Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/cgSGQdj3M3_OojrlMyv24RoR4io.mft
File: cgSGQdj3M3_OojrlMyv24RoR4io.mft (raw, json)
Hash identifier: 9ZCjGVbVMY+JJUzQbBMqKnzMXR+cy2RgnmlmFcaGSrw=
Subject key identifier: CB:34:32:BE:D3:37:DF:62:CF:D7:A4:53:28:8D:B7:2A:C8:AA:B9:2B
Authority key identifier: 72:04:86:41:D8:F7:33:7F:CE:A2:3A:E5:33:2B:F6:E1:1A:11:E2:2A
Certificate issuer: /CN=72048641d8f7337fcea23ae5332bf6e11a11e22a
Certificate serial: 019EC17FE79F4D5C8E2452CDE153B1C01DDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgSGQdj3M3_OojrlMyv24RoR4io.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/cgSGQdj3M3_OojrlMyv24RoR4io.mft
Manifest number: 18EE
Signing time: Sat 13 Jun 2026 15:00:45 +0000
Manifest this update: Sat 13 Jun 2026 15:00:45 +0000
Manifest next update: Sun 14 Jun 2026 15:00:45 +0000
Files and hashes: 1: Jl68zYVqXRal67PopoREeqdxbg8.roa (hash: xD50qSlfLrwmHdVWTozHtqTpDA+X5IuU1okzXOkjlqM=)
2: UKyAXaXI_RgZmsQiZ2Wkng394Hs.roa (hash: cJqApiAQC0vkIOP1XsZGHhIZOCWBHw73NHuSL/144Ig=)
3: cgSGQdj3M3_OojrlMyv24RoR4io.crl (hash: RuwXkfydiQY9j8gjNGEF1/G3rv9k08YGMteqX0uEcBI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/cgSGQdj3M3_OojrlMyv24RoR4io.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/cgSGQdj3M3_OojrlMyv24RoR4io.mft
rsync://rpki.ripe.net/repository/DEFAULT/cgSGQdj3M3_OojrlMyv24RoR4io.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 15:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:7f:e7:9f:4d:5c:8e:24:52:cd:e1:53:b1:c0:1d:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72048641d8f7337fcea23ae5332bf6e11a11e22a
Validity
Not Before: Jun 13 15:00:45 2026 GMT
Not After : Jun 14 15:00:45 2026 GMT
Subject: CN=cb3432bed337df62cfd7a453288db72ac8aab92b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:9e:f2:d0:85:91:56:67:20:5d:36:5b:f1:92:
c5:c2:53:02:7e:11:06:1f:9a:50:5d:97:6d:41:33:
f1:c3:94:f9:08:67:f7:67:a8:1b:03:a0:ec:b4:7c:
20:ae:dd:5a:79:c5:c3:75:63:4c:62:a5:ca:56:dd:
78:c7:48:ff:6b:85:df:2a:4c:9b:f3:b0:4f:54:4d:
d8:8e:25:a2:b9:e9:1d:7f:54:66:08:28:72:df:b4:
11:f6:53:c8:16:1a:ec:dd:11:61:e0:a4:3a:c3:dc:
28:58:90:d9:1a:5e:59:34:d7:5c:08:d4:4d:ff:b3:
e5:4b:d7:68:fa:a8:09:24:2c:6d:3d:08:22:c8:bf:
e7:d3:82:05:f2:96:f8:29:8b:70:6c:ef:4f:7b:b6:
38:4b:1c:f2:3a:fa:8a:a6:59:79:83:82:3f:60:6f:
04:fc:2e:c7:59:1c:54:d1:1b:ef:fd:dd:20:cf:4d:
e5:ba:de:5a:7d:b3:a8:62:af:59:92:90:da:7a:0e:
0c:08:6a:72:dc:ea:1f:3a:91:ef:d2:1f:93:29:61:
8b:86:dc:92:0b:1a:12:ec:4c:24:34:e6:ba:dc:93:
f4:81:17:3b:b8:37:e8:6b:e7:c2:63:f4:84:47:ec:
b1:9a:c6:ed:e7:92:92:cd:c0:fe:71:d8:3a:05:95:
70:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:34:32:BE:D3:37:DF:62:CF:D7:A4:53:28:8D:B7:2A:C8:AA:B9:2B
X509v3 Authority Key Identifier:
keyid:72:04:86:41:D8:F7:33:7F:CE:A2:3A:E5:33:2B:F6:E1:1A:11:E2:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgSGQdj3M3_OojrlMyv24RoR4io.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/cgSGQdj3M3_OojrlMyv24RoR4io.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/cgSGQdj3M3_OojrlMyv24RoR4io.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:d2:d8:9f:11:a4:9c:ce:ff:df:d4:f6:d4:7b:24:f2:68:6f:
4c:ee:7f:46:5e:81:1e:5e:49:3b:c7:24:5e:38:16:b6:28:f0:
a6:e8:15:38:38:43:03:ad:ac:62:c7:92:5c:21:f4:5d:5f:c4:
ae:dd:23:d7:51:bd:3a:8a:d9:fd:1c:07:b9:21:10:ec:b3:14:
9e:9c:c6:90:3f:cb:6e:d7:ef:cb:92:1e:30:6c:75:dc:98:b6:
c7:e5:1c:de:b8:90:74:8c:96:81:0e:e3:af:c2:43:38:6e:ca:
76:9d:e9:d5:bf:fc:22:e3:34:48:5a:30:2e:c6:16:bd:a4:4e:
6b:18:f3:04:bf:61:25:f9:7f:ad:a2:ed:5e:21:80:f5:f5:08:
62:74:08:90:a8:48:78:75:4c:65:f5:b6:5b:74:2b:23:28:28:
5f:f8:27:b5:c9:9a:c9:c6:ae:00:42:20:fe:e2:04:5a:82:74:
55:5d:d6:83:e0:bf:13:60:c2:22:0e:fa:29:f2:e4:9f:cb:56:
e7:1f:50:2d:6d:90:ab:15:63:69:3f:5f:d0:02:b6:7a:b2:76:
ae:90:94:94:69:7d:5f:df:22:12:1b:63:30:cb:80:43:5d:01:
32:ec:79:b9:6e:52:53:87:5a:37:8e:f9:f1:bc:36:25:03:bd:
ed:25:de:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:31:14 2026 by rpki-client