
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/6d7ecf-4b62-4367-9b50-064d7adf4be3/1/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.mft
File: cdg_2Nq_4UsXTMzTWzW4BxMzS6U.mft (raw, json)
Hash identifier: dQOjP62a6HwWUEkh5JBu0rC8b4UG4l4v/jBzIrDNnlo=
Subject key identifier: E1:20:9B:AC:CD:33:C1:21:FE:93:22:E1:92:39:39:CC:F3:4B:07:D8
Authority key identifier: 71:D8:3F:D8:DA:BF:E1:4B:17:4C:CC:D3:5B:35:B8:07:13:33:4B:A5
Certificate issuer: /CN=71d83fd8dabfe14b174cccd35b35b80713334ba5
Certificate serial: 019D25F12E106884C93E25DDE33A56A9E970
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/6d7ecf-4b62-4367-9b50-064d7adf4be3/1/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.mft
Manifest number: 06E8
Signing time: Wed 25 Mar 2026 17:00:56 +0000
Manifest this update: Wed 25 Mar 2026 17:00:56 +0000
Manifest next update: Thu 26 Mar 2026 17:00:56 +0000
Files and hashes: 1: B8t2bBTkaLAR5TIW9fbMzDeK7wM.roa (hash: rEfJvzviw6ozBNoCBXd6KOO7hAZ89y6wXkNGYhrBaG0=)
2: HMrz0ooKEJFXKSO4vlLH3tqjuoY.roa (hash: Q44eqltej8ZT7IIY9L9uJnTiWZ7q0wvG++yznZV8P2Y=)
3: Jcrw5wdlUSTT6uVPSFxR6-NSOq4.asa (hash: dR4oTJ5jqBavqgY9Rb82c5VxF/eMWWjkNxBxJE8/VHA=)
4: OAwjmIJKIKdPAQbPLOFqI6tUMQc.roa (hash: ptXr3wrI9Ua3HiNsZCwM7CEtOaXWpO5fScxHniZRFZ8=)
5: cdg_2Nq_4UsXTMzTWzW4BxMzS6U.crl (hash: jRjb2LoEchtIMjwmF3FSGM+5b6Ecx+keC8OFp14MAsE=)
6: gtP2-qjZ9BceWm37CevDo-CjXzY.roa (hash: VlU69I3hb/G6/wyrp9pzGaxb3Tpi8AUBli1dWDbRaNc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/6d7ecf-4b62-4367-9b50-064d7adf4be3/1/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/6d7ecf-4b62-4367-9b50-064d7adf4be3/1/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:2e:10:68:84:c9:3e:25:dd:e3:3a:56:a9:e9:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d83fd8dabfe14b174cccd35b35b80713334ba5
Validity
Not Before: Mar 25 17:00:56 2026 GMT
Not After : Mar 26 17:00:56 2026 GMT
Subject: CN=e1209baccd33c121fe9322e1923939ccf34b07d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:10:b9:65:d0:aa:a4:12:73:c9:ee:45:5c:2f:
e5:38:55:c2:71:3c:12:ec:4b:37:72:6e:ab:ac:4e:
3c:e5:ad:16:5f:dd:79:8e:cd:bd:f0:0e:5f:7b:25:
c0:5d:d0:5a:37:7d:fe:0e:5e:f6:5c:e5:db:a8:5c:
37:c8:02:f8:f7:57:17:63:2b:3a:9e:1a:dc:71:87:
68:3f:ed:0a:bf:8b:cb:36:eb:05:74:d2:2b:cd:d3:
5d:e4:1b:13:a2:7c:39:37:d4:3e:7f:70:86:36:9c:
f8:fd:04:0b:b4:ee:e0:09:3e:c5:f4:aa:d8:30:1e:
41:5a:7e:13:bf:61:f8:46:ed:b6:26:52:5d:0a:7f:
63:8a:0a:11:aa:3d:dc:38:56:df:46:2d:90:cf:46:
fd:84:a7:fa:e0:49:d8:01:d4:35:41:15:ad:7a:89:
8d:d3:d6:e8:bb:09:5d:63:bc:20:2b:8b:13:89:78:
82:a2:25:b3:9f:d8:07:8b:b1:b8:88:d7:56:56:e0:
fb:58:d8:19:e5:6f:a9:1d:cb:10:cb:c8:18:b7:b3:
cf:34:ae:0a:dc:a7:3b:a7:52:1e:52:4d:fc:4c:f5:
b2:3e:ed:45:9d:1e:ca:c0:41:8b:39:61:b1:e9:56:
b6:1b:4c:33:b6:b2:91:62:fe:38:f3:0e:ca:56:c3:
c3:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:20:9B:AC:CD:33:C1:21:FE:93:22:E1:92:39:39:CC:F3:4B:07:D8
X509v3 Authority Key Identifier:
keyid:71:D8:3F:D8:DA:BF:E1:4B:17:4C:CC:D3:5B:35:B8:07:13:33:4B:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6d7ecf-4b62-4367-9b50-064d7adf4be3/1/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6d7ecf-4b62-4367-9b50-064d7adf4be3/1/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:4d:4b:a7:b8:6d:ee:78:1b:8a:42:26:69:42:9a:20:be:bb:
7b:ba:fa:c9:9b:14:1b:af:70:e9:ff:45:e3:36:b6:fa:dc:ed:
4e:7e:c5:9d:87:ba:8f:94:d4:79:d0:77:ca:da:9e:fc:f1:bf:
19:3d:10:28:f6:e3:44:d8:79:b7:af:8f:0f:f7:9f:07:86:86:
e3:f6:36:a0:91:4a:22:60:76:7f:d2:74:73:57:1a:9e:e5:3a:
cf:54:a1:17:13:06:ae:32:69:6e:92:90:8b:f6:39:17:51:bf:
37:8c:8e:79:f5:b2:6e:9c:58:9d:ca:93:3c:cf:b4:ec:26:2d:
7b:13:5f:41:6a:13:90:d1:ff:09:94:0a:a1:e0:ce:a6:f9:ff:
bb:38:71:0f:84:bc:9a:63:de:06:da:de:8f:a7:ba:33:40:0d:
12:1e:40:54:b4:82:cc:85:0d:4d:d0:03:09:40:03:59:48:08:
b4:71:d2:20:e0:16:4e:77:fe:b4:27:39:65:46:43:10:15:af:
55:b9:d5:81:86:d4:74:e9:70:51:0e:56:52:bd:4e:4d:9a:7c:
b6:ff:09:52:1c:85:db:86:35:1d:ac:4e:19:74:a2:ed:60:42:
84:42:b8:42:5a:d4:a4:21:a5:ce:9e:46:95:33:27:de:1e:5a:
42:c0:cb:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:25:41 2026 by rpki-client