Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/065dba-eef9-480d-a880-9175c8408e5e/1/cFngOgjhdBb2ZUYweYg0mZG4Si4.mft
File: cFngOgjhdBb2ZUYweYg0mZG4Si4.mft (raw, json)
Hash identifier: nyR+YsswqNNUCuQ9OA9XqIip8AttnQcSkPXU1NuTILE=
Subject key identifier: 5B:EE:78:4C:8E:99:F0:04:5B:2C:67:9E:F9:4F:6C:90:CB:07:25:DD
Authority key identifier: 70:59:E0:3A:08:E1:74:16:F6:65:46:30:79:88:34:99:91:B8:4A:2E
Certificate issuer: /CN=7059e03a08e17416f66546307988349991b84a2e
Certificate serial: 019D3A54810378351A43A6435C96C7C217EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFngOgjhdBb2ZUYweYg0mZG4Si4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/065dba-eef9-480d-a880-9175c8408e5e/1/cFngOgjhdBb2ZUYweYg0mZG4Si4.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 16:01:49 +0000
Manifest this update: Sun 29 Mar 2026 16:01:49 +0000
Manifest next update: Mon 30 Mar 2026 16:01:49 +0000
Files and hashes: 1: CYB5NwO37zuvRkWMcW3-BtkYVGo.roa (hash: LInHSGK/8qAq0sJn+JLYwieGEDcam0azNXlnsLsToP8=)
2: _GSS7SJcNRk5v2vKpj-91_QngG8.roa (hash: WRLHRWQSGtnWOjdrbpDdHkWnLB1hXZNo4bQD6Y6g7rg=)
3: cFngOgjhdBb2ZUYweYg0mZG4Si4.crl (hash: DvBvAvOQncI6J8sT9JrNHOvJAY5hJoifYwItvtSLcCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/065dba-eef9-480d-a880-9175c8408e5e/1/cFngOgjhdBb2ZUYweYg0mZG4Si4.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/065dba-eef9-480d-a880-9175c8408e5e/1/cFngOgjhdBb2ZUYweYg0mZG4Si4.mft
rsync://rpki.ripe.net/repository/DEFAULT/cFngOgjhdBb2ZUYweYg0mZG4Si4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:54:81:03:78:35:1a:43:a6:43:5c:96:c7:c2:17:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7059e03a08e17416f66546307988349991b84a2e
Validity
Not Before: Mar 29 16:01:49 2026 GMT
Not After : Mar 30 16:01:49 2026 GMT
Subject: CN=5bee784c8e99f0045b2c679ef94f6c90cb0725dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:87:f7:a0:db:50:b4:1a:33:7d:c4:a2:da:ad:
4c:5a:97:34:97:73:ba:cc:a2:69:c1:e8:c9:fd:44:
d7:ec:49:a1:44:eb:90:96:03:46:5f:34:2e:a4:b0:
86:10:61:5d:64:ad:55:9c:0a:b4:36:5d:45:25:d0:
05:b2:19:cd:cd:8b:fc:c5:7c:22:31:59:61:93:c9:
9f:25:83:9a:6c:c5:53:c9:bb:c7:15:7f:f0:c1:4a:
49:fe:46:6b:2f:b4:a4:68:a0:ed:56:76:80:fe:b4:
93:ea:11:f7:7e:d0:c4:13:f5:40:f2:22:30:2e:4f:
4d:ba:d2:56:37:f3:b3:c1:24:eb:75:09:bd:4b:8e:
74:c1:ff:17:16:0b:c2:33:e6:27:a8:9a:7c:10:5f:
cf:69:0c:01:55:ec:e2:8f:39:48:3c:12:8b:bd:c5:
ef:e3:f9:c0:cf:a9:31:93:07:25:a2:a9:bc:64:01:
3b:fa:bc:51:51:9a:dd:dc:c6:d8:10:18:2d:fc:39:
4f:f8:0b:ef:aa:92:db:7e:bc:0b:ff:ca:30:72:e4:
6e:73:81:99:84:df:eb:9c:25:77:b3:6a:c4:80:b7:
52:51:f3:31:a8:7f:54:53:94:99:78:bd:4e:74:5f:
4a:bc:b9:be:51:61:20:1f:04:59:44:7b:8d:40:87:
89:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:EE:78:4C:8E:99:F0:04:5B:2C:67:9E:F9:4F:6C:90:CB:07:25:DD
X509v3 Authority Key Identifier:
keyid:70:59:E0:3A:08:E1:74:16:F6:65:46:30:79:88:34:99:91:B8:4A:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFngOgjhdBb2ZUYweYg0mZG4Si4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/065dba-eef9-480d-a880-9175c8408e5e/1/cFngOgjhdBb2ZUYweYg0mZG4Si4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/065dba-eef9-480d-a880-9175c8408e5e/1/cFngOgjhdBb2ZUYweYg0mZG4Si4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:ce:ca:b3:02:9e:6a:4c:ac:e9:e6:be:9d:c6:c1:eb:35:cc:
c2:a7:22:d4:41:d5:dd:c9:5a:e2:2e:b0:71:b0:d2:59:77:69:
09:36:21:04:41:57:09:cf:1d:fe:82:ae:56:6f:a1:05:e0:85:
65:6a:55:27:11:d6:3d:10:df:aa:a2:11:68:fe:00:ef:3a:3f:
34:cb:f1:0a:47:ea:20:17:d7:c4:81:50:04:dd:e7:dd:31:82:
13:51:0e:76:67:f7:15:75:0f:61:ac:98:0a:28:f8:af:24:aa:
8a:6e:71:c0:97:c8:b7:cc:b2:b1:6b:a9:9e:57:7a:09:cd:90:
8f:4c:78:72:b4:ea:7e:07:96:32:92:e9:ad:ff:15:bf:5f:2c:
4f:a1:0a:3d:9e:4f:d5:44:1d:13:a6:17:f1:15:b0:94:a8:c9:
b0:f2:00:a7:2b:52:2f:e4:a5:fd:41:2b:6a:c6:0b:c3:b9:5e:
a3:fe:5d:2b:cb:79:2e:df:c0:1e:b7:c0:8a:be:4e:a3:a4:1d:
ad:c8:cb:f2:b3:72:80:32:e8:9d:eb:37:f1:2d:ef:66:4b:8a:
f6:3d:9f:0f:d4:40:b4:ec:e7:bd:aa:b7:0f:fb:00:80:fe:82:
c3:66:21:e6:dc:7e:b8:52:ce:1b:03:a6:d7:82:de:5b:a2:5a:
64:37:4b:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 21:09:30 2026 by rpki-client