Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7b/97ad7e-fcbe-4fcc-9c3f-f48930e42641/1/cnegKqVG3RoKaoLQXZCwkX4VRe0.mft
File: cnegKqVG3RoKaoLQXZCwkX4VRe0.mft (raw, json)
Hash identifier: eQCSup8P9XtsOmiQhzSZDAxnIudzAGrmUon2MsL0NBE=
Subject key identifier: FD:74:E8:0C:69:46:F1:78:D0:52:EC:53:E1:69:EF:82:44:FE:79:25
Authority key identifier: 72:77:A0:2A:A5:46:DD:1A:0A:6A:82:D0:5D:90:B0:91:7E:15:45:ED
Certificate issuer: /CN=7277a02aa546dd1a0a6a82d05d90b0917e1545ed
Certificate serial: 01A17DE19F5E2FD9F6CFE82A3B69C0A7E7EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cnegKqVG3RoKaoLQXZCwkX4VRe0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/97ad7e-fcbe-4fcc-9c3f-f48930e42641/1/cnegKqVG3RoKaoLQXZCwkX4VRe0.mft
Manifest number: 16D1
Signing time: Tue 27 Oct 2026 15:01:40 +0000
Manifest this update: Tue 27 Oct 2026 15:01:40 +0000
Manifest next update: Wed 28 Oct 2026 15:01:40 +0000
Files and hashes: 1: OaOnlwyLcpWU-7buhAK-DPuoYYM.roa (hash: 5Ar9cfFUzYqjwJSn+ec2xqE01xE8RezzqQw0pyKzfD4=)
2: cnegKqVG3RoKaoLQXZCwkX4VRe0.crl (hash: qB/anrjt6xo5/AUEMnjDs9i3emEM13TVKnKxyNQ6kGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/97ad7e-fcbe-4fcc-9c3f-f48930e42641/1/cnegKqVG3RoKaoLQXZCwkX4VRe0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/97ad7e-fcbe-4fcc-9c3f-f48930e42641/1/cnegKqVG3RoKaoLQXZCwkX4VRe0.mft
rsync://rpki.ripe.net/repository/DEFAULT/cnegKqVG3RoKaoLQXZCwkX4VRe0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:e1:9f:5e:2f:d9:f6:cf:e8:2a:3b:69:c0:a7:e7:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7277a02aa546dd1a0a6a82d05d90b0917e1545ed
Validity
Not Before: Oct 27 15:01:40 2026 GMT
Not After : Oct 28 15:01:40 2026 GMT
Subject: CN=fd74e80c6946f178d052ec53e169ef8244fe7925
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:57:d6:8a:bf:01:fb:36:8a:04:c4:79:11:48:
2a:2d:85:92:24:b8:a6:f7:4a:98:53:3a:45:f3:b7:
f5:93:f0:79:2f:dd:cb:67:4a:be:42:e0:0d:13:87:
6a:ad:40:be:b2:f0:bb:16:5f:df:49:bf:ff:ca:cb:
ce:d6:28:e2:cd:a1:29:e9:f0:c4:58:a4:ad:6d:28:
09:6e:df:9b:6c:3b:c0:ff:c5:52:f6:f7:b2:9d:0e:
88:8b:b2:b7:61:91:77:25:8b:e0:e7:a7:15:16:5c:
95:5d:c8:c8:4c:3a:bf:12:c8:f1:49:10:e7:b4:5e:
17:4c:f9:e0:3f:ba:8d:95:ed:0a:7d:f8:b6:b2:d8:
71:c6:96:39:a5:ae:20:b0:62:44:24:ee:fe:5c:31:
5a:f1:57:0e:cc:04:22:b2:08:88:8c:d4:81:53:14:
45:9f:4c:34:dd:ef:2d:82:10:2f:4c:73:cb:ce:f0:
3d:c6:07:50:73:77:e5:1f:e6:a8:26:08:60:25:d2:
67:1b:cf:af:a4:00:c9:df:1f:f2:bb:86:96:67:0e:
44:63:71:a3:6f:ce:63:64:a4:6d:ba:87:07:73:df:
22:4e:66:93:df:14:3e:93:96:d8:ca:81:cb:59:b9:
de:35:7f:1c:a2:b9:42:e4:10:0f:ac:df:e8:3a:89:
56:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:74:E8:0C:69:46:F1:78:D0:52:EC:53:E1:69:EF:82:44:FE:79:25
X509v3 Authority Key Identifier:
keyid:72:77:A0:2A:A5:46:DD:1A:0A:6A:82:D0:5D:90:B0:91:7E:15:45:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cnegKqVG3RoKaoLQXZCwkX4VRe0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/97ad7e-fcbe-4fcc-9c3f-f48930e42641/1/cnegKqVG3RoKaoLQXZCwkX4VRe0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/97ad7e-fcbe-4fcc-9c3f-f48930e42641/1/cnegKqVG3RoKaoLQXZCwkX4VRe0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:e3:1c:0f:ba:e3:d0:3b:e7:46:3a:f8:fd:82:e9:a0:bc:ad:
f9:9a:1a:c0:fc:fb:f3:8b:f6:1c:9c:fa:05:17:75:7b:1f:4b:
f3:0f:3e:8e:66:55:f2:d8:b9:0c:65:9a:db:b2:4f:df:12:29:
ca:c6:3d:4b:e5:d5:02:dc:3e:d8:da:34:5b:b6:25:2f:a9:ce:
55:d4:fb:a7:af:70:83:d2:f1:18:94:4c:a2:dc:79:04:18:c0:
e4:8d:df:c9:7d:a5:35:00:98:95:ee:7f:72:58:6f:f0:b7:5d:
d3:09:b7:02:8e:c6:8e:31:af:d1:ef:81:e6:31:76:79:f8:ac:
8a:f7:4e:24:fe:28:68:06:69:21:39:48:c0:dc:f6:d7:37:b9:
f8:33:e8:34:62:b2:bd:41:9d:54:03:62:40:f3:0e:03:ed:99:
05:72:3b:d8:e2:e6:05:05:da:6f:85:b3:93:03:4e:9b:81:44:
db:15:2d:7a:2e:f5:dd:a8:5d:d6:97:8b:6e:65:8c:fe:31:53:
31:1e:9f:af:c4:9c:2c:71:3e:0f:73:93:7d:e9:9e:83:bf:51:
4b:4d:22:81:70:ff:aa:53:9a:43:62:20:5e:3e:af:52:9f:71:
df:03:55:fb:28:ad:53:2f:49:7a:10:81:14:2f:f4:6a:81:ab:
ec:05:62:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 17:47:26 2026 by rpki-client