Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/91/857a2f-3288-467e-b043-2431e6ba6311/1/cubnJdWPECc7XTLQsGOQ3dhCTXM.mft
File: cubnJdWPECc7XTLQsGOQ3dhCTXM.mft (raw, json)
Hash identifier: lJCWtubEd8XXGFzh0GB1CE7CZTVt99avW5xaf8ENvhw=
Subject key identifier: D5:A3:34:82:4A:27:5A:A2:E9:C1:A1:D0:8B:BF:85:BC:5D:B0:F5:A0
Authority key identifier: 72:E6:E7:25:D5:8F:10:27:3B:5D:32:D0:B0:63:90:DD:D8:42:4D:73
Certificate issuer: /CN=72e6e725d58f10273b5d32d0b06390ddd8424d73
Certificate serial: 01A17438A032295EB79291B6A7C3AB487A48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cubnJdWPECc7XTLQsGOQ3dhCTXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/857a2f-3288-467e-b043-2431e6ba6311/1/cubnJdWPECc7XTLQsGOQ3dhCTXM.mft
Manifest number: 013A
Signing time: Sun 25 Oct 2026 18:00:30 +0000
Manifest this update: Sun 25 Oct 2026 18:00:30 +0000
Manifest next update: Mon 26 Oct 2026 18:00:30 +0000
Files and hashes: 1: He2JlpI8ZQczhJIlNayJhBNlxwU.roa (hash: OuIaHjgCyPaNpYLqQNHE7OPzaKT6XbasSd79mJXSO/M=)
2: cubnJdWPECc7XTLQsGOQ3dhCTXM.crl (hash: 19KKCruA+9qXRYiAwnd3VhnNtEFjdFrDhg2Uqpoj3A0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/857a2f-3288-467e-b043-2431e6ba6311/1/cubnJdWPECc7XTLQsGOQ3dhCTXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/857a2f-3288-467e-b043-2431e6ba6311/1/cubnJdWPECc7XTLQsGOQ3dhCTXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/cubnJdWPECc7XTLQsGOQ3dhCTXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 15:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:74:38:a0:32:29:5e:b7:92:91:b6:a7:c3:ab:48:7a:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72e6e725d58f10273b5d32d0b06390ddd8424d73
Validity
Not Before: Oct 25 18:00:30 2026 GMT
Not After : Oct 26 18:00:30 2026 GMT
Subject: CN=d5a334824a275aa2e9c1a1d08bbf85bc5db0f5a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:86:54:44:c4:e1:3a:dc:fe:3e:3a:c5:08:56:
a7:4a:06:8e:22:22:c4:86:5e:64:8f:f7:76:b0:34:
c0:69:1b:98:5e:a8:94:85:29:7d:5e:32:64:b8:8f:
a4:af:3e:8a:aa:87:63:f4:96:e6:56:c7:e1:3a:9b:
91:36:27:9b:cc:f0:66:ed:0a:ba:86:63:3d:f1:3f:
41:d5:e7:36:f3:8f:95:17:d2:7a:29:f1:39:51:f8:
eb:b4:8b:22:1b:67:41:73:a0:59:25:59:98:6d:01:
a3:77:de:39:1d:33:2b:55:ff:b7:e7:54:9b:92:1b:
30:1e:bf:62:f9:5a:72:c0:71:f5:96:d8:e1:43:68:
6d:df:7b:78:3e:84:03:67:86:ff:aa:17:d3:4d:52:
03:e1:e2:85:7e:01:ba:35:fe:c8:5c:3f:ac:d1:c6:
a6:d2:fc:17:65:c7:85:f6:10:5f:64:38:5c:0e:bc:
53:6a:e9:b6:04:d7:42:9c:1b:30:3b:63:00:42:65:
2e:52:ea:f0:82:f0:e0:cd:78:7b:13:c4:12:65:7f:
0b:0a:2e:f1:25:00:89:f6:de:04:d5:0e:d4:62:71:
ff:44:9c:58:a5:c8:21:43:bf:ba:56:73:03:69:6c:
0d:d3:be:7e:f2:a1:26:3e:da:b5:42:b4:91:ef:72:
f5:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:A3:34:82:4A:27:5A:A2:E9:C1:A1:D0:8B:BF:85:BC:5D:B0:F5:A0
X509v3 Authority Key Identifier:
keyid:72:E6:E7:25:D5:8F:10:27:3B:5D:32:D0:B0:63:90:DD:D8:42:4D:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cubnJdWPECc7XTLQsGOQ3dhCTXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/857a2f-3288-467e-b043-2431e6ba6311/1/cubnJdWPECc7XTLQsGOQ3dhCTXM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/857a2f-3288-467e-b043-2431e6ba6311/1/cubnJdWPECc7XTLQsGOQ3dhCTXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:7f:27:57:12:34:6e:46:34:e1:78:4e:bb:a0:a3:4e:c5:72:
9c:a3:f2:57:3c:2a:7d:af:0b:9f:b8:1c:da:73:02:45:78:07:
b4:6d:7b:e6:fc:b5:3f:af:ec:4c:79:f9:ad:16:47:56:34:66:
58:0b:83:e3:e8:cf:9f:22:51:29:e7:20:10:f3:9f:63:2a:59:
c8:c5:92:96:63:c1:7f:a2:1a:92:6b:56:36:c4:4f:c0:59:07:
d6:d0:60:9f:ff:6b:d1:2b:53:ef:9d:ae:07:83:fa:5b:38:1e:
c6:e2:b1:d6:33:c3:cb:c3:85:c7:c7:3a:b4:f0:cd:ae:c5:4c:
23:09:f1:4e:29:05:03:c9:e5:3b:99:9b:b1:d9:27:4d:63:23:
01:b1:2a:a3:1b:c3:d1:9c:a2:ec:09:bc:fe:98:8d:93:1c:a5:
7c:c2:e0:e4:97:10:8a:01:1f:c1:db:d6:06:f4:24:f9:0a:b2:
5a:a0:59:f1:f7:d4:9a:22:0a:a8:be:c1:38:f8:11:9e:32:34:
63:3a:e4:89:e4:b5:d0:de:26:af:f9:fd:ae:fc:f8:e8:7a:11:
ca:3c:ca:f0:39:e7:09:5b:35:7f:05:6b:f4:4f:9a:57:53:d4:
b7:db:e5:75:7f:15:c7:9f:4e:ec:a6:39:74:7a:6a:a7:88:79:
e1:45:27:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 00:43:18 2026 by rpki-client