Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/29678f-c605-4655-9359-10fedccd2924/1/cG_6qbf85AgnGBpaoKzumaRmkVY.mft
File: cG_6qbf85AgnGBpaoKzumaRmkVY.mft (raw, json)
Hash identifier: 37NNagN1tp6SGnil/LCcJMw8h23W9PxptvcSIj0m8iE=
Subject key identifier: 2E:3F:48:BE:90:CB:3A:90:17:84:8E:ED:39:36:11:2F:A6:C9:B3:5C
Authority key identifier: 70:6F:FA:A9:B7:FC:E4:08:27:18:1A:5A:A0:AC:EE:99:A4:66:91:56
Certificate issuer: /CN=706ffaa9b7fce40827181a5aa0acee99a4669156
Certificate serial: 019D9C2C67C7EA0FF923D563E1CD6A16EA8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cG_6qbf85AgnGBpaoKzumaRmkVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/29678f-c605-4655-9359-10fedccd2924/1/cG_6qbf85AgnGBpaoKzumaRmkVY.mft
Manifest number: 0E07
Signing time: Fri 17 Apr 2026 16:00:48 +0000
Manifest this update: Fri 17 Apr 2026 16:00:48 +0000
Manifest next update: Sat 18 Apr 2026 16:00:48 +0000
Files and hashes: 1: cG_6qbf85AgnGBpaoKzumaRmkVY.crl (hash: ILPM/Rzpfs5kvX0y2oZgvXZVTkQJrq3REoNQCcljNUM=)
2: eYoEpqe4Uv6U3Q-JThdm1cZns_c.roa (hash: 10KRq+2t5E30gi8VhOOLk5+bD9qKlbZmUWl2P2qS7Vw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/29678f-c605-4655-9359-10fedccd2924/1/cG_6qbf85AgnGBpaoKzumaRmkVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/29678f-c605-4655-9359-10fedccd2924/1/cG_6qbf85AgnGBpaoKzumaRmkVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/cG_6qbf85AgnGBpaoKzumaRmkVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:2c:67:c7:ea:0f:f9:23:d5:63:e1:cd:6a:16:ea:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=706ffaa9b7fce40827181a5aa0acee99a4669156
Validity
Not Before: Apr 17 16:00:48 2026 GMT
Not After : Apr 18 16:00:48 2026 GMT
Subject: CN=2e3f48be90cb3a9017848eed3936112fa6c9b35c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4c:4d:7e:90:e8:1d:f8:fd:72:4c:0d:3b:93:
5e:8f:bb:3e:1f:09:9c:80:76:58:1c:aa:da:5c:8c:
2e:0a:d3:c4:98:c1:90:8f:36:c7:41:91:16:db:8b:
56:0f:89:57:47:0f:24:c3:a5:c0:64:8c:05:e3:94:
3e:95:20:61:60:be:ab:24:cd:7a:ac:6b:fb:cc:0c:
6e:4c:11:28:32:a4:5c:4c:78:4d:5a:1c:18:d2:bc:
b7:4a:b2:2d:8e:9c:0e:e9:9e:7c:4f:26:7e:6b:fd:
5d:df:57:cf:ff:05:86:0d:21:96:4b:eb:bb:cb:67:
61:d5:1f:2a:43:03:d6:a1:3a:27:4b:c4:c1:60:5a:
2c:71:98:09:5e:75:de:0f:e4:60:96:4e:7d:67:d7:
1d:d9:8e:98:65:36:b5:bc:e8:99:de:93:35:cc:5e:
87:3f:10:cd:16:5a:c5:99:00:60:72:8b:55:9a:3a:
dd:51:a0:4c:4d:15:f8:12:e9:d8:a6:5e:32:ed:1a:
19:f0:4f:f9:21:64:61:2b:19:a7:e1:8d:f5:de:a3:
20:27:a7:c8:be:4b:a8:de:14:b4:46:a0:0d:82:7a:
d7:5b:1a:1f:02:11:82:ce:7a:57:94:6e:3b:a6:b2:
f0:18:6c:7c:8a:15:68:7f:ba:d8:2b:f8:f9:db:c5:
05:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:3F:48:BE:90:CB:3A:90:17:84:8E:ED:39:36:11:2F:A6:C9:B3:5C
X509v3 Authority Key Identifier:
keyid:70:6F:FA:A9:B7:FC:E4:08:27:18:1A:5A:A0:AC:EE:99:A4:66:91:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cG_6qbf85AgnGBpaoKzumaRmkVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/29678f-c605-4655-9359-10fedccd2924/1/cG_6qbf85AgnGBpaoKzumaRmkVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/29678f-c605-4655-9359-10fedccd2924/1/cG_6qbf85AgnGBpaoKzumaRmkVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:9a:bb:87:6a:09:55:4b:b7:5e:1b:3c:7e:cf:24:a6:bf:d8:
9a:ed:d5:e0:3d:6c:79:ff:50:01:2a:86:f9:8a:58:80:c2:79:
87:a3:84:6e:ec:85:70:66:ab:b0:a0:b3:08:f4:2c:a4:24:c1:
67:b1:6d:49:f0:b5:d9:0d:0a:1b:7a:72:58:84:30:55:c6:3c:
84:51:02:56:9c:7a:4f:cb:79:4f:4f:6f:88:4a:0f:e2:61:79:
bf:df:bf:60:7c:03:3e:62:cd:eb:15:4f:f7:70:f9:c6:35:46:
ef:cc:3b:3b:95:2a:06:e7:59:f3:b5:99:7c:ab:61:a4:3c:e0:
ae:3b:5d:6f:2c:ac:00:05:f2:b0:27:b5:fa:fb:91:0a:9d:49:
2c:48:4f:0c:98:a5:d1:48:1c:9d:fa:0a:b8:92:24:a6:31:8c:
f3:cb:f7:be:aa:95:b1:44:e6:55:c1:30:e0:34:d2:d9:a1:bc:
8e:26:fb:0a:54:9c:14:f5:61:7d:b6:de:cd:e5:3c:0a:3a:4a:
73:46:ee:01:72:3b:51:79:7e:fe:12:d7:d7:dc:14:51:1a:a5:
f1:2c:86:ca:03:37:f5:26:fa:e2:69:25:26:be:a6:ea:a6:42:
56:7b:2e:61:3f:34:3b:4a:72:0f:a7:fd:e1:34:49:b0:e2:99:
6e:02:37:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2cLGfH6g/5I9Vj4c1qFuqMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwNmZmYWE5YjdmY2U0MDgyNzE4MWE1YWEwYWNlZTk5YTQ2
NjkxNTYwHhcNMjYwNDE3MTYwMDQ4WhcNMjYwNDE4MTYwMDQ4WjAzMTEwLwYDVQQD
EygyZTNmNDhiZTkwY2IzYTkwMTc4NDhlZWQzOTM2MTEyZmE2YzliMzVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUxNfpDoHfj9ckwNO5Nej7s+Hwmc
gHZYHKraXIwuCtPEmMGQjzbHQZEW24tWD4lXRw8kw6XAZIwF45Q+lSBhYL6rJM16
rGv7zAxuTBEoMqRcTHhNWhwY0ry3SrItjpwO6Z58TyZ+a/1d31fP/wWGDSGWS+u7
y2dh1R8qQwPWoTonS8TBYFoscZgJXnXeD+Rglk59Z9cd2Y6YZTa1vOiZ3pM1zF6H
PxDNFlrFmQBgcotVmjrdUaBMTRX4EunYpl4y7RoZ8E/5IWRhKxmn4Y313qMgJ6fI
vkuo3hS0RqANgnrXWxofAhGCznpXlG47prLwGGx8ihVof7rYK/j528UFXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC4/SL6QyzqQF4SO7Tk2ES+mybNcMB8GA1UdIwQY
MBaAFHBv+qm3/OQIJxgaWqCs7pmkZpFWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0dfNnFiZjg1QWduR0JwYW9LenVtYVJta1ZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS8yOTY3OGYtYzYwNS00NjU1LTkzNTkt
MTBmZWRjY2QyOTI0LzEvY0dfNnFiZjg1QWduR0JwYW9LenVtYVJta1ZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS8yOTY3OGYtYzYwNS00NjU1LTkzNTktMTBmZWRjY2QyOTI0
LzEvY0dfNnFiZjg1QWduR0JwYW9LenVtYVJta1ZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFpq7h2oJ
VUu3Xhs8fs8kpr/Ymu3V4D1sef9QASqG+YpYgMJ5h6OEbuyFcGarsKCzCPQspCTB
Z7FtSfC12Q0KG3pyWIQwVcY8hFECVpx6T8t5T09viEoP4mF5v9+/YHwDPmLN6xVP
93D5xjVG78w7O5UqBudZ87WZfKthpDzgrjtdbyysAAXysCe1+vuRCp1JLEhPDJil
0UgcnfoKuJIkpjGM88v3vqqVsUTmVcEw4DTS2aG8jib7ClScFPVhfbbezeU8CjpK
c0buAXI7UXl+/hLX19wUURql8SyGygM39Sb64mklJr6m6qZCVnsuYT80O0pyD6f9
4TRJsOKZbgI3Hg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 23:05:32 2026 by rpki-client