Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/ac9481-6fca-4240-9ed1-c277d3716bd9/1/cGdfald5fFypbD-0XlMb0yeDAWw.mft
File: cGdfald5fFypbD-0XlMb0yeDAWw.mft (raw, json)
Hash identifier: JbW2yyxuFsovTQLFfqmrev9M4A8sh9e019gHT3iE0qo=
Subject key identifier: 18:DF:30:C4:5F:07:85:D1:C4:C6:5A:6E:53:25:CC:72:D8:A7:57:3F
Authority key identifier: 70:67:5F:6A:57:79:7C:5C:A9:6C:3F:B4:5E:53:1B:D3:27:83:01:6C
Certificate issuer: /CN=70675f6a57797c5ca96c3fb45e531bd32783016c
Certificate serial: 019D3A1CAB39784C94E9DA99F01CCAEF1B1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cGdfald5fFypbD-0XlMb0yeDAWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/ac9481-6fca-4240-9ed1-c277d3716bd9/1/cGdfald5fFypbD-0XlMb0yeDAWw.mft
Manifest number: 1893
Signing time: Sun 29 Mar 2026 15:00:50 +0000
Manifest this update: Sun 29 Mar 2026 15:00:50 +0000
Manifest next update: Mon 30 Mar 2026 15:00:50 +0000
Files and hashes: 1: HukEo3cVqcCZCNkQC8Fo0OdcPV8.roa (hash: uaWWBhq83jLIq6e0tcD+B+F+JyjozNUJczctcyW3h1k=)
2: cGdfald5fFypbD-0XlMb0yeDAWw.crl (hash: e7Th9zKpTpLXAUt/VlGSdGa8ziDP9OXAEP5EHEN85pQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/ac9481-6fca-4240-9ed1-c277d3716bd9/1/cGdfald5fFypbD-0XlMb0yeDAWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/ac9481-6fca-4240-9ed1-c277d3716bd9/1/cGdfald5fFypbD-0XlMb0yeDAWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cGdfald5fFypbD-0XlMb0yeDAWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 15:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:ab:39:78:4c:94:e9:da:99:f0:1c:ca:ef:1b:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70675f6a57797c5ca96c3fb45e531bd32783016c
Validity
Not Before: Mar 29 15:00:50 2026 GMT
Not After : Mar 30 15:00:50 2026 GMT
Subject: CN=18df30c45f0785d1c4c65a6e5325cc72d8a7573f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ef:bf:48:5b:2a:3b:ab:c0:cd:29:62:a7:84:
1f:da:0b:05:40:1b:6c:c0:bc:97:c8:da:83:13:36:
e8:f4:db:5a:30:b5:ee:12:6f:ed:47:8a:55:3c:df:
76:81:00:28:08:7c:bd:22:14:e2:fc:e7:59:46:39:
07:52:29:5d:f1:89:d1:5b:eb:3e:8d:5f:89:c4:f8:
b4:42:87:17:94:c2:54:23:fb:79:c1:7a:20:6a:ef:
a6:25:b1:ca:71:bd:11:d4:da:39:f7:f2:1e:bc:41:
b3:f3:b4:7a:85:b0:6a:89:4c:d5:91:59:a7:52:52:
60:68:68:87:bf:ae:38:29:29:8f:82:6f:78:2b:d5:
b3:93:05:59:ba:b3:14:de:02:66:17:95:21:df:34:
2b:01:28:ed:ff:8b:96:24:3b:32:1f:82:63:9b:65:
84:cd:f6:50:ca:25:c8:52:7c:6b:c4:28:bc:d3:d9:
d5:3e:d4:0c:d1:70:1c:b5:67:f3:09:23:45:c6:3d:
22:d2:60:16:85:50:e4:c9:5e:dc:bd:2c:58:5a:19:
28:38:e0:be:57:b5:7b:d1:ac:b8:a4:a9:49:da:7c:
16:1b:86:a5:c2:14:cb:43:78:01:12:be:bc:06:47:
47:93:dc:6f:17:e2:57:fc:6e:1d:3a:ad:03:ea:55:
4c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:DF:30:C4:5F:07:85:D1:C4:C6:5A:6E:53:25:CC:72:D8:A7:57:3F
X509v3 Authority Key Identifier:
keyid:70:67:5F:6A:57:79:7C:5C:A9:6C:3F:B4:5E:53:1B:D3:27:83:01:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cGdfald5fFypbD-0XlMb0yeDAWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/ac9481-6fca-4240-9ed1-c277d3716bd9/1/cGdfald5fFypbD-0XlMb0yeDAWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/ac9481-6fca-4240-9ed1-c277d3716bd9/1/cGdfald5fFypbD-0XlMb0yeDAWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:9e:9f:78:35:bd:14:b9:6d:e6:15:87:87:c5:ed:26:7d:c0:
70:e0:bb:5c:41:07:bd:5f:8b:48:0d:3d:73:9b:a7:ca:39:fd:
a0:98:b2:c3:65:18:69:0b:49:d4:ce:da:2d:1a:32:0f:21:58:
cb:cb:2b:cd:39:2c:58:fa:69:6c:b2:6f:7e:d2:cd:e2:68:73:
2c:4f:25:e3:7f:76:15:35:a9:1b:4f:98:4e:79:54:27:48:94:
f7:22:e5:57:75:61:e1:b2:3d:9b:a8:e3:c9:b8:5c:4d:a5:39:
ff:6e:d7:e2:17:70:9f:2e:fd:4d:35:cd:97:1f:a8:ca:5a:12:
61:d0:5a:16:70:e6:9d:4c:19:76:76:cb:de:bd:10:93:5a:be:
3f:50:70:13:1d:1a:63:cf:85:82:0f:fe:0f:2d:eb:32:c3:fe:
b8:7e:ed:5b:51:88:ad:21:aa:20:ca:2b:0f:5a:6e:82:22:b9:
2f:26:a2:34:b3:d0:47:a6:9f:c4:50:2e:0d:5b:33:45:88:0b:
4d:8f:d5:b8:1f:14:97:1c:93:aa:85:71:65:17:1e:28:43:98:
c0:30:3d:03:96:16:6a:d8:a3:d7:27:c5:78:11:c6:34:8d:cf:
c9:df:8d:6f:a7:31:3f:e8:00:9a:96:c8:5a:53:68:91:c3:47:
42:4d:ab:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ06HKs5eEyU6dqZ8BzK7xscMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwNjc1ZjZhNTc3OTdjNWNhOTZjM2ZiNDVlNTMxYmQzMjc4
MzAxNmMwHhcNMjYwMzI5MTUwMDUwWhcNMjYwMzMwMTUwMDUwWjAzMTEwLwYDVQQD
EygxOGRmMzBjNDVmMDc4NWQxYzRjNjVhNmU1MzI1Y2M3MmQ4YTc1NzNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp++/SFsqO6vAzSlip4Qf2gsFQBts
wLyXyNqDEzbo9NtaMLXuEm/tR4pVPN92gQAoCHy9IhTi/OdZRjkHUild8YnRW+s+
jV+JxPi0QocXlMJUI/t5wXogau+mJbHKcb0R1No59/IevEGz87R6hbBqiUzVkVmn
UlJgaGiHv644KSmPgm94K9WzkwVZurMU3gJmF5Uh3zQrASjt/4uWJDsyH4Jjm2WE
zfZQyiXIUnxrxCi809nVPtQM0XActWfzCSNFxj0i0mAWhVDkyV7cvSxYWhkoOOC+
V7V70ay4pKlJ2nwWG4alwhTLQ3gBEr68BkdHk9xvF+JX/G4dOq0D6lVMQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBjfMMRfB4XRxMZablMlzHLYp1c/MB8GA1UdIwQY
MBaAFHBnX2pXeXxcqWw/tF5TG9MngwFsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0dkZmFsZDVmRnlwYkQtMFhsTWIweWVEQVd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9hYzk0ODEtNmZjYS00MjQwLTllZDEt
YzI3N2QzNzE2YmQ5LzEvY0dkZmFsZDVmRnlwYkQtMFhsTWIweWVEQVd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC9hYzk0ODEtNmZjYS00MjQwLTllZDEtYzI3N2QzNzE2YmQ5
LzEvY0dkZmFsZDVmRnlwYkQtMFhsTWIweWVEQVd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX56feDW9
FLlt5hWHh8XtJn3AcOC7XEEHvV+LSA09c5unyjn9oJiyw2UYaQtJ1M7aLRoyDyFY
y8srzTksWPppbLJvftLN4mhzLE8l4392FTWpG0+YTnlUJ0iU9yLlV3Vh4bI9m6jj
ybhcTaU5/27X4hdwny79TTXNlx+oyloSYdBaFnDmnUwZdnbL3r0Qk1q+P1BwEx0a
Y8+Fgg/+Dy3rMsP+uH7tW1GIrSGqIMorD1pugiK5LyaiNLPQR6afxFAuDVszRYgL
TY/VuB8UlxyTqoVxZRceKEOYwDA9A5YWatij1yfFeBHGNI3Pyd+Nb6cxP+gAmpbI
WlNokcNHQk2rkw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 20:48:33 2026 by rpki-client