Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.mft
File: cugftc8PsyxFdfhBOsvUGqhLgvQ.mft (raw, json)
Hash identifier: sUe8scpMCUaiIZdjzeRm/CXWJCyogGh9neVaD5BNTNA=
Subject key identifier: 85:76:2D:EA:FC:86:C5:65:30:DC:D8:14:6D:4B:D4:22:00:D9:B2:2F
Authority key identifier: 72:E8:1F:B5:CF:0F:B3:2C:45:75:F8:41:3A:CB:D4:1A:A8:4B:82:F4
Certificate issuer: /CN=72e81fb5cf0fb32c4575f8413acbd41aa84b82f4
Certificate serial: 019E1DFE3331795974881D81E1410565CB70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cugftc8PsyxFdfhBOsvUGqhLgvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.mft
Manifest number: 1922
Signing time: Tue 12 May 2026 21:00:58 +0000
Manifest this update: Tue 12 May 2026 21:00:58 +0000
Manifest next update: Wed 13 May 2026 21:00:58 +0000
Files and hashes: 1: 6Ugxh09WDltBq-PpfzrzLhbUH80.roa (hash: j8DEcZp0lfE7TJG8b5DJzM36n3hCBp+lVWwIwuWquaY=)
2: cugftc8PsyxFdfhBOsvUGqhLgvQ.crl (hash: AR6NP7C3npaaZSs5yXTb6oHrBwo72xPdG7Xo8x3ulaw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/cugftc8PsyxFdfhBOsvUGqhLgvQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:33:31:79:59:74:88:1d:81:e1:41:05:65:cb:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72e81fb5cf0fb32c4575f8413acbd41aa84b82f4
Validity
Not Before: May 12 21:00:58 2026 GMT
Not After : May 13 21:00:58 2026 GMT
Subject: CN=85762deafc86c56530dcd8146d4bd42200d9b22f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:38:7e:12:63:0b:2c:d1:02:22:f5:aa:33:b8:
12:12:54:f2:cd:39:46:4e:ce:fb:05:e1:a4:05:a0:
89:84:b9:9f:70:fe:55:be:f2:04:ec:8b:04:ca:ea:
95:1f:e3:c2:0c:07:aa:38:1f:01:18:20:76:6e:a0:
ed:8c:4b:9e:0f:d2:a7:d7:d8:0f:a4:6b:64:a3:0b:
10:f6:8f:6c:2a:ae:41:89:60:b8:9f:c9:1d:f5:10:
b7:1f:9b:6e:b3:dc:94:d7:a8:39:b8:7b:82:e6:ef:
56:5b:8f:3c:7d:56:f1:c8:11:59:81:eb:ad:a2:2a:
69:e0:dc:7f:7f:d6:11:0e:7d:89:df:2a:6b:13:c9:
89:80:90:b9:ec:d5:48:e2:bf:0c:25:d8:71:f4:6d:
1f:9b:10:75:a6:7e:87:d2:e5:c2:13:fb:93:95:4e:
b5:cb:76:b1:f8:d5:82:96:1e:38:2a:0f:a0:f1:5b:
3f:73:f6:d6:22:59:96:bd:28:57:5f:8d:99:79:2e:
d8:c8:f0:d0:f8:a9:2f:3e:ba:65:80:ee:27:89:16:
e8:98:b5:53:02:45:3b:17:7c:03:72:68:0c:60:c4:
b0:ea:43:20:29:de:d4:59:aa:6a:bb:af:4a:fe:10:
a7:68:a0:03:58:cd:56:2b:e4:90:e7:f1:eb:dd:05:
eb:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:76:2D:EA:FC:86:C5:65:30:DC:D8:14:6D:4B:D4:22:00:D9:B2:2F
X509v3 Authority Key Identifier:
keyid:72:E8:1F:B5:CF:0F:B3:2C:45:75:F8:41:3A:CB:D4:1A:A8:4B:82:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cugftc8PsyxFdfhBOsvUGqhLgvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:56:00:42:99:41:d7:8a:00:66:96:3a:2f:b4:1b:a1:9a:e3:
24:61:20:5b:8d:8b:e3:a0:f6:0f:9d:a1:54:4c:38:43:55:fe:
be:c6:73:48:50:8c:5c:88:be:be:20:5d:95:a1:3c:96:e3:46:
c9:7b:15:fd:9b:2d:15:dd:9f:d9:f7:2e:b8:38:ce:c5:53:9b:
6a:83:8d:0d:9a:54:75:99:fe:7b:a4:eb:cc:97:75:48:1d:97:
6d:29:3c:31:99:0c:29:3e:f6:f1:48:95:2e:a8:d1:e7:d3:29:
fa:78:7c:29:fa:61:07:ec:57:59:b1:81:ee:07:d7:4c:5a:98:
b0:c7:54:b9:88:20:91:21:c8:08:86:9e:11:55:d1:24:18:68:
18:42:0d:00:c8:db:da:52:f2:8f:86:ff:26:f5:2e:a2:3d:21:
8d:94:7c:b6:45:7b:e0:7b:5b:f6:93:40:56:18:46:66:27:4a:
23:54:fd:c7:0a:4e:cc:18:2a:ad:b2:8f:35:3c:8e:b5:43:df:
68:24:a5:7f:1a:ee:9b:54:c1:26:d8:37:d2:bb:95:ee:0b:cd:
f9:b3:4e:6a:85:d9:6f:37:ed:5c:a6:f8:7d:48:f3:bc:90:5c:
f0:a4:89:58:a6:03:d4:be:8b:70:3c:24:b0:2d:2a:7a:f3:5f:
a2:d9:d3:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:34:06 2026 by rpki-client