Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/065dba-eef9-480d-a880-9175c8408e5e/1/cFngOgjhdBb2ZUYweYg0mZG4Si4.mft
File: cFngOgjhdBb2ZUYweYg0mZG4Si4.mft (raw, json)
Hash identifier: uXr5IuwADZuTBzbEpUiKgo/bhesFNck78Z5ER3TmIF8=
Subject key identifier: AF:FA:B6:6D:86:3E:34:9F:A5:CE:AC:31:55:40:89:99:DA:EE:00:5A
Authority key identifier: 70:59:E0:3A:08:E1:74:16:F6:65:46:30:79:88:34:99:91:B8:4A:2E
Certificate issuer: /CN=7059e03a08e17416f66546307988349991b84a2e
Certificate serial: 019ED5AC79CE8593016FAAE77D091F2D8D60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFngOgjhdBb2ZUYweYg0mZG4Si4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/065dba-eef9-480d-a880-9175c8408e5e/1/cFngOgjhdBb2ZUYweYg0mZG4Si4.mft
Manifest number: 1966
Signing time: Wed 17 Jun 2026 13:01:50 +0000
Manifest this update: Wed 17 Jun 2026 13:01:50 +0000
Manifest next update: Thu 18 Jun 2026 13:01:50 +0000
Files and hashes: 1: CYB5NwO37zuvRkWMcW3-BtkYVGo.roa (hash: LInHSGK/8qAq0sJn+JLYwieGEDcam0azNXlnsLsToP8=)
2: _GSS7SJcNRk5v2vKpj-91_QngG8.roa (hash: WRLHRWQSGtnWOjdrbpDdHkWnLB1hXZNo4bQD6Y6g7rg=)
3: cFngOgjhdBb2ZUYweYg0mZG4Si4.crl (hash: 03sFTuDGUCL6IcwH1KXDaYh3pPIS1qRJEuJHXNUHuD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/065dba-eef9-480d-a880-9175c8408e5e/1/cFngOgjhdBb2ZUYweYg0mZG4Si4.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/065dba-eef9-480d-a880-9175c8408e5e/1/cFngOgjhdBb2ZUYweYg0mZG4Si4.mft
rsync://rpki.ripe.net/repository/DEFAULT/cFngOgjhdBb2ZUYweYg0mZG4Si4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 08:33:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d5:ac:79:ce:85:93:01:6f:aa:e7:7d:09:1f:2d:8d:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7059e03a08e17416f66546307988349991b84a2e
Validity
Not Before: Jun 17 13:01:50 2026 GMT
Not After : Jun 18 13:01:50 2026 GMT
Subject: CN=affab66d863e349fa5ceac3155408999daee005a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:44:27:71:90:b4:1d:55:9f:95:96:be:5d:e1:
93:ea:6d:b0:c3:48:e9:60:c3:8e:63:fd:94:ed:5a:
cf:bb:f3:be:e2:18:31:8e:0c:95:e3:f2:00:e8:fd:
45:a1:3f:fe:e9:e3:11:25:51:34:c9:83:16:4f:d0:
8c:53:ca:4f:3b:17:0f:e1:28:00:0b:0d:af:45:0b:
d2:a8:a3:31:a0:21:b8:ce:2d:9e:ba:fa:c6:2b:c1:
f5:66:02:e4:0f:ec:df:c1:e9:f5:87:6b:b7:32:01:
69:66:76:5b:6e:9c:83:8a:ee:30:1d:89:95:a9:aa:
69:9f:dc:d0:1e:13:47:6d:1e:f2:c3:ca:f6:d2:85:
31:76:32:a2:49:4e:ae:6b:b5:df:09:de:06:20:83:
cd:fd:67:ce:1a:02:1d:94:6a:a6:98:7d:d2:f4:ea:
04:8c:b6:ed:f9:6f:3e:ef:ba:84:ae:93:0c:2e:d0:
16:dc:91:00:84:68:0b:6e:d2:4e:96:3c:ee:8a:6d:
30:5c:33:82:99:eb:fc:0f:22:fe:7b:c1:2b:04:dc:
3c:11:9a:4e:99:6c:c7:d6:bf:2e:cb:26:a4:bd:0e:
dd:6e:47:5f:f1:31:71:22:1d:84:59:b3:f4:1e:de:
33:56:ae:4a:32:a7:fc:e5:6a:a5:51:7b:4f:0f:ca:
67:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:FA:B6:6D:86:3E:34:9F:A5:CE:AC:31:55:40:89:99:DA:EE:00:5A
X509v3 Authority Key Identifier:
keyid:70:59:E0:3A:08:E1:74:16:F6:65:46:30:79:88:34:99:91:B8:4A:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFngOgjhdBb2ZUYweYg0mZG4Si4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/065dba-eef9-480d-a880-9175c8408e5e/1/cFngOgjhdBb2ZUYweYg0mZG4Si4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/065dba-eef9-480d-a880-9175c8408e5e/1/cFngOgjhdBb2ZUYweYg0mZG4Si4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:da:60:e0:27:38:fd:f1:a1:c0:18:7f:f5:7b:0d:66:f6:d0:
a0:6a:90:73:25:27:ec:0b:b9:09:d0:c7:12:69:54:83:37:87:
91:98:05:3c:0c:d7:c6:8c:93:f5:a1:67:b2:a6:bd:72:01:b2:
30:6f:b6:71:68:4d:a1:d8:27:a5:1a:97:55:5b:98:82:4c:42:
40:4a:d9:c7:c2:89:05:b5:27:a8:cc:55:bf:4c:dd:d8:1f:ef:
20:77:04:e1:9a:1b:1c:0e:24:e8:78:ed:3f:e1:b3:d5:db:04:
97:e3:8e:c9:cf:b6:ce:56:83:e1:1d:19:bd:d6:87:9d:4b:35:
c6:69:0d:8b:d9:85:f4:6e:56:ca:df:95:d5:84:b7:60:1b:4d:
a2:b3:f0:9c:3a:b9:c9:f2:4a:10:7a:51:a5:7d:17:d8:74:a3:
92:a5:3c:cc:b0:59:44:d8:8c:5d:45:50:99:df:53:b8:bb:0b:
ad:95:3b:55:61:f1:3d:bc:72:0d:22:96:5f:52:96:d9:7b:8a:
42:53:49:36:75:f5:c7:13:e1:46:b8:35:f5:d7:96:99:31:b7:
40:35:f9:fd:d2:ee:b6:7e:52:bf:30:62:58:02:42:d7:17:dc:
d0:c3:98:a2:9d:be:68:e0:46:67:ea:5f:ec:af:1a:d2:03:0c:
15:db:bb:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 15:35:20 2026 by rpki-client