Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/2e18f7-09c7-45b1-bcb7-9f6686e42800/1/Cga2XLuXZnq9_5uGGiL50B0dRss.mft
File: Cga2XLuXZnq9_5uGGiL50B0dRss.mft (raw, json)
Hash identifier: ital/fIQ80aGhwgDY0h1Q8D5Nq+w2b7no5j/HDpnxs0=
Subject key identifier: 97:AB:D5:56:6B:B4:39:71:4F:FE:9C:4A:D8:0A:0C:41:85:18:8D:11
Authority key identifier: 0A:06:B6:5C:BB:97:66:7A:BD:FF:9B:86:1A:22:F9:D0:1D:1D:46:CB
Certificate issuer: /CN=0a06b65cbb97667abdff9b861a22f9d01d1d46cb
Certificate serial: 019F17C278F18174B06626E516C569EC9878
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cga2XLuXZnq9_5uGGiL50B0dRss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/2e18f7-09c7-45b1-bcb7-9f6686e42800/1/Cga2XLuXZnq9_5uGGiL50B0dRss.mft
Manifest number: 1988
Signing time: Tue 30 Jun 2026 09:00:48 +0000
Manifest this update: Tue 30 Jun 2026 09:00:48 +0000
Manifest next update: Wed 01 Jul 2026 09:00:48 +0000
Files and hashes: 1: Cga2XLuXZnq9_5uGGiL50B0dRss.crl (hash: 9nwzfJf/1D5Q1IY4pvH5r80fjL0etGZw0g4EPPRtROI=)
2: RpFgP93ClwNM-ocN6qvLfic7DMs.roa (hash: 5S/X3det1+F3wpDnXO5aEBYjQHz6Mc8fd6NBqHj9aKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/2e18f7-09c7-45b1-bcb7-9f6686e42800/1/Cga2XLuXZnq9_5uGGiL50B0dRss.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/2e18f7-09c7-45b1-bcb7-9f6686e42800/1/Cga2XLuXZnq9_5uGGiL50B0dRss.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cga2XLuXZnq9_5uGGiL50B0dRss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 09:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:c2:78:f1:81:74:b0:66:26:e5:16:c5:69:ec:98:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a06b65cbb97667abdff9b861a22f9d01d1d46cb
Validity
Not Before: Jun 30 09:00:48 2026 GMT
Not After : Jul 1 09:00:48 2026 GMT
Subject: CN=97abd5566bb439714ffe9c4ad80a0c4185188d11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e2:67:04:5c:e0:1b:1a:fe:7b:d3:35:23:ad:
5c:b5:d3:a4:14:97:1f:84:cc:df:32:9e:78:bb:06:
9b:91:48:f3:dc:9f:82:cb:d3:12:cc:c3:a0:4c:d9:
2b:78:73:ac:96:cd:f8:a1:ea:57:35:74:1a:c3:b8:
af:45:61:8b:04:9d:cf:e2:c0:9f:3d:71:1b:6d:b3:
16:14:f6:6d:f7:02:03:0c:6c:e0:d3:fb:64:08:6f:
82:e2:40:99:d3:23:de:41:73:cf:45:43:6e:81:36:
63:ad:cb:86:50:be:9f:0d:0d:50:5c:d7:95:13:c8:
9a:46:96:cf:a5:fb:93:fc:ce:4f:6b:5e:57:8b:96:
46:78:77:4f:08:62:a9:c7:6a:20:53:8e:d9:00:5d:
9b:65:00:23:d3:ff:5f:67:94:a8:76:d0:ca:61:0d:
c1:a8:22:75:55:c6:65:65:a9:f9:d8:a7:a1:92:50:
5d:a1:bf:0d:74:15:13:c6:e4:77:7a:d0:64:c7:89:
60:af:cf:38:d6:ef:61:06:ac:03:d8:f2:ef:87:aa:
47:30:46:ce:f5:f1:80:74:0c:42:1b:42:d0:0e:28:
56:e3:7e:8c:19:0b:f6:dc:4b:20:91:d1:9c:2b:97:
79:94:34:c4:7a:e3:00:fc:b0:e3:46:2b:01:66:0b:
5d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:AB:D5:56:6B:B4:39:71:4F:FE:9C:4A:D8:0A:0C:41:85:18:8D:11
X509v3 Authority Key Identifier:
keyid:0A:06:B6:5C:BB:97:66:7A:BD:FF:9B:86:1A:22:F9:D0:1D:1D:46:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cga2XLuXZnq9_5uGGiL50B0dRss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2e18f7-09c7-45b1-bcb7-9f6686e42800/1/Cga2XLuXZnq9_5uGGiL50B0dRss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2e18f7-09c7-45b1-bcb7-9f6686e42800/1/Cga2XLuXZnq9_5uGGiL50B0dRss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:c5:79:ff:45:97:f4:f9:89:15:1b:5b:5e:27:8e:1d:f4:01:
6c:6c:9b:84:ea:1f:21:b1:38:06:c1:ab:ab:74:61:0d:ce:ce:
b9:c4:59:a1:a5:c7:12:56:0f:6b:11:66:2e:1c:89:f4:f5:71:
26:32:db:de:71:47:72:0e:57:05:5a:94:6b:af:65:94:9b:b3:
b8:d5:c2:d8:69:34:10:61:ea:59:5f:4a:1b:19:96:85:22:51:
0a:87:f3:f4:45:e5:67:fd:f9:db:a8:ab:ba:4c:8e:5f:3d:ac:
45:34:45:92:87:4a:ee:d8:42:47:80:9a:2c:87:ea:5c:64:02:
9a:e1:65:7b:f1:13:79:3a:5e:10:03:5e:80:79:c1:2d:5e:1e:
9a:8b:b5:6c:8d:3b:25:af:96:ee:73:b8:ac:91:cb:4c:3b:e3:
92:5a:44:35:a5:46:80:23:49:6f:3b:78:4f:b4:1a:a6:b8:f0:
f1:03:fe:76:c6:00:7d:c5:30:88:1f:25:9d:1c:a8:9b:e0:31:
1d:6d:b9:12:f4:c3:54:60:e3:1e:18:48:75:7f:b8:ad:13:1d:
fd:d3:0f:05:93:04:7c:d3:ea:4c:32:ec:cb:05:35:e9:0f:f5:
9b:e3:36:f9:d8:3a:e6:db:c6:99:cf:a5:43:fe:0e:b2:09:8e:
e3:8c:2a:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:01 2026 by rpki-client