Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/91/857a2f-3288-467e-b043-2431e6ba6311/1/cubnJdWPECc7XTLQsGOQ3dhCTXM.mft
File: cubnJdWPECc7XTLQsGOQ3dhCTXM.mft (raw, json)
Hash identifier: b+5e36MqVC5vYKvq9rgQL2r8mTvgZqdGD5Rqkyy4UV4=
Subject key identifier: 1A:47:40:5E:47:14:F1:D2:93:C8:D1:26:F7:5E:D3:FF:00:B2:24:3B
Authority key identifier: 72:E6:E7:25:D5:8F:10:27:3B:5D:32:D0:B0:63:90:DD:D8:42:4D:73
Certificate issuer: /CN=72e6e725d58f10273b5d32d0b06390ddd8424d73
Certificate serial: 01A0E73F2203B40999C63969DA65F2077AFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cubnJdWPECc7XTLQsGOQ3dhCTXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/857a2f-3288-467e-b043-2431e6ba6311/1/cubnJdWPECc7XTLQsGOQ3dhCTXM.mft
Manifest number: F1
Signing time: Mon 28 Sep 2026 09:01:09 +0000
Manifest this update: Mon 28 Sep 2026 09:01:09 +0000
Manifest next update: Tue 29 Sep 2026 09:01:09 +0000
Files and hashes: 1: He2JlpI8ZQczhJIlNayJhBNlxwU.roa (hash: OuIaHjgCyPaNpYLqQNHE7OPzaKT6XbasSd79mJXSO/M=)
2: cubnJdWPECc7XTLQsGOQ3dhCTXM.crl (hash: jNG5iAMUxnHyIQTbGkptod8w26QuHxCAQUwmk2NvEJg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/857a2f-3288-467e-b043-2431e6ba6311/1/cubnJdWPECc7XTLQsGOQ3dhCTXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/857a2f-3288-467e-b043-2431e6ba6311/1/cubnJdWPECc7XTLQsGOQ3dhCTXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/cubnJdWPECc7XTLQsGOQ3dhCTXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 09:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:3f:22:03:b4:09:99:c6:39:69:da:65:f2:07:7a:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72e6e725d58f10273b5d32d0b06390ddd8424d73
Validity
Not Before: Sep 28 09:01:09 2026 GMT
Not After : Sep 29 09:01:09 2026 GMT
Subject: CN=1a47405e4714f1d293c8d126f75ed3ff00b2243b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:bd:ac:07:06:49:5f:3a:4b:29:f5:77:bc:87:
71:65:6c:45:eb:1d:85:db:8f:d0:2f:84:e4:14:98:
a9:0b:41:83:e7:52:de:cc:8b:06:13:89:f9:12:f1:
d0:df:84:ed:f2:f1:86:60:8c:f9:61:9a:a1:88:c0:
0f:bd:4d:71:f8:c0:7a:dc:f5:ce:06:73:e4:08:5f:
db:8e:d2:56:71:64:2a:e7:df:c2:57:28:c5:27:0d:
da:cd:5c:d8:55:63:24:60:46:cd:f9:3c:1b:4b:b4:
ac:fc:7d:e3:83:7f:59:44:0c:5c:3e:ee:49:3a:68:
15:e6:ef:8e:80:d3:18:b4:da:46:58:5c:16:21:38:
40:3a:7e:de:d4:4f:0c:06:2d:4c:72:10:c7:ca:63:
e8:69:16:8b:df:3b:15:44:87:d1:48:27:ca:38:74:
21:f6:e1:d2:6b:92:a9:51:82:6a:b6:b7:4c:7f:aa:
e9:d1:2a:23:c4:63:b1:c1:75:e1:64:6f:8e:81:62:
83:ca:95:fc:f2:0a:78:7a:a7:9c:83:e4:5d:8e:ce:
32:3b:d8:11:ea:55:29:41:bb:ca:8c:9d:b8:25:94:
f3:c7:0f:45:c2:df:cf:90:a0:c7:c3:4d:d9:33:ab:
08:d5:83:3d:42:67:ec:78:cf:26:5a:ce:35:66:16:
b2:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:47:40:5E:47:14:F1:D2:93:C8:D1:26:F7:5E:D3:FF:00:B2:24:3B
X509v3 Authority Key Identifier:
keyid:72:E6:E7:25:D5:8F:10:27:3B:5D:32:D0:B0:63:90:DD:D8:42:4D:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cubnJdWPECc7XTLQsGOQ3dhCTXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/857a2f-3288-467e-b043-2431e6ba6311/1/cubnJdWPECc7XTLQsGOQ3dhCTXM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/857a2f-3288-467e-b043-2431e6ba6311/1/cubnJdWPECc7XTLQsGOQ3dhCTXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:06:e8:4c:2f:11:22:11:fa:39:cb:06:61:15:f4:fb:2c:12:
1d:7a:e3:59:79:3e:7d:c7:a3:22:e4:d6:9e:87:76:64:ca:b6:
df:60:1f:72:c4:7d:d2:d3:b5:5d:24:70:2b:cd:7e:b8:63:13:
04:6a:ce:e5:33:1d:c6:07:50:d0:5c:0b:c3:0f:e9:4d:f4:72:
eb:f6:c7:bc:49:c4:cd:ae:aa:30:cc:53:f6:c8:97:ed:cf:3c:
76:78:4d:9a:dd:9d:35:88:18:54:2e:e1:ec:a9:1c:f5:56:2c:
be:96:98:41:00:9d:69:16:b3:70:ed:c9:bb:56:55:20:d2:0b:
fe:a8:32:60:6a:10:1c:11:22:ff:b6:cf:a8:25:d9:ce:5a:01:
95:b0:12:f0:bd:e4:5f:6a:bf:77:15:d7:35:a7:a8:59:04:eb:
3a:64:3f:7c:0d:c4:52:d3:1b:e7:05:24:04:d0:2e:bd:f3:90:
45:73:30:51:b8:a6:27:85:08:d3:86:8b:06:53:b7:0a:c0:21:
45:cb:7d:df:c5:57:5c:2f:cb:a3:9d:e2:10:3f:4b:fb:21:06:
67:1f:2e:00:bd:39:35:1c:e6:b5:91:20:26:3d:f4:50:33:c1:
d3:e9:5d:b6:40:03:f7:44:fc:e3:6d:2c:9d:db:46:27:31:f8:
18:77:c1:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 16:15:16 2026 by rpki-client