Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/60/2e18f7-09c7-45b1-bcb7-9f6686e42800/1/Cga2XLuXZnq9_5uGGiL50B0dRss.mft
File: Cga2XLuXZnq9_5uGGiL50B0dRss.mft (raw, json)
Hash identifier: 6JyiGYvrCGv5jJKLzwtf7ggvxPkbQVcFTTVL1Lkat6c=
Subject key identifier: FF:20:2B:25:6C:A4:08:66:EC:14:05:93:42:0C:E9:52:C2:E4:EA:77
Authority key identifier: 0A:06:B6:5C:BB:97:66:7A:BD:FF:9B:86:1A:22:F9:D0:1D:1D:46:CB
Certificate issuer: /CN=0a06b65cbb97667abdff9b861a22f9d01d1d46cb
Certificate serial: 01A0F8AA51D8E481093AA553CA5E08EB926C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cga2XLuXZnq9_5uGGiL50B0dRss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/2e18f7-09c7-45b1-bcb7-9f6686e42800/1/Cga2XLuXZnq9_5uGGiL50B0dRss.mft
Manifest number: 1A81
Signing time: Thu 01 Oct 2026 18:11:46 +0000
Manifest this update: Thu 01 Oct 2026 18:11:46 +0000
Manifest next update: Fri 02 Oct 2026 18:11:46 +0000
Files and hashes: 1: Cga2XLuXZnq9_5uGGiL50B0dRss.crl (hash: jNxSi5aSNGdOmtn+nXX0jhBpOv8imjhVfU856OAnl+k=)
2: RpFgP93ClwNM-ocN6qvLfic7DMs.roa (hash: 5S/X3det1+F3wpDnXO5aEBYjQHz6Mc8fd6NBqHj9aKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/2e18f7-09c7-45b1-bcb7-9f6686e42800/1/Cga2XLuXZnq9_5uGGiL50B0dRss.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/2e18f7-09c7-45b1-bcb7-9f6686e42800/1/Cga2XLuXZnq9_5uGGiL50B0dRss.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cga2XLuXZnq9_5uGGiL50B0dRss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 16:22:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f8:aa:51:d8:e4:81:09:3a:a5:53:ca:5e:08:eb:92:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a06b65cbb97667abdff9b861a22f9d01d1d46cb
Validity
Not Before: Oct 1 18:11:46 2026 GMT
Not After : Oct 2 18:11:46 2026 GMT
Subject: CN=ff202b256ca40866ec140593420ce952c2e4ea77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:46:55:16:fb:e9:a0:7c:12:c5:84:fd:8e:bb:
e2:d7:57:d9:44:0e:4f:7e:96:38:2a:02:97:60:38:
1e:e0:dc:9c:b5:cd:61:86:76:8a:2e:1f:a8:da:87:
0f:43:68:ae:1f:ff:e3:da:1e:f7:f5:b1:8c:2f:84:
0d:2f:74:cf:8c:2b:43:6a:0f:9a:60:a1:67:aa:f6:
21:27:3d:85:0b:c3:77:85:79:2a:83:55:c8:cd:7c:
ff:9c:4d:7b:36:e7:95:19:f9:f2:03:13:bd:f5:06:
34:01:39:ff:61:d7:d1:b1:ba:28:24:86:39:59:2f:
f1:11:e5:dc:46:97:91:ea:d4:11:2b:d9:d0:37:b6:
44:29:41:bf:2b:45:33:b2:e6:87:e7:ba:90:22:2a:
00:f4:7a:fd:37:00:86:95:0a:41:f4:e4:43:89:61:
88:7f:2d:dd:22:ad:ed:a4:2b:ce:c1:c1:03:69:55:
e4:84:6f:52:b7:ef:cb:f0:e9:56:e9:62:f9:b0:4b:
ac:da:8e:12:a3:ed:f6:3e:25:58:08:0f:e1:e6:b4:
e1:e1:14:c2:f5:bf:5e:b9:18:ba:5e:b1:0a:f8:33:
a1:c5:20:a5:26:74:48:e0:c8:1a:d4:c9:d1:9c:9c:
f3:6f:53:37:d0:7e:94:7f:81:f1:b1:e9:ce:4f:90:
52:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:20:2B:25:6C:A4:08:66:EC:14:05:93:42:0C:E9:52:C2:E4:EA:77
X509v3 Authority Key Identifier:
keyid:0A:06:B6:5C:BB:97:66:7A:BD:FF:9B:86:1A:22:F9:D0:1D:1D:46:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cga2XLuXZnq9_5uGGiL50B0dRss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2e18f7-09c7-45b1-bcb7-9f6686e42800/1/Cga2XLuXZnq9_5uGGiL50B0dRss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2e18f7-09c7-45b1-bcb7-9f6686e42800/1/Cga2XLuXZnq9_5uGGiL50B0dRss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:fc:04:fe:40:48:2b:53:ad:04:af:9b:15:3f:b3:2b:5a:73:
9c:41:3f:bb:e3:60:f4:e6:d5:a5:9d:de:0e:70:33:ad:81:2a:
4f:dd:cf:a0:d5:91:eb:ec:f2:18:bf:8c:1e:85:73:63:21:0b:
db:10:4f:d4:6e:e8:ac:27:7d:56:e0:bb:05:cc:fb:91:72:66:
95:a5:42:44:6b:22:81:1e:cd:f2:c9:10:67:2b:37:88:22:fd:
6d:43:81:01:f5:cb:2c:4b:7c:b0:24:da:05:5e:4a:7d:6f:b7:
ba:88:f0:16:cf:2c:0b:de:a4:02:55:64:91:71:4a:43:f6:2d:
6d:bc:70:72:1a:ce:8e:80:2f:92:aa:b9:fb:58:25:58:2b:15:
cf:ff:53:31:38:95:c8:98:5c:59:2c:54:97:30:a3:8d:26:4e:
8f:04:6d:5c:0f:bd:ea:d3:76:60:69:c6:52:49:43:2d:08:b5:
f6:fd:74:13:c9:c2:8e:eb:97:b7:bb:a0:7a:50:16:96:ff:84:
c0:8d:81:b9:d4:e2:70:87:2a:b1:3e:b0:35:cb:11:95:e8:c4:
7c:94:c8:b8:ac:50:cf:8f:38:d0:0a:f4:f7:d7:43:1e:8e:83:
10:66:a4:d1:35:83:30:3c:40:b6:3c:f0:bf:bd:50:68:f4:f1:
df:20:09:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 08:41:22 2026 by rpki-client