Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/91/857a2f-3288-467e-b043-2431e6ba6311/1/cubnJdWPECc7XTLQsGOQ3dhCTXM.mft
File: cubnJdWPECc7XTLQsGOQ3dhCTXM.mft (raw, json)
Hash identifier: xea3rxGJlgrl4SxMHh2JsmUIo64xikm2WmZLcq4n9HA=
Subject key identifier: 87:34:23:6A:A9:04:E5:5F:90:62:43:6B:12:D9:62:81:17:46:DD:5C
Authority key identifier: 72:E6:E7:25:D5:8F:10:27:3B:5D:32:D0:B0:63:90:DD:D8:42:4D:73
Certificate issuer: /CN=72e6e725d58f10273b5d32d0b06390ddd8424d73
Certificate serial: 01A106260193D64DBA615907A727789198E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cubnJdWPECc7XTLQsGOQ3dhCTXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/857a2f-3288-467e-b043-2431e6ba6311/1/cubnJdWPECc7XTLQsGOQ3dhCTXM.mft
Manifest number: 0101
Signing time: Sun 04 Oct 2026 09:01:56 +0000
Manifest this update: Sun 04 Oct 2026 09:01:56 +0000
Manifest next update: Mon 05 Oct 2026 09:01:56 +0000
Files and hashes: 1: He2JlpI8ZQczhJIlNayJhBNlxwU.roa (hash: OuIaHjgCyPaNpYLqQNHE7OPzaKT6XbasSd79mJXSO/M=)
2: cubnJdWPECc7XTLQsGOQ3dhCTXM.crl (hash: i/gMoIsU3Zr8Eg7E4q346FgmbIS2SQcspEEovQeBNLk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/857a2f-3288-467e-b043-2431e6ba6311/1/cubnJdWPECc7XTLQsGOQ3dhCTXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/857a2f-3288-467e-b043-2431e6ba6311/1/cubnJdWPECc7XTLQsGOQ3dhCTXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/cubnJdWPECc7XTLQsGOQ3dhCTXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 09:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:06:26:01:93:d6:4d:ba:61:59:07:a7:27:78:91:98:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72e6e725d58f10273b5d32d0b06390ddd8424d73
Validity
Not Before: Oct 4 09:01:56 2026 GMT
Not After : Oct 5 09:01:56 2026 GMT
Subject: CN=8734236aa904e55f9062436b12d962811746dd5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:0b:d0:2a:72:71:18:95:39:91:08:a9:5d:e0:
f4:6d:1f:67:af:51:68:ba:56:7a:55:39:72:58:c8:
ba:34:86:22:6f:7e:fa:29:81:65:37:dd:ad:f7:6c:
0c:89:44:91:56:fd:fd:fb:58:c3:fb:9c:1d:37:49:
a6:34:f7:29:3a:b9:e9:94:5a:4b:97:ef:42:8f:b0:
69:59:b2:c4:d0:5a:39:7f:bd:0f:3c:f1:46:e8:91:
34:10:39:93:2a:24:95:61:64:ac:04:28:76:86:84:
e8:a0:5d:31:69:8d:da:2b:d3:91:c8:e0:ac:d1:6c:
29:ee:aa:e0:ae:0b:66:1b:01:28:93:07:04:40:65:
f6:06:de:0d:e6:61:c2:30:f2:0f:de:43:8f:a8:30:
13:65:b5:eb:92:8f:ec:ed:49:29:64:d6:24:1b:a9:
9f:30:11:4c:b6:4b:ac:6d:ae:e7:08:5d:32:9d:70:
8e:5c:77:74:57:6f:c2:aa:cb:2b:4e:de:29:c4:20:
af:b4:85:59:43:ec:17:cb:2b:d6:51:22:8f:bc:54:
0d:4e:f3:bd:a2:7d:ce:75:29:4a:82:a5:22:74:fe:
4c:a8:58:77:ad:58:93:d0:cf:2e:d6:e7:b6:7d:b3:
e7:63:0b:c8:92:c4:b3:8f:5b:63:e4:16:59:c1:c9:
71:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:34:23:6A:A9:04:E5:5F:90:62:43:6B:12:D9:62:81:17:46:DD:5C
X509v3 Authority Key Identifier:
keyid:72:E6:E7:25:D5:8F:10:27:3B:5D:32:D0:B0:63:90:DD:D8:42:4D:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cubnJdWPECc7XTLQsGOQ3dhCTXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/857a2f-3288-467e-b043-2431e6ba6311/1/cubnJdWPECc7XTLQsGOQ3dhCTXM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/857a2f-3288-467e-b043-2431e6ba6311/1/cubnJdWPECc7XTLQsGOQ3dhCTXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:f8:86:4b:69:be:14:01:8e:6a:f7:0d:0b:31:d8:a8:fb:2e:
99:2e:4b:c3:3d:f8:c4:b7:d3:ee:d8:4a:10:31:42:2e:d2:1b:
0c:49:b5:39:3b:cc:77:c2:10:17:c9:e4:90:3f:d2:ac:0c:b7:
04:e1:17:49:46:12:f2:60:67:6b:1b:90:8e:0b:9f:06:b7:47:
bd:81:8e:2b:56:65:70:28:ff:0b:c3:76:90:43:8f:a2:ca:c8:
01:dc:50:3f:b0:76:7d:77:de:80:80:36:b7:7e:00:da:41:b9:
60:e4:03:97:0a:e7:f6:d8:04:b8:1b:49:e7:a3:75:34:e1:c7:
37:05:ed:c4:58:23:1b:64:b0:c1:a2:49:c1:e0:8d:8a:c0:60:
05:65:4b:fc:fc:41:42:46:ae:c5:ce:cf:a1:6d:bc:19:5f:da:
cd:39:c2:f8:46:e5:e1:4d:be:b7:a7:62:4c:64:1b:37:90:ae:
53:5d:69:d5:22:8e:04:19:ad:a4:70:57:eb:ba:0a:ea:85:0a:
18:1a:e5:b1:3c:1d:4c:bb:4f:c9:33:8c:89:63:f2:03:3b:87:
7a:b3:f5:8b:d7:c3:1c:94:78:9b:2b:0b:7a:74:68:15:79:78:
ed:01:4d:8f:7b:f5:64:3c:06:f3:23:52:fa:f1:d1:ce:4d:08:
c1:e0:75:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEGJgGT1k26YVkHpyd4kZjhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyZTZlNzI1ZDU4ZjEwMjczYjVkMzJkMGIwNjM5MGRkZDg0
MjRkNzMwHhcNMjYxMDA0MDkwMTU2WhcNMjYxMDA1MDkwMTU2WjAzMTEwLwYDVQQD
Eyg4NzM0MjM2YWE5MDRlNTVmOTA2MjQzNmIxMmQ5NjI4MTE3NDZkZDVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4AvQKnJxGJU5kQipXeD0bR9nr1Fo
ulZ6VTlyWMi6NIYib376KYFlN92t92wMiUSRVv39+1jD+5wdN0mmNPcpOrnplFpL
l+9Cj7BpWbLE0Fo5f70PPPFG6JE0EDmTKiSVYWSsBCh2hoTooF0xaY3aK9ORyOCs
0Wwp7qrgrgtmGwEokwcEQGX2Bt4N5mHCMPIP3kOPqDATZbXrko/s7UkpZNYkG6mf
MBFMtkusba7nCF0ynXCOXHd0V2/CqssrTt4pxCCvtIVZQ+wXyyvWUSKPvFQNTvO9
on3OdSlKgqUidP5MqFh3rViT0M8u1ue2fbPnYwvIksSzj1tj5BZZwclxhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIc0I2qpBOVfkGJDaxLZYoEXRt1cMB8GA1UdIwQY
MBaAFHLm5yXVjxAnO10y0LBjkN3YQk1zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3VibkpkV1BFQ2M3WFRMUXNHT1EzZGhDVFhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS84NTdhMmYtMzI4OC00NjdlLWIwNDMt
MjQzMWU2YmE2MzExLzEvY3VibkpkV1BFQ2M3WFRMUXNHT1EzZGhDVFhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS84NTdhMmYtMzI4OC00NjdlLWIwNDMtMjQzMWU2YmE2MzEx
LzEvY3VibkpkV1BFQ2M3WFRMUXNHT1EzZGhDVFhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqviGS2m+
FAGOavcNCzHYqPsumS5Lwz34xLfT7thKEDFCLtIbDEm1OTvMd8IQF8nkkD/SrAy3
BOEXSUYS8mBnaxuQjgufBrdHvYGOK1ZlcCj/C8N2kEOPosrIAdxQP7B2fXfegIA2
t34A2kG5YOQDlwrn9tgEuBtJ56N1NOHHNwXtxFgjG2SwwaJJweCNisBgBWVL/PxB
Qkauxc7PoW28GV/azTnC+Ebl4U2+t6diTGQbN5CuU11p1SKOBBmtpHBX67oK6oUK
GBrlsTwdTLtPyTOMiWPyAzuHerP1i9fDHJR4mysLenRoFXl47QFNj3v1ZDwG8yNS
+vHRzk0IweB1Qg==
-----END CERTIFICATE-----
Generated at Sun Oct 4 18:19:54 2026 by rpki-client