Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/97ad7e-fcbe-4fcc-9c3f-f48930e42641/1/cnegKqVG3RoKaoLQXZCwkX4VRe0.mft
File: cnegKqVG3RoKaoLQXZCwkX4VRe0.mft (raw, json)
Hash identifier: eODuUJ/4HwA+EzEGe9TOIVxRfVDSGUItKKEKv2GvFb8=
Subject key identifier: 5D:94:A2:CA:78:67:14:C8:47:AC:C3:59:98:46:D5:06:E9:1A:B9:06
Authority key identifier: 72:77:A0:2A:A5:46:DD:1A:0A:6A:82:D0:5D:90:B0:91:7E:15:45:ED
Certificate issuer: /CN=7277a02aa546dd1a0a6a82d05d90b0917e1545ed
Certificate serial: 019D2583AF65BCF66AB715B63AFAA64D5EA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cnegKqVG3RoKaoLQXZCwkX4VRe0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/97ad7e-fcbe-4fcc-9c3f-f48930e42641/1/cnegKqVG3RoKaoLQXZCwkX4VRe0.mft
Manifest number: 1491
Signing time: Wed 25 Mar 2026 15:01:20 +0000
Manifest this update: Wed 25 Mar 2026 15:01:20 +0000
Manifest next update: Thu 26 Mar 2026 15:01:20 +0000
Files and hashes: 1: OaOnlwyLcpWU-7buhAK-DPuoYYM.roa (hash: 5Ar9cfFUzYqjwJSn+ec2xqE01xE8RezzqQw0pyKzfD4=)
2: cnegKqVG3RoKaoLQXZCwkX4VRe0.crl (hash: isWPM4bdiET2M+MU50QydSRU7uGoXkxpIjOI02k6U3I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/97ad7e-fcbe-4fcc-9c3f-f48930e42641/1/cnegKqVG3RoKaoLQXZCwkX4VRe0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/97ad7e-fcbe-4fcc-9c3f-f48930e42641/1/cnegKqVG3RoKaoLQXZCwkX4VRe0.mft
rsync://rpki.ripe.net/repository/DEFAULT/cnegKqVG3RoKaoLQXZCwkX4VRe0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:af:65:bc:f6:6a:b7:15:b6:3a:fa:a6:4d:5e:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7277a02aa546dd1a0a6a82d05d90b0917e1545ed
Validity
Not Before: Mar 25 15:01:20 2026 GMT
Not After : Mar 26 15:01:20 2026 GMT
Subject: CN=5d94a2ca786714c847acc3599846d506e91ab906
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:92:36:33:70:02:06:9c:3a:76:e6:2b:88:70:
98:1f:9b:83:80:ad:f3:63:7f:2b:69:29:8b:6a:44:
01:1b:d2:49:16:d2:df:68:1c:27:20:86:31:4a:90:
61:7e:e7:be:e5:d6:17:cf:00:2e:eb:9b:03:73:ae:
23:8b:8d:5f:c6:83:24:b3:90:af:f9:b9:ff:66:79:
ee:00:c1:57:f9:1b:2f:3e:50:52:dc:c3:ec:9a:fa:
53:62:16:59:8c:55:c2:d6:02:a1:4a:4f:f1:84:62:
61:70:8e:d1:b5:6f:17:ac:71:e2:3a:33:b9:61:7c:
1a:c0:ba:e7:f6:15:5f:a0:a8:27:8f:dc:86:90:9f:
e9:43:0b:9a:d1:ca:60:d1:9b:2e:57:35:e5:5f:d4:
b3:f7:53:84:c5:c3:6c:a5:63:63:9d:54:e2:ab:97:
f6:80:27:5f:ec:4b:3b:23:15:97:5f:f1:d8:ee:79:
55:27:e5:4e:39:3c:61:37:30:1c:55:7c:73:d3:15:
f9:17:30:81:a8:86:34:61:c9:4d:1c:39:73:b9:94:
2a:c8:27:2e:ac:fe:2c:11:35:06:4d:d9:24:31:8f:
c5:47:5b:5d:b4:7a:f0:6b:e1:8d:cc:22:ea:46:2e:
8e:bb:ea:d1:49:de:1f:2d:77:2a:86:68:8a:65:1c:
cd:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:94:A2:CA:78:67:14:C8:47:AC:C3:59:98:46:D5:06:E9:1A:B9:06
X509v3 Authority Key Identifier:
keyid:72:77:A0:2A:A5:46:DD:1A:0A:6A:82:D0:5D:90:B0:91:7E:15:45:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cnegKqVG3RoKaoLQXZCwkX4VRe0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/97ad7e-fcbe-4fcc-9c3f-f48930e42641/1/cnegKqVG3RoKaoLQXZCwkX4VRe0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/97ad7e-fcbe-4fcc-9c3f-f48930e42641/1/cnegKqVG3RoKaoLQXZCwkX4VRe0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:98:30:8f:67:a0:6a:34:64:19:36:b6:66:65:fd:de:0d:74:
ef:2f:07:2a:00:5d:e8:a5:3c:84:57:3c:90:ba:fd:a7:8a:2b:
1a:cd:38:d4:87:89:7b:fd:3a:0b:60:78:20:38:a1:48:9a:f8:
08:fb:87:c9:77:f6:ae:fc:24:5e:92:2e:3b:4a:30:e5:f4:f7:
c2:8a:d0:5e:3f:16:b7:b8:60:51:6d:79:aa:b7:5b:ba:d7:95:
4d:99:e3:ed:55:25:94:20:3a:9f:c4:2f:24:ad:27:16:b2:c3:
96:19:a6:63:c3:c0:12:3c:eb:f3:a4:cd:84:13:01:8a:49:86:
46:bc:fa:a7:5e:1f:de:7d:e2:e4:5e:97:bb:d2:60:c1:c0:42:
75:60:20:be:79:56:2c:56:75:bb:92:a5:4b:6d:3b:8a:30:da:
78:05:04:98:f8:c3:dc:ff:2f:95:6f:89:a8:1d:85:96:f1:7c:
ad:41:b8:40:01:cf:10:de:6e:91:77:fe:3d:a8:d8:f7:cd:c5:
d0:fd:70:33:0e:66:42:48:2b:15:a0:5a:ae:15:63:7e:e0:e7:
92:0d:ed:01:04:13:db:7f:ed:56:68:cf:47:70:c9:14:45:dd:
a6:0f:bc:86:aa:61:cd:01:6f:e8:77:0e:e3:08:50:03:4e:52:
41:bd:5d:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:21:14 2026 by rpki-client