Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/b4daf6-448d-4f3e-944a-573ca5a609c0/1/cgmO-q6AY8rOzE8cGgtkSDu2lQM.mft
File: cgmO-q6AY8rOzE8cGgtkSDu2lQM.mft (raw, json)
Hash identifier: ax0Lo7ebghDEnCuDwLUPxdyWReltkBt8hb0YFzfighk=
Subject key identifier: 0D:25:F0:8D:36:C3:F2:C6:29:EA:B6:B0:CB:22:BF:C3:AF:BF:33:A4
Authority key identifier: 72:09:8E:FA:AE:80:63:CA:CE:CC:4F:1C:1A:0B:64:48:3B:B6:95:03
Certificate issuer: /CN=72098efaae8063cacecc4f1c1a0b64483bb69503
Certificate serial: 019CA9B3855532320F28F91B7D8396800F7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgmO-q6AY8rOzE8cGgtkSDu2lQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/b4daf6-448d-4f3e-944a-573ca5a609c0/1/cgmO-q6AY8rOzE8cGgtkSDu2lQM.mft
Manifest number: 1849
Signing time: Sun 01 Mar 2026 14:00:40 +0000
Manifest this update: Sun 01 Mar 2026 14:00:40 +0000
Manifest next update: Mon 02 Mar 2026 14:00:40 +0000
Files and hashes: 1: VMe8OCfr_t5HXDVBLz0rgr2gaks.roa (hash: MtaQQQY5h3OtFKTOTJxg1rBiAaAsL5LhtWeLWQJUvu4=)
2: cgmO-q6AY8rOzE8cGgtkSDu2lQM.crl (hash: //uvYY6gWFIxV9RPybaE1AnUV5Yn9t0W03Yxd+Qd+lA=)
3: gJdGEOm66NFVTNBH0oAB9H2an10.roa (hash: jpFzkrgSWLBJPoSMspVLyUPGM0QAIkxfsEyy3UC+Dkw=)
4: iGk2rj8YCAdm3k7BovgsXR_S-tk.roa (hash: Oc1cepzzGPdaTQr0Qpo8rTuwZycHeTEsjdA+8mq9b1M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/b4daf6-448d-4f3e-944a-573ca5a609c0/1/cgmO-q6AY8rOzE8cGgtkSDu2lQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/b4daf6-448d-4f3e-944a-573ca5a609c0/1/cgmO-q6AY8rOzE8cGgtkSDu2lQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/cgmO-q6AY8rOzE8cGgtkSDu2lQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 14:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:b3:85:55:32:32:0f:28:f9:1b:7d:83:96:80:0f:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72098efaae8063cacecc4f1c1a0b64483bb69503
Validity
Not Before: Mar 1 14:00:40 2026 GMT
Not After : Mar 2 14:00:40 2026 GMT
Subject: CN=0d25f08d36c3f2c629eab6b0cb22bfc3afbf33a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:14:ee:fa:c2:30:df:63:2f:31:e3:f2:be:d6:
07:a0:8f:91:61:b8:5b:d0:46:c8:f7:ee:aa:47:aa:
cd:73:55:71:fa:b2:0d:ff:b8:40:5f:b6:68:0e:3e:
1b:df:ec:51:72:b0:db:c7:f9:e0:1c:06:50:02:3c:
27:a2:c2:cf:82:09:17:5a:a5:a4:e5:b9:79:0d:9d:
c0:15:b1:6e:70:c6:ad:27:70:b8:10:5f:f5:c8:25:
54:fa:d7:0f:96:7d:31:bd:cd:d1:84:f2:78:a7:b7:
0c:98:07:4c:24:80:ca:0c:a6:7e:f1:06:ab:b3:4c:
ea:06:fa:66:03:79:8b:b9:45:aa:42:84:38:b9:23:
7a:97:82:d4:4f:50:a2:fb:10:ff:63:13:0c:d2:23:
de:85:80:b5:14:42:79:49:92:8e:5c:14:9c:d3:62:
4e:95:6b:4d:2f:aa:10:0b:3a:36:7d:a7:fe:6b:f1:
ba:6a:52:e6:53:5d:d6:11:1a:83:5f:36:3a:06:9a:
e2:99:97:3f:5a:dc:67:cb:5e:5b:a5:64:11:91:1e:
f9:01:00:fb:16:5c:e4:db:c4:b1:f7:be:42:6d:3f:
dc:a3:1e:73:d0:cf:a3:0a:a8:52:b9:72:54:d6:0c:
6e:19:50:85:c3:30:a9:6f:85:b9:f8:70:bc:be:ee:
e7:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:25:F0:8D:36:C3:F2:C6:29:EA:B6:B0:CB:22:BF:C3:AF:BF:33:A4
X509v3 Authority Key Identifier:
keyid:72:09:8E:FA:AE:80:63:CA:CE:CC:4F:1C:1A:0B:64:48:3B:B6:95:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgmO-q6AY8rOzE8cGgtkSDu2lQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4daf6-448d-4f3e-944a-573ca5a609c0/1/cgmO-q6AY8rOzE8cGgtkSDu2lQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4daf6-448d-4f3e-944a-573ca5a609c0/1/cgmO-q6AY8rOzE8cGgtkSDu2lQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:bb:51:93:d6:af:1a:f6:6f:2c:db:7d:47:ab:ff:1a:56:5a:
b3:d7:be:87:bf:c3:f1:2f:54:ae:a4:57:af:4c:81:b9:ed:28:
63:4d:53:2a:70:49:4e:f2:e0:1e:d6:1f:44:5c:c3:00:03:4c:
75:ca:7b:8d:cb:d7:bf:9a:2a:96:d9:9e:93:65:89:ff:88:ac:
7b:08:0c:84:c0:ab:c1:3d:89:04:b6:67:3a:aa:ba:04:7c:c5:
45:b9:56:6d:24:13:c6:3e:14:79:14:7a:fe:ea:be:74:fd:a2:
49:30:e7:e4:d5:90:c3:39:df:50:07:68:f4:78:d5:3d:a1:e0:
6c:be:a9:ed:4b:ec:e4:b2:50:0d:bc:8f:5f:83:3b:20:ce:f1:
00:87:ec:f8:35:a6:f4:e7:c6:11:d1:5c:8a:cf:d3:8c:c5:fc:
99:65:b3:ed:40:d5:0b:a9:83:1c:f7:2c:c5:79:79:52:fa:25:
3f:4f:dc:4e:a0:5a:7b:3c:19:ae:5d:68:ec:52:d8:cb:7c:f6:
2a:eb:86:07:d7:c0:bc:84:42:56:70:9a:44:b0:fe:c5:46:2a:
77:34:96:38:3a:dd:37:d4:5e:7c:9d:49:20:68:a9:40:8f:d6:
41:6b:7b:30:38:72:38:30:43:db:7f:92:0a:84:f8:a0:9f:c8:
7f:82:22:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyps4VVMjIPKPkbfYOWgA96MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDk4ZWZhYWU4MDYzY2FjZWNjNGYxYzFhMGI2NDQ4M2Ji
Njk1MDMwHhcNMjYwMzAxMTQwMDQwWhcNMjYwMzAyMTQwMDQwWjAzMTEwLwYDVQQD
EygwZDI1ZjA4ZDM2YzNmMmM2MjllYWI2YjBjYjIyYmZjM2FmYmYzM2E0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9BTu+sIw32MvMePyvtYHoI+RYbhb
0EbI9+6qR6rNc1Vx+rIN/7hAX7ZoDj4b3+xRcrDbx/ngHAZQAjwnosLPggkXWqWk
5bl5DZ3AFbFucMatJ3C4EF/1yCVU+tcPln0xvc3RhPJ4p7cMmAdMJIDKDKZ+8Qar
s0zqBvpmA3mLuUWqQoQ4uSN6l4LUT1Ci+xD/YxMM0iPehYC1FEJ5SZKOXBSc02JO
lWtNL6oQCzo2faf+a/G6alLmU13WERqDXzY6BprimZc/Wtxny15bpWQRkR75AQD7
Flzk28Sx975CbT/cox5z0M+jCqhSuXJU1gxuGVCFwzCpb4W5+HC8vu7n/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA0l8I02w/LGKeq2sMsiv8OvvzOkMB8GA1UdIwQY
MBaAFHIJjvqugGPKzsxPHBoLZEg7tpUDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dtTy1xNkFZOHJPekU4Y0dndGtTRHUybFFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9iNGRhZjYtNDQ4ZC00ZjNlLTk0NGEt
NTczY2E1YTYwOWMwLzEvY2dtTy1xNkFZOHJPekU4Y0dndGtTRHUybFFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi9iNGRhZjYtNDQ4ZC00ZjNlLTk0NGEtNTczY2E1YTYwOWMw
LzEvY2dtTy1xNkFZOHJPekU4Y0dndGtTRHUybFFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATbtRk9av
GvZvLNt9R6v/GlZas9e+h7/D8S9UrqRXr0yBue0oY01TKnBJTvLgHtYfRFzDAANM
dcp7jcvXv5oqltmek2WJ/4isewgMhMCrwT2JBLZnOqq6BHzFRblWbSQTxj4UeRR6
/uq+dP2iSTDn5NWQwznfUAdo9HjVPaHgbL6p7Uvs5LJQDbyPX4M7IM7xAIfs+DWm
9OfGEdFcis/TjMX8mWWz7UDVC6mDHPcsxXl5UvolP0/cTqBaezwZrl1o7FLYy3z2
KuuGB9fAvIRCVnCaRLD+xUYqdzSWODrdN9RefJ1JIGipQI/WQWt7MDhyODBD23+S
CoT4oJ/If4Ii9A==
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:46:34 2026 by rpki-client