Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/065dba-eef9-480d-a880-9175c8408e5e/1/cFngOgjhdBb2ZUYweYg0mZG4Si4.mft
File: cFngOgjhdBb2ZUYweYg0mZG4Si4.mft (raw, json)
Hash identifier: odlNX0JL9gUO1M9RWdzfAg7lZM29QxKMsdZW7LjhJkY=
Subject key identifier: A1:24:69:73:58:F3:3F:81:75:D9:9A:9B:4B:60:C8:07:14:AD:A1:F4
Authority key identifier: 70:59:E0:3A:08:E1:74:16:F6:65:46:30:79:88:34:99:91:B8:4A:2E
Certificate issuer: /CN=7059e03a08e17416f66546307988349991b84a2e
Certificate serial: 019D9AE386B2E81220161D95A5698F85053A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFngOgjhdBb2ZUYweYg0mZG4Si4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/065dba-eef9-480d-a880-9175c8408e5e/1/cFngOgjhdBb2ZUYweYg0mZG4Si4.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 10:01:35 +0000
Manifest this update: Fri 17 Apr 2026 10:01:35 +0000
Manifest next update: Sat 18 Apr 2026 10:01:35 +0000
Files and hashes: 1: CYB5NwO37zuvRkWMcW3-BtkYVGo.roa (hash: LInHSGK/8qAq0sJn+JLYwieGEDcam0azNXlnsLsToP8=)
2: _GSS7SJcNRk5v2vKpj-91_QngG8.roa (hash: WRLHRWQSGtnWOjdrbpDdHkWnLB1hXZNo4bQD6Y6g7rg=)
3: cFngOgjhdBb2ZUYweYg0mZG4Si4.crl (hash: bLN7UuF6YEGqGKH4EdNqksYV2ZwgOzmezJYGlhV+reI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/065dba-eef9-480d-a880-9175c8408e5e/1/cFngOgjhdBb2ZUYweYg0mZG4Si4.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/065dba-eef9-480d-a880-9175c8408e5e/1/cFngOgjhdBb2ZUYweYg0mZG4Si4.mft
rsync://rpki.ripe.net/repository/DEFAULT/cFngOgjhdBb2ZUYweYg0mZG4Si4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:86:b2:e8:12:20:16:1d:95:a5:69:8f:85:05:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7059e03a08e17416f66546307988349991b84a2e
Validity
Not Before: Apr 17 10:01:35 2026 GMT
Not After : Apr 18 10:01:35 2026 GMT
Subject: CN=a124697358f33f8175d99a9b4b60c80714ada1f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:9a:10:78:1b:64:cc:74:87:36:0a:38:59:ed:
71:dc:37:ca:d3:2f:7d:6b:a9:e9:c0:13:dd:4d:a5:
29:1c:9f:64:54:c0:80:dc:a2:1c:b7:85:6b:18:b8:
b8:1d:3c:94:a1:ac:3c:77:86:92:bc:d5:1e:75:c0:
91:6f:1a:dd:89:27:20:74:54:99:3d:44:cd:68:04:
5d:56:9d:dd:42:7a:e8:80:a5:72:79:64:0e:0f:f4:
41:7f:7f:36:4d:50:74:6c:a1:9b:09:5d:9a:be:4a:
bc:3c:c6:4a:f9:b5:28:be:76:1f:0e:05:99:21:ae:
62:ce:f5:02:89:fe:24:e3:1e:ee:eb:09:5f:23:32:
c1:76:38:8a:f9:ce:47:eb:f7:11:de:82:17:7b:75:
81:46:a7:70:51:d0:ee:40:ed:7c:a5:a1:3a:6a:0a:
b5:53:c2:4a:2d:f2:f6:69:aa:9c:a9:d2:58:03:c8:
35:6d:b7:6c:99:65:b6:01:33:82:da:e3:11:bf:77:
0e:c3:5a:49:ea:10:42:e2:d7:f5:20:31:41:11:aa:
25:d0:41:38:ad:12:e3:1c:5a:6f:fa:9f:a2:b5:e2:
14:39:5d:05:f1:7c:06:36:c6:a4:53:6b:cb:6e:69:
5e:b8:3e:0f:12:32:2c:63:e0:89:c0:de:d4:8a:46:
1c:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:24:69:73:58:F3:3F:81:75:D9:9A:9B:4B:60:C8:07:14:AD:A1:F4
X509v3 Authority Key Identifier:
keyid:70:59:E0:3A:08:E1:74:16:F6:65:46:30:79:88:34:99:91:B8:4A:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFngOgjhdBb2ZUYweYg0mZG4Si4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/065dba-eef9-480d-a880-9175c8408e5e/1/cFngOgjhdBb2ZUYweYg0mZG4Si4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/065dba-eef9-480d-a880-9175c8408e5e/1/cFngOgjhdBb2ZUYweYg0mZG4Si4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:14:92:2f:e3:ad:36:c0:2f:13:17:24:da:f5:77:2e:2e:8a:
66:2a:bc:6a:e3:86:81:65:ca:97:a8:24:54:61:f6:59:53:ba:
95:6d:f7:4f:c1:1d:00:b8:8e:10:c1:13:a9:b4:17:c5:e9:ea:
f3:84:37:58:b2:22:17:1e:7b:93:29:67:f7:bc:2e:38:05:eb:
c3:00:ab:a6:06:06:b0:b1:49:ed:34:05:ba:ce:2a:ee:ad:80:
5e:25:7a:7b:1b:c9:6b:ad:b7:41:a4:2a:a0:75:ee:0d:0a:b0:
ad:ab:d2:37:2a:74:b4:33:7c:34:84:af:9b:e5:03:60:82:3c:
d8:c1:56:37:ad:46:2b:13:fc:15:6f:f2:9b:01:1f:8c:ff:b0:
4e:1d:71:99:11:2c:c6:5f:b0:93:ce:2c:87:83:1a:fa:e8:77:
82:5f:40:12:7e:e5:55:58:bc:f3:af:e7:65:a6:77:e1:aa:14:
b8:bf:d6:7a:a9:ee:72:b1:2c:06:a8:7f:e8:64:d5:19:a6:22:
18:bc:4e:02:53:09:ab:cb:35:9e:11:fd:94:9e:aa:ff:65:06:
6c:b7:ee:d2:d4:34:f8:45:be:09:e0:25:98:1d:d3:b8:84:78:
83:7d:fb:10:14:fb:38:c1:85:02:0d:74:a7:ad:0d:a5:55:f1:
4c:1f:8e:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:32:50 2026 by rpki-client