
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/a6dae8-d98e-4aa0-b4ad-4281e38a9bf2/1/cgxjI89zCTCgOw5EYH9v7fUnqMQ.mft
File: cgxjI89zCTCgOw5EYH9v7fUnqMQ.mft (raw, json)
Hash identifier: 4iWogIJ+JQbxsRNucMmGSMlEYfOnn7QptMNKNF8k2Ao=
Subject key identifier: 61:34:7A:39:E5:4C:1D:B4:B7:E7:42:95:95:47:A8:41:A3:BC:BF:21
Authority key identifier: 72:0C:63:23:CF:73:09:30:A0:3B:0E:44:60:7F:6F:ED:F5:27:A8:C4
Certificate issuer: /CN=720c6323cf730930a03b0e44607f6fedf527a8c4
Certificate serial: 019E1E6C21BED1BD48FBE203D47E65CA1785
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgxjI89zCTCgOw5EYH9v7fUnqMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/a6dae8-d98e-4aa0-b4ad-4281e38a9bf2/1/cgxjI89zCTCgOw5EYH9v7fUnqMQ.mft
Manifest number: 0223
Signing time: Tue 12 May 2026 23:01:03 +0000
Manifest this update: Tue 12 May 2026 23:01:03 +0000
Manifest next update: Wed 13 May 2026 23:01:03 +0000
Files and hashes: 1: cgxjI89zCTCgOw5EYH9v7fUnqMQ.crl (hash: Uk0vaBLVRvwgMaHyeeEJs4g93DsVoxb921muchcWMcM=)
2: xEYU-K7wenXyYwuEUiZnmFrMZac.roa (hash: gWNLlP9RhlookRQsci7JBvafArIbz1TL4llsI2fvdA0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/a6dae8-d98e-4aa0-b4ad-4281e38a9bf2/1/cgxjI89zCTCgOw5EYH9v7fUnqMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/a6dae8-d98e-4aa0-b4ad-4281e38a9bf2/1/cgxjI89zCTCgOw5EYH9v7fUnqMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/cgxjI89zCTCgOw5EYH9v7fUnqMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:21:be:d1:bd:48:fb:e2:03:d4:7e:65:ca:17:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=720c6323cf730930a03b0e44607f6fedf527a8c4
Validity
Not Before: May 12 23:01:03 2026 GMT
Not After : May 13 23:01:03 2026 GMT
Subject: CN=61347a39e54c1db4b7e742959547a841a3bcbf21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:8e:da:18:57:4f:e0:55:8f:bf:3a:95:c8:72:
3d:36:10:53:92:e3:ed:df:7f:ae:45:d3:1c:96:00:
8d:6a:9d:df:bd:b8:f9:ea:42:ee:3f:ea:1f:ca:c8:
f7:9d:a1:e8:20:4a:c4:54:6d:43:e2:9d:78:fe:75:
b9:d0:5e:02:95:e3:a6:13:9d:83:56:b7:81:fb:bb:
6c:e5:a6:9b:ff:4c:de:7d:4c:2d:45:38:74:1a:aa:
29:c4:f5:fb:53:fb:65:24:db:3a:d4:c8:59:20:29:
e6:77:36:e8:bd:fb:99:ad:ef:1d:c3:73:54:26:dc:
88:94:c4:ca:0c:d7:44:e9:0e:e4:89:df:9f:34:87:
4c:99:f7:2b:9b:7e:66:8a:b6:83:58:18:83:32:c4:
67:4d:12:5d:49:18:88:0d:a0:24:7d:50:f1:e1:01:
e0:c5:fe:79:80:aa:6a:fb:0f:42:5b:5b:7b:c9:2f:
06:2f:06:e0:14:a8:dd:92:d4:2d:5c:37:6b:30:57:
2e:49:91:e6:48:e8:fb:a3:0a:d9:f2:2b:89:ce:b5:
d6:c4:a7:e8:d4:56:b7:ff:4d:d5:61:cc:2a:17:1e:
c8:b3:bd:64:17:2c:04:96:f1:0c:36:e5:fa:f5:93:
cd:25:d8:c0:7c:65:a4:8e:d7:eb:45:c7:a6:a0:8c:
00:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:34:7A:39:E5:4C:1D:B4:B7:E7:42:95:95:47:A8:41:A3:BC:BF:21
X509v3 Authority Key Identifier:
keyid:72:0C:63:23:CF:73:09:30:A0:3B:0E:44:60:7F:6F:ED:F5:27:A8:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgxjI89zCTCgOw5EYH9v7fUnqMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a6dae8-d98e-4aa0-b4ad-4281e38a9bf2/1/cgxjI89zCTCgOw5EYH9v7fUnqMQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a6dae8-d98e-4aa0-b4ad-4281e38a9bf2/1/cgxjI89zCTCgOw5EYH9v7fUnqMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:05:6a:da:8f:a9:53:39:3b:86:18:e8:c9:8b:0e:28:40:35:
7b:71:79:52:e2:69:26:e2:76:bd:31:51:63:b6:ee:aa:62:20:
9c:3e:02:34:4a:73:9d:72:1a:16:b6:94:fc:5e:d2:04:b7:aa:
27:4b:8e:07:d7:38:68:2f:c9:74:9f:41:40:04:70:62:33:a3:
49:5d:34:f0:61:bc:26:f3:7f:32:09:11:39:7c:42:2b:d3:16:
71:c4:1b:09:fe:f5:56:f4:29:a0:88:2d:c8:cb:87:c9:11:b2:
ac:f6:cc:a5:07:2f:2c:5f:84:23:9d:8a:d0:ea:d0:92:ec:30:
5c:c4:32:3f:04:94:cd:58:f8:96:a2:af:1f:7d:a3:c9:f9:44:
48:5c:b4:22:a2:cb:97:63:84:f2:66:be:f5:1f:41:8a:e4:be:
bc:aa:96:df:e1:cc:65:f6:94:82:43:61:d2:c7:db:7b:68:66:
7c:29:94:83:9c:cc:23:d1:48:1f:22:79:2e:21:a5:c1:7b:07:
d7:61:bb:30:a1:92:e7:a7:e9:2a:cd:c3:75:ad:87:60:cf:3b:
99:52:04:54:52:c2:c9:ed:ce:cd:a9:f3:23:6a:c9:06:17:3a:
00:6b:45:25:49:1c:3f:e4:98:42:67:c3:d7:07:89:80:9c:82:
44:66:00:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ebCG+0b1I++ID1H5lyheFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMGM2MzIzY2Y3MzA5MzBhMDNiMGU0NDYwN2Y2ZmVkZjUy
N2E4YzQwHhcNMjYwNTEyMjMwMTAzWhcNMjYwNTEzMjMwMTAzWjAzMTEwLwYDVQQD
Eyg2MTM0N2EzOWU1NGMxZGI0YjdlNzQyOTU5NTQ3YTg0MWEzYmNiZjIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy47aGFdP4FWPvzqVyHI9NhBTkuPt
33+uRdMclgCNap3fvbj56kLuP+ofysj3naHoIErEVG1D4p14/nW50F4CleOmE52D
VreB+7ts5aab/0zefUwtRTh0GqopxPX7U/tlJNs61MhZICnmdzbovfuZre8dw3NU
JtyIlMTKDNdE6Q7kid+fNIdMmfcrm35miraDWBiDMsRnTRJdSRiIDaAkfVDx4QHg
xf55gKpq+w9CW1t7yS8GLwbgFKjdktQtXDdrMFcuSZHmSOj7owrZ8iuJzrXWxKfo
1Fa3/03VYcwqFx7Is71kFywElvEMNuX69ZPNJdjAfGWkjtfrRcemoIwAaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGE0ejnlTB20t+dClZVHqEGjvL8hMB8GA1UdIwQY
MBaAFHIMYyPPcwkwoDsORGB/b+31J6jEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2d4akk4OXpDVENnT3c1RVlIOXY3ZlVucU1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9hNmRhZTgtZDk4ZS00YWEwLWI0YWQt
NDI4MWUzOGE5YmYyLzEvY2d4akk4OXpDVENnT3c1RVlIOXY3ZlVucU1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi9hNmRhZTgtZDk4ZS00YWEwLWI0YWQtNDI4MWUzOGE5YmYy
LzEvY2d4akk4OXpDVENnT3c1RVlIOXY3ZlVucU1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEgVq2o+p
Uzk7hhjoyYsOKEA1e3F5UuJpJuJ2vTFRY7buqmIgnD4CNEpznXIaFraU/F7SBLeq
J0uOB9c4aC/JdJ9BQARwYjOjSV008GG8JvN/MgkROXxCK9MWccQbCf71VvQpoIgt
yMuHyRGyrPbMpQcvLF+EI52K0OrQkuwwXMQyPwSUzVj4lqKvH32jyflESFy0IqLL
l2OE8ma+9R9BiuS+vKqW3+HMZfaUgkNh0sfbe2hmfCmUg5zMI9FIHyJ5LiGlwXsH
12G7MKGS56fpKs3Dda2HYM87mVIEVFLCye3OzanzI2rJBhc6AGtFJUkcP+SYQmfD
1weJgJyCRGYAXg==
-----END CERTIFICATE-----
Generated at Wed May 13 08:16:44 2026 by rpki-client