Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/a6dae8-d98e-4aa0-b4ad-4281e38a9bf2/1/cgxjI89zCTCgOw5EYH9v7fUnqMQ.mft
File: cgxjI89zCTCgOw5EYH9v7fUnqMQ.mft (raw, json)
Hash identifier: Wvbzxo8LpKEX7A+TQCOZUAMjRv9ClJ3M+rmtpYOc4tM=
Subject key identifier: 73:10:EC:00:0C:8D:77:3D:AE:B8:F9:42:30:64:5B:C2:6E:52:15:8A
Authority key identifier: 72:0C:63:23:CF:73:09:30:A0:3B:0E:44:60:7F:6F:ED:F5:27:A8:C4
Certificate issuer: /CN=720c6323cf730930a03b0e44607f6fedf527a8c4
Certificate serial: 019D389BADB8668953A81FE5EE5F4DB3EFA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgxjI89zCTCgOw5EYH9v7fUnqMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/a6dae8-d98e-4aa0-b4ad-4281e38a9bf2/1/cgxjI89zCTCgOw5EYH9v7fUnqMQ.mft
Manifest number: 01AC
Signing time: Sun 29 Mar 2026 08:00:19 +0000
Manifest this update: Sun 29 Mar 2026 08:00:19 +0000
Manifest next update: Mon 30 Mar 2026 08:00:19 +0000
Files and hashes: 1: cgxjI89zCTCgOw5EYH9v7fUnqMQ.crl (hash: nhKRSuwp8CCWBliuSBrX89I1ZujrxqBod5G7Q7+0HUo=)
2: xEYU-K7wenXyYwuEUiZnmFrMZac.roa (hash: gWNLlP9RhlookRQsci7JBvafArIbz1TL4llsI2fvdA0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/a6dae8-d98e-4aa0-b4ad-4281e38a9bf2/1/cgxjI89zCTCgOw5EYH9v7fUnqMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/a6dae8-d98e-4aa0-b4ad-4281e38a9bf2/1/cgxjI89zCTCgOw5EYH9v7fUnqMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/cgxjI89zCTCgOw5EYH9v7fUnqMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:ad:b8:66:89:53:a8:1f:e5:ee:5f:4d:b3:ef:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=720c6323cf730930a03b0e44607f6fedf527a8c4
Validity
Not Before: Mar 29 08:00:19 2026 GMT
Not After : Mar 30 08:00:19 2026 GMT
Subject: CN=7310ec000c8d773daeb8f94230645bc26e52158a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:5b:5e:3d:e4:2c:15:7a:cf:d3:e9:99:a2:ce:
54:e2:97:a3:d1:30:59:fd:29:b4:ac:7d:32:ab:a4:
d0:e5:d1:f4:d2:7d:4e:59:2f:27:98:d5:df:34:60:
b4:df:af:27:ac:2e:79:c2:9e:d4:03:cb:d4:48:ba:
2e:44:b6:3a:e9:31:26:f8:c5:7f:f6:99:b2:95:aa:
09:9f:aa:c3:db:19:8e:b3:13:ec:9f:b4:db:cd:b3:
ed:7d:bf:b0:01:8f:fc:dc:22:39:8a:e0:b9:b6:c1:
5d:f2:1a:64:7c:f5:cd:c1:78:e1:b6:7c:af:8b:f5:
3e:82:29:ac:4f:68:93:b9:7d:99:77:44:e2:ad:60:
44:0d:4f:a2:41:40:19:4d:02:79:de:4c:e9:a7:4c:
dc:cc:a4:89:db:2f:bf:6b:14:34:91:8a:d5:86:de:
d9:01:d4:41:fd:73:b7:1b:0e:ab:18:60:b0:5b:05:
dc:a4:97:74:3b:61:6b:6a:0b:27:00:d8:5b:0f:1b:
d9:01:ad:8a:5b:c4:c9:60:76:be:1b:79:51:84:76:
f4:e6:5e:4c:ee:d6:31:5d:83:a5:a0:e8:08:00:65:
a9:1d:25:a0:53:95:07:d8:f3:c1:ab:56:46:f7:1a:
57:17:fc:75:de:fe:86:b9:01:ce:a5:1b:3f:0c:23:
c4:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:10:EC:00:0C:8D:77:3D:AE:B8:F9:42:30:64:5B:C2:6E:52:15:8A
X509v3 Authority Key Identifier:
keyid:72:0C:63:23:CF:73:09:30:A0:3B:0E:44:60:7F:6F:ED:F5:27:A8:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgxjI89zCTCgOw5EYH9v7fUnqMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a6dae8-d98e-4aa0-b4ad-4281e38a9bf2/1/cgxjI89zCTCgOw5EYH9v7fUnqMQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a6dae8-d98e-4aa0-b4ad-4281e38a9bf2/1/cgxjI89zCTCgOw5EYH9v7fUnqMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:c2:23:5b:26:8a:6b:d6:10:42:30:47:c8:88:81:d7:3b:82:
c0:1b:dd:2b:3b:bf:c1:69:ce:3c:34:6b:6a:bf:c8:05:56:a9:
2c:92:87:e2:df:47:24:e0:8f:4e:71:ab:30:52:c4:4c:42:10:
23:e0:90:8c:34:5e:5b:61:88:43:2c:b9:61:44:2f:5a:f9:cc:
3b:d8:03:65:d1:79:e1:b4:ca:c6:84:81:5f:6a:42:93:e8:1b:
68:6b:c0:5f:fe:5c:d9:ee:14:55:90:18:72:11:c3:78:41:94:
78:e5:fc:1a:0e:40:38:5c:34:f2:5d:f7:02:b2:0a:dd:89:32:
88:f5:57:5b:c2:0d:ae:04:b1:97:3a:98:f2:ff:66:4b:45:fb:
f8:12:27:81:9e:fa:e8:7a:6d:0e:04:44:3e:27:34:4c:d9:eb:
ec:bb:79:12:6b:94:b9:6f:13:56:3d:a3:00:5d:68:a5:26:a2:
a1:33:02:7d:0d:8c:34:fc:b8:f7:58:a1:ef:af:02:76:9d:85:
0c:99:6b:df:96:9b:63:fc:0e:0c:eb:57:5f:13:a3:4b:a0:26:
78:5c:81:c8:ac:d6:28:56:dd:73:23:26:7c:73:47:91:c2:a8:
83:9a:84:9a:74:25:44:4f:fb:68:88:b6:b8:03:b7:c2:24:ba:
51:bc:b4:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:47:30 2026 by rpki-client