Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/26ca92-6fb8-4dd2-9795-9bc5c26d4be8/1/1-cGMsaUCf6FybxFLPv5io6l5zhs.mft
File: 1-cGMsaUCf6FybxFLPv5io6l5zhs.mft (raw, json)
Hash identifier: JioSwpg70LN36+c/G340gnND1aRC/uUxuvNCE0CSH3k=
Subject key identifier: 2E:05:DC:5A:A3:3A:C4:38:BB:DD:8A:B5:C6:6C:6F:A5:0F:BB:E6:52
Authority key identifier: F9:C1:8C:B1:A5:02:7F:A1:72:6F:11:4B:3E:FE:62:A3:A9:79:CE:1B
Certificate issuer: /CN=f9c18cb1a5027fa1726f114b3efe62a3a979ce1b
Certificate serial: 019D25F0F26408C7C9D6F56E5BF0F06AC0E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-cGMsaUCf6FybxFLPv5io6l5zhs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/26ca92-6fb8-4dd2-9795-9bc5c26d4be8/1/1-cGMsaUCf6FybxFLPv5io6l5zhs.mft
Manifest number: 0809
Signing time: Wed 25 Mar 2026 17:00:40 +0000
Manifest this update: Wed 25 Mar 2026 17:00:40 +0000
Manifest next update: Thu 26 Mar 2026 17:00:40 +0000
Files and hashes: 1: 0P1RjYkUunzUVQsRql-6_fKRzc8.roa (hash: QQ0zolHUVpVnhMPlw+ijSEm88671++BfofXDGkViKYk=)
2: 1-cGMsaUCf6FybxFLPv5io6l5zhs.crl (hash: OTtGJkdxdZFZptS6Sn6qZpLiLWBMPSl0w4bqqFU4Pwg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/26ca92-6fb8-4dd2-9795-9bc5c26d4be8/1/1-cGMsaUCf6FybxFLPv5io6l5zhs.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/26ca92-6fb8-4dd2-9795-9bc5c26d4be8/1/1-cGMsaUCf6FybxFLPv5io6l5zhs.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-cGMsaUCf6FybxFLPv5io6l5zhs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 17:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f0:f2:64:08:c7:c9:d6:f5:6e:5b:f0:f0:6a:c0:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9c18cb1a5027fa1726f114b3efe62a3a979ce1b
Validity
Not Before: Mar 25 17:00:40 2026 GMT
Not After : Mar 26 17:00:40 2026 GMT
Subject: CN=2e05dc5aa33ac438bbdd8ab5c66c6fa50fbbe652
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:62:a7:75:27:8d:91:20:fb:7c:98:63:fb:79:
cb:5c:54:9d:4d:f2:40:9e:69:1c:89:64:f5:06:23:
e3:72:97:6e:31:65:e8:b7:0b:dd:14:db:d0:8e:e5:
8e:6f:3b:c1:f1:9e:f3:87:77:ef:85:9e:63:61:44:
a3:fa:e6:0a:46:12:e9:cd:75:1b:92:7f:13:65:5e:
04:4f:c0:64:fe:79:c3:b5:bc:8d:40:ec:cf:f5:9a:
52:59:e0:41:45:ed:f4:4f:20:62:40:e6:80:33:40:
7a:85:5a:46:b0:4d:ea:16:9c:97:c3:08:15:68:f7:
e8:13:4e:05:37:41:ac:22:3f:ba:96:e9:31:37:c5:
ca:75:99:61:92:da:7b:66:0f:38:b7:51:58:41:8f:
6c:53:bb:87:b4:d4:0a:05:c1:4d:f1:75:d8:b2:ce:
9f:ab:7d:64:d5:7c:26:dc:ef:db:1b:fc:d9:ce:84:
b9:1c:cb:32:76:a7:2c:e2:fe:3b:31:44:24:35:0b:
c6:29:60:f4:33:b3:2c:13:7f:ae:cb:57:92:c6:38:
1d:95:62:a8:32:af:43:6a:15:25:0d:9e:18:17:4f:
c4:ba:12:64:f7:27:ac:5f:7a:47:79:b0:fd:42:38:
87:3d:55:43:48:ad:6f:4d:03:d2:8d:e5:93:ef:86:
18:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:05:DC:5A:A3:3A:C4:38:BB:DD:8A:B5:C6:6C:6F:A5:0F:BB:E6:52
X509v3 Authority Key Identifier:
keyid:F9:C1:8C:B1:A5:02:7F:A1:72:6F:11:4B:3E:FE:62:A3:A9:79:CE:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-cGMsaUCf6FybxFLPv5io6l5zhs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/26ca92-6fb8-4dd2-9795-9bc5c26d4be8/1/1-cGMsaUCf6FybxFLPv5io6l5zhs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/26ca92-6fb8-4dd2-9795-9bc5c26d4be8/1/1-cGMsaUCf6FybxFLPv5io6l5zhs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:63:ef:d6:00:3c:36:c2:79:31:e5:d8:08:35:db:d9:54:f3:
49:ab:9e:89:13:ce:f5:da:fa:26:13:67:b6:3b:e6:88:58:be:
79:7b:80:3d:e2:3a:88:d8:ec:29:63:8d:6a:ae:99:71:b4:dc:
fb:37:2f:0a:b2:57:d6:ef:20:d1:f5:e5:14:37:55:7e:b5:78:
68:55:18:b4:08:88:ba:b3:7c:e3:3b:58:e6:d1:8d:30:39:15:
42:a8:65:67:0c:d7:b9:8a:c3:b2:47:c1:2b:38:a1:b8:06:19:
0f:fc:3b:9b:d5:95:3e:86:f9:67:4e:38:a8:90:f9:5b:c6:9d:
aa:62:10:14:60:3c:6a:dc:9d:f9:a2:d6:4c:ae:a6:40:97:35:
ed:ac:a3:78:a1:cf:09:79:61:f8:b0:81:94:07:26:0a:b1:b6:
23:07:53:92:44:f8:56:a9:78:f3:ae:29:61:b1:b9:dc:75:09:
1d:53:e1:c3:e0:1c:e3:1f:c1:13:3c:50:75:5b:e6:87:bf:60:
50:70:d6:80:5d:ec:68:6c:46:bf:75:15:b0:b3:34:2c:7b:a3:
49:d0:fd:d9:84:15:28:70:1e:d1:5c:4d:2d:f4:ce:60:ba:94:
74:00:cd:d5:c7:8a:6b:7d:fd:64:70:db:31:09:3a:bf:74:8f:
31:1e:fa:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:05:21 2026 by rpki-client