Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/857a2f-3288-467e-b043-2431e6ba6311/1/cubnJdWPECc7XTLQsGOQ3dhCTXM.mft
File: cubnJdWPECc7XTLQsGOQ3dhCTXM.mft (raw, json)
Hash identifier: kU6rEU7OcvX9882nyAv0Vwa6JbRIrPTHnxzRVVvbvFw=
Subject key identifier: 5D:20:78:6F:18:18:E9:48:DF:92:62:99:3D:32:BF:20:A3:84:08:32
Authority key identifier: 72:E6:E7:25:D5:8F:10:27:3B:5D:32:D0:B0:63:90:DD:D8:42:4D:73
Certificate issuer: /CN=72e6e725d58f10273b5d32d0b06390ddd8424d73
Certificate serial: 019F935BB238CB1C73AD7C7EDA59272020E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cubnJdWPECc7XTLQsGOQ3dhCTXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/857a2f-3288-467e-b043-2431e6ba6311/1/cubnJdWPECc7XTLQsGOQ3dhCTXM.mft
Manifest number: 41
Signing time: Fri 24 Jul 2026 09:01:27 +0000
Manifest this update: Fri 24 Jul 2026 09:01:27 +0000
Manifest next update: Sat 25 Jul 2026 09:01:27 +0000
Files and hashes: 1: He2JlpI8ZQczhJIlNayJhBNlxwU.roa (hash: OuIaHjgCyPaNpYLqQNHE7OPzaKT6XbasSd79mJXSO/M=)
2: cubnJdWPECc7XTLQsGOQ3dhCTXM.crl (hash: d03my2eIa2wC715F+SUx0ZrxHtNzWk2btgJ4xk86Oew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/857a2f-3288-467e-b043-2431e6ba6311/1/cubnJdWPECc7XTLQsGOQ3dhCTXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/857a2f-3288-467e-b043-2431e6ba6311/1/cubnJdWPECc7XTLQsGOQ3dhCTXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/cubnJdWPECc7XTLQsGOQ3dhCTXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5b:b2:38:cb:1c:73:ad:7c:7e:da:59:27:20:20:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72e6e725d58f10273b5d32d0b06390ddd8424d73
Validity
Not Before: Jul 24 09:01:27 2026 GMT
Not After : Jul 25 09:01:27 2026 GMT
Subject: CN=5d20786f1818e948df9262993d32bf20a3840832
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:fd:21:45:89:da:fb:f0:16:86:de:fe:ee:55:
03:ad:3a:e6:98:44:4c:15:0d:b1:59:5b:28:95:09:
2a:d7:01:bb:eb:cd:11:36:3e:85:f5:77:89:fd:6b:
a8:2e:ee:e9:0a:9c:1f:88:c9:07:84:e9:20:10:47:
11:2d:b8:23:2e:d6:4c:a4:bb:d6:a1:80:e2:bf:f4:
1e:88:f8:33:99:85:12:92:b2:32:14:26:00:27:8b:
42:5d:4e:41:ab:40:00:6d:e3:a0:a7:7c:a6:51:97:
89:41:8f:66:16:43:11:0d:9a:6b:96:2b:fa:ca:61:
b8:34:dd:6d:29:93:6a:01:2e:11:3a:68:d0:9f:e7:
d2:e5:3c:0e:a5:be:37:e1:5f:82:71:8e:d6:fa:01:
81:a4:bf:f7:74:a3:1d:89:f7:de:36:87:93:da:88:
ae:0c:a1:1d:93:94:8a:3b:64:99:d3:fd:5a:cb:ec:
3a:fc:71:67:b3:72:36:67:09:75:8f:59:e1:1e:fe:
22:72:5e:a7:8c:50:99:b6:c9:ed:da:4e:6f:1c:eb:
d6:7b:77:5b:55:05:bd:26:ec:a4:f3:2a:01:44:cb:
ab:54:1f:ae:31:f5:af:3e:f6:1c:ec:bf:33:a3:30:
9a:48:d1:ce:87:59:f3:ec:6e:33:28:bb:04:3c:50:
d0:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:20:78:6F:18:18:E9:48:DF:92:62:99:3D:32:BF:20:A3:84:08:32
X509v3 Authority Key Identifier:
keyid:72:E6:E7:25:D5:8F:10:27:3B:5D:32:D0:B0:63:90:DD:D8:42:4D:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cubnJdWPECc7XTLQsGOQ3dhCTXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/857a2f-3288-467e-b043-2431e6ba6311/1/cubnJdWPECc7XTLQsGOQ3dhCTXM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/857a2f-3288-467e-b043-2431e6ba6311/1/cubnJdWPECc7XTLQsGOQ3dhCTXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:da:5b:a5:c9:8a:a8:a9:04:5e:66:af:ca:f6:bd:3a:48:9c:
e9:01:c9:56:17:37:3f:a8:80:7c:56:47:1c:1e:37:5c:44:8f:
04:21:11:5b:ea:59:fa:93:4a:f9:a6:7b:f4:fb:fb:12:98:54:
85:6b:f2:fe:d9:0f:fb:71:8f:f9:77:ae:a0:e0:f9:b9:ed:a3:
b4:67:77:7c:46:c1:3a:31:29:8a:23:3c:9e:70:72:a8:d2:06:
f0:79:a6:9c:97:27:bd:aa:d0:2d:ea:29:72:92:3b:ed:e4:5e:
a0:5a:09:11:1f:5a:70:2d:79:79:b9:d1:f9:b9:55:85:f0:17:
c7:de:29:cc:56:3f:3b:1c:b9:18:dd:c0:5c:a1:7c:42:a1:64:
e2:ac:7f:d4:17:9c:b5:5d:9c:98:d2:94:92:27:70:f7:85:7e:
4b:a8:a1:b7:30:ed:14:c1:a0:49:aa:49:a5:70:ee:a9:ec:25:
52:19:fd:76:5d:d8:8c:72:bd:4a:dd:cc:af:06:93:a7:89:99:
61:af:aa:d9:72:9d:8a:55:1a:68:ab:ed:44:71:56:1a:35:1d:
75:c2:04:8f:e7:0d:e6:4c:bd:ec:b1:00:23:23:ec:f8:d1:d0:
e4:04:18:98:9b:c7:8d:9c:27:cb:db:fc:11:7b:87:97:d3:95:
dd:58:06:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:12:03 2026 by rpki-client