Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/ac9481-6fca-4240-9ed1-c277d3716bd9/1/cGdfald5fFypbD-0XlMb0yeDAWw.mft
File: cGdfald5fFypbD-0XlMb0yeDAWw.mft (raw, json)
Hash identifier: kLCboOFpV6ltQ7WO1ZKXYzwVIfgs0zR6UkfVr8ghs80=
Subject key identifier: C8:B4:42:01:7A:24:8C:12:35:99:C6:4E:44:0A:9C:0C:10:4F:A5:49
Authority key identifier: 70:67:5F:6A:57:79:7C:5C:A9:6C:3F:B4:5E:53:1B:D3:27:83:01:6C
Certificate issuer: /CN=70675f6a57797c5ca96c3fb45e531bd32783016c
Certificate serial: 019D26CD2D0CA5E153D205B16A9FB71C096F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cGdfald5fFypbD-0XlMb0yeDAWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/ac9481-6fca-4240-9ed1-c277d3716bd9/1/cGdfald5fFypbD-0XlMb0yeDAWw.mft
Manifest number: 1889
Signing time: Wed 25 Mar 2026 21:01:13 +0000
Manifest this update: Wed 25 Mar 2026 21:01:13 +0000
Manifest next update: Thu 26 Mar 2026 21:01:13 +0000
Files and hashes: 1: HukEo3cVqcCZCNkQC8Fo0OdcPV8.roa (hash: uaWWBhq83jLIq6e0tcD+B+F+JyjozNUJczctcyW3h1k=)
2: cGdfald5fFypbD-0XlMb0yeDAWw.crl (hash: YeVQRNGxCH8KTkeOg9KZa80Fa3+hRs/aeDCrjaS2Jrc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/ac9481-6fca-4240-9ed1-c277d3716bd9/1/cGdfald5fFypbD-0XlMb0yeDAWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/ac9481-6fca-4240-9ed1-c277d3716bd9/1/cGdfald5fFypbD-0XlMb0yeDAWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cGdfald5fFypbD-0XlMb0yeDAWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:2d:0c:a5:e1:53:d2:05:b1:6a:9f:b7:1c:09:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70675f6a57797c5ca96c3fb45e531bd32783016c
Validity
Not Before: Mar 25 21:01:13 2026 GMT
Not After : Mar 26 21:01:13 2026 GMT
Subject: CN=c8b442017a248c123599c64e440a9c0c104fa549
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4d:d6:d0:27:8b:02:79:47:a5:c7:d6:97:56:
87:a1:25:5c:4b:92:13:fd:b9:4e:69:3c:b2:84:bf:
2c:7a:d0:99:f3:d5:16:0f:34:40:b5:a1:eb:6f:57:
34:44:79:be:97:a6:d1:49:03:c3:9b:f2:40:60:1e:
f2:0e:54:bb:c2:4b:a6:4d:c8:e3:c7:a4:e0:2d:89:
f8:3b:ce:71:78:15:ee:01:6c:56:70:71:3a:f8:3e:
e1:ec:26:75:14:f1:e1:bc:95:a5:9e:3b:10:47:5d:
e8:9b:2a:18:a1:18:51:e4:ee:c6:0f:3d:1a:6b:eb:
a7:c8:9a:0b:15:9b:9d:5e:d6:06:0c:c3:f8:df:f1:
49:36:44:1d:7b:c7:97:85:8a:37:e8:6a:58:11:1a:
e2:f1:08:bb:69:69:72:41:4f:30:74:c9:32:f5:5f:
82:0e:c9:4e:cb:5f:97:10:6f:a1:41:74:4f:8b:92:
17:5b:fe:de:7c:1b:2b:dd:2c:28:10:50:12:c5:54:
28:b9:86:f4:5c:b8:71:bf:90:6a:97:04:cb:83:18:
af:e3:33:2f:9c:05:28:57:d4:fb:68:05:bd:5e:ea:
73:bf:5d:c7:57:a7:fa:24:5e:11:33:06:c1:62:c0:
c8:18:0b:ae:95:ed:5c:d6:86:7d:0f:76:f5:e0:ff:
1e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:B4:42:01:7A:24:8C:12:35:99:C6:4E:44:0A:9C:0C:10:4F:A5:49
X509v3 Authority Key Identifier:
keyid:70:67:5F:6A:57:79:7C:5C:A9:6C:3F:B4:5E:53:1B:D3:27:83:01:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cGdfald5fFypbD-0XlMb0yeDAWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/ac9481-6fca-4240-9ed1-c277d3716bd9/1/cGdfald5fFypbD-0XlMb0yeDAWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/ac9481-6fca-4240-9ed1-c277d3716bd9/1/cGdfald5fFypbD-0XlMb0yeDAWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
db:22:c8:c2:d9:c3:a6:06:ee:6b:04:89:bf:84:12:2a:90:48:
1a:d0:d4:b7:0f:fa:02:36:af:36:8a:64:12:5f:78:11:60:de:
fc:89:01:07:de:10:36:a3:13:5a:10:90:30:47:63:1b:47:8d:
73:75:a2:8c:16:42:23:96:60:b8:85:94:81:5c:20:7d:b6:17:
60:ba:cf:c8:2d:ff:44:b3:c4:cb:f8:c6:aa:01:6a:86:58:f4:
ab:62:0d:a6:fb:74:de:00:6d:2c:57:a8:57:fd:53:59:c0:d3:
aa:22:0f:79:81:55:1e:94:63:26:12:38:a6:f3:31:00:e4:f4:
93:ea:6a:39:09:e7:53:0e:2f:41:08:1e:be:c1:7c:b9:59:7a:
5c:a2:b3:11:e0:a9:2e:e4:76:17:29:2b:5f:3c:1a:62:77:40:
b3:f9:9c:f1:f2:87:0f:8f:08:30:d2:eb:d6:c8:5b:66:e5:1b:
7e:f6:89:0a:f4:13:76:7e:d0:af:bb:1b:11:d3:50:42:bd:61:
ff:e2:90:91:89:56:b8:c5:6d:10:ed:b2:20:bb:2a:57:0d:ac:
b6:91:71:87:93:12:f0:99:43:a8:8b:87:49:75:75:6b:e7:1b:
85:12:d7:47:f0:99:72:96:bd:50:99:79:dc:97:36:4c:82:8e:
70:f8:c6:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mzS0MpeFT0gWxap+3HAlvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwNjc1ZjZhNTc3OTdjNWNhOTZjM2ZiNDVlNTMxYmQzMjc4
MzAxNmMwHhcNMjYwMzI1MjEwMTEzWhcNMjYwMzI2MjEwMTEzWjAzMTEwLwYDVQQD
EyhjOGI0NDIwMTdhMjQ4YzEyMzU5OWM2NGU0NDBhOWMwYzEwNGZhNTQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs03W0CeLAnlHpcfWl1aHoSVcS5IT
/blOaTyyhL8setCZ89UWDzRAtaHrb1c0RHm+l6bRSQPDm/JAYB7yDlS7wkumTcjj
x6TgLYn4O85xeBXuAWxWcHE6+D7h7CZ1FPHhvJWlnjsQR13omyoYoRhR5O7GDz0a
a+unyJoLFZudXtYGDMP43/FJNkQde8eXhYo36GpYERri8Qi7aWlyQU8wdMky9V+C
DslOy1+XEG+hQXRPi5IXW/7efBsr3SwoEFASxVQouYb0XLhxv5BqlwTLgxiv4zMv
nAUoV9T7aAW9Xupzv13HV6f6JF4RMwbBYsDIGAuule1c1oZ9D3b14P8eoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMi0QgF6JIwSNZnGTkQKnAwQT6VJMB8GA1UdIwQY
MBaAFHBnX2pXeXxcqWw/tF5TG9MngwFsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0dkZmFsZDVmRnlwYkQtMFhsTWIweWVEQVd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9hYzk0ODEtNmZjYS00MjQwLTllZDEt
YzI3N2QzNzE2YmQ5LzEvY0dkZmFsZDVmRnlwYkQtMFhsTWIweWVEQVd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC9hYzk0ODEtNmZjYS00MjQwLTllZDEtYzI3N2QzNzE2YmQ5
LzEvY0dkZmFsZDVmRnlwYkQtMFhsTWIweWVEQVd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2yLIwtnD
pgbuawSJv4QSKpBIGtDUtw/6AjavNopkEl94EWDe/IkBB94QNqMTWhCQMEdjG0eN
c3WijBZCI5ZguIWUgVwgfbYXYLrPyC3/RLPEy/jGqgFqhlj0q2INpvt03gBtLFeo
V/1TWcDTqiIPeYFVHpRjJhI4pvMxAOT0k+pqOQnnUw4vQQgevsF8uVl6XKKzEeCp
LuR2FykrXzwaYndAs/mc8fKHD48IMNLr1shbZuUbfvaJCvQTdn7Qr7sbEdNQQr1h
/+KQkYlWuMVtEO2yILsqVw2stpFxh5MS8JlDqIuHSXV1a+cbhRLXR/CZcpa9UJl5
3Jc2TIKOcPjGCQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 04:40:09 2026 by rpki-client