Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.mft
File: cugftc8PsyxFdfhBOsvUGqhLgvQ.mft (raw, json)
Hash identifier: QY0+kdXYSZCWg/FGscwPuWc4kd1dSPNZFRg4bt96urI=
Subject key identifier: D7:5B:50:E4:C3:2A:2B:10:7D:19:99:1F:8E:83:1F:5E:20:92:41:6F
Authority key identifier: 72:E8:1F:B5:CF:0F:B3:2C:45:75:F8:41:3A:CB:D4:1A:A8:4B:82:F4
Certificate issuer: /CN=72e81fb5cf0fb32c4575f8413acbd41aa84b82f4
Certificate serial: 019CABD910916CAC8EFD077C0036E96B94D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cugftc8PsyxFdfhBOsvUGqhLgvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.mft
Manifest number: 185F
Signing time: Mon 02 Mar 2026 00:00:55 +0000
Manifest this update: Mon 02 Mar 2026 00:00:55 +0000
Manifest next update: Tue 03 Mar 2026 00:00:55 +0000
Files and hashes: 1: X2OTWa0EkhOAb_VJ7xVPW1Ibpws.roa (hash: NNuFryogVqVrL2X7dVkBYvwMuGxY6cTW/9r6oXN/lRU=)
2: cugftc8PsyxFdfhBOsvUGqhLgvQ.crl (hash: Oa2edEPI3SQdibTHpeDR6bFjVYhQ+/HIl1vs0fj1yJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/cugftc8PsyxFdfhBOsvUGqhLgvQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:10:91:6c:ac:8e:fd:07:7c:00:36:e9:6b:94:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72e81fb5cf0fb32c4575f8413acbd41aa84b82f4
Validity
Not Before: Mar 2 00:00:55 2026 GMT
Not After : Mar 3 00:00:55 2026 GMT
Subject: CN=d75b50e4c32a2b107d19991f8e831f5e2092416f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:98:74:f6:bc:e4:5b:c2:e5:db:d0:76:17:b5:
b8:8a:7d:8b:38:85:fd:03:8d:62:24:0f:5a:46:62:
93:5c:27:ef:97:3c:8b:dd:be:b8:46:d0:f5:cb:a1:
0e:61:54:84:e5:c0:2d:8d:e4:be:d5:9f:ac:a3:a1:
d0:d3:e1:3a:fa:f8:31:18:0e:e6:38:03:e5:39:9b:
63:41:39:92:5f:1d:bc:c5:0d:84:5f:63:ef:03:12:
62:fc:3d:a6:99:33:6e:0f:aa:38:f2:36:7e:0d:98:
77:39:fb:48:d9:39:c6:bc:f4:32:70:62:1f:b2:f2:
9f:72:af:ab:2a:ea:fd:b8:47:6b:7d:71:78:5d:6f:
94:44:7e:36:66:46:a3:6c:c7:83:d6:b0:53:9d:38:
94:04:aa:b7:a2:da:26:5c:27:6a:d8:08:c7:58:a7:
fb:d4:12:55:40:56:5a:a7:68:26:4c:c8:de:7a:11:
ed:bf:65:54:07:2c:c0:6b:14:e4:03:e7:ac:87:53:
9f:71:36:07:00:52:8f:e4:9c:c0:3d:3e:92:5c:c7:
e7:76:bf:70:dd:77:ea:f0:8a:1a:30:7f:d6:9c:ef:
91:81:d0:89:8e:63:35:73:44:fd:05:1a:ed:3c:21:
b9:8a:c5:d8:7a:6d:2b:49:ad:d5:a0:bf:aa:cd:9c:
17:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:5B:50:E4:C3:2A:2B:10:7D:19:99:1F:8E:83:1F:5E:20:92:41:6F
X509v3 Authority Key Identifier:
keyid:72:E8:1F:B5:CF:0F:B3:2C:45:75:F8:41:3A:CB:D4:1A:A8:4B:82:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cugftc8PsyxFdfhBOsvUGqhLgvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:97:91:c8:e7:f6:de:43:b1:71:dc:6c:02:40:7a:a4:98:2c:
20:2d:b5:75:2c:2c:6a:8f:f7:bf:45:96:44:50:31:b2:53:f3:
6d:b5:8a:55:bd:b4:bc:93:60:3d:ed:46:4a:f6:12:7e:61:92:
ed:f5:86:42:93:8d:75:9b:da:3e:2b:00:ac:42:a2:90:60:27:
01:c5:85:22:89:38:cb:f7:b5:c1:f2:a0:62:b7:d5:79:a9:af:
76:3d:31:d2:40:f5:f9:1f:01:01:d8:9c:f5:2b:c9:9b:14:bf:
b7:b8:f1:75:f6:ff:f9:55:26:46:6c:b5:c6:c2:36:b0:4a:5a:
39:f3:29:54:86:db:7a:c1:d6:28:ed:d6:6d:6c:a0:df:4f:db:
0a:88:96:8e:0e:69:1a:0a:ac:50:d4:ce:24:48:6f:c2:ab:87:
e3:80:bd:d5:79:84:a4:71:a3:78:a9:62:e8:d4:67:5e:e4:1c:
e3:1c:fb:1c:0a:df:28:d5:1b:d1:00:78:25:19:b3:38:cf:0d:
f3:eb:ef:8f:cd:e8:0e:e5:80:8c:b6:0f:30:67:c3:4e:ba:fe:
98:c2:8d:dc:64:52:69:ad:a8:7b:59:40:0f:df:16:5c:7e:eb:
19:5b:fd:96:03:4f:63:86:dc:66:48:a2:f8:12:b0:35:a8:c6:
ed:84:09:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2RCRbKyO/Qd8ADbpa5TVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyZTgxZmI1Y2YwZmIzMmM0NTc1Zjg0MTNhY2JkNDFhYTg0
YjgyZjQwHhcNMjYwMzAyMDAwMDU1WhcNMjYwMzAzMDAwMDU1WjAzMTEwLwYDVQQD
EyhkNzViNTBlNGMzMmEyYjEwN2QxOTk5MWY4ZTgzMWY1ZTIwOTI0MTZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxph09rzkW8Ll29B2F7W4in2LOIX9
A41iJA9aRmKTXCfvlzyL3b64RtD1y6EOYVSE5cAtjeS+1Z+so6HQ0+E6+vgxGA7m
OAPlOZtjQTmSXx28xQ2EX2PvAxJi/D2mmTNuD6o48jZ+DZh3OftI2TnGvPQycGIf
svKfcq+rKur9uEdrfXF4XW+URH42ZkajbMeD1rBTnTiUBKq3otomXCdq2AjHWKf7
1BJVQFZap2gmTMjeehHtv2VUByzAaxTkA+esh1OfcTYHAFKP5JzAPT6SXMfndr9w
3Xfq8IoaMH/WnO+RgdCJjmM1c0T9BRrtPCG5isXYem0rSa3VoL+qzZwXPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNdbUOTDKisQfRmZH46DH14gkkFvMB8GA1UdIwQY
MBaAFHLoH7XPD7MsRXX4QTrL1BqoS4L0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3VnZnRjOFBzeXhGZGZoQk9zdlVHcWhMZ3ZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS9mMDY4YTctNWY4Yy00ZjMyLWFiOTQt
Y2RhNmUxOWZmYjg4LzEvY3VnZnRjOFBzeXhGZGZoQk9zdlVHcWhMZ3ZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS9mMDY4YTctNWY4Yy00ZjMyLWFiOTQtY2RhNmUxOWZmYjg4
LzEvY3VnZnRjOFBzeXhGZGZoQk9zdlVHcWhMZ3ZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACpeRyOf2
3kOxcdxsAkB6pJgsIC21dSwsao/3v0WWRFAxslPzbbWKVb20vJNgPe1GSvYSfmGS
7fWGQpONdZvaPisArEKikGAnAcWFIok4y/e1wfKgYrfVeamvdj0x0kD1+R8BAdic
9SvJmxS/t7jxdfb/+VUmRmy1xsI2sEpaOfMpVIbbesHWKO3WbWyg30/bCoiWjg5p
GgqsUNTOJEhvwquH44C91XmEpHGjeKli6NRnXuQc4xz7HArfKNUb0QB4JRmzOM8N
8+vvj83oDuWAjLYPMGfDTrr+mMKN3GRSaa2oe1lAD98WXH7rGVv9lgNPY4bcZkii
+BKwNajG7YQJhw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:58:40 2026 by rpki-client