Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/91/857a2f-3288-467e-b043-2431e6ba6311/1/cubnJdWPECc7XTLQsGOQ3dhCTXM.mft
File: cubnJdWPECc7XTLQsGOQ3dhCTXM.mft (raw, json)
Hash identifier: l37rONbUxWS1+85AeNGkhciZXFDyvlLvLeDtqhNg1EQ=
Subject key identifier: FA:02:C4:61:B3:95:9F:A2:44:35:53:C7:8F:FA:09:52:13:26:8E:72
Authority key identifier: 72:E6:E7:25:D5:8F:10:27:3B:5D:32:D0:B0:63:90:DD:D8:42:4D:73
Certificate issuer: /CN=72e6e725d58f10273b5d32d0b06390ddd8424d73
Certificate serial: 01A176274E8A7207B42F017C7880FCFEEAAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cubnJdWPECc7XTLQsGOQ3dhCTXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/857a2f-3288-467e-b043-2431e6ba6311/1/cubnJdWPECc7XTLQsGOQ3dhCTXM.mft
Manifest number: 013B
Signing time: Mon 26 Oct 2026 03:00:49 +0000
Manifest this update: Mon 26 Oct 2026 03:00:49 +0000
Manifest next update: Tue 27 Oct 2026 03:00:49 +0000
Files and hashes: 1: He2JlpI8ZQczhJIlNayJhBNlxwU.roa (hash: OuIaHjgCyPaNpYLqQNHE7OPzaKT6XbasSd79mJXSO/M=)
2: cubnJdWPECc7XTLQsGOQ3dhCTXM.crl (hash: DdA2DIsgKpDQfzJtgbxaVMuh/utdlg8YMXAUQ4hVwQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/857a2f-3288-467e-b043-2431e6ba6311/1/cubnJdWPECc7XTLQsGOQ3dhCTXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/857a2f-3288-467e-b043-2431e6ba6311/1/cubnJdWPECc7XTLQsGOQ3dhCTXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/cubnJdWPECc7XTLQsGOQ3dhCTXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:76:27:4e:8a:72:07:b4:2f:01:7c:78:80:fc:fe:ea:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72e6e725d58f10273b5d32d0b06390ddd8424d73
Validity
Not Before: Oct 26 03:00:49 2026 GMT
Not After : Oct 27 03:00:49 2026 GMT
Subject: CN=fa02c461b3959fa2443553c78ffa095213268e72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:02:f9:da:90:fb:a0:a8:9e:bf:d2:8e:c2:92:
6b:58:fc:92:a3:05:92:ec:20:88:ec:4a:06:78:61:
8a:49:be:87:49:3e:b3:ff:01:ae:16:67:5b:8f:82:
97:a6:57:48:8d:88:39:f3:0d:7c:72:72:a0:2c:2a:
10:34:a7:11:f2:06:43:78:df:7c:3b:ec:d1:58:70:
26:15:41:53:b7:50:e1:30:67:f6:91:67:0f:51:f3:
7f:fb:75:d7:ca:e7:fb:ca:67:56:c3:73:40:47:d9:
0f:30:7b:2c:e0:b7:8c:cb:68:45:8b:7a:1d:d9:f5:
c8:74:a9:c5:41:9d:32:15:f8:2d:82:2a:70:64:7b:
38:35:bf:7b:2a:56:c1:c6:07:38:96:57:dd:14:be:
09:22:b2:ac:9f:ad:89:f2:9d:73:ee:05:8b:f7:b3:
21:54:34:8c:ca:a4:99:34:7a:80:13:c1:4b:16:9c:
42:84:b8:7f:22:f6:b8:85:88:d0:0d:6f:8a:5f:1d:
e5:e8:9e:8c:e6:94:91:76:f8:f6:ee:ec:8f:47:fb:
f2:8c:53:2f:e5:42:66:e5:86:2d:54:87:65:db:f3:
13:fa:f2:29:bb:5c:18:26:1a:f9:5b:05:67:61:d9:
d0:bf:15:65:29:b3:ff:81:47:16:ee:2e:d8:f0:74:
c3:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:02:C4:61:B3:95:9F:A2:44:35:53:C7:8F:FA:09:52:13:26:8E:72
X509v3 Authority Key Identifier:
keyid:72:E6:E7:25:D5:8F:10:27:3B:5D:32:D0:B0:63:90:DD:D8:42:4D:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cubnJdWPECc7XTLQsGOQ3dhCTXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/857a2f-3288-467e-b043-2431e6ba6311/1/cubnJdWPECc7XTLQsGOQ3dhCTXM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/857a2f-3288-467e-b043-2431e6ba6311/1/cubnJdWPECc7XTLQsGOQ3dhCTXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:e0:f0:64:2f:38:91:4d:a0:5c:26:61:82:3c:d6:88:9d:98:
8c:97:7a:bb:68:62:c0:66:99:4b:51:07:e4:03:47:f5:8e:0d:
c5:19:13:25:4c:5a:68:04:ca:a9:98:58:cb:e7:a3:5b:7a:fd:
c6:fc:e6:88:04:6f:c2:ab:17:ba:c1:6c:9c:57:a4:ea:b0:e5:
f0:4c:d3:9d:da:ca:74:04:69:cc:af:0d:37:45:11:6b:f4:5d:
35:75:fb:d0:a9:56:f8:11:c7:f1:de:f8:c4:88:1b:47:1c:69:
90:d7:70:0a:9c:6c:2f:f9:ba:5d:24:e9:30:08:12:48:de:96:
99:7a:33:fc:1a:42:70:27:2a:f2:fa:09:f5:93:cc:18:a5:12:
48:2b:74:78:12:c0:04:ff:03:c8:86:70:9a:22:59:2d:f5:b6:
0f:86:eb:dc:82:07:c3:da:e6:37:9a:10:ef:86:fc:e7:21:f4:
7e:dd:29:f2:7e:37:9b:52:5a:81:66:74:48:85:bb:4e:4d:d8:
4e:44:26:1b:0b:70:8f:ac:78:ed:6b:3d:e9:c5:9c:c0:5b:8f:
17:1d:6d:d2:87:1f:98:2a:59:f5:31:7b:55:a1:95:8b:a5:f1:
c9:a9:21:cb:00:0f:ce:8a:33:95:61:e7:60:23:c2:94:ce:f0:
f8:27:f7:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 05:50:21 2026 by rpki-client