Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/60/2e18f7-09c7-45b1-bcb7-9f6686e42800/1/Cga2XLuXZnq9_5uGGiL50B0dRss.mft
File: Cga2XLuXZnq9_5uGGiL50B0dRss.mft (raw, json)
Hash identifier: NNMj4UG8xkLyqNBK5s0rqPf6Tn+OsVflGVF3YxTCTpA=
Subject key identifier: 10:9A:CA:20:79:B5:0F:43:08:A6:74:0E:3A:81:1B:53:A7:E6:29:28
Authority key identifier: 0A:06:B6:5C:BB:97:66:7A:BD:FF:9B:86:1A:22:F9:D0:1D:1D:46:CB
Certificate issuer: /CN=0a06b65cbb97667abdff9b861a22f9d01d1d46cb
Certificate serial: 01A0C47C9325335356FAA93FF81BF24C70A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cga2XLuXZnq9_5uGGiL50B0dRss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/2e18f7-09c7-45b1-bcb7-9f6686e42800/1/Cga2XLuXZnq9_5uGGiL50B0dRss.mft
Manifest number: 1A66
Signing time: Mon 21 Sep 2026 15:01:33 +0000
Manifest this update: Mon 21 Sep 2026 15:01:33 +0000
Manifest next update: Tue 22 Sep 2026 15:01:33 +0000
Files and hashes: 1: Cga2XLuXZnq9_5uGGiL50B0dRss.crl (hash: N/JpnDIqPVt9SfnrZzZt3MeG/SgClK4njLeEh/4/LuE=)
2: RpFgP93ClwNM-ocN6qvLfic7DMs.roa (hash: 5S/X3det1+F3wpDnXO5aEBYjQHz6Mc8fd6NBqHj9aKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/2e18f7-09c7-45b1-bcb7-9f6686e42800/1/Cga2XLuXZnq9_5uGGiL50B0dRss.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/2e18f7-09c7-45b1-bcb7-9f6686e42800/1/Cga2XLuXZnq9_5uGGiL50B0dRss.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cga2XLuXZnq9_5uGGiL50B0dRss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:7c:93:25:33:53:56:fa:a9:3f:f8:1b:f2:4c:70:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a06b65cbb97667abdff9b861a22f9d01d1d46cb
Validity
Not Before: Sep 21 15:01:33 2026 GMT
Not After : Sep 22 15:01:33 2026 GMT
Subject: CN=109aca2079b50f4308a6740e3a811b53a7e62928
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:6a:17:29:9e:85:93:04:d0:5e:d8:d6:dd:35:
9c:49:90:2f:d8:8d:5d:41:d2:d8:3c:e8:c2:7d:45:
03:bc:3e:1d:59:75:68:f2:92:b1:cc:39:62:0d:85:
98:6b:e8:cc:4d:99:ef:d9:38:4f:92:f3:1f:0f:65:
26:ab:80:1e:37:6e:7e:8c:41:7f:44:f9:29:29:fb:
95:10:aa:f9:c5:90:98:51:e9:fa:85:82:f8:0f:dd:
b1:6b:0b:2f:c0:7a:ef:de:30:e0:d4:eb:ce:b1:e2:
40:6c:58:86:ac:73:80:d6:06:ba:4f:57:f6:93:cc:
34:af:a5:63:e5:54:9a:05:44:cc:9b:e8:eb:59:35:
70:4b:96:60:b2:cb:11:cf:c4:d4:d6:f1:38:80:8e:
7b:fd:e4:a1:6e:3c:87:60:a9:2c:b0:92:1e:e2:98:
67:54:c2:48:e1:66:6d:85:66:f0:51:ef:83:dc:64:
3c:9a:c1:8b:98:65:13:f6:79:09:99:ea:7e:c9:68:
d0:d3:78:98:d5:d7:ce:0c:72:38:39:86:a7:a6:bc:
c2:29:22:07:a4:f8:e2:04:93:59:0a:81:f5:14:0f:
b6:b3:3c:e6:1c:37:19:01:b1:5d:64:56:7a:cc:fa:
0b:39:79:23:2c:5a:79:03:e5:62:3d:c9:4e:9b:8b:
18:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:9A:CA:20:79:B5:0F:43:08:A6:74:0E:3A:81:1B:53:A7:E6:29:28
X509v3 Authority Key Identifier:
keyid:0A:06:B6:5C:BB:97:66:7A:BD:FF:9B:86:1A:22:F9:D0:1D:1D:46:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cga2XLuXZnq9_5uGGiL50B0dRss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2e18f7-09c7-45b1-bcb7-9f6686e42800/1/Cga2XLuXZnq9_5uGGiL50B0dRss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2e18f7-09c7-45b1-bcb7-9f6686e42800/1/Cga2XLuXZnq9_5uGGiL50B0dRss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:d1:6f:09:b8:37:97:19:d9:45:6c:77:97:34:ba:07:ed:cd:
15:6b:22:14:28:f9:0c:c9:45:df:c5:b3:85:bb:37:c8:60:b0:
5f:49:16:f5:3d:d2:53:f9:a9:3a:96:34:eb:00:93:1a:fe:91:
29:21:3e:ee:b8:b6:7a:7a:4d:ba:d2:61:06:65:52:62:91:02:
61:bc:51:d1:d8:51:4f:8e:ea:b8:41:51:f6:9a:fb:99:04:37:
3f:03:11:91:5d:a7:3e:24:73:f9:2d:49:74:f9:b8:8a:71:c7:
6c:13:b1:4d:75:a5:76:83:89:47:3c:7a:fc:5f:a4:30:dd:55:
ee:54:b4:7b:08:e9:08:c0:00:ad:17:22:81:85:d6:6c:52:a4:
b9:9c:0b:12:67:26:5e:70:1a:94:92:ce:a6:82:3f:e6:15:56:
25:07:22:f7:82:10:fa:d4:32:f0:9d:e4:78:37:d0:c6:39:c1:
7a:14:1b:ac:34:13:df:17:bb:36:a7:a1:de:6d:ce:07:2a:4f:
c1:f7:34:f0:b4:fb:65:24:52:79:13:64:15:3d:f6:cd:50:85:
3e:9e:8d:a3:c3:e8:a9:89:59:03:eb:e7:7f:fc:5d:e9:68:e4:
2f:5b:71:f3:2c:24:21:7e:33:0d:73:2f:af:36:e0:80:ab:65:
a4:1a:d4:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:15:43 2026 by rpki-client