Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/065dba-eef9-480d-a880-9175c8408e5e/1/cFngOgjhdBb2ZUYweYg0mZG4Si4.mft
File: cFngOgjhdBb2ZUYweYg0mZG4Si4.mft (raw, json)
Hash identifier: 026aRi7XfvQHZ42DOt1DIafJlfGPK6sMwq8oyRraGl4=
Subject key identifier: 66:85:AB:9A:2C:CC:D2:4B:F9:F5:36:A7:E1:60:09:4C:89:2B:81:24
Authority key identifier: 70:59:E0:3A:08:E1:74:16:F6:65:46:30:79:88:34:99:91:B8:4A:2E
Certificate issuer: /CN=7059e03a08e17416f66546307988349991b84a2e
Certificate serial: 01A0D1924A6373995872B08A24B95EE446E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFngOgjhdBb2ZUYweYg0mZG4Si4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/065dba-eef9-480d-a880-9175c8408e5e/1/cFngOgjhdBb2ZUYweYg0mZG4Si4.mft
Manifest number: 1A6D
Signing time: Thu 24 Sep 2026 04:00:20 +0000
Manifest this update: Thu 24 Sep 2026 04:00:20 +0000
Manifest next update: Fri 25 Sep 2026 04:00:20 +0000
Files and hashes: 1: CYB5NwO37zuvRkWMcW3-BtkYVGo.roa (hash: LInHSGK/8qAq0sJn+JLYwieGEDcam0azNXlnsLsToP8=)
2: _GSS7SJcNRk5v2vKpj-91_QngG8.roa (hash: WRLHRWQSGtnWOjdrbpDdHkWnLB1hXZNo4bQD6Y6g7rg=)
3: cFngOgjhdBb2ZUYweYg0mZG4Si4.crl (hash: BOlMJynpkxizBiwkmGJ+coRwzgL8IZStnUxywuX9C7g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/065dba-eef9-480d-a880-9175c8408e5e/1/cFngOgjhdBb2ZUYweYg0mZG4Si4.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/065dba-eef9-480d-a880-9175c8408e5e/1/cFngOgjhdBb2ZUYweYg0mZG4Si4.mft
rsync://rpki.ripe.net/repository/DEFAULT/cFngOgjhdBb2ZUYweYg0mZG4Si4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:92:4a:63:73:99:58:72:b0:8a:24:b9:5e:e4:46:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7059e03a08e17416f66546307988349991b84a2e
Validity
Not Before: Sep 24 04:00:20 2026 GMT
Not After : Sep 25 04:00:20 2026 GMT
Subject: CN=6685ab9a2cccd24bf9f536a7e160094c892b8124
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:5e:f4:81:f3:9b:bf:2c:9b:b1:e8:77:cb:01:
cc:94:0f:2d:de:2d:09:7f:22:92:0a:cc:1f:3e:2e:
35:71:03:17:e9:02:3f:d9:c5:b9:cf:4d:48:c7:38:
e1:ff:ce:11:cc:11:eb:bb:cf:ef:cb:2e:42:98:b7:
08:4b:20:ba:a1:e8:c5:26:78:15:d4:cd:f7:9e:22:
2a:31:ed:9e:41:86:d6:e1:aa:ec:d7:ce:e2:cf:c6:
64:04:9e:e4:f5:eb:66:4d:42:4b:8b:98:ca:d5:ae:
f6:21:cd:bf:2f:33:50:a2:dc:2e:38:25:73:16:d7:
df:26:71:bb:41:ad:5d:bf:13:7f:0a:98:19:b0:5d:
63:fa:a2:c1:2e:4d:1a:4a:91:69:4d:b5:76:94:94:
38:9f:94:b9:bb:2f:e1:3c:2b:92:f8:b4:df:c9:eb:
18:85:cf:47:f1:c4:e4:be:3b:d3:c2:14:dc:ee:69:
30:ec:8b:21:4c:26:c4:d7:4b:7a:cb:72:f4:ea:32:
37:23:40:32:e4:ce:53:0a:05:3e:44:e2:7b:c2:c9:
c3:e8:fd:97:7a:c9:04:ca:86:cb:5f:94:19:bd:49:
99:c0:06:d6:e0:b0:32:ae:05:3d:3b:24:da:2f:14:
af:8c:00:76:70:7e:26:0f:c1:44:64:27:54:94:74:
43:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:85:AB:9A:2C:CC:D2:4B:F9:F5:36:A7:E1:60:09:4C:89:2B:81:24
X509v3 Authority Key Identifier:
keyid:70:59:E0:3A:08:E1:74:16:F6:65:46:30:79:88:34:99:91:B8:4A:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFngOgjhdBb2ZUYweYg0mZG4Si4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/065dba-eef9-480d-a880-9175c8408e5e/1/cFngOgjhdBb2ZUYweYg0mZG4Si4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/065dba-eef9-480d-a880-9175c8408e5e/1/cFngOgjhdBb2ZUYweYg0mZG4Si4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:2d:33:91:32:15:b1:5b:8a:ba:5f:3e:74:9a:e7:02:76:2c:
23:51:92:0f:cf:7f:c5:88:68:74:ca:5a:cb:55:60:e8:66:9e:
e1:99:98:7a:89:9d:9c:88:73:91:e9:9a:c0:17:53:48:56:42:
97:80:f7:17:53:f6:19:cc:5c:51:4f:6a:7a:66:a2:6a:2f:52:
05:2e:1c:06:4b:df:bf:cb:bc:7e:40:20:4d:8a:ff:07:21:16:
9e:c4:22:bd:53:b8:74:38:aa:eb:e7:b6:e7:06:f6:95:49:c3:
7e:98:a9:7e:8f:d5:02:c1:8d:40:7c:d1:8b:e5:6d:6f:27:fa:
21:b1:b6:f9:f1:23:17:85:72:4f:65:c1:35:0e:fd:dc:51:06:
c3:ec:c3:12:77:4d:89:09:6b:1e:f7:ab:16:1e:d3:96:65:a7:
9b:c1:f8:30:65:bb:cc:bc:5a:b4:00:22:84:6d:94:c2:7e:4f:
6d:d4:ac:57:27:7c:ba:bc:8a:17:dc:4a:9a:8f:84:f1:c9:c0:
d3:5a:4d:71:74:cb:86:ad:ea:3a:35:64:06:b6:33:ff:54:6f:
57:88:68:24:57:01:9b:c0:7c:3b:a4:ba:db:cc:91:e8:08:31:
f4:54:ec:40:d1:a9:8b:a5:ff:a8:54:1e:db:27:c3:6c:cf:f0:
c9:d6:a1:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 06:18:55 2026 by rpki-client