Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b5/8565ca-e10b-4232-8047-f3f901821d48/1/cgFNnBVH2ir3gIyiI8zehKJ5OLU.mft
File: cgFNnBVH2ir3gIyiI8zehKJ5OLU.mft (raw, json)
Hash identifier: yWyy5Y0HZeZAc+T12KmVmAbqYSFdWHIoKfFAK3qtuiU=
Subject key identifier: 57:25:14:40:5A:89:50:23:A6:11:C8:A2:B5:B6:92:84:1A:51:89:A8
Authority key identifier: 72:01:4D:9C:15:47:DA:2A:F7:80:8C:A2:23:CC:DE:84:A2:79:38:B5
Certificate issuer: /CN=72014d9c1547da2af7808ca223ccde84a27938b5
Certificate serial: 01A1656A9BF4266E515116E9F35CC10B6AC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgFNnBVH2ir3gIyiI8zehKJ5OLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/8565ca-e10b-4232-8047-f3f901821d48/1/cgFNnBVH2ir3gIyiI8zehKJ5OLU.mft
Manifest number: 1D
Signing time: Thu 22 Oct 2026 21:00:47 +0000
Manifest this update: Thu 22 Oct 2026 21:00:47 +0000
Manifest next update: Fri 23 Oct 2026 21:00:47 +0000
Files and hashes: 1: DGBA7EcZMBsvNb1w2PlItKH4vpE.roa (hash: Ms6Vpa9zG/FDK2iOZIjXXHy7xjkJVqZKf2yBvPiWrl0=)
2: cgFNnBVH2ir3gIyiI8zehKJ5OLU.crl (hash: sQF+sxsh+aTYpWDzbfdJMZac+afM7MLwVOLBCZpSsyM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/8565ca-e10b-4232-8047-f3f901821d48/1/cgFNnBVH2ir3gIyiI8zehKJ5OLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/8565ca-e10b-4232-8047-f3f901821d48/1/cgFNnBVH2ir3gIyiI8zehKJ5OLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/cgFNnBVH2ir3gIyiI8zehKJ5OLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 17:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:65:6a:9b:f4:26:6e:51:51:16:e9:f3:5c:c1:0b:6a:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72014d9c1547da2af7808ca223ccde84a27938b5
Validity
Not Before: Oct 22 21:00:47 2026 GMT
Not After : Oct 23 21:00:47 2026 GMT
Subject: CN=572514405a895023a611c8a2b5b692841a5189a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:07:c3:e1:7a:f8:03:92:8e:67:b7:cc:42:28:
04:6f:ee:7d:ec:2e:8c:50:b5:dd:ff:ec:f2:30:c2:
9a:c7:cf:87:d8:cd:1f:90:a4:37:27:ae:c3:d1:74:
ac:59:6c:d5:9f:10:e7:bb:55:e5:b2:ef:01:89:fe:
12:c1:37:5e:bd:1c:1e:5f:63:ad:c5:62:45:e7:71:
51:f3:3f:25:79:a7:36:01:3f:d7:a9:cf:77:2a:22:
8b:65:4b:41:1a:be:47:80:48:2a:df:64:5f:7a:ac:
f0:3f:a0:da:0a:f3:e1:62:84:a9:7c:e3:21:b4:b0:
f2:ee:68:72:b4:af:fa:2f:62:6e:d4:dc:6d:d4:01:
05:0f:6a:6f:66:20:d3:8f:cd:72:f3:15:ee:71:c5:
4e:68:84:75:52:45:45:b6:c5:ff:dc:8b:b8:8a:10:
51:76:66:47:2b:40:bf:6b:1d:5f:57:6e:37:28:36:
b6:08:5a:c0:75:35:8d:0c:6c:c9:47:77:f5:3f:14:
d5:cc:6b:2b:e8:ba:1c:5c:88:4d:65:b1:d6:aa:2f:
49:12:f1:d2:01:3f:c4:d2:6d:1f:50:94:1e:18:3e:
88:b8:1d:63:0e:08:fd:8d:bd:fa:83:bb:37:c8:f1:
e1:57:29:42:2a:54:34:5c:66:9a:18:4d:b2:9e:85:
47:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:25:14:40:5A:89:50:23:A6:11:C8:A2:B5:B6:92:84:1A:51:89:A8
X509v3 Authority Key Identifier:
keyid:72:01:4D:9C:15:47:DA:2A:F7:80:8C:A2:23:CC:DE:84:A2:79:38:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgFNnBVH2ir3gIyiI8zehKJ5OLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/8565ca-e10b-4232-8047-f3f901821d48/1/cgFNnBVH2ir3gIyiI8zehKJ5OLU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/8565ca-e10b-4232-8047-f3f901821d48/1/cgFNnBVH2ir3gIyiI8zehKJ5OLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:89:a5:af:c9:74:8f:5e:5f:76:9a:55:3c:55:ee:f2:0a:54:
6a:f9:40:f5:e9:c2:b5:50:55:4b:1b:bf:42:08:e5:b9:3c:f0:
41:5f:a5:6d:7b:88:d6:f6:28:00:fe:6d:26:7d:74:d6:0b:2e:
4a:da:98:f3:e1:20:c1:28:6c:c5:48:3b:b7:52:1d:87:89:56:
ac:e0:c4:6b:f5:1d:a1:17:c6:f8:be:dc:21:19:d9:af:3e:d1:
c5:9e:8a:45:27:1b:6d:10:24:34:4f:ca:05:fe:40:85:20:11:
17:0b:e4:9b:d1:ac:b5:c8:47:38:0a:df:7b:cf:94:fb:12:23:
b9:59:f0:8e:20:99:46:eb:7e:49:54:ee:66:24:23:ab:4d:4b:
02:d8:6a:0d:20:b9:80:9b:5b:e3:81:5c:10:98:68:77:1e:ac:
c2:49:94:bf:14:05:ad:6e:db:6e:dd:67:d5:12:c3:49:32:78:
7c:4b:11:36:ad:3b:94:e0:ba:f7:46:5d:12:f2:95:33:d2:1b:
f2:7f:c0:98:05:72:25:c5:c0:e7:97:cb:11:46:32:c3:6a:e1:
fc:00:e3:56:83:0a:57:6f:6b:bc:e8:d3:6e:03:df:38:cf:48:
24:d4:42:cf:66:7a:65:f1:a9:9e:83:5c:9e:6a:7c:aa:39:6e:
49:16:6d:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFlapv0Jm5RURbp81zBC2rJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDE0ZDljMTU0N2RhMmFmNzgwOGNhMjIzY2NkZTg0YTI3
OTM4YjUwHhcNMjYxMDIyMjEwMDQ3WhcNMjYxMDIzMjEwMDQ3WjAzMTEwLwYDVQQD
Eyg1NzI1MTQ0MDVhODk1MDIzYTYxMWM4YTJiNWI2OTI4NDFhNTE4OWE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlwfD4Xr4A5KOZ7fMQigEb+597C6M
ULXd/+zyMMKax8+H2M0fkKQ3J67D0XSsWWzVnxDnu1Xlsu8Bif4SwTdevRweX2Ot
xWJF53FR8z8leac2AT/Xqc93KiKLZUtBGr5HgEgq32RfeqzwP6DaCvPhYoSpfOMh
tLDy7mhytK/6L2Ju1Nxt1AEFD2pvZiDTj81y8xXuccVOaIR1UkVFtsX/3Iu4ihBR
dmZHK0C/ax1fV243KDa2CFrAdTWNDGzJR3f1PxTVzGsr6LocXIhNZbHWqi9JEvHS
AT/E0m0fUJQeGD6IuB1jDgj9jb36g7s3yPHhVylCKlQ0XGaaGE2ynoVHvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFclFEBaiVAjphHIorW2koQaUYmoMB8GA1UdIwQY
MBaAFHIBTZwVR9oq94CMoiPM3oSieTi1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dGTm5CVkgyaXIzZ0l5aUk4emVoS0o1T0xVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS84NTY1Y2EtZTEwYi00MjMyLTgwNDct
ZjNmOTAxODIxZDQ4LzEvY2dGTm5CVkgyaXIzZ0l5aUk4emVoS0o1T0xVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS84NTY1Y2EtZTEwYi00MjMyLTgwNDctZjNmOTAxODIxZDQ4
LzEvY2dGTm5CVkgyaXIzZ0l5aUk4emVoS0o1T0xVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXImlr8l0
j15fdppVPFXu8gpUavlA9enCtVBVSxu/QgjluTzwQV+lbXuI1vYoAP5tJn101gsu
StqY8+EgwShsxUg7t1Idh4lWrODEa/UdoRfG+L7cIRnZrz7RxZ6KRScbbRAkNE/K
Bf5AhSARFwvkm9GstchHOArfe8+U+xIjuVnwjiCZRut+SVTuZiQjq01LAthqDSC5
gJtb44FcEJhodx6swkmUvxQFrW7bbt1n1RLDSTJ4fEsRNq07lOC690ZdEvKVM9Ib
8n/AmAVyJcXA55fLEUYyw2rh/ADjVoMKV29rvOjTbgPfOM9IJNRCz2Z6ZfGpnoNc
nmp8qjluSRZtSw==
-----END CERTIFICATE-----
Generated at Fri Oct 23 01:20:15 2026 by rpki-client