Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/e485e1-a65f-43d4-b572-d3326c59bcd2/1/_CgqeUs_erTNb-tsX9az0lavxGE.mft
File: _CgqeUs_erTNb-tsX9az0lavxGE.mft (raw, json)
Hash identifier: 6dcl30oxgVvnmDo+st7qJgeJCZPd8q72l+IcgdPileQ=
Subject key identifier: 40:FC:64:80:77:EC:DA:5C:10:E8:30:99:8F:35:2A:66:C9:BC:BC:33
Authority key identifier: FC:28:2A:79:4B:3F:7A:B4:CD:6F:EB:6C:5F:D6:B3:D2:56:AF:C4:61
Certificate issuer: /CN=fc282a794b3f7ab4cd6feb6c5fd6b3d256afc461
Certificate serial: 019E4E4659CC8362451D8D9CB95A1267DF52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_CgqeUs_erTNb-tsX9az0lavxGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/e485e1-a65f-43d4-b572-d3326c59bcd2/1/_CgqeUs_erTNb-tsX9az0lavxGE.mft
Manifest number: 1927
Signing time: Fri 22 May 2026 06:01:33 +0000
Manifest this update: Fri 22 May 2026 06:01:33 +0000
Manifest next update: Sat 23 May 2026 06:01:33 +0000
Files and hashes: 1: HxA8indcAYi8lBDTHZnwWgbkAio.roa (hash: em1TlDQMm/m+whiE9c240Qp5U+ubPa/+m3LSAa1d6LI=)
2: _AgXfmrENJRGa8SUzw8r4QbpeFc.roa (hash: 5DSjA+45VSfY58OSfrhbacz2KkNvODMfoUqLbPQQxis=)
3: _CgqeUs_erTNb-tsX9az0lavxGE.crl (hash: v6kmOWSQzei+wtNfH8Tzqx7POkM0gqgr/W7f08GLPbQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/e485e1-a65f-43d4-b572-d3326c59bcd2/1/_CgqeUs_erTNb-tsX9az0lavxGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/e485e1-a65f-43d4-b572-d3326c59bcd2/1/_CgqeUs_erTNb-tsX9az0lavxGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/_CgqeUs_erTNb-tsX9az0lavxGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 May 2026 06:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:4e:46:59:cc:83:62:45:1d:8d:9c:b9:5a:12:67:df:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc282a794b3f7ab4cd6feb6c5fd6b3d256afc461
Validity
Not Before: May 22 06:01:33 2026 GMT
Not After : May 23 06:01:33 2026 GMT
Subject: CN=40fc648077ecda5c10e830998f352a66c9bcbc33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:76:15:98:12:15:80:9e:b4:3b:de:e7:16:d9:
4b:b2:f3:9a:7a:63:3e:0d:1c:0e:a2:f9:7f:d5:b5:
0a:76:d7:f2:3e:96:b5:db:a6:9b:65:2a:60:bf:60:
d9:fa:34:4c:3a:d1:10:41:ed:e6:45:79:5d:1e:08:
31:82:82:a1:77:d4:35:e5:7b:1d:be:ad:65:b6:5a:
95:47:e1:9b:7f:dd:b2:ef:37:f9:c8:f5:6d:5b:8e:
24:56:9d:b4:ca:0e:c0:44:e5:b7:af:f0:ad:90:fd:
48:a7:43:57:72:9c:60:57:93:c6:aa:fe:88:6c:c1:
35:ae:ee:86:40:e3:51:b3:86:2e:34:a5:62:74:c1:
47:9d:00:d4:cb:e9:71:02:08:29:12:cf:1f:67:18:
a7:33:97:22:8b:66:19:0c:88:31:f6:64:9a:aa:67:
f3:a1:4a:39:d5:a6:70:47:b9:e5:2c:84:5c:2f:72:
8d:67:41:e3:0a:b9:cb:48:56:35:86:3d:d0:2b:7d:
60:2a:9d:2d:d0:75:54:c1:b8:eb:ee:cc:a9:f3:c0:
12:51:b5:ea:79:66:7f:76:e8:cc:91:28:ac:47:22:
a8:0f:10:b4:06:07:a0:f7:21:b0:01:a6:ad:7b:3b:
a3:ce:d1:ce:69:f4:d4:93:67:7f:31:d0:f8:b3:7c:
bc:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:FC:64:80:77:EC:DA:5C:10:E8:30:99:8F:35:2A:66:C9:BC:BC:33
X509v3 Authority Key Identifier:
keyid:FC:28:2A:79:4B:3F:7A:B4:CD:6F:EB:6C:5F:D6:B3:D2:56:AF:C4:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_CgqeUs_erTNb-tsX9az0lavxGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e485e1-a65f-43d4-b572-d3326c59bcd2/1/_CgqeUs_erTNb-tsX9az0lavxGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e485e1-a65f-43d4-b572-d3326c59bcd2/1/_CgqeUs_erTNb-tsX9az0lavxGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:a8:d6:7e:15:b6:1b:e7:95:8c:ff:51:d6:e1:8f:d3:c7:04:
7b:bb:42:51:24:b9:b2:f8:7c:75:bb:36:e4:73:b2:6a:35:56:
54:2e:a9:ea:b6:f7:f7:5f:8c:c5:fe:81:b8:9d:f5:eb:c8:b8:
86:e1:47:43:82:31:91:60:6f:f3:f8:17:aa:68:bc:94:4b:2f:
22:5f:a7:1a:f7:1b:4a:6f:f3:2a:18:58:aa:f7:a2:36:63:b3:
59:de:74:02:d5:a0:23:ab:c2:19:b0:0c:8e:d2:e7:29:5d:15:
e5:e7:aa:85:fb:c3:25:a8:c0:d7:9f:4c:07:a4:11:f1:ce:ac:
55:02:eb:4c:62:99:a5:26:bd:1d:31:58:0d:14:98:44:c4:86:
87:81:7f:e3:c7:a4:27:04:6b:95:26:ed:d9:9a:51:bb:e8:35:
46:5e:b6:ab:2c:c7:1f:8c:a8:fc:77:e0:c4:f8:e0:a4:94:a6:
12:7f:b7:6a:50:60:0a:c0:55:df:db:31:6e:8f:6d:91:27:95:
c1:ad:78:cf:d1:0d:cc:ec:37:f4:ba:ee:8a:29:e3:46:19:57:
d1:48:91:93:2b:20:ed:f1:20:50:e8:0d:8c:2d:2f:50:f5:cb:
f9:ab:5e:50:e4:7a:ba:db:ed:56:74:2c:85:4a:50:2c:a2:7d:
fb:9a:e1:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ5ORlnMg2JFHY2cuVoSZ99SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjMjgyYTc5NGIzZjdhYjRjZDZmZWI2YzVmZDZiM2QyNTZh
ZmM0NjEwHhcNMjYwNTIyMDYwMTMzWhcNMjYwNTIzMDYwMTMzWjAzMTEwLwYDVQQD
Eyg0MGZjNjQ4MDc3ZWNkYTVjMTBlODMwOTk4ZjM1MmE2NmM5YmNiYzMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4HYVmBIVgJ60O97nFtlLsvOaemM+
DRwOovl/1bUKdtfyPpa126abZSpgv2DZ+jRMOtEQQe3mRXldHggxgoKhd9Q15Xsd
vq1ltlqVR+Gbf92y7zf5yPVtW44kVp20yg7AROW3r/CtkP1Ip0NXcpxgV5PGqv6I
bME1ru6GQONRs4YuNKVidMFHnQDUy+lxAggpEs8fZxinM5cii2YZDIgx9mSaqmfz
oUo51aZwR7nlLIRcL3KNZ0HjCrnLSFY1hj3QK31gKp0t0HVUwbjr7syp88ASUbXq
eWZ/dujMkSisRyKoDxC0Bgeg9yGwAaatezujztHOafTUk2d/MdD4s3y82wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFED8ZIB37NpcEOgwmY81KmbJvLwzMB8GA1UdIwQY
MBaAFPwoKnlLP3q0zW/rbF/Ws9JWr8RhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0NncWVVc19lclROYi10c1g5YXowbGF2eEdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9lNDg1ZTEtYTY1Zi00M2Q0LWI1NzIt
ZDMzMjZjNTliY2QyLzEvX0NncWVVc19lclROYi10c1g5YXowbGF2eEdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My9lNDg1ZTEtYTY1Zi00M2Q0LWI1NzItZDMzMjZjNTliY2Qy
LzEvX0NncWVVc19lclROYi10c1g5YXowbGF2eEdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArKjWfhW2
G+eVjP9R1uGP08cEe7tCUSS5svh8dbs25HOyajVWVC6p6rb391+Mxf6BuJ3168i4
huFHQ4IxkWBv8/gXqmi8lEsvIl+nGvcbSm/zKhhYqveiNmOzWd50AtWgI6vCGbAM
jtLnKV0V5eeqhfvDJajA159MB6QR8c6sVQLrTGKZpSa9HTFYDRSYRMSGh4F/48ek
JwRrlSbt2ZpRu+g1Rl62qyzHH4yo/HfgxPjgpJSmEn+3alBgCsBV39sxbo9tkSeV
wa14z9ENzOw39LruiinjRhlX0UiRkysg7fEgUOgNjC0vUPXL+ateUOR6utvtVnQs
hUpQLKJ9+5rhjg==
-----END CERTIFICATE-----
Generated at Fri May 22 15:10:39 2026 by rpki-client