Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/cgSGQdj3M3_OojrlMyv24RoR4io.mft
File: cgSGQdj3M3_OojrlMyv24RoR4io.mft (raw, json)
Hash identifier: YGPdZNl2d3a3aN7OdvqgO/MlxoGEBKtD7HYuGY80DSQ=
Subject key identifier: EA:54:21:DA:F3:E6:C2:01:FE:1B:69:10:E5:2B:FF:C8:90:22:B4:08
Authority key identifier: 72:04:86:41:D8:F7:33:7F:CE:A2:3A:E5:33:2B:F6:E1:1A:11:E2:2A
Certificate issuer: /CN=72048641d8f7337fcea23ae5332bf6e11a11e22a
Certificate serial: 019CAC7E428F6D361DA3661DDD39E8B4E316
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgSGQdj3M3_OojrlMyv24RoR4io.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/cgSGQdj3M3_OojrlMyv24RoR4io.mft
Manifest number: 17DA
Signing time: Mon 02 Mar 2026 03:01:21 +0000
Manifest this update: Mon 02 Mar 2026 03:01:21 +0000
Manifest next update: Tue 03 Mar 2026 03:01:21 +0000
Files and hashes: 1: Jl68zYVqXRal67PopoREeqdxbg8.roa (hash: xD50qSlfLrwmHdVWTozHtqTpDA+X5IuU1okzXOkjlqM=)
2: UKyAXaXI_RgZmsQiZ2Wkng394Hs.roa (hash: cJqApiAQC0vkIOP1XsZGHhIZOCWBHw73NHuSL/144Ig=)
3: cgSGQdj3M3_OojrlMyv24RoR4io.crl (hash: u8UuAN+N7rUbPctN6ypQ2viiN/eeEwfoXnbJfxcFl8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/cgSGQdj3M3_OojrlMyv24RoR4io.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/cgSGQdj3M3_OojrlMyv24RoR4io.mft
rsync://rpki.ripe.net/repository/DEFAULT/cgSGQdj3M3_OojrlMyv24RoR4io.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:42:8f:6d:36:1d:a3:66:1d:dd:39:e8:b4:e3:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72048641d8f7337fcea23ae5332bf6e11a11e22a
Validity
Not Before: Mar 2 03:01:21 2026 GMT
Not After : Mar 3 03:01:21 2026 GMT
Subject: CN=ea5421daf3e6c201fe1b6910e52bffc89022b408
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:bb:f0:8c:26:88:ec:47:1d:9a:f7:34:18:79:
bf:cf:e1:6f:3d:ae:61:80:49:4d:94:49:41:47:75:
2f:32:8b:01:57:52:93:a4:81:0c:c7:7f:89:eb:24:
48:b6:35:7c:4b:2e:0c:25:f1:c0:23:88:30:31:27:
97:5f:a3:fe:29:5a:4c:49:38:96:22:74:90:55:4c:
cd:44:be:16:80:52:e9:57:01:95:24:82:4f:6c:cc:
89:9e:27:d6:e5:a6:24:23:03:d8:78:6a:e0:2d:27:
21:e2:b7:fe:5f:24:a7:be:70:bb:ab:2e:94:fa:d2:
2c:97:ff:bd:3b:ba:68:4f:5b:e8:16:48:f0:5e:05:
ac:58:f0:e1:47:50:46:69:c5:bb:a9:62:c4:ac:2c:
66:2e:43:97:66:1a:26:78:5d:04:64:f0:5c:63:fc:
87:10:ed:9f:b5:87:1f:d2:f1:a6:5b:8e:dd:63:cd:
d6:26:61:ca:a6:2e:f2:5f:9e:19:b8:1a:63:ac:49:
b5:46:b0:07:54:e6:e6:72:7d:60:e7:e0:7a:ed:0d:
38:21:15:72:33:6c:3b:bb:f4:32:88:a4:c2:15:e1:
ed:c5:1e:65:10:28:73:78:96:5d:86:ba:a2:ee:00:
69:85:a7:1a:68:03:12:1e:b2:0e:49:58:91:14:39:
77:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:54:21:DA:F3:E6:C2:01:FE:1B:69:10:E5:2B:FF:C8:90:22:B4:08
X509v3 Authority Key Identifier:
keyid:72:04:86:41:D8:F7:33:7F:CE:A2:3A:E5:33:2B:F6:E1:1A:11:E2:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgSGQdj3M3_OojrlMyv24RoR4io.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/cgSGQdj3M3_OojrlMyv24RoR4io.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/cgSGQdj3M3_OojrlMyv24RoR4io.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:3d:e0:66:d9:48:7f:53:d4:28:ea:37:79:a2:ea:a8:61:e8:
4d:d0:40:53:8b:b2:76:3a:96:d6:66:21:0f:b2:7e:85:44:cc:
e1:9f:a6:5e:60:ba:39:8f:29:99:63:3c:2d:42:75:c5:80:f6:
91:8f:15:c7:cd:8f:2e:7c:fd:bc:ee:25:75:ea:43:06:ab:8f:
6b:fe:dd:81:0d:2d:11:28:0b:15:c1:e0:1f:2c:38:af:c3:5f:
cd:2a:dc:a4:51:53:93:c1:7f:ae:2f:62:16:78:4d:52:71:a8:
e1:75:43:57:89:5a:33:d8:f6:cf:13:79:63:a3:a2:6e:3b:a2:
1b:cd:5f:c1:63:5c:1e:b3:c9:ec:4b:d5:5a:62:6f:49:ff:7e:
12:8f:a3:ae:5e:14:a3:4e:f6:56:9a:bc:ad:df:e6:dc:17:36:
f6:d4:d1:c7:65:f9:87:06:07:06:7d:58:7b:b1:2a:c1:8a:5b:
fc:14:c7:93:ec:1a:88:b0:d9:88:9f:83:9a:3a:bc:f8:6e:32:
e9:39:89:94:a9:8c:fe:80:fc:68:cc:aa:d4:4b:74:f3:5f:95:
c3:f8:c7:99:f3:14:49:b2:0f:c8:99:da:40:0d:f5:51:4f:8a:
24:70:f1:dd:22:4c:e3:97:34:14:fd:f2:c0:7a:be:40:c4:1d:
02:9d:44:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:47:50 2026 by rpki-client