Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.mft
File: cugftc8PsyxFdfhBOsvUGqhLgvQ.mft (raw, json)
Hash identifier: jU08aOIUy2Wlwl2wWXmJ+ysLpulLQsj98b1dSkGpCo4=
Subject key identifier: 82:5B:6A:9B:5F:B4:1E:DB:53:3A:D2:71:51:01:B1:31:51:1C:3B:53
Authority key identifier: 72:E8:1F:B5:CF:0F:B3:2C:45:75:F8:41:3A:CB:D4:1A:A8:4B:82:F4
Certificate issuer: /CN=72e81fb5cf0fb32c4575f8413acbd41aa84b82f4
Certificate serial: 019F878DE84141FD78BAFCA9AFC34C06ADFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cugftc8PsyxFdfhBOsvUGqhLgvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.mft
Manifest number: 19DF
Signing time: Wed 22 Jul 2026 02:00:51 +0000
Manifest this update: Wed 22 Jul 2026 02:00:51 +0000
Manifest next update: Thu 23 Jul 2026 02:00:51 +0000
Files and hashes: 1: cugftc8PsyxFdfhBOsvUGqhLgvQ.crl (hash: f58BjUKLh/snwmWqs/R+q2Xh1EI55L7oG9FAsoQOtW8=)
2: ejKA_vlyxDhvn27RS4YsJGzhNdg.roa (hash: XP8ALFzfsLx3L3dQs8deoXxOCZ0VOnD81ZoRuur0rIk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/cugftc8PsyxFdfhBOsvUGqhLgvQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:87:8d:e8:41:41:fd:78:ba:fc:a9:af:c3:4c:06:ad:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72e81fb5cf0fb32c4575f8413acbd41aa84b82f4
Validity
Not Before: Jul 22 02:00:51 2026 GMT
Not After : Jul 23 02:00:51 2026 GMT
Subject: CN=825b6a9b5fb41edb533ad2715101b131511c3b53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e5:98:b2:63:b8:0f:1a:99:f5:ae:8c:ae:c2:
c9:bb:67:29:91:5e:7e:d5:22:89:61:fc:1f:64:94:
c6:fa:e5:02:fe:08:b2:c2:af:70:e0:e5:d4:20:df:
73:f1:65:2a:99:93:db:84:7f:f8:10:34:d4:01:03:
29:d0:32:c6:59:66:2f:46:97:a2:9e:b8:44:09:3f:
28:25:08:db:22:94:2f:e8:f4:82:5d:fd:60:a1:c6:
1e:31:d9:3b:77:b2:6e:ff:40:3f:8a:11:34:cf:d6:
25:ad:2c:43:de:5c:76:23:7d:0a:80:09:02:51:28:
dd:29:29:ea:28:d2:e7:70:32:3f:cd:1e:81:7d:5e:
5c:1e:7e:42:c4:62:f4:d0:18:2c:0c:a6:3b:d9:b9:
b8:18:d1:d8:c8:fe:f2:78:a6:d5:1d:89:c4:f9:d2:
f9:71:a6:b2:b2:7c:c1:7e:d6:31:83:77:5f:8c:07:
3e:52:24:11:39:8d:30:e4:52:ca:3b:8d:a8:02:e6:
03:26:c7:08:78:d1:eb:50:e9:2b:13:d5:65:eb:89:
43:91:95:49:07:d5:47:c4:a2:50:8c:5a:91:9a:a1:
cb:69:92:38:1a:9b:0b:7c:e2:7e:92:86:00:53:8c:
b8:72:77:40:a1:2c:dc:94:08:99:f5:0c:37:6a:5c:
68:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:5B:6A:9B:5F:B4:1E:DB:53:3A:D2:71:51:01:B1:31:51:1C:3B:53
X509v3 Authority Key Identifier:
keyid:72:E8:1F:B5:CF:0F:B3:2C:45:75:F8:41:3A:CB:D4:1A:A8:4B:82:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cugftc8PsyxFdfhBOsvUGqhLgvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:09:6d:6e:68:ec:01:7b:ae:46:d2:cd:fe:e1:55:8c:64:06:
db:1a:cb:e2:e7:07:49:71:bd:ec:f0:0a:63:34:38:2a:90:91:
cf:f1:72:49:dc:64:fd:2e:0e:dc:0e:0d:3e:88:f6:09:3e:08:
a0:52:fd:22:44:3e:db:f0:01:e9:52:5e:74:d1:50:3c:31:c0:
db:b8:37:6e:74:03:5f:95:e4:59:34:50:58:8f:ca:d5:2d:e7:
9f:77:25:a6:ce:d2:9b:26:78:39:4c:e9:4c:26:e4:9b:b1:21:
7a:50:c3:02:9e:42:99:6e:7b:97:76:6f:7a:76:9c:de:2b:ff:
b3:96:43:17:bd:3d:d9:ed:70:74:fb:63:4c:87:74:28:95:f4:
59:9f:02:42:26:b1:59:08:05:8a:55:d9:6f:8a:ca:7d:f4:7c:
d1:77:05:81:54:15:67:b8:03:a1:f4:ed:ef:6f:b1:af:66:2b:
28:7f:29:55:10:ee:aa:32:b5:75:69:39:56:5d:cb:68:3b:b4:
89:96:6b:f1:ad:bd:bb:7a:fb:df:b8:16:8a:e5:3c:d2:fe:25:
59:fb:2f:29:57:0e:1f:4b:aa:42:ec:65:81:5a:6e:9a:85:0b:
8c:d2:bf:79:9a:66:c8:d3:c5:a5:80:82:e2:6d:11:e1:ca:fa:
1a:34:17:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 03:04:51 2026 by rpki-client