Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/857a2f-3288-467e-b043-2431e6ba6311/1/cubnJdWPECc7XTLQsGOQ3dhCTXM.mft
File: cubnJdWPECc7XTLQsGOQ3dhCTXM.mft (raw, json)
Hash identifier: TsbZ4ygPLh4cNU85Mh8uT9WhJihq49XFD0+feDh5O7s=
Subject key identifier: 5B:32:46:7E:0B:AC:35:35:9A:99:B7:5E:FF:B0:FF:6B:1E:DE:32:24
Authority key identifier: 72:E6:E7:25:D5:8F:10:27:3B:5D:32:D0:B0:63:90:DD:D8:42:4D:73
Certificate issuer: /CN=72e6e725d58f10273b5d32d0b06390ddd8424d73
Certificate serial: 019F85D6FF0B43BE6622859D2C3A886A898D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cubnJdWPECc7XTLQsGOQ3dhCTXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/857a2f-3288-467e-b043-2431e6ba6311/1/cubnJdWPECc7XTLQsGOQ3dhCTXM.mft
Manifest number: 3A
Signing time: Tue 21 Jul 2026 18:01:27 +0000
Manifest this update: Tue 21 Jul 2026 18:01:27 +0000
Manifest next update: Wed 22 Jul 2026 18:01:27 +0000
Files and hashes: 1: He2JlpI8ZQczhJIlNayJhBNlxwU.roa (hash: OuIaHjgCyPaNpYLqQNHE7OPzaKT6XbasSd79mJXSO/M=)
2: cubnJdWPECc7XTLQsGOQ3dhCTXM.crl (hash: vVrXEADqzlWFEI3VmCKxrPQJEwB0BQMYsL8GYmXhwPI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/857a2f-3288-467e-b043-2431e6ba6311/1/cubnJdWPECc7XTLQsGOQ3dhCTXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/857a2f-3288-467e-b043-2431e6ba6311/1/cubnJdWPECc7XTLQsGOQ3dhCTXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/cubnJdWPECc7XTLQsGOQ3dhCTXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:d6:ff:0b:43:be:66:22:85:9d:2c:3a:88:6a:89:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72e6e725d58f10273b5d32d0b06390ddd8424d73
Validity
Not Before: Jul 21 18:01:27 2026 GMT
Not After : Jul 22 18:01:27 2026 GMT
Subject: CN=5b32467e0bac35359a99b75effb0ff6b1ede3224
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:be:ee:14:a4:93:0c:83:54:5e:c5:ad:10:49:
14:d0:54:34:ad:77:ab:6f:15:e9:b8:ab:ce:8e:ad:
8d:1d:8c:34:dc:6b:32:bc:13:60:86:3f:09:f7:a5:
0a:fc:8f:e3:71:da:c9:a2:3a:8d:e5:23:70:62:85:
58:ce:c9:79:36:da:d6:db:24:19:00:5e:4b:b9:62:
1e:58:9b:e0:77:31:8c:13:24:1b:64:ce:b1:94:9d:
4c:0d:48:bc:47:3c:7c:b9:0c:41:8a:93:a5:b4:de:
26:c5:ea:b6:df:d2:04:bf:2c:20:c9:a5:ae:1f:8f:
f3:e6:b3:1e:b2:60:a2:bd:ff:88:76:b9:ac:2c:e1:
9c:9c:3e:27:33:7e:82:86:1a:4a:18:b2:8c:01:3a:
c9:39:e7:3c:14:ee:e3:3d:25:84:ca:3d:df:16:bf:
0d:ea:f2:ee:77:e2:40:bd:fb:05:f8:c3:49:d2:7d:
db:13:d9:6c:fc:e0:d1:ff:04:98:62:73:21:64:8f:
4a:d8:47:78:47:f0:6c:c6:ea:64:a8:d2:ed:5e:cf:
9c:55:bd:57:bd:7f:94:d2:10:0b:8c:f2:17:f6:3a:
ad:ae:67:2d:3d:ad:d3:bf:d8:29:7e:e4:3b:1e:0a:
d1:81:f0:07:f0:4f:ac:bf:72:c4:38:97:66:32:95:
a0:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:32:46:7E:0B:AC:35:35:9A:99:B7:5E:FF:B0:FF:6B:1E:DE:32:24
X509v3 Authority Key Identifier:
keyid:72:E6:E7:25:D5:8F:10:27:3B:5D:32:D0:B0:63:90:DD:D8:42:4D:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cubnJdWPECc7XTLQsGOQ3dhCTXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/857a2f-3288-467e-b043-2431e6ba6311/1/cubnJdWPECc7XTLQsGOQ3dhCTXM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/857a2f-3288-467e-b043-2431e6ba6311/1/cubnJdWPECc7XTLQsGOQ3dhCTXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:e4:1b:37:21:f1:6c:53:e1:ff:f2:2a:9b:20:48:90:30:1c:
2b:c3:1f:09:69:5d:cd:85:a0:10:68:ed:7c:4d:8a:0a:dd:6b:
d1:17:d5:6b:f2:13:6a:a6:9d:f4:85:c0:8b:8b:dd:be:12:c8:
ae:9e:4a:4e:af:2d:50:e3:2f:07:8f:37:93:f1:8e:15:21:b7:
a7:f3:6f:4c:a8:20:c2:e7:80:22:38:ac:07:ca:50:be:16:b8:
85:df:5d:14:46:5d:31:e8:5c:69:9e:23:cb:28:02:48:d4:86:
8e:b7:e0:aa:0d:ce:28:fd:6d:1c:14:e5:64:fb:53:af:90:07:
6d:7e:5a:5f:e3:61:81:42:89:1d:fb:84:39:47:76:45:44:43:
ad:1c:56:2e:48:d7:93:d2:56:a3:5e:c6:7b:ae:c1:a2:1d:93:
42:50:91:d4:ca:7f:b4:18:16:cf:98:e9:a0:52:77:22:bc:09:
d4:37:10:20:08:1a:0c:b4:70:e3:6e:29:25:c4:82:c1:1d:dd:
96:85:05:8b:be:b6:6e:66:9b:26:7b:77:27:49:db:6a:4f:a3:
18:95:12:cc:77:d0:44:bb:47:75:55:9a:5e:28:8b:18:71:af:
c9:13:f6:9d:5f:63:69:0a:21:1d:44:a7:4a:b8:91:87:f7:fe:
76:27:0e:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:12:13 2026 by rpki-client