Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/2e18f7-09c7-45b1-bcb7-9f6686e42800/1/Cga2XLuXZnq9_5uGGiL50B0dRss.mft
File: Cga2XLuXZnq9_5uGGiL50B0dRss.mft (raw, json)
Hash identifier: Ky9A2bkXxmsN8Wj6wthfTIW5g47pfjvGOeQIQhZ9FaU=
Subject key identifier: F3:E8:4B:A0:0F:0A:46:A2:7A:4D:DF:17:6B:0E:45:45:64:09:86:40
Authority key identifier: 0A:06:B6:5C:BB:97:66:7A:BD:FF:9B:86:1A:22:F9:D0:1D:1D:46:CB
Certificate issuer: /CN=0a06b65cbb97667abdff9b861a22f9d01d1d46cb
Certificate serial: 019CA9EB221B186ADC112F2143883CB89B5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cga2XLuXZnq9_5uGGiL50B0dRss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/2e18f7-09c7-45b1-bcb7-9f6686e42800/1/Cga2XLuXZnq9_5uGGiL50B0dRss.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 15:01:25 +0000
Manifest this update: Sun 01 Mar 2026 15:01:25 +0000
Manifest next update: Mon 02 Mar 2026 15:01:25 +0000
Files and hashes: 1: Cga2XLuXZnq9_5uGGiL50B0dRss.crl (hash: wI8XSYUJnbE+fGxIssr4JWYG+roFTx/awnBnxcDP2CI=)
2: RpFgP93ClwNM-ocN6qvLfic7DMs.roa (hash: 5S/X3det1+F3wpDnXO5aEBYjQHz6Mc8fd6NBqHj9aKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/2e18f7-09c7-45b1-bcb7-9f6686e42800/1/Cga2XLuXZnq9_5uGGiL50B0dRss.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/2e18f7-09c7-45b1-bcb7-9f6686e42800/1/Cga2XLuXZnq9_5uGGiL50B0dRss.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cga2XLuXZnq9_5uGGiL50B0dRss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:eb:22:1b:18:6a:dc:11:2f:21:43:88:3c:b8:9b:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a06b65cbb97667abdff9b861a22f9d01d1d46cb
Validity
Not Before: Mar 1 15:01:25 2026 GMT
Not After : Mar 2 15:01:25 2026 GMT
Subject: CN=f3e84ba00f0a46a27a4ddf176b0e454564098640
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:34:d3:e8:6b:da:d1:5c:17:af:31:49:6d:6c:
8e:48:d6:57:bc:6f:66:36:17:46:f0:89:d2:30:11:
1d:6c:16:a9:13:b1:8c:f9:bd:f0:7c:f6:6d:ff:ff:
ec:e3:d6:0b:6c:54:a9:6d:d1:a6:49:18:e4:ef:1b:
ac:8d:d7:5b:b7:b0:b5:0f:f4:cf:a1:64:9c:f6:ee:
17:84:00:b5:ec:50:35:17:cd:22:98:dc:6e:72:a6:
f2:1a:3e:07:18:ff:ca:35:34:03:72:2f:6e:13:a6:
e3:4a:2d:01:bf:a2:55:00:df:7f:97:ad:86:46:6a:
61:19:21:14:9b:87:23:33:90:2d:52:35:41:4b:41:
b5:6a:c3:a3:51:40:da:9f:75:e5:31:5b:18:8b:2d:
1f:a6:f1:1a:26:d3:4e:22:12:8d:1b:fb:b0:47:28:
92:72:03:f6:a1:c3:98:e1:02:ec:23:75:1a:ae:ff:
02:6c:0b:b0:49:49:05:7b:63:69:ac:27:ad:09:99:
b9:02:6e:6d:e3:ea:ab:cb:3e:fb:31:c8:d5:46:4d:
ba:09:cd:82:24:b8:96:fc:6b:be:a3:e9:40:97:d9:
87:44:86:d8:12:0e:8e:34:75:53:8e:36:30:6d:57:
9f:69:18:1f:c7:3a:2f:0b:a1:e0:b7:56:08:bf:16:
f1:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:E8:4B:A0:0F:0A:46:A2:7A:4D:DF:17:6B:0E:45:45:64:09:86:40
X509v3 Authority Key Identifier:
keyid:0A:06:B6:5C:BB:97:66:7A:BD:FF:9B:86:1A:22:F9:D0:1D:1D:46:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cga2XLuXZnq9_5uGGiL50B0dRss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2e18f7-09c7-45b1-bcb7-9f6686e42800/1/Cga2XLuXZnq9_5uGGiL50B0dRss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2e18f7-09c7-45b1-bcb7-9f6686e42800/1/Cga2XLuXZnq9_5uGGiL50B0dRss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:f9:fd:74:8c:6c:77:2d:ce:05:b4:2b:5f:95:b2:56:4c:0b:
68:2f:ca:3c:be:f4:85:e0:eb:46:92:46:6e:4f:ec:2f:b4:b1:
80:49:20:1c:b9:c9:49:ad:e1:e3:62:47:c3:ba:d9:25:40:d0:
da:74:e6:71:67:80:fa:76:0d:45:f2:f0:28:4c:30:bc:eb:da:
e2:a6:8c:d6:7f:28:23:bf:eb:28:39:ce:65:e2:75:50:94:af:
5b:6c:ef:bd:96:ce:7d:08:48:f7:6f:26:ec:88:6c:4c:71:f8:
23:8c:96:41:21:fa:12:98:c8:a5:3b:01:3a:7d:39:c5:7b:e6:
01:03:52:3f:7e:70:b5:06:2c:09:e0:86:55:61:48:63:3d:3c:
73:35:91:a3:45:a0:d4:50:b5:e4:11:ed:a9:7f:93:08:cb:f8:
ef:cf:0f:19:cf:9a:a2:42:53:8b:28:f3:bb:d1:56:b9:c7:d9:
7a:ec:9e:93:34:8e:c5:12:91:d8:2b:23:0d:d6:30:bb:b7:99:
73:64:7b:20:de:2d:b0:48:06:35:5a:1a:3d:44:f0:d4:6b:db:
93:e8:f7:8f:de:66:c4:e9:c7:42:18:ab:33:f6:b1:e0:df:ba:
33:6a:c9:31:52:fe:c0:c0:26:1a:b2:f6:2f:ac:e0:ce:7f:16:
c9:2f:76:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyp6yIbGGrcES8hQ4g8uJtfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhMDZiNjVjYmI5NzY2N2FiZGZmOWI4NjFhMjJmOWQwMWQx
ZDQ2Y2IwHhcNMjYwMzAxMTUwMTI1WhcNMjYwMzAyMTUwMTI1WjAzMTEwLwYDVQQD
EyhmM2U4NGJhMDBmMGE0NmEyN2E0ZGRmMTc2YjBlNDU0NTY0MDk4NjQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAizTT6Gva0VwXrzFJbWyOSNZXvG9m
NhdG8InSMBEdbBapE7GM+b3wfPZt///s49YLbFSpbdGmSRjk7xusjddbt7C1D/TP
oWSc9u4XhAC17FA1F80imNxucqbyGj4HGP/KNTQDci9uE6bjSi0Bv6JVAN9/l62G
RmphGSEUm4cjM5AtUjVBS0G1asOjUUDan3XlMVsYiy0fpvEaJtNOIhKNG/uwRyiS
cgP2ocOY4QLsI3Uarv8CbAuwSUkFe2NprCetCZm5Am5t4+qryz77McjVRk26Cc2C
JLiW/Gu+o+lAl9mHRIbYEg6ONHVTjjYwbVefaRgfxzovC6Hgt1YIvxbxxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPPoS6APCkaiek3fF2sORUVkCYZAMB8GA1UdIwQY
MBaAFAoGtly7l2Z6vf+bhhoi+dAdHUbLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2dhMlhMdVhabnE5XzV1R0dpTDUwQjBkUnNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC8yZTE4ZjctMDljNy00NWIxLWJjYjct
OWY2Njg2ZTQyODAwLzEvQ2dhMlhMdVhabnE5XzV1R0dpTDUwQjBkUnNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC8yZTE4ZjctMDljNy00NWIxLWJjYjctOWY2Njg2ZTQyODAw
LzEvQ2dhMlhMdVhabnE5XzV1R0dpTDUwQjBkUnNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEvn9dIxs
dy3OBbQrX5WyVkwLaC/KPL70heDrRpJGbk/sL7SxgEkgHLnJSa3h42JHw7rZJUDQ
2nTmcWeA+nYNRfLwKEwwvOva4qaM1n8oI7/rKDnOZeJ1UJSvW2zvvZbOfQhI928m
7IhsTHH4I4yWQSH6EpjIpTsBOn05xXvmAQNSP35wtQYsCeCGVWFIYz08czWRo0Wg
1FC15BHtqX+TCMv4788PGc+aokJTiyjzu9FWucfZeuyekzSOxRKR2CsjDdYwu7eZ
c2R7IN4tsEgGNVoaPUTw1Gvbk+j3j95mxOnHQhirM/ax4N+6M2rJMVL+wMAmGrL2
L6zgzn8WyS921g==
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:52:35 2026 by rpki-client