Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/87/6d7ecf-4b62-4367-9b50-064d7adf4be3/1/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.mft
File: cdg_2Nq_4UsXTMzTWzW4BxMzS6U.mft (raw, json)
Hash identifier: DQavw9V8GtClWnuj93EvP2XwWPjDIYBkU2VallQAdrA=
Subject key identifier: 5A:1B:45:3F:7B:A2:93:3B:F7:EA:F1:D0:21:8C:D7:2B:81:32:12:F7
Authority key identifier: 71:D8:3F:D8:DA:BF:E1:4B:17:4C:CC:D3:5B:35:B8:07:13:33:4B:A5
Certificate issuer: /CN=71d83fd8dabfe14b174cccd35b35b80713334ba5
Certificate serial: 01A1DEDE0A6FC93A0F03801B3300A822905C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/6d7ecf-4b62-4367-9b50-064d7adf4be3/1/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.mft
Manifest number: 095A
Signing time: Sun 15 Nov 2026 11:00:55 +0000
Manifest this update: Sun 15 Nov 2026 11:00:55 +0000
Manifest next update: Mon 16 Nov 2026 11:00:55 +0000
Files and hashes: 1: B8t2bBTkaLAR5TIW9fbMzDeK7wM.roa (hash: rEfJvzviw6ozBNoCBXd6KOO7hAZ89y6wXkNGYhrBaG0=)
2: HMrz0ooKEJFXKSO4vlLH3tqjuoY.roa (hash: Q44eqltej8ZT7IIY9L9uJnTiWZ7q0wvG++yznZV8P2Y=)
3: Jcrw5wdlUSTT6uVPSFxR6-NSOq4.asa (hash: dR4oTJ5jqBavqgY9Rb82c5VxF/eMWWjkNxBxJE8/VHA=)
4: OAwjmIJKIKdPAQbPLOFqI6tUMQc.roa (hash: ptXr3wrI9Ua3HiNsZCwM7CEtOaXWpO5fScxHniZRFZ8=)
5: cdg_2Nq_4UsXTMzTWzW4BxMzS6U.crl (hash: +Y+GY8o8vdtoP8YrdCT6J5Ff7wK0aBO0gWfLgzSSFbo=)
6: gtP2-qjZ9BceWm37CevDo-CjXzY.roa (hash: VlU69I3hb/G6/wyrp9pzGaxb3Tpi8AUBli1dWDbRaNc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/6d7ecf-4b62-4367-9b50-064d7adf4be3/1/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/6d7ecf-4b62-4367-9b50-064d7adf4be3/1/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 11:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:de:0a:6f:c9:3a:0f:03:80:1b:33:00:a8:22:90:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d83fd8dabfe14b174cccd35b35b80713334ba5
Validity
Not Before: Nov 15 11:00:55 2026 GMT
Not After : Nov 16 11:00:55 2026 GMT
Subject: CN=5a1b453f7ba2933bf7eaf1d0218cd72b813212f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:97:02:b7:aa:16:59:54:77:87:1b:9e:16:92:
87:d2:d9:a0:96:29:75:86:40:c1:a6:61:15:69:76:
fa:b4:c5:b4:69:c7:20:27:c4:84:1a:12:1a:da:c8:
78:6f:c8:3d:73:34:30:22:cf:76:02:af:60:d2:3f:
36:26:7d:7a:a8:ee:bc:a8:c5:7f:68:9a:c6:92:e1:
c6:ed:9c:90:17:68:85:19:80:bf:db:60:81:01:7f:
9b:00:17:d1:77:36:49:2b:1e:17:27:e4:ea:05:80:
6d:05:b8:db:2f:93:01:1e:38:29:b2:d9:8b:19:83:
50:87:dc:11:01:93:31:8c:5e:3a:6d:9a:3d:10:6b:
4b:ff:35:0a:e0:ac:04:b7:3a:d6:3f:42:76:e1:c9:
9e:db:4b:e6:d0:54:b8:ba:ff:d3:36:76:53:90:84:
a4:9d:aa:59:f8:b2:81:61:92:a7:4e:9a:3f:36:1a:
36:b8:40:13:49:7c:af:7d:56:8d:42:8c:31:fe:11:
ef:0e:c4:54:93:17:a5:15:09:a3:81:d0:f7:78:08:
f0:70:5e:a6:9b:d2:35:93:bc:b4:9b:3f:99:21:c1:
34:f8:0a:56:0f:cb:7d:9d:5b:a0:3b:ee:59:f0:ad:
5d:10:6b:b5:1d:4e:77:60:8f:3e:82:33:dd:c9:12:
a8:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:1B:45:3F:7B:A2:93:3B:F7:EA:F1:D0:21:8C:D7:2B:81:32:12:F7
X509v3 Authority Key Identifier:
keyid:71:D8:3F:D8:DA:BF:E1:4B:17:4C:CC:D3:5B:35:B8:07:13:33:4B:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6d7ecf-4b62-4367-9b50-064d7adf4be3/1/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6d7ecf-4b62-4367-9b50-064d7adf4be3/1/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:45:1d:d3:17:b4:d3:27:01:05:d7:d7:90:dc:0c:d4:3f:51:
6a:1a:9f:c0:92:d7:39:dc:40:20:6a:50:39:08:23:ba:47:03:
b7:18:f6:d4:78:1d:35:26:29:18:9d:db:42:ee:5a:98:40:33:
b3:dd:4f:6c:df:59:43:95:ea:8c:42:8a:c0:8b:de:b7:7d:49:
66:ad:8e:3e:0d:d1:23:10:53:00:ac:66:61:f6:6f:d7:44:b9:
7d:97:ed:da:f6:bb:ac:89:f2:5d:8a:09:ff:28:6d:db:ab:36:
4f:ed:fd:ef:5e:3c:b2:3f:11:fb:c1:ec:69:e4:01:e0:30:5e:
4e:58:32:37:4c:84:2a:f0:ad:c5:4d:1b:3e:15:5c:65:b4:15:
5f:95:3f:6b:cc:28:d7:79:ab:d3:55:0c:be:b5:9f:07:a4:b6:
df:eb:9f:0d:f3:ab:1d:7e:86:44:b0:61:85:e6:6f:55:68:29:
ca:c0:70:0b:00:7e:4a:37:bc:b8:1f:ba:05:ba:29:f9:31:1a:
ed:3d:a0:86:ce:eb:ac:c4:2a:5e:29:16:af:35:dc:24:6b:38:
5d:fa:a7:cd:e4:6d:eb:6f:4e:c6:ec:ad:73:b6:05:c9:5f:4e:
e4:7e:46:f7:ba:f8:46:14:08:83:a1:aa:7a:bc:52:80:d4:85:
9e:9e:b2:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 17:06:29 2026 by rpki-client