Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/cgSGQdj3M3_OojrlMyv24RoR4io.mft
File: cgSGQdj3M3_OojrlMyv24RoR4io.mft (raw, json)
Hash identifier: 1AsxTu3em+pSjKL2If223fBzCRDE4Be03XJd+ryClV0=
Subject key identifier: 38:20:11:C1:AF:DE:1D:16:DA:42:FC:5B:88:9A:D1:EE:2C:86:F5:2B
Authority key identifier: 72:04:86:41:D8:F7:33:7F:CE:A2:3A:E5:33:2B:F6:E1:1A:11:E2:2A
Certificate issuer: /CN=72048641d8f7337fcea23ae5332bf6e11a11e22a
Certificate serial: 019DD0198BF779B5D96DF33E46A3E7E2AACA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgSGQdj3M3_OojrlMyv24RoR4io.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/cgSGQdj3M3_OojrlMyv24RoR4io.mft
Manifest number: 1871
Signing time: Mon 27 Apr 2026 18:00:28 +0000
Manifest this update: Mon 27 Apr 2026 18:00:28 +0000
Manifest next update: Tue 28 Apr 2026 18:00:28 +0000
Files and hashes: 1: Jl68zYVqXRal67PopoREeqdxbg8.roa (hash: xD50qSlfLrwmHdVWTozHtqTpDA+X5IuU1okzXOkjlqM=)
2: UKyAXaXI_RgZmsQiZ2Wkng394Hs.roa (hash: cJqApiAQC0vkIOP1XsZGHhIZOCWBHw73NHuSL/144Ig=)
3: cgSGQdj3M3_OojrlMyv24RoR4io.crl (hash: s6dxNRil1cR8vYScVp2LWrmgJS8zrygJ/nyj1t4PtW0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/cgSGQdj3M3_OojrlMyv24RoR4io.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/cgSGQdj3M3_OojrlMyv24RoR4io.mft
rsync://rpki.ripe.net/repository/DEFAULT/cgSGQdj3M3_OojrlMyv24RoR4io.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d0:19:8b:f7:79:b5:d9:6d:f3:3e:46:a3:e7:e2:aa:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72048641d8f7337fcea23ae5332bf6e11a11e22a
Validity
Not Before: Apr 27 18:00:28 2026 GMT
Not After : Apr 28 18:00:28 2026 GMT
Subject: CN=382011c1afde1d16da42fc5b889ad1ee2c86f52b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4e:90:3f:6b:90:c6:88:a4:f0:9c:9e:7f:c7:
45:01:b7:a8:15:80:9d:70:36:9b:3b:57:2f:95:2f:
43:36:00:a2:ed:92:6a:48:73:76:47:f7:ac:33:84:
b1:ea:68:38:21:e4:1e:d3:76:ea:d5:9a:55:b6:1a:
c2:39:ab:be:41:10:ba:e6:6b:dd:71:be:22:5d:0f:
df:0d:f5:13:43:87:25:a0:c7:c5:6d:1b:a9:9b:df:
9b:a2:00:b2:4a:2e:56:da:e4:8e:14:5c:d4:88:97:
07:ca:3c:27:cf:81:a9:70:a0:e5:70:21:fd:a4:95:
c1:0d:d5:9a:d9:b7:8e:72:21:c5:9b:0a:20:82:26:
2f:c8:ac:d7:82:d3:80:46:2e:89:ba:a3:20:54:d5:
f0:a6:93:96:53:05:1c:ec:49:2c:f9:9a:8c:0e:07:
dd:bd:a8:01:69:5c:d0:d3:75:15:8c:65:b2:d7:89:
ac:92:e0:83:45:aa:0a:00:3e:99:22:99:6a:14:95:
62:99:0e:1c:4a:7c:8b:9e:a3:1e:ea:9b:07:b8:cc:
70:ec:5e:df:b6:7e:8d:25:ea:f4:57:ca:ae:4e:f0:
d0:25:83:c9:9b:94:85:05:c6:c3:72:fb:ff:89:d9:
d1:95:1c:b4:18:a8:1f:2e:6f:ae:e4:29:d9:83:c7:
bb:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:20:11:C1:AF:DE:1D:16:DA:42:FC:5B:88:9A:D1:EE:2C:86:F5:2B
X509v3 Authority Key Identifier:
keyid:72:04:86:41:D8:F7:33:7F:CE:A2:3A:E5:33:2B:F6:E1:1A:11:E2:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgSGQdj3M3_OojrlMyv24RoR4io.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/cgSGQdj3M3_OojrlMyv24RoR4io.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/cgSGQdj3M3_OojrlMyv24RoR4io.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:d0:17:0b:62:4f:45:34:50:01:d1:ab:0d:5d:ad:a7:b8:57:
04:ae:d4:ae:9c:e4:ec:e4:36:db:ef:1d:a7:0b:66:d7:51:11:
86:2f:6e:52:71:3d:a9:e0:d2:48:c6:c2:5e:fc:ef:3b:0f:ba:
a0:0c:ee:68:54:f2:c2:82:43:33:96:43:a9:df:1d:d4:dd:ff:
c9:af:aa:e7:94:35:11:58:85:8e:41:ff:3e:f4:e0:b0:81:35:
1d:53:ed:4f:0d:dc:d7:9e:1e:da:13:fb:ed:a5:c5:47:8a:22:
70:f1:d5:80:06:80:db:f9:05:84:56:9a:da:17:0d:2b:1f:c4:
c6:26:a3:1e:41:26:09:94:a0:a5:5d:ff:4d:de:d2:91:07:ac:
23:52:97:1c:4a:5c:08:2b:35:63:7b:4e:10:9a:0e:2f:e0:fc:
2b:f0:18:50:d6:c1:b0:a4:20:c1:0a:e1:85:ae:8f:69:ae:03:
3d:c5:37:7d:2e:2e:67:6f:3c:91:c2:95:45:f0:8c:fd:5b:cf:
1a:c6:4a:6c:42:49:2e:b4:7f:96:4d:a9:86:34:2f:82:14:39:
ac:27:d0:26:11:1e:de:ed:71:71:e3:59:47:08:55:f6:9f:b6:
30:41:1b:e2:db:df:f3:78:37:9a:81:53:06:4b:ac:5c:6b:b7:
c6:f4:c9:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 03:24:30 2026 by rpki-client