Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/857a2f-3288-467e-b043-2431e6ba6311/1/cubnJdWPECc7XTLQsGOQ3dhCTXM.mft
File: cubnJdWPECc7XTLQsGOQ3dhCTXM.mft (raw, json)
Hash identifier: L0UMgb1IEum8cuMDw8RmzmWMZQzesmyXOCrrP79uH4k=
Subject key identifier: 6B:F9:60:56:DD:D1:61:BB:07:38:EB:E3:27:03:EA:9E:15:98:C4:76
Authority key identifier: 72:E6:E7:25:D5:8F:10:27:3B:5D:32:D0:B0:63:90:DD:D8:42:4D:73
Certificate issuer: /CN=72e6e725d58f10273b5d32d0b06390ddd8424d73
Certificate serial: 019FAC77062E36CFBF50EC06CC6ED139F8EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cubnJdWPECc7XTLQsGOQ3dhCTXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/857a2f-3288-467e-b043-2431e6ba6311/1/cubnJdWPECc7XTLQsGOQ3dhCTXM.mft
Manifest number: 4E
Signing time: Wed 29 Jul 2026 06:01:48 +0000
Manifest this update: Wed 29 Jul 2026 06:01:48 +0000
Manifest next update: Thu 30 Jul 2026 06:01:48 +0000
Files and hashes: 1: He2JlpI8ZQczhJIlNayJhBNlxwU.roa (hash: OuIaHjgCyPaNpYLqQNHE7OPzaKT6XbasSd79mJXSO/M=)
2: cubnJdWPECc7XTLQsGOQ3dhCTXM.crl (hash: +RBO2b6KKPMsa93rtntVwzDYYiyS+alw2CLtiN19pZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/857a2f-3288-467e-b043-2431e6ba6311/1/cubnJdWPECc7XTLQsGOQ3dhCTXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/857a2f-3288-467e-b043-2431e6ba6311/1/cubnJdWPECc7XTLQsGOQ3dhCTXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/cubnJdWPECc7XTLQsGOQ3dhCTXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:77:06:2e:36:cf:bf:50:ec:06:cc:6e:d1:39:f8:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72e6e725d58f10273b5d32d0b06390ddd8424d73
Validity
Not Before: Jul 29 06:01:48 2026 GMT
Not After : Jul 30 06:01:48 2026 GMT
Subject: CN=6bf96056ddd161bb0738ebe32703ea9e1598c476
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3c:bb:9f:b6:e5:27:ad:dc:04:cd:00:8a:42:
d2:12:b5:24:df:84:c0:ca:6c:c8:2d:e9:d9:c3:b5:
20:ad:1e:da:ae:22:f5:39:3c:cf:a3:eb:84:0d:2b:
c9:b1:f0:24:0f:1f:26:4e:c9:43:77:08:4f:df:f7:
b6:54:c4:23:81:a4:61:7d:f2:12:b0:a7:a8:6b:51:
3a:11:a4:a2:8c:b7:99:fb:df:94:82:6e:89:82:92:
1e:80:98:fb:46:cc:4f:72:48:9a:96:65:b2:34:c9:
dc:0a:55:16:80:32:c9:80:d1:42:d3:d7:7a:1b:13:
80:e6:ce:45:58:22:50:27:2f:b0:34:1a:7a:ac:0d:
87:59:d4:65:f5:3a:db:cd:bb:63:17:0d:50:0c:00:
c0:4c:f6:cc:bd:77:8a:89:db:6d:0e:fe:cf:55:7a:
5b:47:2e:d2:d6:36:de:c9:bc:d1:83:e3:59:b0:11:
68:b7:46:61:cd:07:3d:89:86:40:e3:a6:ea:64:18:
70:18:2a:25:33:d3:14:36:46:3b:bf:97:48:e8:b7:
d9:8a:67:f0:05:f1:e7:f7:d3:b6:cc:23:f1:75:5a:
bb:52:fa:00:27:85:46:15:e3:b3:45:88:f0:ab:15:
89:fb:8f:c5:be:0b:d7:f5:7a:fb:55:52:c1:d7:01:
4f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:F9:60:56:DD:D1:61:BB:07:38:EB:E3:27:03:EA:9E:15:98:C4:76
X509v3 Authority Key Identifier:
keyid:72:E6:E7:25:D5:8F:10:27:3B:5D:32:D0:B0:63:90:DD:D8:42:4D:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cubnJdWPECc7XTLQsGOQ3dhCTXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/857a2f-3288-467e-b043-2431e6ba6311/1/cubnJdWPECc7XTLQsGOQ3dhCTXM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/857a2f-3288-467e-b043-2431e6ba6311/1/cubnJdWPECc7XTLQsGOQ3dhCTXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:28:14:30:8b:49:58:0a:ec:08:3d:d4:9c:10:d1:65:b1:16:
38:20:38:a2:32:ea:3c:3b:74:e0:a7:e7:b2:b3:f4:5f:3f:6a:
40:ca:2c:56:fb:6a:5c:e2:e9:dc:37:f6:2d:af:fc:27:08:f2:
44:6a:3f:d8:c2:c0:84:82:ef:fe:0b:f3:0a:9f:0a:26:e1:2c:
35:b9:5b:c1:22:f4:c2:20:a7:d8:5e:8b:42:b5:34:a5:e0:a8:
98:c1:67:37:18:fa:01:5b:ec:c0:77:f3:7d:34:4f:8f:60:dc:
8e:69:04:a3:e1:40:be:92:f9:77:1c:a6:c8:ee:c8:0e:77:80:
05:f5:9f:f3:93:e1:1b:5b:b2:be:bd:65:f7:da:23:25:c4:b2:
ed:f1:5a:af:97:d6:aa:81:ca:b0:4c:f5:05:3b:42:7c:59:6a:
de:35:7a:c1:75:c9:f3:fd:31:e2:09:36:55:db:ba:57:1b:72:
8f:48:64:fe:14:56:0a:61:7e:0b:cc:d9:89:1d:c4:9e:03:4f:
b5:9a:ef:ce:75:a3:f6:3f:7e:23:80:b0:b1:13:45:61:a6:8d:
5a:99:e3:ff:93:3c:97:34:4c:de:8f:61:64:ca:57:30:a3:cb:
f9:1f:30:d6:cd:40:a0:46:b2:18:a4:b0:4f:4f:2f:72:ea:f7:
7e:82:04:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:27:32 2026 by rpki-client