Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/2e18f7-09c7-45b1-bcb7-9f6686e42800/1/Cga2XLuXZnq9_5uGGiL50B0dRss.mft
File: Cga2XLuXZnq9_5uGGiL50B0dRss.mft (raw, json)
Hash identifier: AzrIKKBLbAMv+BNghG+BnJCEFI0LcWnMKWkL3Bc9u/o=
Subject key identifier: CD:E7:3E:89:D1:98:0C:D0:DD:E0:46:28:14:7D:37:C7:64:20:34:76
Authority key identifier: 0A:06:B6:5C:BB:97:66:7A:BD:FF:9B:86:1A:22:F9:D0:1D:1D:46:CB
Certificate issuer: /CN=0a06b65cbb97667abdff9b861a22f9d01d1d46cb
Certificate serial: 019EBEEC59B2AF54B34DDD9D88E6AC7C9056
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cga2XLuXZnq9_5uGGiL50B0dRss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/2e18f7-09c7-45b1-bcb7-9f6686e42800/1/Cga2XLuXZnq9_5uGGiL50B0dRss.mft
Manifest number: 195A
Signing time: Sat 13 Jun 2026 03:00:20 +0000
Manifest this update: Sat 13 Jun 2026 03:00:20 +0000
Manifest next update: Sun 14 Jun 2026 03:00:20 +0000
Files and hashes: 1: Cga2XLuXZnq9_5uGGiL50B0dRss.crl (hash: EIV97tjf0H4+TIUHUDIXmP4Vts+U+/hv3vUdCc0B+rc=)
2: RpFgP93ClwNM-ocN6qvLfic7DMs.roa (hash: 5S/X3det1+F3wpDnXO5aEBYjQHz6Mc8fd6NBqHj9aKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/2e18f7-09c7-45b1-bcb7-9f6686e42800/1/Cga2XLuXZnq9_5uGGiL50B0dRss.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/2e18f7-09c7-45b1-bcb7-9f6686e42800/1/Cga2XLuXZnq9_5uGGiL50B0dRss.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cga2XLuXZnq9_5uGGiL50B0dRss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:ec:59:b2:af:54:b3:4d:dd:9d:88:e6:ac:7c:90:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a06b65cbb97667abdff9b861a22f9d01d1d46cb
Validity
Not Before: Jun 13 03:00:20 2026 GMT
Not After : Jun 14 03:00:20 2026 GMT
Subject: CN=cde73e89d1980cd0dde04628147d37c764203476
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f5:a8:02:7e:85:9d:c0:67:2f:1d:02:06:cd:
30:96:39:75:b2:c5:71:93:3c:9e:af:54:15:40:a6:
87:c2:3f:60:19:18:15:a7:9b:1a:43:96:45:b2:5f:
e7:64:30:b6:7f:d3:f2:6f:aa:8d:bf:07:4c:86:13:
4c:4b:dd:d0:ac:a2:e6:28:bf:44:f4:b6:a5:be:ee:
5c:27:3f:0d:49:b8:b7:c1:01:99:5f:a8:dc:75:f8:
d0:6e:5c:e8:7b:ae:e2:5e:0b:70:a5:d7:82:a9:d8:
43:67:c6:8c:80:ef:96:f0:b3:c4:10:e1:c3:01:2a:
f4:6c:bf:2f:95:24:40:2f:16:23:d9:36:ba:99:de:
b5:07:c0:a3:57:19:aa:4a:6c:0b:e8:97:26:b8:1f:
d7:e8:4c:34:2c:16:4d:0c:7c:a3:bd:7e:6f:f3:02:
67:3b:5e:a7:56:95:be:98:2f:24:0e:3c:f4:45:9e:
55:26:73:5d:0d:82:8b:f6:5d:f3:77:3c:9e:05:e2:
7f:e0:65:17:5f:95:5b:db:3d:08:6e:20:23:c3:a8:
18:27:fe:80:28:6b:97:7e:51:d7:51:3b:e2:ad:a3:
0f:5e:5b:f0:64:47:75:ba:09:76:3d:ee:03:a3:73:
a6:2b:73:40:18:85:46:2f:56:a9:e0:f9:0f:82:2d:
35:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:E7:3E:89:D1:98:0C:D0:DD:E0:46:28:14:7D:37:C7:64:20:34:76
X509v3 Authority Key Identifier:
keyid:0A:06:B6:5C:BB:97:66:7A:BD:FF:9B:86:1A:22:F9:D0:1D:1D:46:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cga2XLuXZnq9_5uGGiL50B0dRss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2e18f7-09c7-45b1-bcb7-9f6686e42800/1/Cga2XLuXZnq9_5uGGiL50B0dRss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2e18f7-09c7-45b1-bcb7-9f6686e42800/1/Cga2XLuXZnq9_5uGGiL50B0dRss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:79:60:ba:bd:e1:22:02:e0:33:6a:2f:34:2f:84:92:94:ae:
47:ed:3e:bc:e3:c3:b4:7e:92:59:14:21:01:f7:83:de:fb:d8:
41:19:69:25:dc:95:a9:20:84:5b:ad:70:6a:0f:3e:55:c7:95:
ab:e4:77:72:1e:5e:48:18:ef:99:31:81:b3:1b:84:88:91:de:
5d:f2:0f:3d:9f:1c:2d:b0:3d:0c:2a:64:a8:91:49:4a:82:ef:
eb:21:0b:c0:28:88:17:f9:31:69:a4:e3:39:2e:54:70:e5:dc:
82:67:8e:90:aa:00:6a:90:aa:07:99:4c:6a:ec:c4:d6:c9:14:
8c:f6:e5:b1:5b:53:5c:4b:45:e2:29:22:d5:0b:b1:93:4f:31:
69:69:11:a1:93:cf:d6:1d:7e:0b:86:a2:e2:90:46:7d:d3:03:
ce:75:45:7c:cb:38:72:e6:9b:be:8b:bc:64:98:3c:4c:33:8b:
7e:ee:7e:97:28:50:79:bf:0f:08:90:cf:72:b3:8c:76:3d:b7:
0b:17:55:9f:34:02:8d:69:49:5c:0c:5c:8b:57:f8:c9:5e:38:
b2:78:47:13:1a:dc:d6:b1:11:94:cc:0a:29:af:aa:dc:85:41:
47:09:1f:ca:23:ff:5c:73:99:16:5c:7c:50:d8:04:32:c3:87:
4d:ff:5e:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:22:18 2026 by rpki-client