Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/cgSGQdj3M3_OojrlMyv24RoR4io.mft
File: cgSGQdj3M3_OojrlMyv24RoR4io.mft (raw, json)
Hash identifier: TGjB7yM0mJUBR3ti3qL5Ef3iSMXiPc0Dr8d5p+Notec=
Subject key identifier: 74:D5:71:29:6E:F1:E2:FD:C7:B5:52:FB:66:7D:1F:2F:5D:6F:21:CB
Authority key identifier: 72:04:86:41:D8:F7:33:7F:CE:A2:3A:E5:33:2B:F6:E1:1A:11:E2:2A
Certificate issuer: /CN=72048641d8f7337fcea23ae5332bf6e11a11e22a
Certificate serial: 01A17F61B764EB1B2D0097F2846AD1DA1D63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgSGQdj3M3_OojrlMyv24RoR4io.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/cgSGQdj3M3_OojrlMyv24RoR4io.mft
Manifest number: 1A5A
Signing time: Tue 27 Oct 2026 22:01:12 +0000
Manifest this update: Tue 27 Oct 2026 22:01:12 +0000
Manifest next update: Wed 28 Oct 2026 22:01:12 +0000
Files and hashes: 1: Jl68zYVqXRal67PopoREeqdxbg8.roa (hash: xD50qSlfLrwmHdVWTozHtqTpDA+X5IuU1okzXOkjlqM=)
2: cgSGQdj3M3_OojrlMyv24RoR4io.crl (hash: EBhxVfX83JmCriDDHSPiCqGNmdmGHLmJHe1D8gu2zVY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/cgSGQdj3M3_OojrlMyv24RoR4io.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/cgSGQdj3M3_OojrlMyv24RoR4io.mft
rsync://rpki.ripe.net/repository/DEFAULT/cgSGQdj3M3_OojrlMyv24RoR4io.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7f:61:b7:64:eb:1b:2d:00:97:f2:84:6a:d1:da:1d:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72048641d8f7337fcea23ae5332bf6e11a11e22a
Validity
Not Before: Oct 27 22:01:12 2026 GMT
Not After : Oct 28 22:01:12 2026 GMT
Subject: CN=74d571296ef1e2fdc7b552fb667d1f2f5d6f21cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:63:af:24:8b:b6:7b:04:08:84:17:7d:40:85:
a4:26:7c:3a:37:60:76:db:ce:81:22:3e:c8:1a:96:
52:c1:42:52:13:ff:14:c8:7b:65:a1:b0:68:74:e6:
b0:b3:76:76:0b:d1:ab:dc:6f:72:53:9d:31:6c:f7:
64:80:44:be:fc:00:15:a1:59:40:11:d1:7f:86:8e:
79:65:01:7f:99:3a:fe:3f:ec:34:1c:9b:04:90:48:
a7:47:fe:c6:59:5b:04:bf:63:a5:f3:3d:c2:14:fd:
87:b3:bb:fe:c6:2c:81:76:6c:cb:a3:d4:06:75:f8:
b6:bc:14:5d:98:2f:f4:c7:9f:77:64:da:e1:55:31:
4c:1f:66:2a:0d:b4:30:8f:cf:a4:04:64:a2:4e:f2:
31:57:ef:aa:a6:63:71:c5:62:08:15:c0:cd:76:1e:
7c:49:eb:ed:07:33:b3:06:fe:b8:08:98:3b:bc:02:
40:07:00:42:0f:03:80:0c:ec:06:b5:8f:d7:60:32:
e6:d1:6e:0c:22:c7:81:ca:93:ae:7f:6d:90:cc:b9:
5c:94:e3:31:47:91:16:9b:5d:c0:b2:87:23:65:e1:
47:ef:9b:41:ea:25:9b:43:84:b4:37:aa:22:49:c3:
7f:11:12:ec:18:6a:5e:fa:14:9b:47:98:8c:dc:7d:
97:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:D5:71:29:6E:F1:E2:FD:C7:B5:52:FB:66:7D:1F:2F:5D:6F:21:CB
X509v3 Authority Key Identifier:
keyid:72:04:86:41:D8:F7:33:7F:CE:A2:3A:E5:33:2B:F6:E1:1A:11:E2:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgSGQdj3M3_OojrlMyv24RoR4io.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/cgSGQdj3M3_OojrlMyv24RoR4io.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/cgSGQdj3M3_OojrlMyv24RoR4io.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:05:ae:74:5b:4f:dd:89:8c:40:81:dc:86:8d:33:26:a7:fe:
7e:5b:cb:e7:30:ee:91:32:53:1d:79:54:59:28:bc:99:93:9a:
bb:40:e9:93:14:46:5e:61:99:8a:7b:23:a1:1d:d1:f7:2c:58:
83:36:75:f6:bc:27:66:b6:fb:3c:99:3b:fa:57:88:c5:7b:6b:
41:79:d7:42:2e:42:8d:53:78:89:24:d3:26:5b:35:67:6b:1c:
81:89:33:ce:26:c1:49:8b:45:90:fe:25:75:a2:bd:a0:fa:8b:
97:e9:65:f3:14:45:2c:69:1b:83:07:89:e1:9e:f0:05:a9:21:
0a:06:c1:ce:d2:1e:53:7a:f9:61:3d:75:ba:fb:40:6a:79:3c:
b7:03:76:0e:8b:1b:1b:e8:b2:d4:cc:46:a3:13:23:c7:c1:9b:
4b:07:63:df:c5:26:77:b3:36:a9:6a:37:39:ba:ce:dc:aa:7a:
c7:e3:ec:e2:2a:50:f7:68:48:79:e6:10:93:16:f9:5f:ea:cf:
f0:f4:6e:42:c9:e1:e0:96:19:9b:0f:30:05:0e:12:b3:43:a6:
56:e3:6c:96:e4:f0:26:61:e0:3f:38:5b:ee:52:5d:6d:7d:0d:
e4:1a:c1:3b:0a:7d:db:19:ef:b1:c7:98:1e:da:2f:b8:6a:cf:
5b:be:5b:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 02:24:15 2026 by rpki-client