
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.mft
File: cugftc8PsyxFdfhBOsvUGqhLgvQ.mft (raw, json)
Hash identifier: jrnDQE+XRefEzjF1CgoQl4qvylJtqbWrN9wJY4QqT4Y=
Subject key identifier: EA:90:51:3B:68:1A:D2:26:C7:88:DF:D5:6D:E5:BC:B8:D4:19:9E:14
Authority key identifier: 72:E8:1F:B5:CF:0F:B3:2C:45:75:F8:41:3A:CB:D4:1A:A8:4B:82:F4
Certificate issuer: /CN=72e81fb5cf0fb32c4575f8413acbd41aa84b82f4
Certificate serial: 019FAE2D9622D75C06E89A2D6A3EE22A298A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cugftc8PsyxFdfhBOsvUGqhLgvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.mft
Manifest number: 19F3
Signing time: Wed 29 Jul 2026 14:00:50 +0000
Manifest this update: Wed 29 Jul 2026 14:00:50 +0000
Manifest next update: Thu 30 Jul 2026 14:00:50 +0000
Files and hashes: 1: cugftc8PsyxFdfhBOsvUGqhLgvQ.crl (hash: TTezC4wd3hX05D46PKXgeO5c87bR8pnLXcTjZuIAQ04=)
2: ejKA_vlyxDhvn27RS4YsJGzhNdg.roa (hash: XP8ALFzfsLx3L3dQs8deoXxOCZ0VOnD81ZoRuur0rIk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/cugftc8PsyxFdfhBOsvUGqhLgvQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 14:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ae:2d:96:22:d7:5c:06:e8:9a:2d:6a:3e:e2:2a:29:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72e81fb5cf0fb32c4575f8413acbd41aa84b82f4
Validity
Not Before: Jul 29 14:00:50 2026 GMT
Not After : Jul 30 14:00:50 2026 GMT
Subject: CN=ea90513b681ad226c788dfd56de5bcb8d4199e14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:73:14:d3:c0:6f:78:08:d5:29:bb:8e:1f:40:
fb:a2:23:ae:cc:ab:67:7b:ee:29:da:e4:19:af:8f:
9e:10:c8:68:e7:7c:15:d8:c0:11:fc:1a:c0:66:c4:
92:a1:f2:ad:1c:65:f5:a9:82:18:d7:32:20:f4:3a:
5b:c9:1c:70:ed:7d:78:51:44:2e:ce:58:10:64:37:
35:a2:d5:fa:39:fb:a3:4b:20:9f:cf:91:bf:4d:8f:
b9:6c:3a:d0:30:0e:2d:c7:24:73:44:0d:3d:22:c7:
9d:38:76:03:e8:b3:bf:8e:9a:f4:89:d9:a3:f7:e5:
9c:c2:73:d8:a6:4d:54:c8:06:73:b3:e0:45:74:b5:
cc:a1:7c:6c:c7:bb:f1:f4:78:a2:d1:06:26:48:96:
16:b8:15:96:ef:d7:d2:28:3b:c9:d1:87:63:f1:78:
c6:af:47:ca:34:2b:eb:f3:56:b9:30:8c:c4:24:24:
22:25:e0:b5:46:56:d7:c0:70:90:c4:fb:ad:3d:c3:
85:c8:08:08:63:eb:ba:3f:f4:cd:ac:33:9a:14:dc:
90:fb:a3:f6:73:5d:35:bd:55:d6:97:52:f0:66:ba:
82:41:ae:8e:c2:07:e3:38:88:76:87:b1:8b:af:e7:
ad:b3:a9:64:d5:e1:88:e9:9c:ad:7b:c9:8d:06:43:
e5:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:90:51:3B:68:1A:D2:26:C7:88:DF:D5:6D:E5:BC:B8:D4:19:9E:14
X509v3 Authority Key Identifier:
keyid:72:E8:1F:B5:CF:0F:B3:2C:45:75:F8:41:3A:CB:D4:1A:A8:4B:82:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cugftc8PsyxFdfhBOsvUGqhLgvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:d2:e1:76:32:8e:a7:f4:4b:02:e5:fc:f0:77:e1:c8:21:4c:
10:5c:1f:8a:ba:4b:70:bb:c5:7b:e5:ef:d8:4a:10:4d:a6:a8:
f4:39:2d:ab:23:1b:21:30:6b:06:98:17:a3:15:d5:d1:9b:2f:
e6:b3:e6:5e:d7:22:72:c5:f7:b5:bc:ee:f4:3b:96:f8:98:8d:
db:0c:6a:a2:da:41:4e:57:c2:ec:ad:a7:67:56:9b:1d:22:49:
24:69:3b:6b:de:08:10:05:80:1f:aa:f0:3b:c0:72:02:20:9c:
f5:32:16:43:e6:e0:0c:87:a2:d7:8a:ca:75:87:e8:7c:cd:92:
7b:fc:b8:bb:d4:d9:3b:d6:a5:d4:7f:ea:d9:8a:2e:ab:33:02:
b8:f7:34:8b:d7:04:5a:95:97:2e:36:63:fb:e6:eb:57:dc:88:
29:80:b7:ac:c5:35:57:db:ba:d4:bf:00:18:e6:62:25:d3:a9:
7b:11:24:81:17:c9:0f:8b:9a:d9:33:bc:5d:c9:df:12:90:14:
8c:e3:f7:61:a8:a0:44:ac:0c:0d:68:39:b2:0c:82:60:bb:99:
13:ed:0e:d4:3d:72:1d:2e:3b:e8:a5:6f:6b:97:bd:bf:33:6c:
10:3c:97:d5:ce:59:f6:fa:9d:d2:d7:e0:cc:4f:4d:3c:3a:4f:
86:e0:d8:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 18:27:33 2026 by rpki-client