Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.mft
File: 1-cngMFz-1XlESHMqiwvYQnRQ2BM.mft (raw, json)
Hash identifier: FQFWArCgaWXdA+bJncUHyaGZTopVlRH8p3kWlnl9RYU=
Subject key identifier: 06:A9:01:95:3D:85:54:03:62:AA:9E:21:92:1F:66:DB:06:A1:62:70
Authority key identifier: F9:C9:E0:30:5C:FE:D5:79:44:48:73:2A:8B:0B:D8:42:74:50:D8:13
Certificate issuer: /CN=f9c9e0305cfed5794448732a8b0bd8427450d813
Certificate serial: 01A01FB039620531499974EF449A958C4460
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-cngMFz-1XlESHMqiwvYQnRQ2BM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.mft
Manifest number: 1A1C
Signing time: Thu 20 Aug 2026 15:00:37 +0000
Manifest this update: Thu 20 Aug 2026 15:00:37 +0000
Manifest next update: Fri 21 Aug 2026 15:00:37 +0000
Files and hashes: 1: 1-cngMFz-1XlESHMqiwvYQnRQ2BM.crl (hash: D86+HHBzcUd45iM73VTweQL4JAMKT4kPLIklorVUaHs=)
2: 2Bdi4XnLFiihlMAX_gDRRlR7QGM.roa (hash: VjiQO9aLNwn7skSw+PzxXhanmj53IG3y+tedhX+Sjas=)
3: 6-xQbUlUaR82Mjs6L91ilC6T9zk.roa (hash: 3yF/4C6JYKybBw99BMZ6GkxatUw24XNyWwCB72QH0u0=)
4: 7OXas1BE939lVr3MLLkFfgwwLME.roa (hash: FALGOD2pTrLC0LwxjWMNOoQIcuSrSVg8619SA2u9eio=)
5: INUpirlxyhCbq85VbAW6ztdQs4k.roa (hash: jkGGZWjPY73Dhwpc13NpoAleBEBZrvWBjPm/O8n+EJ0=)
6: OroJQKCq7I4yVcFTm6lWNUxxqrw.roa (hash: nDA5smDMOF4n6Nj5rxqPI/iYhWZmpnNfYaYuSp7sOUs=)
7: ZhkHANnwp0wI55F5kUZAa2xMrE0.roa (hash: UMOnz6djXz4C+wt70K102Br84XLLMdwFlF/5hZkaKPg=)
8: qFql76UYRJ7MqINcpO2JRQNjZJk.roa (hash: b3XQyMMRxs2maOmxKWw8Mo7+dtT/HrPvRDYI0jww5Lg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-cngMFz-1XlESHMqiwvYQnRQ2BM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 15:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1f:b0:39:62:05:31:49:99:74:ef:44:9a:95:8c:44:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9c9e0305cfed5794448732a8b0bd8427450d813
Validity
Not Before: Aug 20 15:00:37 2026 GMT
Not After : Aug 21 15:00:37 2026 GMT
Subject: CN=06a901953d85540362aa9e21921f66db06a16270
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e1:0b:56:bd:87:c2:c4:49:d7:b3:d7:38:a6:
16:4f:42:c3:8d:68:ac:2f:80:66:b9:f2:06:65:fb:
b2:1a:51:98:df:32:98:92:86:91:a5:89:1a:d7:e1:
64:1c:75:80:6b:89:74:a6:83:32:dd:f5:b6:5c:cc:
54:0c:09:be:e9:8b:47:b7:c6:2a:5b:7b:e3:d3:2b:
f3:b8:33:fd:82:55:44:c4:8d:d0:85:8a:8c:ea:f9:
a3:32:a5:4a:5d:2f:df:af:e8:2f:1f:80:76:4c:f8:
6f:73:fe:42:9b:75:2a:a5:74:83:c5:07:38:33:5e:
56:76:03:63:5a:e8:3e:67:e4:e3:54:90:ed:3a:68:
85:38:cf:6d:75:e2:92:3a:51:b6:2b:85:e0:df:60:
e0:49:60:f4:0c:8b:9a:3b:c2:48:0a:f9:0a:88:66:
3c:34:1b:f9:66:6f:3f:d9:cb:f1:c7:8e:66:81:a6:
48:e3:10:59:2c:8f:32:f9:98:17:96:69:f3:97:aa:
55:c9:47:6d:80:a8:c1:38:21:4d:4d:3e:39:70:11:
54:a0:b4:e3:c0:35:4d:cd:94:b8:d9:98:1f:5b:9b:
2a:1b:4c:c9:89:fe:ff:55:4d:b4:b5:31:95:a7:fb:
8d:b5:51:1c:64:83:eb:25:1c:f9:c3:35:c8:dc:c0:
d0:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:A9:01:95:3D:85:54:03:62:AA:9E:21:92:1F:66:DB:06:A1:62:70
X509v3 Authority Key Identifier:
keyid:F9:C9:E0:30:5C:FE:D5:79:44:48:73:2A:8B:0B:D8:42:74:50:D8:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-cngMFz-1XlESHMqiwvYQnRQ2BM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:21:46:2b:6c:1a:17:d1:53:be:2a:2c:74:9e:f2:bb:22:c5:
5f:a0:90:76:54:ac:0e:41:17:bd:64:3f:27:48:2d:47:ba:dc:
af:1a:82:22:1d:4f:5b:8e:1c:65:67:50:ba:a1:44:ce:9b:63:
b0:9e:e6:7d:b1:84:30:03:7a:34:6d:3a:ba:5d:13:4f:cc:15:
31:40:3d:93:29:23:30:9e:b2:e0:f2:ce:30:85:94:cf:7f:20:
0d:42:dc:d8:9e:23:de:16:f3:b0:dd:38:60:8b:e7:d1:1f:04:
85:d9:6a:89:3a:f0:16:9b:33:4c:76:56:a6:23:ea:82:cc:6c:
3e:a0:c0:1b:4c:06:90:7f:f4:ac:b1:99:37:c7:9a:6f:f3:a6:
18:02:8b:15:3b:f0:30:a4:5a:c3:d1:b9:11:17:29:69:27:9b:
19:48:0d:ba:d7:31:57:8a:67:de:71:09:2d:8e:48:46:8b:c5:
77:30:59:4f:58:d9:a0:7e:97:f0:23:46:95:14:43:b0:fe:3c:
86:d6:9e:e4:d1:56:81:de:f3:fc:ae:1c:67:ef:06:e1:5f:bb:
79:d3:a1:4a:0e:f0:d1:44:f6:80:6c:52:2b:3d:c9:c0:da:6f:
30:a0:74:77:17:df:90:0c:30:3e:8f:68:1d:25:ff:e2:9d:85:
69:73:5e:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 00:18:48 2026 by rpki-client