Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/2e18f7-09c7-45b1-bcb7-9f6686e42800/1/Cga2XLuXZnq9_5uGGiL50B0dRss.mft
File: Cga2XLuXZnq9_5uGGiL50B0dRss.mft (raw, json)
Hash identifier: SMMfJu46TL3IttWtS9rXEAMmbneM6fGMYT8/qfoxoZc=
Subject key identifier: 1D:EC:00:61:B0:3A:92:D2:7E:E5:70:FF:D3:C7:78:17:4C:27:92:61
Authority key identifier: 0A:06:B6:5C:BB:97:66:7A:BD:FF:9B:86:1A:22:F9:D0:1D:1D:46:CB
Certificate issuer: /CN=0a06b65cbb97667abdff9b861a22f9d01d1d46cb
Certificate serial: 019F8F7E3E23F5717E140561601CDE0D3A84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cga2XLuXZnq9_5uGGiL50B0dRss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/2e18f7-09c7-45b1-bcb7-9f6686e42800/1/Cga2XLuXZnq9_5uGGiL50B0dRss.mft
Manifest number: 19C6
Signing time: Thu 23 Jul 2026 15:00:42 +0000
Manifest this update: Thu 23 Jul 2026 15:00:42 +0000
Manifest next update: Fri 24 Jul 2026 15:00:42 +0000
Files and hashes: 1: Cga2XLuXZnq9_5uGGiL50B0dRss.crl (hash: gzZWk7R0GcQZbOSvOqyvrwpfJ1dYEpaoxX8gLw7COQ4=)
2: RpFgP93ClwNM-ocN6qvLfic7DMs.roa (hash: 5S/X3det1+F3wpDnXO5aEBYjQHz6Mc8fd6NBqHj9aKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/2e18f7-09c7-45b1-bcb7-9f6686e42800/1/Cga2XLuXZnq9_5uGGiL50B0dRss.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/2e18f7-09c7-45b1-bcb7-9f6686e42800/1/Cga2XLuXZnq9_5uGGiL50B0dRss.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cga2XLuXZnq9_5uGGiL50B0dRss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7e:3e:23:f5:71:7e:14:05:61:60:1c:de:0d:3a:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a06b65cbb97667abdff9b861a22f9d01d1d46cb
Validity
Not Before: Jul 23 15:00:42 2026 GMT
Not After : Jul 24 15:00:42 2026 GMT
Subject: CN=1dec0061b03a92d27ee570ffd3c778174c279261
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:11:01:c7:e2:62:c3:80:71:2c:5b:06:0d:60:
51:92:dc:62:3d:8b:41:e7:86:07:4b:b1:03:cb:95:
50:6e:ec:ac:5a:b3:3d:79:1e:fe:53:20:05:64:2a:
9c:fd:e5:2f:38:6c:bf:6f:8a:75:47:67:95:ab:45:
70:63:fd:3d:3e:0b:dd:b6:78:00:b8:70:ef:19:02:
61:1b:3f:57:ff:01:c7:e6:66:6c:e8:96:89:bc:5f:
9f:99:50:b4:5d:26:c7:9c:33:f1:cc:ff:83:c7:95:
98:f7:c2:57:26:b1:2d:2c:67:f1:a2:bb:40:35:f2:
cd:0e:f7:df:e9:24:1b:2b:18:3f:3b:0d:fa:1d:e4:
ea:2c:4c:bb:17:3f:ab:52:98:7c:8b:1e:19:71:3e:
6f:64:dc:5d:8f:c5:45:44:15:6f:27:eb:1f:80:9d:
40:1b:5e:27:5d:55:f4:33:5f:98:7b:3b:16:bd:98:
0f:86:2e:dc:97:d5:30:fa:b6:c1:4e:2e:d9:17:ec:
25:dc:b0:b9:93:f3:1f:cc:45:b8:6c:13:d8:13:6d:
a7:fb:ac:d6:6f:ac:60:99:73:37:2a:65:53:77:32:
26:37:4c:6c:7d:0b:b8:06:fe:d7:99:f2:4b:ee:1b:
84:73:e0:4e:a0:79:7b:d6:29:72:cb:fe:22:13:7a:
ac:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:EC:00:61:B0:3A:92:D2:7E:E5:70:FF:D3:C7:78:17:4C:27:92:61
X509v3 Authority Key Identifier:
keyid:0A:06:B6:5C:BB:97:66:7A:BD:FF:9B:86:1A:22:F9:D0:1D:1D:46:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cga2XLuXZnq9_5uGGiL50B0dRss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2e18f7-09c7-45b1-bcb7-9f6686e42800/1/Cga2XLuXZnq9_5uGGiL50B0dRss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2e18f7-09c7-45b1-bcb7-9f6686e42800/1/Cga2XLuXZnq9_5uGGiL50B0dRss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:d8:4b:5c:41:36:97:47:83:19:6b:a6:67:47:7e:ad:26:f8:
de:46:0d:3e:29:21:43:59:87:54:2b:33:19:0a:aa:27:47:d9:
6a:36:36:c6:b2:12:bc:42:74:65:26:75:57:1e:c0:8b:b8:7f:
8d:64:52:96:9e:10:55:53:f7:4f:b9:a7:11:f8:4e:02:e2:31:
a6:b9:95:7f:eb:8d:e9:a8:16:65:9d:cf:70:25:ba:e1:02:cc:
c3:a6:7e:3b:d4:4c:c3:38:fc:bf:55:17:c5:2a:36:b6:7e:6e:
de:3e:e0:b5:c8:5f:9e:25:89:48:1c:2f:6a:6c:ed:17:ce:62:
16:5e:67:19:5c:21:d5:7c:d9:d0:fa:b5:52:ce:84:e0:b4:f9:
3c:2d:54:dc:a9:e9:e2:97:5e:3c:80:94:d1:f1:2a:bb:13:be:
e9:bc:d3:7d:46:27:ea:ed:37:c2:77:e2:8b:c6:c8:c3:b0:44:
cb:4b:27:d9:c0:bb:93:5f:4a:25:22:ea:d5:2a:e2:7c:bf:3d:
10:6e:a8:2c:13:fc:5d:66:58:ec:e3:0b:0a:3e:c9:84:b8:e5:
6a:d9:25:2b:b5:c7:58:63:cd:8e:75:b8:eb:ec:b6:24:5b:4c:
db:66:87:e4:36:7e:5f:d8:d6:c0:c6:18:68:cb:62:ec:8b:51:
e4:fd:f2:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:27:59 2026 by rpki-client