Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/91/857a2f-3288-467e-b043-2431e6ba6311/1/cubnJdWPECc7XTLQsGOQ3dhCTXM.mft
File: cubnJdWPECc7XTLQsGOQ3dhCTXM.mft (raw, json)
Hash identifier: KyGhCdQiM0er+rAaU8rIqacdYns/OGeFoRh+/XqsV5Y=
Subject key identifier: A7:04:79:0D:E5:1B:D9:BD:4E:D9:99:0F:D0:C9:0B:55:A7:B0:EA:9B
Authority key identifier: 72:E6:E7:25:D5:8F:10:27:3B:5D:32:D0:B0:63:90:DD:D8:42:4D:73
Certificate issuer: /CN=72e6e725d58f10273b5d32d0b06390ddd8424d73
Certificate serial: 01A06F8438A85AB29FBFA210ACC221F79DE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cubnJdWPECc7XTLQsGOQ3dhCTXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/857a2f-3288-467e-b043-2431e6ba6311/1/cubnJdWPECc7XTLQsGOQ3dhCTXM.mft
Manifest number: B3
Signing time: Sat 05 Sep 2026 03:02:11 +0000
Manifest this update: Sat 05 Sep 2026 03:02:11 +0000
Manifest next update: Sun 06 Sep 2026 03:02:11 +0000
Files and hashes: 1: He2JlpI8ZQczhJIlNayJhBNlxwU.roa (hash: OuIaHjgCyPaNpYLqQNHE7OPzaKT6XbasSd79mJXSO/M=)
2: cubnJdWPECc7XTLQsGOQ3dhCTXM.crl (hash: aMnRaJn7QL5opCP4MvDHPbyrCziGXNIdBRKh0ViEY1M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/857a2f-3288-467e-b043-2431e6ba6311/1/cubnJdWPECc7XTLQsGOQ3dhCTXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/857a2f-3288-467e-b043-2431e6ba6311/1/cubnJdWPECc7XTLQsGOQ3dhCTXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/cubnJdWPECc7XTLQsGOQ3dhCTXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6f:84:38:a8:5a:b2:9f:bf:a2:10:ac:c2:21:f7:9d:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72e6e725d58f10273b5d32d0b06390ddd8424d73
Validity
Not Before: Sep 5 03:02:11 2026 GMT
Not After : Sep 6 03:02:11 2026 GMT
Subject: CN=a704790de51bd9bd4ed9990fd0c90b55a7b0ea9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:82:2c:70:bd:69:92:f6:5d:ad:bb:03:d3:c5:
4d:2e:c2:ba:01:99:b8:4f:42:34:f9:c2:ae:12:fd:
47:be:ec:c4:60:1c:19:ca:3b:16:13:4a:de:84:c3:
73:17:2f:d8:2a:38:7a:e0:2f:13:a8:79:b2:68:fd:
38:b5:67:2e:05:23:bf:18:46:45:81:cf:97:05:61:
ba:96:6a:1f:cb:14:d5:ea:a9:25:14:4b:66:63:99:
18:a5:fe:ca:91:31:41:25:d3:44:45:b9:9b:24:18:
b2:16:3f:cf:12:58:37:ae:a4:e3:e1:2a:d6:3c:16:
11:24:a5:76:a3:90:32:8f:73:70:53:02:57:90:19:
6d:61:66:b1:eb:d7:0f:f2:6f:7c:a5:18:25:61:93:
36:d3:3d:07:e9:65:68:64:78:af:43:1e:b0:1b:32:
2f:45:1f:fe:db:19:48:b2:6f:7a:42:bf:de:4f:47:
d6:f8:aa:21:d1:ad:ad:bd:40:4c:eb:ce:bf:92:ef:
f7:a6:5f:c9:d8:b0:63:41:36:fd:96:b6:f9:23:5d:
9a:34:ba:77:48:94:3c:8c:cd:d3:a3:35:c7:0d:ee:
04:d7:aa:f0:f9:e6:6e:1d:4f:73:06:37:01:49:33:
2e:5b:ee:b4:da:89:17:2a:c3:e0:89:cb:c9:1a:6b:
25:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:04:79:0D:E5:1B:D9:BD:4E:D9:99:0F:D0:C9:0B:55:A7:B0:EA:9B
X509v3 Authority Key Identifier:
keyid:72:E6:E7:25:D5:8F:10:27:3B:5D:32:D0:B0:63:90:DD:D8:42:4D:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cubnJdWPECc7XTLQsGOQ3dhCTXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/857a2f-3288-467e-b043-2431e6ba6311/1/cubnJdWPECc7XTLQsGOQ3dhCTXM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/857a2f-3288-467e-b043-2431e6ba6311/1/cubnJdWPECc7XTLQsGOQ3dhCTXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:70:7a:23:4d:cd:42:02:e0:a6:dd:81:a6:09:0d:25:7d:92:
d1:01:cb:4a:e2:76:c8:b7:0b:59:73:ef:4a:c5:7c:5b:35:cc:
da:04:4b:a9:71:72:f5:60:36:0d:c8:45:5f:43:ce:39:ef:4c:
5d:e9:56:85:36:28:c9:91:75:0d:95:ab:e8:12:5c:32:6a:71:
e4:97:cf:3b:d7:b2:3a:23:55:e7:d3:50:1f:1f:a3:25:d0:b5:
5a:40:69:f9:bf:51:c5:b0:51:1f:d1:f1:49:9f:df:8e:83:0f:
a6:a5:3c:ef:c8:74:9d:00:1c:09:c5:6c:36:c5:0b:9d:3f:84:
77:ed:0a:d4:94:fd:e3:88:05:3e:7a:fb:f1:32:3b:0a:ed:3e:
50:81:59:41:15:b8:a1:81:3b:e2:cc:3e:4d:89:a3:41:a0:19:
24:82:75:be:95:73:91:0b:87:d9:e3:f8:4b:b5:6a:89:4d:d8:
e5:f2:4f:4b:1e:4b:98:5b:e7:be:22:48:84:61:4a:5f:67:c0:
57:ad:ca:83:c2:75:ec:8a:7a:cd:21:3b:2e:cf:4d:06:15:74:
74:60:a5:6e:59:58:fe:af:7c:54:42:4e:6e:dd:bb:50:ed:6d:
24:c7:4a:79:b8:64:80:e2:c7:0b:a3:71:df:88:a3:3b:2b:4c:
75:30:0e:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 05:23:08 2026 by rpki-client