Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.mft
File: cugftc8PsyxFdfhBOsvUGqhLgvQ.mft (raw, json)
Hash identifier: ytPzojw0a/TsroreL5OXPiDhVZO4yDzzc7P/f6vr0BQ=
Subject key identifier: 56:A9:A7:51:C2:89:18:1B:C1:EC:3A:F7:FC:DE:D6:AB:DA:66:A1:FC
Authority key identifier: 72:E8:1F:B5:CF:0F:B3:2C:45:75:F8:41:3A:CB:D4:1A:A8:4B:82:F4
Certificate issuer: /CN=72e81fb5cf0fb32c4575f8413acbd41aa84b82f4
Certificate serial: 01A17C97490C088B565F5E870F119557AFC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cugftc8PsyxFdfhBOsvUGqhLgvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.mft
Manifest number: 1AE3
Signing time: Tue 27 Oct 2026 09:00:51 +0000
Manifest this update: Tue 27 Oct 2026 09:00:51 +0000
Manifest next update: Wed 28 Oct 2026 09:00:51 +0000
Files and hashes: 1: cugftc8PsyxFdfhBOsvUGqhLgvQ.crl (hash: Fw+VTJ6+TdpQTL5Imt55OPoDU1PSpZMGh2skQauCHjA=)
2: kmracVV_9DZy9mrzriTRpJZ9tC8.roa (hash: siROietWmPF3CwxYrw54NeS24FZrusLdJ8kDBP+eNzA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/cugftc8PsyxFdfhBOsvUGqhLgvQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:97:49:0c:08:8b:56:5f:5e:87:0f:11:95:57:af:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72e81fb5cf0fb32c4575f8413acbd41aa84b82f4
Validity
Not Before: Oct 27 09:00:51 2026 GMT
Not After : Oct 28 09:00:51 2026 GMT
Subject: CN=56a9a751c289181bc1ec3af7fcded6abda66a1fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:25:90:29:0d:b4:ae:71:c6:c4:42:21:33:71:
4f:da:96:5d:b7:3b:e9:67:c9:74:7d:70:90:92:2f:
a5:5e:49:bd:c1:21:ae:e9:9e:75:cf:64:80:8b:98:
a0:9e:1a:4f:18:66:fa:04:95:60:a6:a2:86:7b:13:
27:ed:b4:70:a4:6c:99:17:5a:9d:4f:65:d5:2f:c6:
e9:8c:21:5b:e5:f4:ca:a1:0c:79:90:9a:3b:3a:8a:
ae:36:8a:bc:64:57:84:e7:b0:af:c1:76:4b:ae:16:
9b:cf:ab:c5:b3:8c:15:2d:96:17:13:99:ee:fb:b0:
90:c8:bd:65:19:bf:cb:df:af:f5:6c:85:1a:5a:48:
53:f1:fe:62:a2:8f:ae:3d:a9:65:43:b0:6d:e4:d9:
02:3c:d6:65:39:b6:e3:82:0b:34:0c:74:fc:03:24:
1c:7f:9f:35:2a:ef:6f:ca:fa:6a:6a:77:89:fb:db:
10:f8:87:be:df:4a:95:b2:fb:1a:09:81:c7:0a:5f:
0f:75:53:8f:8b:80:91:71:b1:eb:08:10:17:8f:db:
36:b9:84:b6:e5:80:13:b5:7c:e0:01:32:6c:36:d8:
37:d9:e8:40:e1:55:cc:ca:6e:07:5c:26:17:c5:f9:
ec:96:2a:a4:55:17:e5:61:24:bc:1a:d8:b8:6c:e6:
bb:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:A9:A7:51:C2:89:18:1B:C1:EC:3A:F7:FC:DE:D6:AB:DA:66:A1:FC
X509v3 Authority Key Identifier:
keyid:72:E8:1F:B5:CF:0F:B3:2C:45:75:F8:41:3A:CB:D4:1A:A8:4B:82:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cugftc8PsyxFdfhBOsvUGqhLgvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:0a:bd:f4:c4:54:12:ce:1f:f5:08:71:35:8a:c1:e2:34:88:
66:b4:e8:3e:13:0f:ad:c3:6b:9b:8b:a6:3f:69:f5:82:a7:20:
9e:13:b7:ec:97:21:e3:c4:73:a6:c4:4f:2b:72:dd:55:19:24:
49:31:8d:40:b6:57:c8:35:ba:23:91:8d:0e:20:e1:8f:b8:89:
24:8b:5e:03:68:14:6e:22:31:f9:30:59:92:4d:d0:4f:87:45:
4a:90:aa:d9:da:20:fe:28:dd:73:c7:44:32:43:7e:5c:7d:48:
94:74:40:93:2e:6d:da:ac:f9:ad:f0:38:2e:8e:b8:d2:1c:bf:
0b:77:66:48:9f:f9:3a:08:2a:87:db:d7:d6:99:78:14:54:f0:
a4:8d:72:cc:62:75:26:82:d2:29:8e:aa:a7:ae:e3:c4:6d:9a:
56:7b:cc:3a:f3:a7:b4:07:65:da:f5:77:42:60:fd:a4:8c:10:
54:9d:aa:43:dc:65:84:a9:72:00:d7:f4:07:e0:44:5b:d6:a1:
d6:7d:84:fb:ac:82:06:4a:0b:71:79:de:25:b3:37:26:96:18:
59:13:28:fc:42:04:74:5b:8c:f5:4d:f9:33:e4:1e:35:69:68:
74:70:dc:fe:da:89:ea:d1:20:8c:99:71:90:42:fd:8e:f8:58:
6a:bc:1c:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 14:15:35 2026 by rpki-client