Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/6d7ecf-4b62-4367-9b50-064d7adf4be3/1/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.mft
File: cdg_2Nq_4UsXTMzTWzW4BxMzS6U.mft (raw, json)
Hash identifier: vnD4mpPQT+HgqgLNCI0omAHaDgm21w2xK3pVEb4GzKk=
Subject key identifier: 4D:6C:B4:05:42:EF:37:94:24:A7:2E:86:24:D7:EF:CF:A1:11:72:9B
Authority key identifier: 71:D8:3F:D8:DA:BF:E1:4B:17:4C:CC:D3:5B:35:B8:07:13:33:4B:A5
Certificate issuer: /CN=71d83fd8dabfe14b174cccd35b35b80713334ba5
Certificate serial: 019DCDF593C49412B77DE928E3ADC722FD67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/6d7ecf-4b62-4367-9b50-064d7adf4be3/1/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.mft
Manifest number: 073F
Signing time: Mon 27 Apr 2026 08:01:56 +0000
Manifest this update: Mon 27 Apr 2026 08:01:56 +0000
Manifest next update: Tue 28 Apr 2026 08:01:56 +0000
Files and hashes: 1: B8t2bBTkaLAR5TIW9fbMzDeK7wM.roa (hash: rEfJvzviw6ozBNoCBXd6KOO7hAZ89y6wXkNGYhrBaG0=)
2: HMrz0ooKEJFXKSO4vlLH3tqjuoY.roa (hash: Q44eqltej8ZT7IIY9L9uJnTiWZ7q0wvG++yznZV8P2Y=)
3: Jcrw5wdlUSTT6uVPSFxR6-NSOq4.asa (hash: dR4oTJ5jqBavqgY9Rb82c5VxF/eMWWjkNxBxJE8/VHA=)
4: OAwjmIJKIKdPAQbPLOFqI6tUMQc.roa (hash: ptXr3wrI9Ua3HiNsZCwM7CEtOaXWpO5fScxHniZRFZ8=)
5: cdg_2Nq_4UsXTMzTWzW4BxMzS6U.crl (hash: hWC02dLUA2H3ktGj37Z+X88Nd6IHvc8WauSqddje9zE=)
6: gtP2-qjZ9BceWm37CevDo-CjXzY.roa (hash: VlU69I3hb/G6/wyrp9pzGaxb3Tpi8AUBli1dWDbRaNc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/6d7ecf-4b62-4367-9b50-064d7adf4be3/1/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/6d7ecf-4b62-4367-9b50-064d7adf4be3/1/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 07:32:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:f5:93:c4:94:12:b7:7d:e9:28:e3:ad:c7:22:fd:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d83fd8dabfe14b174cccd35b35b80713334ba5
Validity
Not Before: Apr 27 08:01:56 2026 GMT
Not After : Apr 28 08:01:56 2026 GMT
Subject: CN=4d6cb40542ef379424a72e8624d7efcfa111729b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:20:25:6e:e7:4c:7d:bf:9f:f0:39:87:ed:4d:
ac:99:32:a2:1a:60:f4:a1:fe:13:9c:e9:e2:cf:14:
52:0f:23:04:a2:3a:1e:0d:17:37:41:c4:bf:6f:21:
1e:b4:75:56:35:d8:cc:d3:c2:8f:32:f0:d2:e9:08:
4a:02:c8:16:ad:af:a5:76:9f:f6:59:30:48:aa:86:
de:77:85:dc:e2:8a:89:c1:8f:9b:a4:1b:e3:6b:e8:
6f:31:c2:f8:e5:4c:29:0a:9f:65:ff:ff:c5:eb:3b:
19:62:fc:e2:a9:5f:fa:a0:f8:21:a9:7e:62:f8:bc:
59:c3:b0:38:80:d7:cc:05:c4:5e:91:e8:4a:b8:80:
92:56:03:67:76:d8:12:dd:15:28:e7:0e:15:92:54:
be:7c:c2:a9:e8:5c:0e:b0:4e:14:e7:66:34:5a:c5:
49:f1:a1:a0:4a:f4:42:a2:8f:8b:c8:fe:56:18:98:
9d:7f:a6:c8:25:a1:d3:17:96:92:74:4e:9d:09:be:
82:5f:56:32:73:a7:ae:4f:1a:d2:2d:f1:5b:63:17:
7a:6e:19:97:00:5f:a7:d9:47:0d:44:2a:43:2a:74:
c9:99:b2:49:9f:1d:59:81:9d:b4:61:4b:d2:39:e8:
51:58:64:02:70:d2:7e:91:88:bf:d0:37:ad:88:cf:
d6:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:6C:B4:05:42:EF:37:94:24:A7:2E:86:24:D7:EF:CF:A1:11:72:9B
X509v3 Authority Key Identifier:
keyid:71:D8:3F:D8:DA:BF:E1:4B:17:4C:CC:D3:5B:35:B8:07:13:33:4B:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6d7ecf-4b62-4367-9b50-064d7adf4be3/1/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6d7ecf-4b62-4367-9b50-064d7adf4be3/1/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:a6:00:28:6e:5b:5b:0c:34:15:ea:87:07:e7:61:3d:e8:6b:
ad:5a:9a:4c:2f:55:1b:24:d3:75:26:40:97:84:02:3c:df:19:
25:7c:f3:7a:44:7a:8e:02:46:4d:2f:41:a1:29:17:c2:d5:74:
1a:27:7a:f2:3d:d6:2d:cc:de:e3:b7:70:b9:c2:04:2e:e3:92:
10:f8:f1:3b:c6:93:64:dc:b1:58:6c:c4:1e:32:19:9c:d2:8c:
8d:ea:3d:6e:87:be:cf:f9:7d:23:5a:39:c4:8c:64:6f:9e:cb:
26:77:39:ca:58:ac:fa:53:72:b9:f8:b6:0b:70:ee:01:da:47:
1a:9c:c6:7a:d4:63:8d:28:ef:8d:6a:7d:3a:9c:2f:ba:77:b7:
98:02:77:d4:5d:4d:74:fd:31:e7:7e:e7:f7:31:f5:70:9a:0e:
17:7b:7b:6e:a8:4b:0d:4a:e4:d7:67:f6:0f:03:cd:12:2c:eb:
29:2a:21:7c:51:36:96:2a:f2:77:c5:e6:eb:6b:f0:03:fb:eb:
db:6b:dc:f1:f5:68:e2:5c:b6:b1:6f:4d:c1:4e:c2:57:ee:59:
83:58:24:f3:01:77:fe:1b:e9:01:4c:e7:49:5d:73:6b:b8:92:
01:ff:dc:70:50:62:70:2f:c4:a8:d2:b3:b0:f5:89:69:96:69:
96:80:0b:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3N9ZPElBK3feko463HIv1nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxZDgzZmQ4ZGFiZmUxNGIxNzRjY2NkMzViMzViODA3MTMz
MzRiYTUwHhcNMjYwNDI3MDgwMTU2WhcNMjYwNDI4MDgwMTU2WjAzMTEwLwYDVQQD
Eyg0ZDZjYjQwNTQyZWYzNzk0MjRhNzJlODYyNGQ3ZWZjZmExMTE3MjliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAriAlbudMfb+f8DmH7U2smTKiGmD0
of4TnOnizxRSDyMEojoeDRc3QcS/byEetHVWNdjM08KPMvDS6QhKAsgWra+ldp/2
WTBIqobed4Xc4oqJwY+bpBvja+hvMcL45UwpCp9l///F6zsZYvziqV/6oPghqX5i
+LxZw7A4gNfMBcRekehKuICSVgNndtgS3RUo5w4VklS+fMKp6FwOsE4U52Y0WsVJ
8aGgSvRCoo+LyP5WGJidf6bIJaHTF5aSdE6dCb6CX1Yyc6euTxrSLfFbYxd6bhmX
AF+n2UcNRCpDKnTJmbJJnx1ZgZ20YUvSOehRWGQCcNJ+kYi/0DetiM/WCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE1stAVC7zeUJKcuhiTX78+hEXKbMB8GA1UdIwQY
MBaAFHHYP9jav+FLF0zM01s1uAcTM0ulMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2RnXzJOcV80VXNYVE16VFd6VzRCeE16UzZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny82ZDdlY2YtNGI2Mi00MzY3LTliNTAt
MDY0ZDdhZGY0YmUzLzEvY2RnXzJOcV80VXNYVE16VFd6VzRCeE16UzZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny82ZDdlY2YtNGI2Mi00MzY3LTliNTAtMDY0ZDdhZGY0YmUz
LzEvY2RnXzJOcV80VXNYVE16VFd6VzRCeE16UzZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD6YAKG5b
Www0FeqHB+dhPehrrVqaTC9VGyTTdSZAl4QCPN8ZJXzzekR6jgJGTS9BoSkXwtV0
Gid68j3WLcze47dwucIELuOSEPjxO8aTZNyxWGzEHjIZnNKMjeo9boe+z/l9I1o5
xIxkb57LJnc5ylis+lNyufi2C3DuAdpHGpzGetRjjSjvjWp9Opwvune3mAJ31F1N
dP0x537n9zH1cJoOF3t7bqhLDUrk12f2DwPNEizrKSohfFE2liryd8Xm62vwA/vr
22vc8fVo4ly2sW9NwU7CV+5Zg1gk8wF3/hvpAUznSV1za7iSAf/ccFBicC/EqNKz
sPWJaZZploAL3A==
-----END CERTIFICATE-----
Generated at Mon Apr 27 09:55:02 2026 by rpki-client