
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.mft
File: cugftc8PsyxFdfhBOsvUGqhLgvQ.mft (raw, json)
Hash identifier: JbshygZJVHGsvWjPIxagbFGqa+fOCzcLGTLXg7GUHM4=
Subject key identifier: 2F:87:60:EF:A9:22:46:E5:1C:29:AC:B2:A5:AC:DC:AA:CF:36:2E:37
Authority key identifier: 72:E8:1F:B5:CF:0F:B3:2C:45:75:F8:41:3A:CB:D4:1A:A8:4B:82:F4
Certificate issuer: /CN=72e81fb5cf0fb32c4575f8413acbd41aa84b82f4
Certificate serial: 019E314E1B33DBFEA97FEC205BBB6CAF3959
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cugftc8PsyxFdfhBOsvUGqhLgvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.mft
Manifest number: 192C
Signing time: Sat 16 May 2026 15:01:02 +0000
Manifest this update: Sat 16 May 2026 15:01:02 +0000
Manifest next update: Sun 17 May 2026 15:01:02 +0000
Files and hashes: 1: 6Ugxh09WDltBq-PpfzrzLhbUH80.roa (hash: j8DEcZp0lfE7TJG8b5DJzM36n3hCBp+lVWwIwuWquaY=)
2: cugftc8PsyxFdfhBOsvUGqhLgvQ.crl (hash: IMY4IFZsrWDk3fGqFgfqaK+09jd/kvI6vehOyHld2rk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/cugftc8PsyxFdfhBOsvUGqhLgvQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:4e:1b:33:db:fe:a9:7f:ec:20:5b:bb:6c:af:39:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72e81fb5cf0fb32c4575f8413acbd41aa84b82f4
Validity
Not Before: May 16 15:01:02 2026 GMT
Not After : May 17 15:01:02 2026 GMT
Subject: CN=2f8760efa92246e51c29acb2a5acdcaacf362e37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:18:da:c9:84:8f:fe:06:a9:b2:8a:f7:83:f9:
aa:ce:64:1c:32:fe:77:d3:ff:4d:43:6a:45:9f:ee:
b1:0f:6a:68:fa:22:cf:5d:84:a8:de:8c:a9:8c:1e:
64:b5:17:8a:7b:90:ee:96:d4:fb:20:ad:b9:96:b1:
71:16:fe:ef:37:4c:e8:68:07:72:2b:1b:02:56:a7:
2e:ef:71:ea:f7:6e:80:69:d1:40:83:d9:a4:c7:b9:
63:f1:1d:8c:f1:9e:0c:95:13:16:f8:42:4e:32:52:
8e:5c:52:7d:f1:87:11:42:e2:13:76:9e:d5:5b:02:
cb:3e:00:8e:4a:5b:6f:88:f8:b4:70:57:44:77:17:
c8:fe:43:30:ab:7b:81:1d:cf:a6:7b:47:ec:9a:c1:
88:0f:59:3f:32:10:1c:e7:52:65:85:ee:d9:b6:0f:
ae:fd:e6:98:c6:e8:48:5e:b9:31:86:f5:ee:42:ac:
e6:f0:9c:3e:c7:54:ee:4f:e4:db:fa:14:d6:43:52:
d1:ee:6d:3c:6a:24:9d:19:77:1a:50:8c:3a:d4:22:
55:3a:87:1d:1e:22:5b:f8:d2:63:1d:0f:b4:ee:dc:
2a:bf:1d:22:87:40:0c:67:b7:3e:2f:1a:89:53:e0:
21:a3:11:62:b1:87:ec:68:63:81:ca:ed:82:3b:b5:
af:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:87:60:EF:A9:22:46:E5:1C:29:AC:B2:A5:AC:DC:AA:CF:36:2E:37
X509v3 Authority Key Identifier:
keyid:72:E8:1F:B5:CF:0F:B3:2C:45:75:F8:41:3A:CB:D4:1A:A8:4B:82:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cugftc8PsyxFdfhBOsvUGqhLgvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:9c:c5:00:29:39:36:dd:9e:3f:82:c7:f7:a3:46:26:04:5a:
b4:74:4f:a7:65:e1:5a:95:05:b5:2f:c0:03:5f:12:a2:3c:fc:
69:b8:31:c1:ed:31:e5:36:f2:34:29:ff:8e:40:16:24:dc:68:
7c:b0:ed:2a:0b:1a:e3:3c:4b:9b:5b:42:c6:0d:9a:9e:6b:77:
71:35:59:9b:24:52:15:03:97:ce:a5:c2:8d:23:c0:cd:6d:35:
f5:b8:df:ae:0e:7b:00:87:34:28:49:1a:92:1e:c4:bf:6e:31:
1c:25:4a:bb:e0:d5:18:43:a0:32:7f:ee:48:55:00:9b:7a:a2:
cc:4d:52:e7:7c:92:4a:73:c3:0b:aa:56:be:03:9b:63:4a:df:
c6:cb:6a:71:46:44:f8:53:7d:c3:45:4e:8e:bd:72:30:42:ca:
6e:0e:10:b8:25:3e:c5:54:80:3a:f9:96:aa:c9:47:eb:58:89:
1b:17:63:8f:21:f7:f6:80:85:29:74:a3:c3:6d:a6:f1:06:1e:
c3:43:9a:5d:64:1d:62:33:ac:e1:0d:7c:d6:af:01:9a:12:1d:
c7:fb:56:ca:20:92:e4:35:db:8c:ae:3a:52:75:76:25:4a:5c:
98:4e:1f:7d:21:e1:77:17:d8:6c:c9:7b:07:f7:38:5c:a1:b5:
06:ff:42:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 22:01:14 2026 by rpki-client