Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b5/8565ca-e10b-4232-8047-f3f901821d48/1/cgFNnBVH2ir3gIyiI8zehKJ5OLU.mft
File: cgFNnBVH2ir3gIyiI8zehKJ5OLU.mft (raw, json)
Hash identifier: 8uShOel6HsXh4ewQfxpXDfFLtt5mQUUGZp+8Uxy8m2E=
Subject key identifier: 6B:CA:7B:F3:AB:D7:45:CB:E6:2C:45:98:39:36:29:D6:9A:A6:DD:EB
Authority key identifier: 72:01:4D:9C:15:47:DA:2A:F7:80:8C:A2:23:CC:DE:84:A2:79:38:B5
Certificate issuer: /CN=72014d9c1547da2af7808ca223ccde84a27938b5
Certificate serial: 01A1637C685AE5F4708E6D48D6E148126D70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgFNnBVH2ir3gIyiI8zehKJ5OLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/8565ca-e10b-4232-8047-f3f901821d48/1/cgFNnBVH2ir3gIyiI8zehKJ5OLU.mft
Manifest number: 1C
Signing time: Thu 22 Oct 2026 12:00:59 +0000
Manifest this update: Thu 22 Oct 2026 12:00:59 +0000
Manifest next update: Fri 23 Oct 2026 12:00:59 +0000
Files and hashes: 1: DGBA7EcZMBsvNb1w2PlItKH4vpE.roa (hash: Ms6Vpa9zG/FDK2iOZIjXXHy7xjkJVqZKf2yBvPiWrl0=)
2: cgFNnBVH2ir3gIyiI8zehKJ5OLU.crl (hash: swKo9GAS0QVp7lb7iSkXuD9eMlYGX23ySD4MW9MSFJE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/8565ca-e10b-4232-8047-f3f901821d48/1/cgFNnBVH2ir3gIyiI8zehKJ5OLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/8565ca-e10b-4232-8047-f3f901821d48/1/cgFNnBVH2ir3gIyiI8zehKJ5OLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/cgFNnBVH2ir3gIyiI8zehKJ5OLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:63:7c:68:5a:e5:f4:70:8e:6d:48:d6:e1:48:12:6d:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72014d9c1547da2af7808ca223ccde84a27938b5
Validity
Not Before: Oct 22 12:00:59 2026 GMT
Not After : Oct 23 12:00:59 2026 GMT
Subject: CN=6bca7bf3abd745cbe62c4598393629d69aa6ddeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:4e:45:c9:4f:8b:2c:fb:58:b2:f6:fa:de:4b:
b1:71:6d:c9:05:e4:27:1d:89:7e:1f:77:a1:c4:02:
3d:4c:30:42:20:11:0d:bd:2f:05:fa:ab:28:2d:18:
a9:10:82:ce:d6:2f:e2:fe:e4:b0:df:fd:e6:1c:c2:
3d:7d:51:97:32:7c:1a:44:f9:41:50:eb:16:24:62:
1d:46:c5:d9:51:79:35:24:7b:80:0e:ee:20:83:30:
4c:03:8e:bf:8e:d4:ed:53:27:09:50:2d:76:12:61:
33:15:f7:75:ff:98:b7:9d:1c:2b:c9:b5:7b:93:ac:
dc:f0:53:58:7e:fd:12:26:71:dc:0d:3d:b6:2a:46:
a5:33:ba:e2:4f:f4:ae:f6:c7:81:78:9d:92:0a:48:
45:cf:76:d2:08:60:38:f9:ef:87:60:b7:e7:dc:71:
95:ff:fb:a8:93:1e:a0:a5:e9:fe:9b:83:fe:f7:4e:
df:3d:1e:60:54:09:ad:87:42:99:36:8c:00:1f:2c:
44:e4:69:4a:2f:0b:fd:ba:72:60:45:da:b3:20:e9:
51:b8:20:f8:37:47:00:6f:77:22:dd:b9:33:0d:80:
74:df:ce:ba:c0:17:2e:b7:15:60:e1:a4:0a:4f:db:
66:ec:ab:f2:a7:a7:f5:b1:fa:34:e1:5e:fa:f0:ef:
da:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:CA:7B:F3:AB:D7:45:CB:E6:2C:45:98:39:36:29:D6:9A:A6:DD:EB
X509v3 Authority Key Identifier:
keyid:72:01:4D:9C:15:47:DA:2A:F7:80:8C:A2:23:CC:DE:84:A2:79:38:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgFNnBVH2ir3gIyiI8zehKJ5OLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/8565ca-e10b-4232-8047-f3f901821d48/1/cgFNnBVH2ir3gIyiI8zehKJ5OLU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/8565ca-e10b-4232-8047-f3f901821d48/1/cgFNnBVH2ir3gIyiI8zehKJ5OLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:b0:c1:f6:52:9c:ba:1b:e1:75:12:63:9e:b0:cb:84:20:00:
71:f5:5a:4b:cc:85:76:36:4e:0c:df:8c:a1:ea:c1:f4:5a:98:
04:20:01:99:84:4a:66:bb:0f:8a:8a:e4:01:7c:01:f5:7f:dd:
e9:0d:93:5c:8f:e1:eb:92:2b:79:5f:f0:20:65:5d:1d:3f:6e:
ee:c1:3a:d8:48:a2:49:0f:63:58:df:22:b9:a3:e8:18:f0:91:
89:28:7e:5a:43:a6:c2:fa:06:47:29:2d:fd:4b:36:91:14:f9:
5b:84:5d:d4:f1:cd:33:92:35:a7:86:8c:6f:b7:41:77:8e:ce:
33:4b:29:21:14:c4:cb:f0:e3:52:c7:e5:07:75:3d:1f:07:da:
30:ae:88:64:52:ba:be:28:31:64:55:55:ef:0d:3e:e8:64:ba:
10:ed:78:6d:da:8f:83:2f:eb:83:19:bb:18:dc:95:bf:65:d0:
41:87:83:6e:4f:46:b1:3f:25:00:ed:2c:95:38:fb:4b:05:a7:
ab:df:9c:a3:8a:e8:ba:5e:20:b4:d5:11:dd:aa:bc:8b:6f:d2:
8c:52:f6:8b:85:7c:93:9c:01:2c:96:80:1d:6a:b5:b5:da:88:
ce:a1:f2:39:ae:dd:8e:25:1f:19:20:02:41:d6:49:5b:14:84:
6e:b2:7d:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 17:51:59 2026 by rpki-client