Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/cgSGQdj3M3_OojrlMyv24RoR4io.mft
File: cgSGQdj3M3_OojrlMyv24RoR4io.mft (raw, json)
Hash identifier: Pw8FZz+zLrPlD+9iiHWEWRb3A4DtTGVgO9J+lo68VH4=
Subject key identifier: 98:6F:5B:61:1E:B3:58:B7:B0:F6:7F:01:B7:46:FD:6B:52:DB:3E:37
Authority key identifier: 72:04:86:41:D8:F7:33:7F:CE:A2:3A:E5:33:2B:F6:E1:1A:11:E2:2A
Certificate issuer: /CN=72048641d8f7337fcea23ae5332bf6e11a11e22a
Certificate serial: 019FA184AD57190AED626FA92BFD75D324F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgSGQdj3M3_OojrlMyv24RoR4io.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/cgSGQdj3M3_OojrlMyv24RoR4io.mft
Manifest number: 1962
Signing time: Mon 27 Jul 2026 03:00:54 +0000
Manifest this update: Mon 27 Jul 2026 03:00:54 +0000
Manifest next update: Tue 28 Jul 2026 03:00:54 +0000
Files and hashes: 1: Jl68zYVqXRal67PopoREeqdxbg8.roa (hash: xD50qSlfLrwmHdVWTozHtqTpDA+X5IuU1okzXOkjlqM=)
2: UKyAXaXI_RgZmsQiZ2Wkng394Hs.roa (hash: cJqApiAQC0vkIOP1XsZGHhIZOCWBHw73NHuSL/144Ig=)
3: cgSGQdj3M3_OojrlMyv24RoR4io.crl (hash: CWW9yAG7XuqtbQEHvuE4UC7dtsWevo0vI6UDu36QOQQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/cgSGQdj3M3_OojrlMyv24RoR4io.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/cgSGQdj3M3_OojrlMyv24RoR4io.mft
rsync://rpki.ripe.net/repository/DEFAULT/cgSGQdj3M3_OojrlMyv24RoR4io.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 03:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:84:ad:57:19:0a:ed:62:6f:a9:2b:fd:75:d3:24:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72048641d8f7337fcea23ae5332bf6e11a11e22a
Validity
Not Before: Jul 27 03:00:54 2026 GMT
Not After : Jul 28 03:00:54 2026 GMT
Subject: CN=986f5b611eb358b7b0f67f01b746fd6b52db3e37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:54:48:95:72:3a:04:1e:b2:d0:16:2c:a6:d8:
21:d6:b8:03:c7:be:26:c8:bc:52:08:c2:86:13:c8:
f7:37:df:00:fa:81:41:a5:49:59:82:0d:b7:c6:95:
0b:66:9c:15:75:19:4e:1b:37:91:08:24:6d:7d:1c:
26:fd:54:53:fc:e9:ea:d4:31:55:94:92:99:94:c1:
a5:c0:fd:e6:ae:e8:61:cf:d3:98:a7:03:06:94:b4:
94:c0:0d:d9:86:2f:b2:f2:4d:17:f5:dd:2c:5a:19:
1c:6c:76:2f:65:b2:9c:d8:cc:00:d9:75:76:75:79:
c5:77:47:d1:9f:1e:3f:76:1b:73:0b:a2:08:63:21:
40:d1:11:b7:de:40:46:a5:57:78:bf:f2:50:40:da:
96:8d:93:ad:e9:38:38:4e:57:a8:bd:88:3d:df:40:
73:70:ae:f8:19:d1:ce:35:b0:90:8c:00:ad:6e:05:
c3:4a:f1:99:2f:37:4c:ca:da:72:ce:48:1f:1a:bd:
73:85:90:26:e8:d2:58:28:a2:40:22:e7:dc:e1:79:
c1:5f:b8:49:27:08:7b:d1:1a:fa:31:07:3f:b9:a2:
22:36:00:e6:e4:dd:8e:be:e5:21:86:17:36:e7:48:
9d:bc:96:86:3b:54:ea:b1:9f:cc:b4:af:22:f3:e9:
29:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:6F:5B:61:1E:B3:58:B7:B0:F6:7F:01:B7:46:FD:6B:52:DB:3E:37
X509v3 Authority Key Identifier:
keyid:72:04:86:41:D8:F7:33:7F:CE:A2:3A:E5:33:2B:F6:E1:1A:11:E2:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgSGQdj3M3_OojrlMyv24RoR4io.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/cgSGQdj3M3_OojrlMyv24RoR4io.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/cgSGQdj3M3_OojrlMyv24RoR4io.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:a1:07:88:a0:7d:56:35:26:50:6f:cc:2a:b1:18:a8:d1:aa:
1e:3c:04:1c:a6:c0:93:6e:0e:a5:63:1d:79:60:da:6b:00:18:
dd:65:24:80:71:8a:87:53:98:6c:f1:32:e3:9d:77:67:e5:38:
0c:34:38:15:93:f2:50:57:4d:43:19:62:c8:82:4b:d2:2c:54:
8d:b2:c8:44:fc:8d:00:eb:16:7b:33:22:b2:0c:38:a8:b4:57:
55:3f:63:3b:2c:01:54:ee:52:bc:d7:86:11:8b:bb:54:af:be:
d0:d1:bf:5e:c6:a9:54:2c:e1:7a:30:50:15:32:3f:0b:00:17:
61:97:f6:a9:4c:38:5b:6f:34:b7:36:f3:b4:72:89:35:7a:60:
8b:3d:0c:9e:f4:46:77:57:52:99:67:df:76:5a:47:57:64:e6:
95:2d:e2:86:82:7d:19:f5:4c:04:61:a6:c3:21:33:a0:60:0b:
5b:0a:05:ad:cd:ec:0e:35:ca:61:8b:0f:3d:11:b6:88:a8:f4:
10:18:8e:02:e9:c7:14:19:37:b6:a9:ea:5a:98:30:33:86:7f:
17:68:8b:89:ab:1e:1f:65:7d:df:17:2c:1d:fd:64:71:a5:3a:
93:62:ed:47:1c:26:93:9c:b7:af:35:9b:07:e5:a3:5c:b5:3a:
17:da:b1:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 11:57:03 2026 by rpki-client