Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/60/2e18f7-09c7-45b1-bcb7-9f6686e42800/1/Cga2XLuXZnq9_5uGGiL50B0dRss.mft
File: Cga2XLuXZnq9_5uGGiL50B0dRss.mft (raw, json)
Hash identifier: 7ubWDKdB8HroMkZ1+P2lWKS4n1jrXJZyoVNMX8PvyiE=
Subject key identifier: 68:57:C7:C9:7F:5F:48:C8:84:47:F2:A2:D4:6D:2F:5A:1B:16:2A:08
Authority key identifier: 0A:06:B6:5C:BB:97:66:7A:BD:FF:9B:86:1A:22:F9:D0:1D:1D:46:CB
Certificate issuer: /CN=0a06b65cbb97667abdff9b861a22f9d01d1d46cb
Certificate serial: 01A147CEFDAE77C96328A6B9F269FC3AF771
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cga2XLuXZnq9_5uGGiL50B0dRss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/2e18f7-09c7-45b1-bcb7-9f6686e42800/1/Cga2XLuXZnq9_5uGGiL50B0dRss.mft
Manifest number: 1AAA
Signing time: Sat 17 Oct 2026 03:01:50 +0000
Manifest this update: Sat 17 Oct 2026 03:01:50 +0000
Manifest next update: Sun 18 Oct 2026 03:01:50 +0000
Files and hashes: 1: Cga2XLuXZnq9_5uGGiL50B0dRss.crl (hash: 4mSBNbH8fdMT9GZK6UYe3naP4samPjDTV0B/LexVbmE=)
2: RpFgP93ClwNM-ocN6qvLfic7DMs.roa (hash: 5S/X3det1+F3wpDnXO5aEBYjQHz6Mc8fd6NBqHj9aKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/2e18f7-09c7-45b1-bcb7-9f6686e42800/1/Cga2XLuXZnq9_5uGGiL50B0dRss.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/2e18f7-09c7-45b1-bcb7-9f6686e42800/1/Cga2XLuXZnq9_5uGGiL50B0dRss.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cga2XLuXZnq9_5uGGiL50B0dRss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 00:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:47:ce:fd:ae:77:c9:63:28:a6:b9:f2:69:fc:3a:f7:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a06b65cbb97667abdff9b861a22f9d01d1d46cb
Validity
Not Before: Oct 17 03:01:50 2026 GMT
Not After : Oct 18 03:01:50 2026 GMT
Subject: CN=6857c7c97f5f48c88447f2a2d46d2f5a1b162a08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:4e:0d:0d:9c:24:df:68:9a:8c:3b:fb:bb:bc:
d5:93:0a:4a:6d:a5:3e:3e:c7:cc:24:1e:92:e1:a8:
8d:9f:ad:aa:57:74:dd:f0:60:eb:4f:4e:0c:2e:39:
a3:8a:b9:f4:1e:dd:12:a5:7e:8c:de:1d:b3:a4:41:
f7:78:dc:0c:72:f9:6e:6e:82:fe:a7:6d:b1:eb:79:
a3:0a:f1:14:7f:47:6d:e5:23:46:2b:b1:a7:f9:7a:
c4:6a:89:0c:07:bc:49:14:e1:7f:68:a1:56:4f:58:
f7:4c:81:67:05:f8:8c:48:bd:97:1a:9c:f0:7a:ef:
dc:7f:27:93:c0:76:dc:0a:99:eb:28:0f:d4:06:cb:
7c:ce:c8:e3:14:b9:ef:9f:f7:a3:cd:83:38:94:da:
3e:ec:95:74:be:af:c5:ba:75:89:5d:f8:bc:75:87:
81:cd:3b:09:3d:7f:bb:ec:e7:97:12:df:54:6a:04:
07:40:a6:f3:96:5b:d9:9a:1a:fe:f2:3a:8f:ad:c1:
98:8b:2b:0d:37:d2:3e:94:9b:66:d3:da:e4:66:46:
b3:cb:b4:41:3d:71:bc:1c:65:02:a8:3d:ef:88:7b:
bd:bf:e7:ce:a6:f4:d2:7e:15:58:fd:75:12:ee:58:
2b:bd:dc:cc:43:f5:69:98:26:62:af:f8:cc:55:37:
8b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:57:C7:C9:7F:5F:48:C8:84:47:F2:A2:D4:6D:2F:5A:1B:16:2A:08
X509v3 Authority Key Identifier:
keyid:0A:06:B6:5C:BB:97:66:7A:BD:FF:9B:86:1A:22:F9:D0:1D:1D:46:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cga2XLuXZnq9_5uGGiL50B0dRss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2e18f7-09c7-45b1-bcb7-9f6686e42800/1/Cga2XLuXZnq9_5uGGiL50B0dRss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2e18f7-09c7-45b1-bcb7-9f6686e42800/1/Cga2XLuXZnq9_5uGGiL50B0dRss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:c0:4e:c3:08:32:59:5b:0a:82:ab:da:c6:25:1c:ff:d9:a6:
61:01:c8:05:ef:00:b7:5d:ac:f4:fd:cf:00:10:cd:1e:a6:e1:
18:16:75:4b:eb:9f:f6:06:21:0e:36:45:76:13:8a:28:4f:5b:
46:76:ff:9c:aa:80:ad:cc:cf:ff:af:44:13:6a:b3:6b:d4:13:
70:e3:2f:d2:88:eb:da:85:4e:a4:6f:7c:7c:3c:f5:69:b3:47:
e5:47:89:c8:b3:5d:71:fd:da:a4:54:8a:9b:05:98:f2:b9:18:
b5:eb:52:76:5d:21:ad:22:fe:58:20:5c:af:69:92:54:43:12:
c8:6f:51:38:a9:a5:0e:dd:62:a5:a3:6a:4b:02:c8:cb:28:d5:
80:9c:15:09:07:1c:bb:25:96:48:d9:1d:d4:79:b7:d5:86:ca:
81:9d:1d:49:6d:69:96:ab:65:97:c3:46:89:69:ea:d3:2d:64:
a9:7c:76:ce:03:b2:c4:1c:5a:b4:5d:e8:1f:09:cd:19:ae:23:
f8:2c:ed:bc:1d:4d:ad:ea:68:9d:b0:75:79:6d:13:5c:21:f4:
f4:85:bc:da:e7:a3:e1:82:35:9a:e8:26:dc:94:e8:40:f3:00:
fd:e0:6a:8c:14:08:9d:a6:31:fc:5a:04:33:17:c0:37:4a:35:
9f:8f:8d:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 12:22:06 2026 by rpki-client