Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/cgSGQdj3M3_OojrlMyv24RoR4io.mft
File: cgSGQdj3M3_OojrlMyv24RoR4io.mft (raw, json)
Hash identifier: ctwsEeZe0M/hpygAB8LOf1VPi4Xzr1EiX9sOxghS4Gk=
Subject key identifier: 50:31:C5:57:E6:FD:D3:F0:FF:D6:23:E4:86:DE:64:5E:A7:80:8E:4C
Authority key identifier: 72:04:86:41:D8:F7:33:7F:CE:A2:3A:E5:33:2B:F6:E1:1A:11:E2:2A
Certificate issuer: /CN=72048641d8f7337fcea23ae5332bf6e11a11e22a
Certificate serial: 01A08A1E4670922FEF0B731007929E258842
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgSGQdj3M3_OojrlMyv24RoR4io.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/cgSGQdj3M3_OojrlMyv24RoR4io.mft
Manifest number: 19DB
Signing time: Thu 10 Sep 2026 07:00:34 +0000
Manifest this update: Thu 10 Sep 2026 07:00:34 +0000
Manifest next update: Fri 11 Sep 2026 07:00:34 +0000
Files and hashes: 1: Jl68zYVqXRal67PopoREeqdxbg8.roa (hash: xD50qSlfLrwmHdVWTozHtqTpDA+X5IuU1okzXOkjlqM=)
2: cgSGQdj3M3_OojrlMyv24RoR4io.crl (hash: CJxCJO370KlvB/X+6NveqLLNZ5+TofNeEpjQSJ2x8ng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/cgSGQdj3M3_OojrlMyv24RoR4io.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/cgSGQdj3M3_OojrlMyv24RoR4io.mft
rsync://rpki.ripe.net/repository/DEFAULT/cgSGQdj3M3_OojrlMyv24RoR4io.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 07:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:1e:46:70:92:2f:ef:0b:73:10:07:92:9e:25:88:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72048641d8f7337fcea23ae5332bf6e11a11e22a
Validity
Not Before: Sep 10 07:00:34 2026 GMT
Not After : Sep 11 07:00:34 2026 GMT
Subject: CN=5031c557e6fdd3f0ffd623e486de645ea7808e4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:6b:d3:3d:fb:c5:c9:74:ff:fd:40:0a:c6:0c:
73:8f:98:30:74:db:44:37:b9:a9:10:01:8f:dd:f5:
bb:ce:42:a6:e7:90:d7:c5:90:93:31:6f:19:5a:fb:
c9:38:f8:e6:44:35:c5:ee:b0:78:5d:c0:b4:92:08:
97:ef:de:00:c1:e7:b9:9d:d8:41:e1:d6:73:f1:4b:
6e:5a:d1:c6:a6:d0:9a:82:6d:c2:07:dd:79:a5:23:
a0:9c:c7:c7:51:63:cc:59:5e:59:00:15:47:e5:a7:
da:07:a8:ab:ee:38:14:ba:0d:0e:98:ea:14:d7:3f:
e9:02:e3:7b:aa:89:9a:e7:48:db:6f:cd:c2:90:75:
52:7b:9c:13:f8:d6:08:37:01:37:dc:a1:66:82:25:
54:d3:c8:4a:3d:e4:91:4d:89:cf:0f:f1:10:7a:86:
db:de:b9:7c:d9:2f:fb:1c:f3:e0:1b:be:31:2e:c5:
75:ea:ef:aa:a5:de:2e:34:08:9f:bc:f1:ee:ad:38:
18:b1:8b:79:2e:38:28:1c:d1:19:41:b8:68:24:9d:
1e:aa:f7:03:d3:d5:d9:02:e5:04:1e:eb:b7:11:61:
4c:52:9c:af:81:6f:83:ee:f1:ff:0f:c9:7b:7d:29:
b4:d2:05:39:49:90:69:ef:95:c2:d2:2d:26:78:78:
ca:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:31:C5:57:E6:FD:D3:F0:FF:D6:23:E4:86:DE:64:5E:A7:80:8E:4C
X509v3 Authority Key Identifier:
keyid:72:04:86:41:D8:F7:33:7F:CE:A2:3A:E5:33:2B:F6:E1:1A:11:E2:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgSGQdj3M3_OojrlMyv24RoR4io.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/cgSGQdj3M3_OojrlMyv24RoR4io.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/cgSGQdj3M3_OojrlMyv24RoR4io.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:ac:0f:ed:08:a0:5d:77:ed:dc:9c:dc:b1:93:b5:ea:83:9e:
88:a5:0e:df:54:e1:ba:b0:2e:86:e3:d7:ab:af:08:53:ca:ea:
60:55:23:8d:fc:05:52:7e:bd:d2:0d:a1:8c:ca:59:f9:13:18:
c3:be:08:c2:96:da:b4:40:0e:a2:12:cc:7b:4e:72:3f:ae:75:
15:1f:23:b6:38:7c:fd:89:2e:3e:b1:65:25:c6:0c:5a:59:6c:
da:5e:e3:2a:2f:70:ad:35:45:9f:4b:bb:28:bc:20:79:4c:b8:
cc:ca:da:3a:bd:c2:68:1a:18:d0:1e:7b:1a:d9:75:a8:00:23:
71:28:26:dd:3f:ce:cb:a6:2c:67:7e:1f:42:1f:ea:36:37:52:
52:b9:9e:54:26:97:c0:78:66:4c:0f:ee:b7:fa:bc:d8:12:be:
f7:03:73:88:73:ff:82:78:6e:d0:f9:a8:5e:18:59:09:2c:60:
14:97:e4:ba:53:f9:fe:4e:7b:52:a0:01:65:91:e2:2f:0a:51:
0a:63:73:1c:0c:8d:9f:61:08:aa:04:38:46:b9:74:3b:45:0e:
7d:b3:be:82:15:51:b5:90:3c:42:8c:30:29:db:e2:69:e9:d7:
e0:90:1b:4e:e5:72:54:1d:e6:8c:de:d0:d1:e9:f9:21:05:7d:
88:0a:ed:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCKHkZwki/vC3MQB5KeJYhCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ4NjQxZDhmNzMzN2ZjZWEyM2FlNTMzMmJmNmUxMWEx
MWUyMmEwHhcNMjYwOTEwMDcwMDM0WhcNMjYwOTExMDcwMDM0WjAzMTEwLwYDVQQD
Eyg1MDMxYzU1N2U2ZmRkM2YwZmZkNjIzZTQ4NmRlNjQ1ZWE3ODA4ZTRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkGvTPfvFyXT//UAKxgxzj5gwdNtE
N7mpEAGP3fW7zkKm55DXxZCTMW8ZWvvJOPjmRDXF7rB4XcC0kgiX794Awee5ndhB
4dZz8UtuWtHGptCagm3CB915pSOgnMfHUWPMWV5ZABVH5afaB6ir7jgUug0OmOoU
1z/pAuN7qoma50jbb83CkHVSe5wT+NYINwE33KFmgiVU08hKPeSRTYnPD/EQeobb
3rl82S/7HPPgG74xLsV16u+qpd4uNAifvPHurTgYsYt5LjgoHNEZQbhoJJ0eqvcD
09XZAuUEHuu3EWFMUpyvgW+D7vH/D8l7fSm00gU5SZBp75XC0i0meHjK4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFAxxVfm/dPw/9Yj5IbeZF6ngI5MMB8GA1UdIwQY
MBaAFHIEhkHY9zN/zqI65TMr9uEaEeIqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dTR1FkajNNM19Pb2pybE15djI0Um9SNGlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9kZjM3MDYtZjM0Ny00MDI1LWE3YjMt
MWM4Y2Q1NmM2MTc0LzEvY2dTR1FkajNNM19Pb2pybE15djI0Um9SNGlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC9kZjM3MDYtZjM0Ny00MDI1LWE3YjMtMWM4Y2Q1NmM2MTc0
LzEvY2dTR1FkajNNM19Pb2pybE15djI0Um9SNGlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADqwP7Qig
XXft3JzcsZO16oOeiKUO31ThurAuhuPXq68IU8rqYFUjjfwFUn690g2hjMpZ+RMY
w74IwpbatEAOohLMe05yP651FR8jtjh8/YkuPrFlJcYMWlls2l7jKi9wrTVFn0u7
KLwgeUy4zMraOr3CaBoY0B57Gtl1qAAjcSgm3T/Oy6YsZ34fQh/qNjdSUrmeVCaX
wHhmTA/ut/q82BK+9wNziHP/gnhu0PmoXhhZCSxgFJfkulP5/k57UqABZZHiLwpR
CmNzHAyNn2EIqgQ4Rrl0O0UOfbO+ghVRtZA8QowwKdviaenX4JAbTuVyVB3mjN7Q
0en5IQV9iArt/g==
-----END CERTIFICATE-----
Generated at Thu Sep 10 17:49:03 2026 by rpki-client