Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/b4daf6-448d-4f3e-944a-573ca5a609c0/1/cgmO-q6AY8rOzE8cGgtkSDu2lQM.mft
File: cgmO-q6AY8rOzE8cGgtkSDu2lQM.mft (raw, json)
Hash identifier: nAaBprjtK+ZeZEaL9/mp75Set8IhjG7iPrPcyMnwC1I=
Subject key identifier: 37:DA:A5:0D:47:13:C2:3B:21:CC:E0:4F:B6:C9:E3:C5:71:04:1C:AD
Authority key identifier: 72:09:8E:FA:AE:80:63:CA:CE:CC:4F:1C:1A:0B:64:48:3B:B6:95:03
Certificate issuer: /CN=72098efaae8063cacecc4f1c1a0b64483bb69503
Certificate serial: 019D389BD79A51F6A43D53A10D8FF146F98B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgmO-q6AY8rOzE8cGgtkSDu2lQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/b4daf6-448d-4f3e-944a-573ca5a609c0/1/cgmO-q6AY8rOzE8cGgtkSDu2lQM.mft
Manifest number: 1893
Signing time: Sun 29 Mar 2026 08:00:30 +0000
Manifest this update: Sun 29 Mar 2026 08:00:30 +0000
Manifest next update: Mon 30 Mar 2026 08:00:30 +0000
Files and hashes: 1: VMe8OCfr_t5HXDVBLz0rgr2gaks.roa (hash: MtaQQQY5h3OtFKTOTJxg1rBiAaAsL5LhtWeLWQJUvu4=)
2: cgmO-q6AY8rOzE8cGgtkSDu2lQM.crl (hash: qjCfpyjVFqZn9AGGIRk0KaaeHNsBcYJr6maZG45Pnpc=)
3: gJdGEOm66NFVTNBH0oAB9H2an10.roa (hash: jpFzkrgSWLBJPoSMspVLyUPGM0QAIkxfsEyy3UC+Dkw=)
4: iGk2rj8YCAdm3k7BovgsXR_S-tk.roa (hash: Oc1cepzzGPdaTQr0Qpo8rTuwZycHeTEsjdA+8mq9b1M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/b4daf6-448d-4f3e-944a-573ca5a609c0/1/cgmO-q6AY8rOzE8cGgtkSDu2lQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/b4daf6-448d-4f3e-944a-573ca5a609c0/1/cgmO-q6AY8rOzE8cGgtkSDu2lQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/cgmO-q6AY8rOzE8cGgtkSDu2lQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:d7:9a:51:f6:a4:3d:53:a1:0d:8f:f1:46:f9:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72098efaae8063cacecc4f1c1a0b64483bb69503
Validity
Not Before: Mar 29 08:00:30 2026 GMT
Not After : Mar 30 08:00:30 2026 GMT
Subject: CN=37daa50d4713c23b21cce04fb6c9e3c571041cad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:0d:3a:d3:0e:32:a3:3d:99:1d:91:05:ea:ad:
60:5a:d4:52:62:34:fa:d9:65:4a:95:6a:84:06:dc:
44:5c:64:6c:98:ea:b9:3f:cb:f1:3d:a1:91:43:bd:
29:1f:d6:6f:81:8c:9e:36:0e:4e:af:ef:92:f6:d8:
cc:e6:a1:e4:64:b4:dd:77:da:41:81:12:11:0a:55:
14:97:ac:fd:ad:c9:d9:54:78:c0:98:e9:34:0d:75:
92:f4:2b:1b:4f:85:49:2b:18:fc:ba:03:2f:b6:5b:
0f:2f:91:2f:7b:89:3e:ee:fb:04:ce:c1:45:8a:6b:
c9:6c:7e:14:af:cc:f9:60:88:c2:50:78:4a:aa:e0:
e1:1c:44:e2:fa:da:1a:79:e9:8c:a7:d2:c3:f7:89:
be:ed:bc:a1:90:8e:48:29:1d:88:f6:ff:fb:f4:03:
e8:a5:ec:12:0d:9a:dc:c2:9a:3d:78:f1:7d:0c:ba:
03:e8:44:9f:de:e4:f5:1b:fb:97:20:04:31:0a:6c:
ed:43:6d:4f:32:5e:1a:48:7a:87:98:2f:2e:c0:a7:
90:fa:63:c4:a4:e5:18:b7:70:70:e5:be:93:55:ec:
e2:64:76:88:e4:3f:aa:8f:d7:c5:4f:e2:87:98:35:
31:ef:65:78:ac:c9:e8:95:29:5e:e7:b7:cc:8c:eb:
9f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:DA:A5:0D:47:13:C2:3B:21:CC:E0:4F:B6:C9:E3:C5:71:04:1C:AD
X509v3 Authority Key Identifier:
keyid:72:09:8E:FA:AE:80:63:CA:CE:CC:4F:1C:1A:0B:64:48:3B:B6:95:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgmO-q6AY8rOzE8cGgtkSDu2lQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4daf6-448d-4f3e-944a-573ca5a609c0/1/cgmO-q6AY8rOzE8cGgtkSDu2lQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4daf6-448d-4f3e-944a-573ca5a609c0/1/cgmO-q6AY8rOzE8cGgtkSDu2lQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:d9:ea:4a:92:82:f1:bf:55:84:dd:73:5a:f0:ae:b3:2e:50:
48:09:02:7a:5a:fc:43:ae:15:c7:a0:a5:c4:dd:6d:5c:bd:10:
54:84:09:27:d6:c8:b4:36:b7:a8:a6:2f:80:0f:b2:57:1a:31:
9c:fd:8c:ab:c9:6a:cf:88:41:30:04:2b:7d:4c:9b:9c:54:f8:
5e:51:94:77:16:84:41:8f:d4:26:d9:1c:aa:ef:01:61:a7:29:
7b:fd:c1:15:75:b6:eb:25:5f:9a:b1:2e:9e:db:78:37:d2:29:
73:d2:93:7e:cb:eb:9c:b6:01:c7:2f:bb:21:a0:22:b2:54:dc:
e8:9c:7a:44:50:99:c7:87:a7:f2:57:c9:40:1a:12:35:b5:37:
d5:75:41:73:0a:84:d8:0e:8f:29:84:2e:16:e9:31:8f:eb:34:
f1:18:eb:5e:be:7d:25:c6:49:6d:47:2c:79:46:10:ae:86:74:
53:ae:83:bb:be:a6:ca:90:a6:d7:d6:d6:f5:c9:4d:e5:5d:b7:
b8:dd:a3:30:c4:cf:f2:2f:72:a5:4c:7d:0c:fc:95:b0:19:82:
95:7a:4a:8c:7a:8c:be:dd:6d:6c:14:e1:73:a5:00:df:bd:dd:
49:c5:cd:f8:48:3a:98:9b:95:37:d1:5b:96:00:6b:0f:6c:54:
a3:90:31:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:06:07 2026 by rpki-client