Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/cgSGQdj3M3_OojrlMyv24RoR4io.mft
File: cgSGQdj3M3_OojrlMyv24RoR4io.mft (raw, json)
Hash identifier: zrK09gZhwZm3geM+ztYw6VZm8B8z4r7Z/iHXz8tbJic=
Subject key identifier: 6A:FB:52:CB:1F:83:D0:84:E2:04:BA:3F:08:E0:A3:19:EE:D8:00:36
Authority key identifier: 72:04:86:41:D8:F7:33:7F:CE:A2:3A:E5:33:2B:F6:E1:1A:11:E2:2A
Certificate issuer: /CN=72048641d8f7337fcea23ae5332bf6e11a11e22a
Certificate serial: 019FAB2CBCCF8A893635D603480673319722
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgSGQdj3M3_OojrlMyv24RoR4io.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/cgSGQdj3M3_OojrlMyv24RoR4io.mft
Manifest number: 1967
Signing time: Wed 29 Jul 2026 00:01:03 +0000
Manifest this update: Wed 29 Jul 2026 00:01:03 +0000
Manifest next update: Thu 30 Jul 2026 00:01:03 +0000
Files and hashes: 1: Jl68zYVqXRal67PopoREeqdxbg8.roa (hash: xD50qSlfLrwmHdVWTozHtqTpDA+X5IuU1okzXOkjlqM=)
2: UKyAXaXI_RgZmsQiZ2Wkng394Hs.roa (hash: cJqApiAQC0vkIOP1XsZGHhIZOCWBHw73NHuSL/144Ig=)
3: cgSGQdj3M3_OojrlMyv24RoR4io.crl (hash: 1ItBpPw2a9Q5JSrKgP8YwljsWbgAfjvvzUoQ5Ok0G0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/cgSGQdj3M3_OojrlMyv24RoR4io.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/cgSGQdj3M3_OojrlMyv24RoR4io.mft
rsync://rpki.ripe.net/repository/DEFAULT/cgSGQdj3M3_OojrlMyv24RoR4io.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 00:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:2c:bc:cf:8a:89:36:35:d6:03:48:06:73:31:97:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72048641d8f7337fcea23ae5332bf6e11a11e22a
Validity
Not Before: Jul 29 00:01:03 2026 GMT
Not After : Jul 30 00:01:03 2026 GMT
Subject: CN=6afb52cb1f83d084e204ba3f08e0a319eed80036
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a2:52:45:fd:ed:3b:67:e1:c2:21:05:44:2c:
be:1c:ec:90:8b:c3:6a:b0:23:e3:1f:10:96:cc:e6:
e2:11:40:a1:ab:b1:18:90:44:09:41:b9:56:d7:38:
f5:61:d4:f4:63:72:3c:3e:01:0f:f0:57:23:18:1f:
e3:5b:ef:61:1a:ad:42:f8:de:6b:62:b1:61:ea:85:
ef:bd:b9:31:62:4e:dc:5c:02:14:54:58:00:94:10:
6f:e6:0e:c9:24:67:26:4a:4e:cb:66:bf:60:01:83:
f0:65:a3:50:87:04:e7:cc:90:30:75:f1:e5:80:61:
82:64:7b:3e:95:0e:11:f6:b9:0e:4b:0d:54:86:15:
f1:d1:a6:53:ac:f6:21:16:04:2a:e2:09:15:f1:89:
42:60:09:e2:07:7d:e2:51:0d:96:39:5e:1c:22:d6:
3d:07:5f:4b:8e:45:ac:df:29:74:5b:05:18:43:70:
6b:d6:da:13:5e:69:81:2a:ec:cc:8d:36:34:54:4c:
89:c9:bd:c3:18:00:e0:27:8d:1c:e9:0b:32:7f:7f:
19:81:8d:d4:66:44:52:8d:a1:76:c1:16:c0:64:96:
27:2e:78:32:1e:87:18:1d:94:4a:42:26:c5:b4:90:
1c:3f:dc:ed:31:ae:bd:e4:e7:f6:39:5c:c3:e3:89:
74:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:FB:52:CB:1F:83:D0:84:E2:04:BA:3F:08:E0:A3:19:EE:D8:00:36
X509v3 Authority Key Identifier:
keyid:72:04:86:41:D8:F7:33:7F:CE:A2:3A:E5:33:2B:F6:E1:1A:11:E2:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgSGQdj3M3_OojrlMyv24RoR4io.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/cgSGQdj3M3_OojrlMyv24RoR4io.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/cgSGQdj3M3_OojrlMyv24RoR4io.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:6f:5d:3b:d6:c2:58:ce:5b:83:29:9d:00:ac:a1:14:d0:82:
9d:dc:ce:ec:d3:71:7b:f0:ae:9a:a6:ce:84:94:54:6f:fb:2b:
8b:b9:b0:a3:c5:70:3e:45:72:31:36:b0:b6:17:f5:56:e8:a1:
d3:cc:74:b4:38:af:8a:65:7f:06:f7:62:c6:ec:dd:1e:e5:18:
9c:7c:5e:10:3e:ec:50:1b:01:bb:75:fb:86:17:51:95:88:db:
6c:1f:e7:54:2d:69:ca:a3:db:59:26:e1:88:ce:cc:f3:85:92:
fa:9e:db:f1:35:e4:b4:0f:1e:7d:e3:27:e1:76:7c:7d:3d:1d:
fb:43:2f:a2:d6:e9:4a:ab:22:61:92:05:b8:7d:17:33:d1:0e:
43:5d:66:ba:56:a0:cb:09:c9:c5:eb:15:74:51:e0:68:99:a0:
10:1a:60:73:c2:05:5b:40:2f:40:2a:8c:17:87:80:17:e3:64:
ac:a3:30:4a:14:9c:f1:d2:e1:56:67:33:e4:40:29:dd:3c:a5:
02:21:9d:bf:ba:9f:9c:29:e6:d8:d4:a3:f2:f7:19:65:92:35:
96:bd:9f:f5:50:eb:f6:3e:3b:28:4f:c3:e8:db:69:95:22:b0:
a8:ee:cd:75:80:8a:63:81:19:f7:82:8c:77:af:fa:55:6c:d8:
a4:f0:e8:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:13:41 2026 by rpki-client