Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.mft
File: cugftc8PsyxFdfhBOsvUGqhLgvQ.mft (raw, json)
Hash identifier: UoBjHAcM1BJeUjvdGn42DwNeNfbm6xqSxXcc+qa8nlc=
Subject key identifier: 40:D2:DD:8E:1E:63:59:F3:05:06:3E:68:55:53:A3:CE:5B:C3:E2:73
Authority key identifier: 72:E8:1F:B5:CF:0F:B3:2C:45:75:F8:41:3A:CB:D4:1A:A8:4B:82:F4
Certificate issuer: /CN=72e81fb5cf0fb32c4575f8413acbd41aa84b82f4
Certificate serial: 01A0E02A6452F0FEE794C8785B6139CB32A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cugftc8PsyxFdfhBOsvUGqhLgvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.mft
Manifest number: 1A92
Signing time: Sun 27 Sep 2026 00:01:09 +0000
Manifest this update: Sun 27 Sep 2026 00:01:09 +0000
Manifest next update: Mon 28 Sep 2026 00:01:09 +0000
Files and hashes: 1: cugftc8PsyxFdfhBOsvUGqhLgvQ.crl (hash: dzeqsPm+jEzDbd1KajKyBf/B5TwBNbOd1iTKKwECnwY=)
2: kmracVV_9DZy9mrzriTRpJZ9tC8.roa (hash: siROietWmPF3CwxYrw54NeS24FZrusLdJ8kDBP+eNzA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/cugftc8PsyxFdfhBOsvUGqhLgvQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 00:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:2a:64:52:f0:fe:e7:94:c8:78:5b:61:39:cb:32:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72e81fb5cf0fb32c4575f8413acbd41aa84b82f4
Validity
Not Before: Sep 27 00:01:09 2026 GMT
Not After : Sep 28 00:01:09 2026 GMT
Subject: CN=40d2dd8e1e6359f305063e685553a3ce5bc3e273
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:52:e6:15:0a:1b:cc:16:78:d8:e7:15:3c:dd:
36:66:73:24:35:ab:33:62:94:63:e1:74:35:d6:e1:
8f:c1:2b:a1:c5:5b:20:db:34:b4:42:4b:c6:b3:b2:
b2:3b:ae:7c:f6:46:cd:6d:7e:00:a8:49:c3:96:f7:
0f:b4:25:76:71:ba:4f:d8:ee:4b:e7:91:2f:d7:7e:
f7:ef:3d:ea:20:c4:06:bc:fc:24:32:86:d5:8f:2e:
89:22:2c:78:32:fc:f8:51:24:5a:13:a2:76:3e:db:
ba:98:76:8d:92:7f:30:63:61:39:b3:aa:77:b9:73:
b0:ed:c2:14:27:70:aa:f3:c7:2b:78:bf:48:f7:5a:
71:7c:4d:ba:71:2b:9d:1f:1b:61:ee:ba:ff:32:d3:
62:9e:cf:60:ab:20:96:bb:3d:4d:7c:f2:44:7f:cf:
52:26:10:70:f1:c1:0b:c3:1d:11:f0:73:58:2f:4e:
32:5e:96:9c:81:b3:d5:88:e3:cc:82:09:09:34:0d:
da:bc:e4:c3:aa:d6:47:04:3b:34:d2:96:b0:0d:04:
92:f7:9d:d9:12:08:10:2d:30:cb:0c:dc:c9:7d:28:
50:58:13:4a:34:66:fc:1d:20:05:0b:8e:68:10:83:
9c:87:13:a0:d5:64:83:a1:ec:12:43:16:d4:63:b0:
0e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:D2:DD:8E:1E:63:59:F3:05:06:3E:68:55:53:A3:CE:5B:C3:E2:73
X509v3 Authority Key Identifier:
keyid:72:E8:1F:B5:CF:0F:B3:2C:45:75:F8:41:3A:CB:D4:1A:A8:4B:82:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cugftc8PsyxFdfhBOsvUGqhLgvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:f5:f7:df:b7:42:c6:ab:de:d5:a6:38:23:a0:04:0a:50:33:
80:f0:05:91:63:26:f4:eb:2f:69:1d:d2:9a:a4:51:fa:85:10:
15:2f:c6:dc:94:24:d9:9d:05:af:24:65:7c:0c:c2:99:88:8e:
a3:20:a3:06:87:5f:81:e1:11:2e:11:f3:5a:1b:3d:d3:f6:fd:
14:53:e0:8a:64:76:90:74:7b:db:ac:c3:0b:03:72:26:be:56:
9e:9e:0a:7e:f1:95:45:67:fe:bd:b5:bc:d4:56:18:e1:c9:8e:
aa:31:b6:4e:71:75:45:f8:93:0a:b5:0e:4a:28:0f:9a:2b:89:
3d:7d:74:95:ef:78:73:8c:82:63:73:9f:65:28:02:14:7a:cc:
6c:b4:f0:08:e3:59:55:32:7d:0c:ca:7e:ee:0a:d5:e9:0f:94:
3d:f1:58:76:3e:19:fa:ac:bc:ca:e9:19:9d:5f:d0:c0:d9:ac:
34:c0:45:ed:a8:3b:08:7e:0a:3f:f4:b8:09:a5:94:67:ab:86:
70:36:2e:82:18:26:18:1d:b3:64:3a:a2:e5:97:04:c5:e3:a4:
2c:57:84:23:22:2b:71:8d:e5:da:33:61:3e:8a:83:91:e6:a2:
1e:88:25:03:61:f3:3e:f9:1c:a5:1e:17:64:39:3e:41:52:60:
5b:91:a6:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 10:09:54 2026 by rpki-client