Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/cgSGQdj3M3_OojrlMyv24RoR4io.mft
File: cgSGQdj3M3_OojrlMyv24RoR4io.mft (raw, json)
Hash identifier: 9bfQ/GuyM4z2ThExsfljPiL2gjZV80zHCR9K3lmyKFA=
Subject key identifier: C8:AE:43:4B:B5:0E:42:85:8A:3C:DA:AD:7D:E5:FB:C8:43:B8:95:D6
Authority key identifier: 72:04:86:41:D8:F7:33:7F:CE:A2:3A:E5:33:2B:F6:E1:1A:11:E2:2A
Certificate issuer: /CN=72048641d8f7337fcea23ae5332bf6e11a11e22a
Certificate serial: 01A12C56F44404F89A4C4D263508616D79AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgSGQdj3M3_OojrlMyv24RoR4io.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/cgSGQdj3M3_OojrlMyv24RoR4io.mft
Manifest number: 1A2F
Signing time: Sun 11 Oct 2026 19:00:58 +0000
Manifest this update: Sun 11 Oct 2026 19:00:58 +0000
Manifest next update: Mon 12 Oct 2026 19:00:58 +0000
Files and hashes: 1: Jl68zYVqXRal67PopoREeqdxbg8.roa (hash: xD50qSlfLrwmHdVWTozHtqTpDA+X5IuU1okzXOkjlqM=)
2: cgSGQdj3M3_OojrlMyv24RoR4io.crl (hash: gSFp5Rt/U0hZskr6BTyFn0zIkn9LB5NgorfxECQ2fMc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/cgSGQdj3M3_OojrlMyv24RoR4io.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/cgSGQdj3M3_OojrlMyv24RoR4io.mft
rsync://rpki.ripe.net/repository/DEFAULT/cgSGQdj3M3_OojrlMyv24RoR4io.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2c:56:f4:44:04:f8:9a:4c:4d:26:35:08:61:6d:79:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72048641d8f7337fcea23ae5332bf6e11a11e22a
Validity
Not Before: Oct 11 19:00:58 2026 GMT
Not After : Oct 12 19:00:58 2026 GMT
Subject: CN=c8ae434bb50e42858a3cdaad7de5fbc843b895d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:cc:90:38:bd:28:cd:00:52:3c:94:d8:45:28:
c9:d5:07:8f:68:75:4a:8f:7d:ce:48:7e:a6:5b:74:
ab:6f:dc:d4:2e:cb:d8:71:19:36:4d:43:2e:67:66:
82:53:13:e4:bc:b1:e5:54:cc:29:b3:15:dc:c8:e0:
3b:83:62:2c:14:d5:a4:e0:ef:da:d1:50:ad:07:1c:
02:62:71:42:01:10:a8:97:71:b2:96:86:d9:9d:a2:
6b:48:5d:0a:db:4b:dc:82:bf:07:fe:d2:f8:a1:bb:
99:52:d7:56:f2:c8:e2:c6:53:6c:68:fa:1d:63:76:
ec:dd:b6:3b:b5:36:4e:b5:2e:19:fb:40:06:a2:98:
67:51:b3:95:b9:9a:2a:fb:26:51:54:ed:6b:60:26:
41:1b:d3:58:27:0c:ee:28:32:ff:f8:b6:e9:03:ec:
c6:ca:f1:82:e8:d1:ec:6d:a2:47:f8:fe:5b:ef:83:
2a:cb:d6:96:98:e0:5d:54:75:de:fe:ee:6d:65:e1:
5e:7e:ed:6d:42:dd:25:f2:4d:eb:28:8d:b3:29:ad:
fc:62:fd:71:30:3e:fb:fd:fe:63:2d:a7:7e:c1:80:
87:48:e4:61:d7:2d:a9:9b:8a:e9:1f:81:74:81:47:
75:83:e4:e9:69:3e:44:e3:0c:d1:41:c1:e7:70:f2:
e1:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:AE:43:4B:B5:0E:42:85:8A:3C:DA:AD:7D:E5:FB:C8:43:B8:95:D6
X509v3 Authority Key Identifier:
keyid:72:04:86:41:D8:F7:33:7F:CE:A2:3A:E5:33:2B:F6:E1:1A:11:E2:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgSGQdj3M3_OojrlMyv24RoR4io.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/cgSGQdj3M3_OojrlMyv24RoR4io.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/cgSGQdj3M3_OojrlMyv24RoR4io.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:12:a0:5e:72:a2:a9:86:68:47:54:f8:5b:cf:96:1c:c8:b8:
78:e5:99:4f:0b:9b:8f:be:df:3f:96:b5:b6:f3:c9:b2:c2:9c:
50:fb:2a:88:52:85:65:22:f7:31:41:77:d0:29:d0:bb:f0:92:
a1:ca:15:5d:a4:b3:d4:b8:57:71:47:6c:19:1c:35:3a:c2:ff:
e5:e6:1f:2e:aa:49:9f:40:86:c1:73:49:37:eb:a2:cf:6b:fd:
c2:9e:c6:b9:23:f2:b1:d1:15:dc:15:c5:db:db:b0:b7:57:36:
d6:1d:6a:7a:5b:b4:11:10:ab:29:2c:22:b6:d4:a1:47:7f:7c:
c7:59:b7:ed:58:5f:72:db:8a:1c:78:b0:37:e2:87:ce:14:74:
89:49:52:de:d7:bc:16:65:39:13:20:33:5a:1b:7d:e8:55:4d:
8d:14:c6:e3:79:23:46:87:ce:7c:e7:7c:0c:75:03:b0:b0:82:
b9:e1:96:90:f7:f6:a7:5a:8c:8a:3f:b5:d9:f8:5a:a3:da:e3:
07:34:c0:c6:7a:0d:1b:2e:42:7f:e9:d9:2b:9f:80:67:c1:0e:
fe:d2:fe:21:45:29:89:b2:8a:d6:c7:f1:58:25:28:20:c8:3e:
b2:bc:3d:0e:b4:6b:ef:c4:a8:15:fa:d9:0a:db:fb:3f:0f:4c:
29:d8:06:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 23:19:21 2026 by rpki-client