Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/cgSGQdj3M3_OojrlMyv24RoR4io.mft
File: cgSGQdj3M3_OojrlMyv24RoR4io.mft (raw, json)
Hash identifier: A4QKFdaTvu165/L6Akm6/0Caif1ju8hm+zLfqan2ri8=
Subject key identifier: 3F:26:D9:F6:56:DD:07:7E:C9:F4:8D:1C:FC:5D:48:05:80:1A:5C:85
Authority key identifier: 72:04:86:41:D8:F7:33:7F:CE:A2:3A:E5:33:2B:F6:E1:1A:11:E2:2A
Certificate issuer: /CN=72048641d8f7337fcea23ae5332bf6e11a11e22a
Certificate serial: 019EC36E49F17605FB0865EB163D255E8E6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgSGQdj3M3_OojrlMyv24RoR4io.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/cgSGQdj3M3_OojrlMyv24RoR4io.mft
Manifest number: 18EF
Signing time: Sun 14 Jun 2026 00:00:45 +0000
Manifest this update: Sun 14 Jun 2026 00:00:45 +0000
Manifest next update: Mon 15 Jun 2026 00:00:45 +0000
Files and hashes: 1: Jl68zYVqXRal67PopoREeqdxbg8.roa (hash: xD50qSlfLrwmHdVWTozHtqTpDA+X5IuU1okzXOkjlqM=)
2: UKyAXaXI_RgZmsQiZ2Wkng394Hs.roa (hash: cJqApiAQC0vkIOP1XsZGHhIZOCWBHw73NHuSL/144Ig=)
3: cgSGQdj3M3_OojrlMyv24RoR4io.crl (hash: hWdqNyiMVZjBeQvyv+ZaePJ9NKgV30H/wz1cCv2/ank=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/cgSGQdj3M3_OojrlMyv24RoR4io.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/cgSGQdj3M3_OojrlMyv24RoR4io.mft
rsync://rpki.ripe.net/repository/DEFAULT/cgSGQdj3M3_OojrlMyv24RoR4io.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:6e:49:f1:76:05:fb:08:65:eb:16:3d:25:5e:8e:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72048641d8f7337fcea23ae5332bf6e11a11e22a
Validity
Not Before: Jun 14 00:00:45 2026 GMT
Not After : Jun 15 00:00:45 2026 GMT
Subject: CN=3f26d9f656dd077ec9f48d1cfc5d4805801a5c85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:02:dd:58:32:03:c7:8d:c5:66:83:3e:19:09:
60:63:23:e9:3b:4b:84:a4:0f:62:12:11:71:ec:77:
39:85:40:8c:b1:bf:33:c7:bd:ba:76:38:a1:71:7f:
81:d9:5a:8d:1f:6d:1e:29:fe:9a:bb:5c:fb:29:3d:
16:f3:77:f4:17:fe:46:47:e4:a6:23:26:a3:b2:46:
30:cb:30:20:de:a7:dc:7a:c3:aa:b5:4c:7f:9c:71:
26:ae:cd:a4:5b:62:d9:64:d0:37:67:0c:76:38:8e:
65:dd:aa:1b:e3:3b:5c:23:b8:9f:a0:84:f5:d6:3d:
8b:b9:53:57:9a:e6:07:9a:61:4e:a6:5d:35:36:03:
99:30:30:a7:37:87:0e:f1:6a:54:dd:21:93:ad:0e:
91:f4:26:fe:2e:67:c9:18:16:c2:2b:a0:0e:d1:0f:
77:16:77:5d:97:7d:be:d8:70:80:62:ae:bf:a7:c2:
5f:05:75:5c:bc:c8:21:47:70:46:bc:f0:0d:24:f3:
11:8a:aa:7a:b7:c1:32:08:49:39:e7:e8:6e:28:ae:
cb:4d:49:72:ba:72:78:3a:e3:df:20:85:5d:a0:d7:
6b:c4:c5:ce:1b:f3:fb:7e:70:cd:c6:08:c6:b0:ab:
af:06:1e:c7:e1:b6:a5:bd:cb:15:5c:c4:b8:67:dc:
ee:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:26:D9:F6:56:DD:07:7E:C9:F4:8D:1C:FC:5D:48:05:80:1A:5C:85
X509v3 Authority Key Identifier:
keyid:72:04:86:41:D8:F7:33:7F:CE:A2:3A:E5:33:2B:F6:E1:1A:11:E2:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgSGQdj3M3_OojrlMyv24RoR4io.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/cgSGQdj3M3_OojrlMyv24RoR4io.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/cgSGQdj3M3_OojrlMyv24RoR4io.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:66:0f:cc:5a:d9:50:b5:e4:cc:68:75:92:87:9f:1a:5e:9f:
1f:9e:0c:58:82:b7:3b:1b:c7:85:f2:64:4b:7f:d5:43:2e:6e:
85:19:68:90:f2:bf:3f:0c:bb:69:a3:8b:81:d0:ba:2d:12:5b:
69:8c:25:af:54:d8:23:65:1e:e9:aa:5a:e4:c8:73:66:53:32:
23:82:dc:c6:03:ef:4e:ef:77:6f:11:98:b9:97:b6:f3:35:c0:
a2:5f:6a:fa:e7:7f:ac:2a:1d:db:98:89:96:10:29:c3:6d:92:
77:28:c0:9f:d4:fe:26:be:9f:2c:bc:ce:49:74:a2:95:bd:3c:
ec:09:78:24:9b:db:99:30:e4:69:8d:d0:6f:be:24:97:0e:e2:
24:65:75:d9:c8:25:95:6d:bf:a6:44:de:5e:c0:53:37:0d:93:
ac:96:d2:1f:81:8a:e0:35:be:d1:84:2c:0d:f6:f9:d5:b9:8e:
b6:6b:02:45:2c:cc:d7:a6:c3:bd:3d:27:df:75:bd:e8:32:79:
23:17:53:0f:21:c0:77:47:65:73:f3:25:d0:b7:c6:68:69:ac:
31:ef:c3:6d:39:46:5c:ca:73:85:f9:8f:d2:67:36:4a:03:06:
4b:ba:93:9a:31:30:e9:9e:41:38:86:9a:fb:cd:f3:87:95:eb:
21:b8:15:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7DbknxdgX7CGXrFj0lXo5qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ4NjQxZDhmNzMzN2ZjZWEyM2FlNTMzMmJmNmUxMWEx
MWUyMmEwHhcNMjYwNjE0MDAwMDQ1WhcNMjYwNjE1MDAwMDQ1WjAzMTEwLwYDVQQD
EygzZjI2ZDlmNjU2ZGQwNzdlYzlmNDhkMWNmYzVkNDgwNTgwMWE1Yzg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswLdWDIDx43FZoM+GQlgYyPpO0uE
pA9iEhFx7Hc5hUCMsb8zx726djihcX+B2VqNH20eKf6au1z7KT0W83f0F/5GR+Sm
IyajskYwyzAg3qfcesOqtUx/nHEmrs2kW2LZZNA3Zwx2OI5l3aob4ztcI7ifoIT1
1j2LuVNXmuYHmmFOpl01NgOZMDCnN4cO8WpU3SGTrQ6R9Cb+LmfJGBbCK6AO0Q93
Fnddl32+2HCAYq6/p8JfBXVcvMghR3BGvPANJPMRiqp6t8EyCEk55+huKK7LTUly
unJ4OuPfIIVdoNdrxMXOG/P7fnDNxgjGsKuvBh7H4balvcsVXMS4Z9zuvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD8m2fZW3Qd+yfSNHPxdSAWAGlyFMB8GA1UdIwQY
MBaAFHIEhkHY9zN/zqI65TMr9uEaEeIqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dTR1FkajNNM19Pb2pybE15djI0Um9SNGlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9kZjM3MDYtZjM0Ny00MDI1LWE3YjMt
MWM4Y2Q1NmM2MTc0LzEvY2dTR1FkajNNM19Pb2pybE15djI0Um9SNGlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC9kZjM3MDYtZjM0Ny00MDI1LWE3YjMtMWM4Y2Q1NmM2MTc0
LzEvY2dTR1FkajNNM19Pb2pybE15djI0Um9SNGlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXmYPzFrZ
ULXkzGh1koefGl6fH54MWIK3OxvHhfJkS3/VQy5uhRlokPK/Pwy7aaOLgdC6LRJb
aYwlr1TYI2Ue6apa5MhzZlMyI4LcxgPvTu93bxGYuZe28zXAol9q+ud/rCod25iJ
lhApw22SdyjAn9T+Jr6fLLzOSXSilb087Al4JJvbmTDkaY3Qb74klw7iJGV12cgl
lW2/pkTeXsBTNw2TrJbSH4GK4DW+0YQsDfb51bmOtmsCRSzM16bDvT0n33W96DJ5
IxdTDyHAd0dlc/Ml0LfGaGmsMe/DbTlGXMpzhfmP0mc2SgMGS7qTmjEw6Z5BOIaa
+83zh5XrIbgVxg==
-----END CERTIFICATE-----
Generated at Sun Jun 14 02:53:33 2026 by rpki-client