Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.mft
File: cugftc8PsyxFdfhBOsvUGqhLgvQ.mft (raw, json)
Hash identifier: 99NOup1Was03N54kM5UsXloWR66CRfqGd39bN+LHVgA=
Subject key identifier: 2E:0C:45:0E:88:30:91:9E:16:05:0B:66:2E:43:D6:41:A5:E3:30:EF
Authority key identifier: 72:E8:1F:B5:CF:0F:B3:2C:45:75:F8:41:3A:CB:D4:1A:A8:4B:82:F4
Certificate issuer: /CN=72e81fb5cf0fb32c4575f8413acbd41aa84b82f4
Certificate serial: 01A06F4C2D1B111F8949D31B64FFB9F3EBD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cugftc8PsyxFdfhBOsvUGqhLgvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.mft
Manifest number: 1A57
Signing time: Sat 05 Sep 2026 02:00:58 +0000
Manifest this update: Sat 05 Sep 2026 02:00:58 +0000
Manifest next update: Sun 06 Sep 2026 02:00:58 +0000
Files and hashes: 1: cugftc8PsyxFdfhBOsvUGqhLgvQ.crl (hash: QOyJcCliFXOqqCpxRkIDq7qM9423zXcvqA7SIy1h0Eg=)
2: ejKA_vlyxDhvn27RS4YsJGzhNdg.roa (hash: XP8ALFzfsLx3L3dQs8deoXxOCZ0VOnD81ZoRuur0rIk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/cugftc8PsyxFdfhBOsvUGqhLgvQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6f:4c:2d:1b:11:1f:89:49:d3:1b:64:ff:b9:f3:eb:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72e81fb5cf0fb32c4575f8413acbd41aa84b82f4
Validity
Not Before: Sep 5 02:00:58 2026 GMT
Not After : Sep 6 02:00:58 2026 GMT
Subject: CN=2e0c450e8830919e16050b662e43d641a5e330ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:98:40:75:42:54:6a:56:24:d8:64:5c:47:7f:
52:9f:c1:2c:3b:7a:3a:a2:00:f1:3f:86:03:f3:9f:
66:57:26:60:bc:b9:e6:81:e5:2f:07:c5:50:2d:35:
84:f7:9c:fc:0b:20:0e:37:ad:a4:1f:e0:d1:1a:41:
d1:25:d4:04:07:5a:34:2e:97:b8:2f:36:de:7c:82:
26:3c:d5:90:46:81:d9:60:5a:66:47:56:0f:4f:bb:
fc:57:3c:d1:72:a4:8a:69:ce:5a:de:76:db:5e:0c:
fc:64:19:d0:ff:cd:03:ea:19:4f:a6:5b:36:4b:5a:
7a:ac:37:ef:0d:f6:97:45:ad:3a:d0:fd:04:3f:1f:
da:e1:5f:3f:59:c4:9f:d3:1d:2b:62:e4:b0:03:f7:
ab:23:2d:97:f5:e3:2d:7c:24:4b:1f:32:7e:56:cb:
af:16:99:f7:46:19:9e:f6:2a:a3:71:61:66:d1:fe:
22:b8:02:a2:00:96:b3:c9:8e:0f:8b:a2:16:c4:93:
16:3a:29:50:54:d8:81:cf:8c:a7:77:7a:e1:46:7d:
54:99:17:4e:d6:bd:04:d5:a3:d9:3e:80:5b:82:93:
10:bd:0f:4f:71:03:85:53:34:0c:71:6d:bc:f4:fc:
ce:8f:3b:85:9d:26:83:ae:1f:20:87:df:f2:e9:48:
a5:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:0C:45:0E:88:30:91:9E:16:05:0B:66:2E:43:D6:41:A5:E3:30:EF
X509v3 Authority Key Identifier:
keyid:72:E8:1F:B5:CF:0F:B3:2C:45:75:F8:41:3A:CB:D4:1A:A8:4B:82:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cugftc8PsyxFdfhBOsvUGqhLgvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:30:f9:09:86:03:70:0f:ca:ac:72:a4:e3:36:6f:9f:81:19:
2e:ab:11:4f:71:57:4f:2e:ef:69:f9:55:2e:73:04:f5:13:e2:
9c:82:06:da:70:e3:c5:58:da:61:6b:9c:4b:f7:25:21:b6:f4:
b6:d5:6f:a3:cb:82:2f:95:f9:1d:4f:f9:3b:df:c5:f7:25:10:
f6:f8:47:97:ca:da:68:c1:1a:3f:b1:dd:d4:91:80:ec:33:8a:
df:2c:cf:a0:9c:f1:65:44:c1:1f:25:e1:bc:44:c7:d8:d7:cd:
01:52:81:5f:25:4c:2d:d8:8a:86:01:6c:35:ae:ea:f7:bb:ca:
21:64:bc:0a:5b:eb:d9:20:e0:de:4c:44:33:d2:55:2b:29:15:
6b:46:45:87:c7:e8:00:cd:94:9e:26:5e:4c:b3:6f:4e:a6:07:
aa:d3:bf:74:e0:3a:43:9e:0e:a7:27:c1:94:aa:3c:00:7e:a5:
6a:7a:c6:91:13:0b:b0:1f:ad:42:bc:b4:b2:50:36:a2:ae:0a:
48:da:92:6c:f3:3c:b2:32:63:ac:d7:ce:48:bd:5f:e5:2e:45:
f1:af:b2:2e:86:be:bd:7e:0e:87:43:8b:a3:8b:51:79:fd:ab:
17:02:16:52:17:43:93:16:d7:15:86:09:09:1d:e6:1a:3e:a3:
9a:a6:8e:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:40:03 2026 by rpki-client