Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/065dba-eef9-480d-a880-9175c8408e5e/1/cFngOgjhdBb2ZUYweYg0mZG4Si4.mft
File: cFngOgjhdBb2ZUYweYg0mZG4Si4.mft (raw, json)
Hash identifier: ot+jqvEirC5oYMTCSvXjF3N//TLwTtH1hBaKmUl661M=
Subject key identifier: 6B:53:E4:1F:DC:17:00:CC:68:76:5C:6F:70:6B:A4:6B:75:99:65:EF
Authority key identifier: 70:59:E0:3A:08:E1:74:16:F6:65:46:30:79:88:34:99:91:B8:4A:2E
Certificate issuer: /CN=7059e03a08e17416f66546307988349991b84a2e
Certificate serial: 019CAD596849569F67605C9E2E40EF6FB3D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFngOgjhdBb2ZUYweYg0mZG4Si4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/065dba-eef9-480d-a880-9175c8408e5e/1/cFngOgjhdBb2ZUYweYg0mZG4Si4.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 07:00:43 +0000
Manifest this update: Mon 02 Mar 2026 07:00:43 +0000
Manifest next update: Tue 03 Mar 2026 07:00:43 +0000
Files and hashes: 1: CYB5NwO37zuvRkWMcW3-BtkYVGo.roa (hash: LInHSGK/8qAq0sJn+JLYwieGEDcam0azNXlnsLsToP8=)
2: _GSS7SJcNRk5v2vKpj-91_QngG8.roa (hash: WRLHRWQSGtnWOjdrbpDdHkWnLB1hXZNo4bQD6Y6g7rg=)
3: cFngOgjhdBb2ZUYweYg0mZG4Si4.crl (hash: HvfTc349UwkweFGFzImyGhV3lAUi429nCiU54uWi+5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/065dba-eef9-480d-a880-9175c8408e5e/1/cFngOgjhdBb2ZUYweYg0mZG4Si4.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/065dba-eef9-480d-a880-9175c8408e5e/1/cFngOgjhdBb2ZUYweYg0mZG4Si4.mft
rsync://rpki.ripe.net/repository/DEFAULT/cFngOgjhdBb2ZUYweYg0mZG4Si4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:68:49:56:9f:67:60:5c:9e:2e:40:ef:6f:b3:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7059e03a08e17416f66546307988349991b84a2e
Validity
Not Before: Mar 2 07:00:43 2026 GMT
Not After : Mar 3 07:00:43 2026 GMT
Subject: CN=6b53e41fdc1700cc68765c6f706ba46b759965ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:84:17:59:4c:a7:e5:6a:59:be:3a:34:20:f9:
fd:68:c5:72:57:72:85:82:04:23:20:95:b7:8c:e1:
07:6a:fc:b2:03:e2:5a:13:c9:4a:27:d2:8c:fa:2a:
66:92:14:31:d8:a0:b3:b5:42:64:48:79:81:16:1c:
f0:df:3b:c2:68:71:ac:6f:d7:d0:fb:ac:7c:15:85:
58:0b:41:6d:1c:c9:e1:53:c3:c4:22:ff:4d:9c:f8:
f6:08:77:ee:fe:29:2b:84:08:10:b5:6a:4e:53:06:
81:0f:36:17:ce:e0:af:96:67:80:81:c2:87:9e:51:
0a:48:d0:9b:8b:7d:66:8a:e6:8e:16:72:24:d7:30:
39:a2:b5:37:76:a0:2e:d9:92:2c:69:00:5f:67:02:
ee:40:b2:7d:48:69:83:97:aa:70:86:b1:84:44:da:
32:bb:cd:2b:c1:0e:16:b9:06:5c:ba:d1:26:0e:f6:
56:92:ed:6d:a3:36:f2:c9:57:af:8b:ae:48:2c:35:
6a:ce:01:7c:b3:9d:04:08:c2:fb:fe:94:d0:80:99:
9a:e5:09:58:78:58:80:2c:3b:89:00:12:b0:de:04:
3f:9d:92:11:e2:ea:6c:fc:e2:e9:54:61:13:ad:4a:
d7:42:9d:ac:af:1f:3c:26:c5:91:a0:ab:c4:6f:7b:
b7:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:53:E4:1F:DC:17:00:CC:68:76:5C:6F:70:6B:A4:6B:75:99:65:EF
X509v3 Authority Key Identifier:
keyid:70:59:E0:3A:08:E1:74:16:F6:65:46:30:79:88:34:99:91:B8:4A:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFngOgjhdBb2ZUYweYg0mZG4Si4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/065dba-eef9-480d-a880-9175c8408e5e/1/cFngOgjhdBb2ZUYweYg0mZG4Si4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/065dba-eef9-480d-a880-9175c8408e5e/1/cFngOgjhdBb2ZUYweYg0mZG4Si4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:69:81:dc:ad:65:fc:9e:92:23:f2:d2:c5:82:11:b1:c4:23:
ec:fb:c6:d8:d8:90:67:8d:4e:82:a0:04:57:17:6b:ba:d1:38:
fc:e9:f3:e9:94:2d:e5:1a:64:59:bf:ac:4b:ec:72:b6:57:30:
4f:b0:4f:9e:56:fe:c1:5f:46:40:45:6a:97:6d:df:0c:ec:a8:
2a:1f:8f:c8:ba:7b:a4:f7:dc:ab:3b:89:9f:fa:2c:f2:e0:2d:
32:59:71:b1:d7:2f:97:4f:bd:66:e4:da:69:4c:5e:19:73:1c:
93:93:cd:e9:6b:48:a1:2c:d7:48:5a:ed:4d:1b:3f:c2:ab:d0:
36:71:19:66:33:8f:46:6e:5e:63:64:ba:2b:97:4a:d1:c7:9f:
5a:a6:e6:e5:fa:fe:29:ec:c0:ba:db:39:a5:92:eb:d3:74:23:
e4:54:0d:1e:59:b3:89:0d:b2:47:e3:52:88:8f:6a:0c:e7:86:
b4:14:11:46:70:69:68:08:eb:0e:31:e6:ad:49:1e:11:ed:79:
ac:73:9b:97:32:7e:d0:a8:1b:49:8f:5e:33:79:4c:c1:1d:33:
9f:ce:a1:f8:e0:68:7c:10:bf:d2:5d:b3:b2:76:47:34:2c:d2:
9c:12:9f:5f:0c:99:c0:82:7e:6f:74:dc:49:ee:df:cf:1e:06:
75:26:a8:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytWWhJVp9nYFyeLkDvb7PVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwNTllMDNhMDhlMTc0MTZmNjY1NDYzMDc5ODgzNDk5OTFi
ODRhMmUwHhcNMjYwMzAyMDcwMDQzWhcNMjYwMzAzMDcwMDQzWjAzMTEwLwYDVQQD
Eyg2YjUzZTQxZmRjMTcwMGNjNjg3NjVjNmY3MDZiYTQ2Yjc1OTk2NWVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIQXWUyn5WpZvjo0IPn9aMVyV3KF
ggQjIJW3jOEHavyyA+JaE8lKJ9KM+ipmkhQx2KCztUJkSHmBFhzw3zvCaHGsb9fQ
+6x8FYVYC0FtHMnhU8PEIv9NnPj2CHfu/ikrhAgQtWpOUwaBDzYXzuCvlmeAgcKH
nlEKSNCbi31miuaOFnIk1zA5orU3dqAu2ZIsaQBfZwLuQLJ9SGmDl6pwhrGERNoy
u80rwQ4WuQZcutEmDvZWku1tozbyyVevi65ILDVqzgF8s50ECML7/pTQgJma5QlY
eFiALDuJABKw3gQ/nZIR4ups/OLpVGETrUrXQp2srx88JsWRoKvEb3u3FwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGtT5B/cFwDMaHZcb3BrpGt1mWXvMB8GA1UdIwQY
MBaAFHBZ4DoI4XQW9mVGMHmINJmRuEouMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0ZuZ09namhkQmIyWlVZd2VZZzBtWkc0U2k0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS8wNjVkYmEtZWVmOS00ODBkLWE4ODAt
OTE3NWM4NDA4ZTVlLzEvY0ZuZ09namhkQmIyWlVZd2VZZzBtWkc0U2k0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS8wNjVkYmEtZWVmOS00ODBkLWE4ODAtOTE3NWM4NDA4ZTVl
LzEvY0ZuZ09namhkQmIyWlVZd2VZZzBtWkc0U2k0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHGmB3K1l
/J6SI/LSxYIRscQj7PvG2NiQZ41OgqAEVxdrutE4/Onz6ZQt5RpkWb+sS+xytlcw
T7BPnlb+wV9GQEVql23fDOyoKh+PyLp7pPfcqzuJn/os8uAtMllxsdcvl0+9ZuTa
aUxeGXMck5PN6WtIoSzXSFrtTRs/wqvQNnEZZjOPRm5eY2S6K5dK0cefWqbm5fr+
KezAuts5pZLr03Qj5FQNHlmziQ2yR+NSiI9qDOeGtBQRRnBpaAjrDjHmrUkeEe15
rHOblzJ+0KgbSY9eM3lMwR0zn86h+OBofBC/0l2zsnZHNCzSnBKfXwyZwIJ+b3Tc
Se7fzx4GdSaoMg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:01:03 2026 by rpki-client