Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/a6dae8-d98e-4aa0-b4ad-4281e38a9bf2/1/cgxjI89zCTCgOw5EYH9v7fUnqMQ.mft
File: cgxjI89zCTCgOw5EYH9v7fUnqMQ.mft (raw, json)
Hash identifier: rHNqR5+lIbfPZCDLEFEjKwJmjbPE8Z7p27Lkl2FAMDU=
Subject key identifier: 91:CA:AF:C0:7F:87:C6:17:D2:0B:40:C9:90:5E:33:92:77:A3:4B:65
Authority key identifier: 72:0C:63:23:CF:73:09:30:A0:3B:0E:44:60:7F:6F:ED:F5:27:A8:C4
Certificate issuer: /CN=720c6323cf730930a03b0e44607f6fedf527a8c4
Certificate serial: 019CAD909123DC76D31FAF167D87D692317F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgxjI89zCTCgOw5EYH9v7fUnqMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/a6dae8-d98e-4aa0-b4ad-4281e38a9bf2/1/cgxjI89zCTCgOw5EYH9v7fUnqMQ.mft
Manifest number: 0164
Signing time: Mon 02 Mar 2026 08:00:58 +0000
Manifest this update: Mon 02 Mar 2026 08:00:58 +0000
Manifest next update: Tue 03 Mar 2026 08:00:58 +0000
Files and hashes: 1: cgxjI89zCTCgOw5EYH9v7fUnqMQ.crl (hash: 9Fv6V7717GS7jTazd87ZOmkG4jo/zzmSpQ/fy8jn+0U=)
2: xEYU-K7wenXyYwuEUiZnmFrMZac.roa (hash: gWNLlP9RhlookRQsci7JBvafArIbz1TL4llsI2fvdA0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/a6dae8-d98e-4aa0-b4ad-4281e38a9bf2/1/cgxjI89zCTCgOw5EYH9v7fUnqMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/a6dae8-d98e-4aa0-b4ad-4281e38a9bf2/1/cgxjI89zCTCgOw5EYH9v7fUnqMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/cgxjI89zCTCgOw5EYH9v7fUnqMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:91:23:dc:76:d3:1f:af:16:7d:87:d6:92:31:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=720c6323cf730930a03b0e44607f6fedf527a8c4
Validity
Not Before: Mar 2 08:00:58 2026 GMT
Not After : Mar 3 08:00:58 2026 GMT
Subject: CN=91caafc07f87c617d20b40c9905e339277a34b65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:98:a9:85:3c:50:79:58:43:39:54:b2:f1:3c:
9d:98:e6:f9:cc:20:40:c5:58:a4:3b:70:f7:2f:0a:
ef:e3:3e:f7:c7:b0:8a:3b:6c:b9:ed:02:10:05:37:
56:ec:ca:0b:dc:55:aa:21:5d:4b:f2:25:41:fb:52:
77:21:12:b2:7a:45:b7:97:e5:16:84:c3:72:1d:06:
71:13:26:be:35:b8:03:61:c7:da:32:fd:c9:50:60:
1e:b5:17:68:1e:b9:2d:5f:44:f7:95:d7:7e:09:b0:
c4:aa:75:06:37:8b:19:65:15:5b:c6:b4:81:59:0b:
d8:46:31:61:2b:fa:96:5d:6c:e3:1d:37:a0:88:c1:
30:10:db:3b:a2:06:b3:2b:c6:53:04:04:a5:90:eb:
9c:dd:fd:f9:c1:0b:d1:cd:82:1c:31:9f:9b:77:c5:
c6:c4:f8:fd:08:79:8b:54:5d:ca:86:07:6d:4a:d9:
62:00:dd:8f:67:90:8e:94:34:43:2c:08:e9:a9:08:
93:e9:59:90:fb:61:c8:c8:a4:85:2e:35:87:16:64:
5e:b2:21:57:8f:c4:3a:e6:0a:f1:bd:19:60:43:6b:
f3:83:7b:58:88:c7:64:1f:65:2f:7f:c8:9d:86:12:
40:35:0e:d8:6b:5c:62:22:84:fa:f2:3b:59:40:8b:
ea:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:CA:AF:C0:7F:87:C6:17:D2:0B:40:C9:90:5E:33:92:77:A3:4B:65
X509v3 Authority Key Identifier:
keyid:72:0C:63:23:CF:73:09:30:A0:3B:0E:44:60:7F:6F:ED:F5:27:A8:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgxjI89zCTCgOw5EYH9v7fUnqMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a6dae8-d98e-4aa0-b4ad-4281e38a9bf2/1/cgxjI89zCTCgOw5EYH9v7fUnqMQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a6dae8-d98e-4aa0-b4ad-4281e38a9bf2/1/cgxjI89zCTCgOw5EYH9v7fUnqMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:82:98:ca:6e:1d:c5:ff:b4:5b:fc:e5:2c:91:99:f7:fc:cf:
fc:2d:a7:98:d3:5b:26:00:65:c9:c2:e4:54:78:8a:63:88:be:
31:9e:70:a1:0e:b8:d3:fc:37:d4:2a:60:d7:69:f1:8f:b1:26:
8e:d8:5f:18:c8:0e:7e:a0:d9:a6:04:6e:4d:81:d1:26:0b:de:
9c:ea:a5:6d:26:2a:f9:33:52:e1:83:25:0a:78:30:6a:08:5d:
17:1a:78:21:6e:b7:4e:16:77:3f:14:f8:f2:e6:df:eb:3d:6a:
89:ae:44:e0:2c:50:3b:e0:e5:9e:bf:2b:fa:5d:39:0c:2d:85:
d6:12:b7:78:2e:55:f2:4e:a3:df:dd:e8:28:98:55:7c:8f:1d:
a2:1a:64:f3:42:b6:f6:dc:43:ae:4f:7f:b2:94:b8:59:f1:37:
e7:fb:8f:3c:5f:27:73:50:fc:4f:42:46:e7:c9:f1:be:ee:9b:
40:a6:5e:78:33:bb:31:b1:ff:26:f7:48:7f:56:e7:ee:01:19:
76:cc:ff:58:cd:05:01:33:30:d5:3d:06:7f:0c:91:b4:64:75:
00:a8:68:d5:61:8f:9f:fc:1c:90:a3:d7:b9:5b:e3:2d:44:bf:
e6:f2:b3:57:e3:a3:a8:ff:22:e9:4b:8c:e9:14:56:ca:e3:4a:
48:95:fd:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:02:12 2026 by rpki-client