Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/b4daf6-448d-4f3e-944a-573ca5a609c0/1/cgmO-q6AY8rOzE8cGgtkSDu2lQM.mft
File: cgmO-q6AY8rOzE8cGgtkSDu2lQM.mft (raw, json)
Hash identifier: OjyKBMd872S8I6+yk8y6OHn/LkvjGDb/a268740YGR8=
Subject key identifier: 96:A6:4C:64:75:81:85:B1:74:95:6D:8E:24:28:8C:A0:D6:66:A8:1B
Authority key identifier: 72:09:8E:FA:AE:80:63:CA:CE:CC:4F:1C:1A:0B:64:48:3B:B6:95:03
Certificate issuer: /CN=72098efaae8063cacecc4f1c1a0b64483bb69503
Certificate serial: 019D992B2802481B3E98081832987554424B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgmO-q6AY8rOzE8cGgtkSDu2lQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/b4daf6-448d-4f3e-944a-573ca5a609c0/1/cgmO-q6AY8rOzE8cGgtkSDu2lQM.mft
Manifest number: 18C5
Signing time: Fri 17 Apr 2026 02:00:35 +0000
Manifest this update: Fri 17 Apr 2026 02:00:35 +0000
Manifest next update: Sat 18 Apr 2026 02:00:35 +0000
Files and hashes: 1: VMe8OCfr_t5HXDVBLz0rgr2gaks.roa (hash: MtaQQQY5h3OtFKTOTJxg1rBiAaAsL5LhtWeLWQJUvu4=)
2: cgmO-q6AY8rOzE8cGgtkSDu2lQM.crl (hash: lHPrnNC7m7mr6suTHyjtoNz76hNl+VfDHJp8FzTaLHw=)
3: gJdGEOm66NFVTNBH0oAB9H2an10.roa (hash: jpFzkrgSWLBJPoSMspVLyUPGM0QAIkxfsEyy3UC+Dkw=)
4: iGk2rj8YCAdm3k7BovgsXR_S-tk.roa (hash: Oc1cepzzGPdaTQr0Qpo8rTuwZycHeTEsjdA+8mq9b1M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/b4daf6-448d-4f3e-944a-573ca5a609c0/1/cgmO-q6AY8rOzE8cGgtkSDu2lQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/b4daf6-448d-4f3e-944a-573ca5a609c0/1/cgmO-q6AY8rOzE8cGgtkSDu2lQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/cgmO-q6AY8rOzE8cGgtkSDu2lQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:28:02:48:1b:3e:98:08:18:32:98:75:54:42:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72098efaae8063cacecc4f1c1a0b64483bb69503
Validity
Not Before: Apr 17 02:00:35 2026 GMT
Not After : Apr 18 02:00:35 2026 GMT
Subject: CN=96a64c64758185b174956d8e24288ca0d666a81b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:61:be:87:9a:10:59:bc:fc:00:7f:63:9b:4c:
bd:5b:84:84:25:ef:c9:52:65:42:26:db:88:37:46:
0b:42:53:fe:90:04:22:4b:65:84:01:f4:ac:d6:c0:
77:c9:03:ff:cf:7a:18:bd:6c:e7:f2:1a:e1:ee:eb:
17:de:27:22:ff:6b:b6:ec:29:63:e8:52:71:fe:c1:
6d:a3:98:c3:88:ff:98:a9:2a:bd:1c:1a:f4:e6:cc:
48:bd:5f:0d:3d:53:d9:20:0e:de:5d:c2:b4:c9:02:
85:22:d1:c2:d2:5b:f3:f0:df:54:e1:c7:df:81:1c:
2e:92:50:ac:89:d5:3d:11:a9:48:8e:4c:b4:aa:10:
2e:b3:d5:4f:6f:88:9f:0e:59:03:69:b9:c4:a4:3f:
3f:d6:02:fe:00:94:2e:a5:45:6a:07:d3:62:51:fa:
94:5c:d3:f5:f0:8f:9c:ba:6f:5d:c5:c9:8d:50:88:
83:7a:b8:cf:1f:67:2b:d8:13:f2:5a:8b:88:0f:5d:
74:f1:a7:1c:4d:48:a7:af:22:31:55:9b:c8:09:20:
9d:71:16:58:a3:58:5a:20:88:bd:ff:68:21:01:29:
73:c5:39:71:cd:97:37:6b:e7:b2:26:0c:83:d1:dc:
3a:97:43:02:1c:25:aa:90:e3:7a:4d:1c:b3:2f:02:
07:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:A6:4C:64:75:81:85:B1:74:95:6D:8E:24:28:8C:A0:D6:66:A8:1B
X509v3 Authority Key Identifier:
keyid:72:09:8E:FA:AE:80:63:CA:CE:CC:4F:1C:1A:0B:64:48:3B:B6:95:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgmO-q6AY8rOzE8cGgtkSDu2lQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4daf6-448d-4f3e-944a-573ca5a609c0/1/cgmO-q6AY8rOzE8cGgtkSDu2lQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4daf6-448d-4f3e-944a-573ca5a609c0/1/cgmO-q6AY8rOzE8cGgtkSDu2lQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:53:9f:2b:5a:bd:a3:67:c4:a9:c7:c3:cd:bc:5c:b2:04:2a:
da:6c:cd:6d:16:b3:ca:63:62:8d:0f:09:7c:b2:9a:61:8d:09:
03:d9:fc:53:70:c2:81:0c:c3:b9:f4:74:6e:2c:08:53:82:4e:
8f:b7:dd:f9:82:a1:6d:fd:f5:b6:26:fc:2c:b2:96:fd:54:09:
7a:7a:40:79:10:38:4c:9d:d8:04:7a:aa:03:06:04:df:63:5f:
1d:20:e0:92:13:f1:2c:50:c3:82:86:70:2d:45:44:03:74:54:
97:cf:6a:d6:b4:81:ba:df:20:51:5d:25:82:f2:a8:1b:13:ef:
b0:53:31:38:4c:db:37:43:a9:06:11:8a:8c:29:e7:5e:e9:b6:
e4:7f:bd:a0:86:00:a3:c2:d0:e2:23:9d:d1:9f:52:2e:0b:95:
cb:36:f5:1d:cc:d5:91:d7:62:ad:5c:2a:a1:d7:b2:73:85:4a:
6d:e9:87:8f:3e:83:72:71:e8:89:b0:33:21:f4:35:8e:90:0f:
86:b7:0f:e3:f1:e3:98:ff:84:67:80:b8:7c:25:3e:3b:c7:f5:
41:53:df:ff:fd:3b:5f:c9:11:9f:b0:49:c0:2b:68:b2:f7:53:
c1:a4:31:5a:b4:7f:e9:ef:36:9d:62:ab:02:63:db:4e:dd:bf:
ed:2f:fb:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZKygCSBs+mAgYMph1VEJLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDk4ZWZhYWU4MDYzY2FjZWNjNGYxYzFhMGI2NDQ4M2Ji
Njk1MDMwHhcNMjYwNDE3MDIwMDM1WhcNMjYwNDE4MDIwMDM1WjAzMTEwLwYDVQQD
Eyg5NmE2NGM2NDc1ODE4NWIxNzQ5NTZkOGUyNDI4OGNhMGQ2NjZhODFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWG+h5oQWbz8AH9jm0y9W4SEJe/J
UmVCJtuIN0YLQlP+kAQiS2WEAfSs1sB3yQP/z3oYvWzn8hrh7usX3ici/2u27Clj
6FJx/sFto5jDiP+YqSq9HBr05sxIvV8NPVPZIA7eXcK0yQKFItHC0lvz8N9U4cff
gRwuklCsidU9EalIjky0qhAus9VPb4ifDlkDabnEpD8/1gL+AJQupUVqB9NiUfqU
XNP18I+cum9dxcmNUIiDerjPH2cr2BPyWouID1108accTUinryIxVZvICSCdcRZY
o1haIIi9/2ghASlzxTlxzZc3a+eyJgyD0dw6l0MCHCWqkON6TRyzLwIHrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJamTGR1gYWxdJVtjiQojKDWZqgbMB8GA1UdIwQY
MBaAFHIJjvqugGPKzsxPHBoLZEg7tpUDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dtTy1xNkFZOHJPekU4Y0dndGtTRHUybFFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9iNGRhZjYtNDQ4ZC00ZjNlLTk0NGEt
NTczY2E1YTYwOWMwLzEvY2dtTy1xNkFZOHJPekU4Y0dndGtTRHUybFFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi9iNGRhZjYtNDQ4ZC00ZjNlLTk0NGEtNTczY2E1YTYwOWMw
LzEvY2dtTy1xNkFZOHJPekU4Y0dndGtTRHUybFFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf1OfK1q9
o2fEqcfDzbxcsgQq2mzNbRazymNijQ8JfLKaYY0JA9n8U3DCgQzDufR0biwIU4JO
j7fd+YKhbf31tib8LLKW/VQJenpAeRA4TJ3YBHqqAwYE32NfHSDgkhPxLFDDgoZw
LUVEA3RUl89q1rSBut8gUV0lgvKoGxPvsFMxOEzbN0OpBhGKjCnnXum25H+9oIYA
o8LQ4iOd0Z9SLguVyzb1HczVkddirVwqodeyc4VKbemHjz6DcnHoibAzIfQ1jpAP
hrcP4/HjmP+EZ4C4fCU+O8f1QVPf//07X8kRn7BJwCtosvdTwaQxWrR/6e82nWKr
AmPbTt2/7S/7iA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:57:01 2026 by rpki-client