Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/91/857a2f-3288-467e-b043-2431e6ba6311/1/cubnJdWPECc7XTLQsGOQ3dhCTXM.mft
File: cubnJdWPECc7XTLQsGOQ3dhCTXM.mft (raw, json)
Hash identifier: Dg0MlDHwS1RKJBg53l1RCNpeZ567FLElxloXWRtABrc=
Subject key identifier: 4A:E8:E0:3C:2A:DC:AE:8A:6A:CC:30:D5:F0:04:75:1F:90:4E:C6:CD
Authority key identifier: 72:E6:E7:25:D5:8F:10:27:3B:5D:32:D0:B0:63:90:DD:D8:42:4D:73
Certificate issuer: /CN=72e6e725d58f10273b5d32d0b06390ddd8424d73
Certificate serial: 01A0EB1CA82178D69B25D6219BF29BAD9578
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cubnJdWPECc7XTLQsGOQ3dhCTXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/857a2f-3288-467e-b043-2431e6ba6311/1/cubnJdWPECc7XTLQsGOQ3dhCTXM.mft
Manifest number: F3
Signing time: Tue 29 Sep 2026 03:01:58 +0000
Manifest this update: Tue 29 Sep 2026 03:01:58 +0000
Manifest next update: Wed 30 Sep 2026 03:01:58 +0000
Files and hashes: 1: He2JlpI8ZQczhJIlNayJhBNlxwU.roa (hash: OuIaHjgCyPaNpYLqQNHE7OPzaKT6XbasSd79mJXSO/M=)
2: cubnJdWPECc7XTLQsGOQ3dhCTXM.crl (hash: aQ+VKIrgjpy2PN+tKbU2li5yKYS5mG6N48klkYPix4Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/857a2f-3288-467e-b043-2431e6ba6311/1/cubnJdWPECc7XTLQsGOQ3dhCTXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/857a2f-3288-467e-b043-2431e6ba6311/1/cubnJdWPECc7XTLQsGOQ3dhCTXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/cubnJdWPECc7XTLQsGOQ3dhCTXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:eb:1c:a8:21:78:d6:9b:25:d6:21:9b:f2:9b:ad:95:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72e6e725d58f10273b5d32d0b06390ddd8424d73
Validity
Not Before: Sep 29 03:01:58 2026 GMT
Not After : Sep 30 03:01:58 2026 GMT
Subject: CN=4ae8e03c2adcae8a6acc30d5f004751f904ec6cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ec:89:bc:57:77:bf:80:f6:58:73:75:e9:4b:
a0:e9:b1:d8:46:ed:00:6e:36:bc:33:56:62:f0:d3:
b9:49:89:4b:2c:94:13:5b:b0:9e:1c:f9:10:39:90:
a6:93:b3:ee:bf:58:c0:13:78:28:44:49:80:da:6e:
b7:60:c2:fd:c3:f5:b3:dd:81:eb:a8:75:03:7d:10:
4a:30:75:ab:b5:77:f9:bc:2c:c6:c6:92:a4:26:0e:
c0:13:ec:ca:f6:fc:55:d0:dd:b3:cb:6f:de:72:a7:
fd:d0:4b:43:d4:a4:97:f1:ab:8a:9c:18:f9:79:4e:
fb:50:04:d8:5e:fa:22:ee:23:11:9c:56:9c:22:d9:
df:cf:81:ad:e2:7a:0f:ec:30:d7:ab:15:86:e4:64:
16:b4:b9:80:dc:6c:f3:fc:99:ba:c3:0b:72:f8:ae:
f7:5f:49:f7:c4:29:69:f6:0e:7c:37:cd:a0:95:0c:
cd:11:47:0f:e2:7e:e9:5f:d5:08:73:ae:bd:9e:51:
b2:68:e6:59:8b:d4:9c:ea:81:d1:9d:a3:45:0a:b2:
f2:fc:6e:55:61:07:31:0e:f7:bd:fd:09:57:71:e5:
5b:5e:f2:d5:7b:26:81:ac:f9:66:19:5a:ee:0c:ae:
0d:9c:a7:20:3f:a4:87:9d:c3:89:d8:03:ce:d4:96:
fe:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:E8:E0:3C:2A:DC:AE:8A:6A:CC:30:D5:F0:04:75:1F:90:4E:C6:CD
X509v3 Authority Key Identifier:
keyid:72:E6:E7:25:D5:8F:10:27:3B:5D:32:D0:B0:63:90:DD:D8:42:4D:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cubnJdWPECc7XTLQsGOQ3dhCTXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/857a2f-3288-467e-b043-2431e6ba6311/1/cubnJdWPECc7XTLQsGOQ3dhCTXM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/857a2f-3288-467e-b043-2431e6ba6311/1/cubnJdWPECc7XTLQsGOQ3dhCTXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:3c:82:05:d3:b6:5a:c2:f4:14:ad:d6:15:62:59:ac:4e:c6:
54:87:c0:56:2a:6c:eb:e8:c8:7c:e7:98:c4:2b:a6:8c:4f:35:
8e:c5:19:5d:b4:9f:97:d6:95:18:73:b1:f1:9a:f6:42:29:cb:
e1:b1:7b:86:d7:38:60:dc:9d:17:84:15:ba:a1:2d:26:78:9a:
b0:ae:29:fe:60:fa:7b:60:9f:a7:22:cb:fa:4e:1e:45:69:48:
4c:b0:21:ad:28:68:ac:cb:4e:0c:a8:13:e8:f3:5a:e7:1e:a0:
c2:0a:d3:bc:a5:5c:67:4c:a6:d2:4e:71:ff:ae:05:a6:ef:26:
9c:3e:1a:01:4f:b9:f7:70:2b:bf:45:ed:62:a1:37:32:f7:90:
74:d8:5b:9e:fd:e2:e1:6c:4d:94:2c:c4:0a:ad:3b:71:1e:f3:
1a:aa:df:53:df:7f:40:39:9d:0a:50:2e:df:1d:dd:2f:20:5e:
49:a5:18:23:ef:f1:34:e2:4e:64:6c:b1:6c:6a:c5:81:b1:07:
e5:a7:da:fd:dc:54:9b:ba:df:18:d8:75:2d:73:9f:6a:f1:a7:
4f:37:c5:48:ef:c9:53:a9:85:6c:45:67:4b:d8:ec:51:2e:dd:
84:03:8f:8d:80:38:4d:af:b9:47:e2:ac:93:14:0c:94:bf:c3:
bc:66:93:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 08:37:01 2026 by rpki-client