Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/2e18f7-09c7-45b1-bcb7-9f6686e42800/1/Cga2XLuXZnq9_5uGGiL50B0dRss.mft
File: Cga2XLuXZnq9_5uGGiL50B0dRss.mft (raw, json)
Hash identifier: +4X5MBdARLxmUxfzIWx3aDKeL1sg7+n0zC/lVrZPFW8=
Subject key identifier: 7C:8B:3D:A1:85:73:61:7C:35:26:8D:B3:E2:F0:01:76:B5:42:5A:F0
Authority key identifier: 0A:06:B6:5C:BB:97:66:7A:BD:FF:9B:86:1A:22:F9:D0:1D:1D:46:CB
Certificate issuer: /CN=0a06b65cbb97667abdff9b861a22f9d01d1d46cb
Certificate serial: 019D38D3280C9015505DC76B72ECF00F219E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cga2XLuXZnq9_5uGGiL50B0dRss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/2e18f7-09c7-45b1-bcb7-9f6686e42800/1/Cga2XLuXZnq9_5uGGiL50B0dRss.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 09:00:55 +0000
Manifest this update: Sun 29 Mar 2026 09:00:55 +0000
Manifest next update: Mon 30 Mar 2026 09:00:55 +0000
Files and hashes: 1: Cga2XLuXZnq9_5uGGiL50B0dRss.crl (hash: eg5YHAjY7aPse9yUUHLw1fmvoBgf3RJOch5TvqxxkWE=)
2: RpFgP93ClwNM-ocN6qvLfic7DMs.roa (hash: 5S/X3det1+F3wpDnXO5aEBYjQHz6Mc8fd6NBqHj9aKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/2e18f7-09c7-45b1-bcb7-9f6686e42800/1/Cga2XLuXZnq9_5uGGiL50B0dRss.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/2e18f7-09c7-45b1-bcb7-9f6686e42800/1/Cga2XLuXZnq9_5uGGiL50B0dRss.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cga2XLuXZnq9_5uGGiL50B0dRss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:28:0c:90:15:50:5d:c7:6b:72:ec:f0:0f:21:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a06b65cbb97667abdff9b861a22f9d01d1d46cb
Validity
Not Before: Mar 29 09:00:55 2026 GMT
Not After : Mar 30 09:00:55 2026 GMT
Subject: CN=7c8b3da18573617c35268db3e2f00176b5425af0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:b7:09:21:44:54:06:fa:22:99:63:cb:04:4e:
26:4f:2f:e7:8b:92:b1:f6:d5:b7:ec:d2:de:d9:bd:
21:55:df:0c:e3:f7:b5:40:92:a9:cf:34:65:4a:9d:
c6:88:93:df:74:d7:73:6f:74:14:a9:88:31:8e:fd:
70:b2:fd:8e:26:8a:1b:bf:a3:1f:46:18:b4:1d:14:
87:7c:2d:02:b2:d0:ec:20:c0:76:89:9c:31:c2:d1:
c3:68:67:ca:f6:86:04:b1:a7:50:05:08:00:db:f5:
c8:62:54:24:db:43:d4:a9:24:18:be:d7:1b:1f:9d:
0b:ca:4e:b2:0a:aa:4e:35:07:23:0a:ed:a4:97:0c:
42:c7:4e:e7:c8:2c:9f:ce:79:2b:82:3d:ed:af:6e:
9e:06:d5:97:02:3c:55:f4:05:b9:13:14:5f:3c:c5:
4a:6d:dc:3d:bb:31:4a:49:01:3d:42:9a:14:d6:55:
c6:80:f0:e6:d0:cb:5e:b3:3a:1f:cd:7e:2f:ec:37:
3c:f5:40:89:f5:18:67:17:ba:48:42:45:29:40:2c:
5a:cd:3d:bf:e7:15:f6:28:cd:e1:a6:f1:8f:87:ee:
5d:0a:eb:4d:d0:b1:21:96:66:ac:a5:27:cf:1d:b9:
f5:ce:99:9e:0b:fc:4a:c7:f4:c4:92:0f:98:2c:6e:
fa:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:8B:3D:A1:85:73:61:7C:35:26:8D:B3:E2:F0:01:76:B5:42:5A:F0
X509v3 Authority Key Identifier:
keyid:0A:06:B6:5C:BB:97:66:7A:BD:FF:9B:86:1A:22:F9:D0:1D:1D:46:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cga2XLuXZnq9_5uGGiL50B0dRss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2e18f7-09c7-45b1-bcb7-9f6686e42800/1/Cga2XLuXZnq9_5uGGiL50B0dRss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2e18f7-09c7-45b1-bcb7-9f6686e42800/1/Cga2XLuXZnq9_5uGGiL50B0dRss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:4d:93:7d:e2:b4:6b:21:48:c1:48:7b:a4:77:8b:bf:78:ec:
11:e8:6e:03:23:d7:b7:e9:39:51:6e:f0:7e:89:61:dc:f9:44:
fa:30:58:4d:85:4c:2a:cf:50:c1:26:ff:22:45:68:ba:38:14:
72:c6:c7:09:55:e7:c4:1a:ba:24:a4:db:d0:7d:9e:1e:19:d1:
7a:a0:1c:6b:c8:fa:88:7b:d3:4d:14:d9:e3:c4:94:7d:a2:b9:
f0:f4:98:12:9d:8a:5f:d7:e6:5e:cc:ed:06:a7:90:54:a3:28:
1d:6e:09:56:11:c5:68:18:5d:fc:5a:62:63:5f:36:97:20:03:
19:95:ef:85:64:84:f0:74:46:61:37:19:34:a2:bf:5f:96:7d:
6b:23:11:e0:a3:23:fa:08:ee:d0:9f:8c:95:8b:6f:1a:ef:68:
aa:21:29:b6:54:b1:50:e6:13:36:f5:96:ca:0e:18:a2:bc:96:
65:75:53:6c:4b:f5:c8:06:0e:b3:01:09:21:e0:0d:03:fa:2d:
47:c4:96:7f:bc:86:aa:bb:61:ec:bc:d2:8d:f8:4d:bf:63:4e:
e6:bf:a8:ec:07:e2:b1:c1:a0:be:d9:9a:8b:4c:2c:ff:96:2b:
4d:4d:c2:fd:d5:86:8c:ea:61:16:ed:bd:ed:d4:d4:7f:47:82:
30:12:46:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ040ygMkBVQXcdrcuzwDyGeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhMDZiNjVjYmI5NzY2N2FiZGZmOWI4NjFhMjJmOWQwMWQx
ZDQ2Y2IwHhcNMjYwMzI5MDkwMDU1WhcNMjYwMzMwMDkwMDU1WjAzMTEwLwYDVQQD
Eyg3YzhiM2RhMTg1NzM2MTdjMzUyNjhkYjNlMmYwMDE3NmI1NDI1YWYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj7cJIURUBvoimWPLBE4mTy/ni5Kx
9tW37NLe2b0hVd8M4/e1QJKpzzRlSp3GiJPfdNdzb3QUqYgxjv1wsv2OJoobv6Mf
Rhi0HRSHfC0CstDsIMB2iZwxwtHDaGfK9oYEsadQBQgA2/XIYlQk20PUqSQYvtcb
H50Lyk6yCqpONQcjCu2klwxCx07nyCyfznkrgj3tr26eBtWXAjxV9AW5ExRfPMVK
bdw9uzFKSQE9QpoU1lXGgPDm0MteszofzX4v7Dc89UCJ9RhnF7pIQkUpQCxazT2/
5xX2KM3hpvGPh+5dCutN0LEhlmaspSfPHbn1zpmeC/xKx/TEkg+YLG76uwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHyLPaGFc2F8NSaNs+LwAXa1QlrwMB8GA1UdIwQY
MBaAFAoGtly7l2Z6vf+bhhoi+dAdHUbLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2dhMlhMdVhabnE5XzV1R0dpTDUwQjBkUnNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC8yZTE4ZjctMDljNy00NWIxLWJjYjct
OWY2Njg2ZTQyODAwLzEvQ2dhMlhMdVhabnE5XzV1R0dpTDUwQjBkUnNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC8yZTE4ZjctMDljNy00NWIxLWJjYjctOWY2Njg2ZTQyODAw
LzEvQ2dhMlhMdVhabnE5XzV1R0dpTDUwQjBkUnNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeU2TfeK0
ayFIwUh7pHeLv3jsEehuAyPXt+k5UW7wfolh3PlE+jBYTYVMKs9QwSb/IkVoujgU
csbHCVXnxBq6JKTb0H2eHhnReqAca8j6iHvTTRTZ48SUfaK58PSYEp2KX9fmXszt
BqeQVKMoHW4JVhHFaBhd/FpiY182lyADGZXvhWSE8HRGYTcZNKK/X5Z9ayMR4KMj
+gju0J+MlYtvGu9oqiEptlSxUOYTNvWWyg4YoryWZXVTbEv1yAYOswEJIeANA/ot
R8SWf7yGqrth7LzSjfhNv2NO5r+o7AfiscGgvtmai0ws/5YrTU3C/dWGjOphFu29
7dTUf0eCMBJG7Q==
-----END CERTIFICATE-----
Generated at Sun Mar 29 16:26:36 2026 by rpki-client