Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b6/a6dae8-d98e-4aa0-b4ad-4281e38a9bf2/1/cgxjI89zCTCgOw5EYH9v7fUnqMQ.mft
File: cgxjI89zCTCgOw5EYH9v7fUnqMQ.mft (raw, json)
Hash identifier: U0xFK41fLarwU0yMCQ9q6maH720TaqJkbY+TRZWzpUk=
Subject key identifier: B0:32:37:F8:4A:26:DB:07:4A:B7:E7:71:3B:C7:A2:0A:60:25:EC:21
Authority key identifier: 72:0C:63:23:CF:73:09:30:A0:3B:0E:44:60:7F:6F:ED:F5:27:A8:C4
Certificate issuer: /CN=720c6323cf730930a03b0e44607f6fedf527a8c4
Certificate serial: 01A17DAA7E1DAF8AD5CEB1C75F3B2E6019AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgxjI89zCTCgOw5EYH9v7fUnqMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/a6dae8-d98e-4aa0-b4ad-4281e38a9bf2/1/cgxjI89zCTCgOw5EYH9v7fUnqMQ.mft
Manifest number: 03E2
Signing time: Tue 27 Oct 2026 14:01:27 +0000
Manifest this update: Tue 27 Oct 2026 14:01:27 +0000
Manifest next update: Wed 28 Oct 2026 14:01:27 +0000
Files and hashes: 1: cgxjI89zCTCgOw5EYH9v7fUnqMQ.crl (hash: tkI3iqktUK+JXWeWnWF+g8Eilr9flelbMOEjvR/H3a8=)
2: xEYU-K7wenXyYwuEUiZnmFrMZac.roa (hash: gWNLlP9RhlookRQsci7JBvafArIbz1TL4llsI2fvdA0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/a6dae8-d98e-4aa0-b4ad-4281e38a9bf2/1/cgxjI89zCTCgOw5EYH9v7fUnqMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/a6dae8-d98e-4aa0-b4ad-4281e38a9bf2/1/cgxjI89zCTCgOw5EYH9v7fUnqMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/cgxjI89zCTCgOw5EYH9v7fUnqMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:aa:7e:1d:af:8a:d5:ce:b1:c7:5f:3b:2e:60:19:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=720c6323cf730930a03b0e44607f6fedf527a8c4
Validity
Not Before: Oct 27 14:01:27 2026 GMT
Not After : Oct 28 14:01:27 2026 GMT
Subject: CN=b03237f84a26db074ab7e7713bc7a20a6025ec21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:c3:b1:25:5c:2c:80:11:91:bc:4e:de:96:fc:
d1:e3:d4:75:90:8d:f6:d1:f7:e2:78:f9:97:05:f9:
e1:21:08:64:72:6f:09:8a:e1:0a:5c:28:bc:19:33:
9d:3d:eb:00:ff:56:cb:ba:8c:71:0a:20:f3:84:20:
82:5e:1e:be:3d:ca:b6:1b:45:af:44:3f:64:a4:87:
19:a2:09:12:06:5a:de:c0:dd:93:1a:8e:1b:5d:dc:
99:fd:bb:5b:a3:cc:4e:d2:dd:9b:f0:77:1e:eb:39:
bb:71:96:56:14:c6:cc:24:1a:4f:db:55:cb:8c:ef:
59:72:22:3f:e7:a3:94:0e:11:0a:35:de:f0:4b:ce:
3e:54:18:d4:be:2d:fd:2f:88:23:1b:30:df:c9:01:
5d:29:a1:fa:ef:b3:28:67:b6:49:89:12:61:14:7a:
24:e4:1a:b2:ca:3a:4f:ff:0a:e7:17:61:22:f2:fe:
5e:87:82:4c:9c:75:70:22:cf:8e:17:4f:aa:92:fb:
8f:7e:67:e6:4c:83:92:4c:e9:60:63:0f:cb:c6:71:
de:7b:ba:35:06:9c:bf:de:53:f8:69:98:9b:7b:49:
f2:1c:bd:7f:3c:13:b7:29:b2:b8:7a:8b:34:f8:90:
fa:46:ee:b1:b3:1e:82:65:c3:df:81:b7:40:25:8e:
ad:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:32:37:F8:4A:26:DB:07:4A:B7:E7:71:3B:C7:A2:0A:60:25:EC:21
X509v3 Authority Key Identifier:
keyid:72:0C:63:23:CF:73:09:30:A0:3B:0E:44:60:7F:6F:ED:F5:27:A8:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgxjI89zCTCgOw5EYH9v7fUnqMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a6dae8-d98e-4aa0-b4ad-4281e38a9bf2/1/cgxjI89zCTCgOw5EYH9v7fUnqMQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a6dae8-d98e-4aa0-b4ad-4281e38a9bf2/1/cgxjI89zCTCgOw5EYH9v7fUnqMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:b9:82:76:ab:dd:5a:44:31:6e:28:f2:89:cb:f6:b4:64:43:
b5:d7:8b:ce:c5:1b:ea:e5:02:b9:b1:c5:43:72:1e:f3:63:22:
66:98:92:5b:82:27:06:29:c3:43:7b:6b:08:c5:dd:f2:74:11:
f9:8f:5c:87:e4:ad:cc:7e:a1:16:40:91:fb:50:d2:b1:8c:c6:
3c:0c:93:39:08:fe:e3:a0:0b:12:53:07:b7:e8:be:fc:c9:85:
99:a6:56:f1:92:0d:81:7f:53:d8:47:91:2a:6d:31:81:f9:1e:
cb:e6:95:09:86:14:25:c1:52:da:37:98:ba:35:97:cc:fa:93:
46:b9:54:74:33:8b:21:90:28:97:b3:94:6f:d5:e4:bb:94:62:
7b:6b:97:7b:3c:d9:24:d0:0f:35:69:f1:5c:6d:36:79:34:c2:
bd:04:ed:1a:26:af:84:21:fd:72:4e:62:21:6b:ce:ff:04:d7:
38:62:ac:8b:6c:a0:2a:22:d7:7b:8a:dd:bf:2a:15:a2:a4:7b:
2e:2c:18:da:8b:26:df:be:2a:34:b5:c2:45:84:d9:51:a6:4e:
0f:14:0f:2a:8e:e9:6d:92:84:b2:2e:89:f7:50:5b:78:51:32:
89:d1:77:e7:f0:c2:fa:72:31:51:b4:c6:b8:73:62:bc:a2:38:
42:39:46:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 16:59:12 2026 by rpki-client