69:88:44:20:d5:36:ca:bb:c7:
24:ef:08:c4:89:94:3a:48:1c:c5:58:7e:75:f5:1d:16:5c:5a:
66:4d:e7:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 20:02:34 2026 by rpki-client