Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/065dba-eef9-480d-a880-9175c8408e5e/1/cFngOgjhdBb2ZUYweYg0mZG4Si4.mft
File: cFngOgjhdBb2ZUYweYg0mZG4Si4.mft (raw, json)
Hash identifier: bSgmAZ4t+H9U/gT49AH7vcQJY9lYc0Mv2y+7e04q1tI=
Subject key identifier: 64:29:18:82:0A:12:C0:BC:E1:96:F7:3E:90:20:A6:47:38:67:C4:E3
Authority key identifier: 70:59:E0:3A:08:E1:74:16:F6:65:46:30:79:88:34:99:91:B8:4A:2E
Certificate issuer: /CN=7059e03a08e17416f66546307988349991b84a2e
Certificate serial: 019D2703EECCD0C52D067EB3409CFDC24527
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFngOgjhdBb2ZUYweYg0mZG4Si4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/065dba-eef9-480d-a880-9175c8408e5e/1/cFngOgjhdBb2ZUYweYg0mZG4Si4.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 22:01:02 +0000
Manifest this update: Wed 25 Mar 2026 22:01:02 +0000
Manifest next update: Thu 26 Mar 2026 22:01:02 +0000
Files and hashes: 1: CYB5NwO37zuvRkWMcW3-BtkYVGo.roa (hash: LInHSGK/8qAq0sJn+JLYwieGEDcam0azNXlnsLsToP8=)
2: _GSS7SJcNRk5v2vKpj-91_QngG8.roa (hash: WRLHRWQSGtnWOjdrbpDdHkWnLB1hXZNo4bQD6Y6g7rg=)
3: cFngOgjhdBb2ZUYweYg0mZG4Si4.crl (hash: 4ce50eG8cDZhMREDf7cFuP99Ejd8sRuujvB2p0O7tnM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/065dba-eef9-480d-a880-9175c8408e5e/1/cFngOgjhdBb2ZUYweYg0mZG4Si4.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/065dba-eef9-480d-a880-9175c8408e5e/1/cFngOgjhdBb2ZUYweYg0mZG4Si4.mft
rsync://rpki.ripe.net/repository/DEFAULT/cFngOgjhdBb2ZUYweYg0mZG4Si4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:ee:cc:d0:c5:2d:06:7e:b3:40:9c:fd:c2:45:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7059e03a08e17416f66546307988349991b84a2e
Validity
Not Before: Mar 25 22:01:02 2026 GMT
Not After : Mar 26 22:01:02 2026 GMT
Subject: CN=642918820a12c0bce196f73e9020a6473867c4e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c0:c1:64:3e:80:10:8a:43:bc:29:7e:56:5d:
42:e1:e2:fb:0e:99:dd:cb:25:92:33:d1:29:e1:70:
96:a8:5a:67:e3:5e:5d:ef:33:fb:1e:da:7f:b8:4d:
d2:9c:fe:2f:96:d7:36:c0:3b:47:7e:da:74:fe:13:
3e:a1:d0:c7:b1:de:a8:47:b2:26:65:2f:43:99:d0:
a5:a8:9d:fa:d0:f5:1a:7b:5d:40:d4:c5:3e:a5:ba:
42:d1:04:45:0d:be:5e:a5:ae:9e:b1:4e:e9:89:6b:
49:81:42:09:fb:dd:df:f6:dc:48:d3:20:a0:de:fc:
b7:8f:95:50:10:b9:41:6d:28:87:64:6e:c2:19:89:
c2:42:12:d0:9e:21:38:9d:b8:14:c0:73:b2:49:26:
64:a1:b2:75:0a:1c:de:ce:99:44:cd:0c:88:ed:95:
8d:dd:1b:12:80:a9:8d:a5:f9:5e:d4:cc:41:70:3e:
d6:b3:7f:3c:a6:8c:cc:f7:87:ee:ba:e3:d5:8a:c8:
dc:6a:a1:8c:c9:cd:84:e7:d2:98:b3:73:1e:c4:07:
85:a8:92:1d:8a:36:8e:62:55:2a:cb:4d:25:8e:eb:
3b:0e:80:11:80:8d:4e:b1:5e:e4:d6:ac:ca:1a:46:
8f:0a:53:29:a5:0c:f6:78:39:14:9d:8d:fa:e9:df:
df:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:29:18:82:0A:12:C0:BC:E1:96:F7:3E:90:20:A6:47:38:67:C4:E3
X509v3 Authority Key Identifier:
keyid:70:59:E0:3A:08:E1:74:16:F6:65:46:30:79:88:34:99:91:B8:4A:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFngOgjhdBb2ZUYweYg0mZG4Si4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/065dba-eef9-480d-a880-9175c8408e5e/1/cFngOgjhdBb2ZUYweYg0mZG4Si4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/065dba-eef9-480d-a880-9175c8408e5e/1/cFngOgjhdBb2ZUYweYg0mZG4Si4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:76:d9:38:c2:9f:6a:ae:c9:ed:2e:65:b2:f5:e8:87:ae:bc:
30:7c:29:f2:38:1b:c0:f0:dc:e7:bc:e8:d0:50:e8:40:e2:5f:
95:69:9e:d8:6d:2b:b6:ab:9f:c4:19:78:96:f6:68:a9:61:64:
62:36:ae:19:c1:8d:ce:e1:f2:13:95:4c:f2:82:42:be:3d:56:
84:1c:e7:22:77:c7:73:0f:f1:3e:4c:42:13:2c:43:e9:fe:c3:
a8:0d:bd:d1:03:52:18:31:ff:12:04:08:64:a7:09:5b:fe:04:
21:25:36:65:a3:f7:c5:c1:33:8d:b4:1a:db:11:4e:58:d7:44:
87:a2:a7:ca:4d:4f:81:e6:ad:32:c6:da:c7:af:8f:78:07:93:
67:17:e1:9f:d4:fc:cd:63:95:6e:d3:a1:20:c9:1b:62:18:99:
f1:87:8c:fc:a0:6b:79:bd:a5:b3:92:2b:c6:25:d1:0f:2c:3b:
18:76:75:eb:97:6b:bd:f5:25:4d:21:ca:f4:5b:52:a7:c9:c2:
ac:7d:1c:16:68:a2:65:04:e3:e1:8e:28:45:db:ee:76:f2:76:
9d:33:14:58:5c:e1:d5:f6:c3:fd:47:e8:70:9c:66:64:36:97:
80:f5:cf:ca:d9:ca:c8:08:6a:5b:fa:3d:32:15:0f:44:0a:2b:
92:43:bc:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:48:54 2026 by rpki-client