Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.mft
File: cugftc8PsyxFdfhBOsvUGqhLgvQ.mft (raw, json)
Hash identifier: nMYC580RX1BQx7KCoZDsXlObXM+h4hHWW1FdYeVHf8M=
Subject key identifier: C3:1C:B7:AA:69:90:24:3E:B4:F3:22:77:40:09:F8:5A:97:C9:5E:B1
Authority key identifier: 72:E8:1F:B5:CF:0F:B3:2C:45:75:F8:41:3A:CB:D4:1A:A8:4B:82:F4
Certificate issuer: /CN=72e81fb5cf0fb32c4575f8413acbd41aa84b82f4
Certificate serial: 019D99D5378C579AAE3E847480C1A2D30DCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cugftc8PsyxFdfhBOsvUGqhLgvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.mft
Manifest number: 18DB
Signing time: Fri 17 Apr 2026 05:06:20 +0000
Manifest this update: Fri 17 Apr 2026 05:06:20 +0000
Manifest next update: Sat 18 Apr 2026 05:06:20 +0000
Files and hashes: 1: cugftc8PsyxFdfhBOsvUGqhLgvQ.crl (hash: MsWhXIJN2xliyX1UAy4xGoWEWtiGoa95SdMP7l+aKk8=)
2: gr1u3X_194f0U8tEWFuBAY86TRs.roa (hash: sZpB3WdrbJMpu0/M52LBLcQGhPdA083HHiTnC36WfEI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/cugftc8PsyxFdfhBOsvUGqhLgvQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d5:37:8c:57:9a:ae:3e:84:74:80:c1:a2:d3:0d:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72e81fb5cf0fb32c4575f8413acbd41aa84b82f4
Validity
Not Before: Apr 17 05:06:20 2026 GMT
Not After : Apr 18 05:06:20 2026 GMT
Subject: CN=c31cb7aa6990243eb4f322774009f85a97c95eb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:98:9a:f0:27:18:22:de:4f:a5:37:1a:49:99:
de:82:17:1e:4c:d4:2f:07:f6:0d:11:0b:13:01:a2:
0e:23:30:58:c3:c1:69:8c:83:9e:85:3d:be:9b:03:
e0:12:6d:24:ea:3b:91:b3:28:98:06:0e:f7:aa:d7:
ae:2d:60:ef:06:71:ef:eb:88:5d:fb:5a:1c:10:e9:
7b:e6:ce:1e:a1:c4:cb:8d:e8:f7:29:12:96:ad:d3:
6b:15:9c:c2:0b:29:cf:88:c6:28:3f:43:a7:4c:48:
3f:52:ac:df:11:eb:e5:41:20:97:fd:97:a2:cb:48:
56:eb:19:06:40:e2:95:aa:a6:7d:1d:19:83:bf:0a:
e5:9a:e3:cf:1d:d8:63:8b:28:f4:74:d9:6d:8f:89:
e4:b4:d1:74:fd:af:5f:32:a0:43:96:5e:00:d2:c3:
3d:b3:be:56:43:5f:2b:9d:f1:35:5f:8c:46:2c:0d:
97:b6:51:85:bd:9e:94:fe:43:ef:09:ad:17:24:d8:
dd:3d:9e:ed:44:77:90:ec:88:f4:8b:7d:45:fa:0c:
a8:26:04:d8:83:0c:df:36:68:42:e3:82:a1:aa:a6:
e0:26:97:02:48:f3:ad:7b:75:39:88:de:ef:2f:78:
42:3c:5c:ca:13:f9:d1:47:5d:f7:9d:0c:c1:f3:6d:
4f:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:1C:B7:AA:69:90:24:3E:B4:F3:22:77:40:09:F8:5A:97:C9:5E:B1
X509v3 Authority Key Identifier:
keyid:72:E8:1F:B5:CF:0F:B3:2C:45:75:F8:41:3A:CB:D4:1A:A8:4B:82:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cugftc8PsyxFdfhBOsvUGqhLgvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:33:51:a9:dc:c3:69:d0:3c:29:5c:f6:60:5a:e1:df:29:3b:
a0:42:17:79:da:56:4b:05:fc:0a:5e:e7:3c:ee:f1:32:9e:14:
d4:e8:6b:42:c8:c2:8b:f1:9e:0c:51:e0:76:29:3a:f5:94:53:
42:28:25:0c:aa:26:b4:13:00:23:b3:a9:e1:17:0c:9d:21:66:
10:f8:2e:0d:ca:80:06:ee:45:18:71:4e:62:9a:c1:34:9f:27:
b1:51:b2:74:c0:d6:61:d1:90:cc:a6:26:53:91:09:c9:05:73:
95:f6:9f:33:4e:91:d9:09:39:df:ab:71:9e:66:cb:d1:6b:59:
7f:d4:6f:c2:de:a8:b3:16:17:29:26:bd:49:8c:c8:42:47:07:
ad:1d:84:1f:71:db:eb:65:16:5a:64:cc:e0:36:8d:6e:49:ec:
c4:79:a4:f1:31:e3:f1:4d:6b:9c:a9:4f:41:28:a7:ee:2e:4a:
3d:c1:12:c1:69:a6:d8:a9:51:b3:59:2b:12:fe:2d:d3:62:22:
e2:c3:a8:e9:be:30:59:41:3b:1e:df:99:30:d6:15:8e:5b:db:
44:8f:6d:c4:c5:8c:ff:b2:ff:17:32:e8:ee:c9:f1:d2:04:65:
15:dd:79:f1:66:c1:a5:11:ce:ad:d7:f5:66:5d:f1:98:11:89:
e1:bf:b0:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:46:05 2026 by rpki-client