Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b6/a6dae8-d98e-4aa0-b4ad-4281e38a9bf2/1/cgxjI89zCTCgOw5EYH9v7fUnqMQ.mft
File: cgxjI89zCTCgOw5EYH9v7fUnqMQ.mft (raw, json)
Hash identifier: 82FF9z7rER0QzHitD35SRHsLZxzC/qo+bskwPrOEy6o=
Subject key identifier: F4:89:59:99:2E:E0:2D:5C:31:B1:36:84:65:5C:A0:2E:A8:54:1A:98
Authority key identifier: 72:0C:63:23:CF:73:09:30:A0:3B:0E:44:60:7F:6F:ED:F5:27:A8:C4
Certificate issuer: /CN=720c6323cf730930a03b0e44607f6fedf527a8c4
Certificate serial: 01A0DB71F4F1F602E2A665A06140053E1300
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgxjI89zCTCgOw5EYH9v7fUnqMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/a6dae8-d98e-4aa0-b4ad-4281e38a9bf2/1/cgxjI89zCTCgOw5EYH9v7fUnqMQ.mft
Manifest number: 038E
Signing time: Sat 26 Sep 2026 02:01:13 +0000
Manifest this update: Sat 26 Sep 2026 02:01:13 +0000
Manifest next update: Sun 27 Sep 2026 02:01:13 +0000
Files and hashes: 1: cgxjI89zCTCgOw5EYH9v7fUnqMQ.crl (hash: 0RCyWDs47tSScV8Rqsyg1FeiTXGntd/zNPrJjZFJ2cI=)
2: xEYU-K7wenXyYwuEUiZnmFrMZac.roa (hash: gWNLlP9RhlookRQsci7JBvafArIbz1TL4llsI2fvdA0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/a6dae8-d98e-4aa0-b4ad-4281e38a9bf2/1/cgxjI89zCTCgOw5EYH9v7fUnqMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/a6dae8-d98e-4aa0-b4ad-4281e38a9bf2/1/cgxjI89zCTCgOw5EYH9v7fUnqMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/cgxjI89zCTCgOw5EYH9v7fUnqMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:71:f4:f1:f6:02:e2:a6:65:a0:61:40:05:3e:13:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=720c6323cf730930a03b0e44607f6fedf527a8c4
Validity
Not Before: Sep 26 02:01:13 2026 GMT
Not After : Sep 27 02:01:13 2026 GMT
Subject: CN=f48959992ee02d5c31b13684655ca02ea8541a98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:dd:d0:55:1e:eb:51:05:e1:15:86:08:c2:7a:
9e:56:c0:10:ca:50:ef:21:01:5f:af:12:cf:70:df:
d7:3a:e7:01:07:5c:a8:36:ec:68:91:15:a3:c3:f7:
ef:f4:18:0a:e9:51:53:45:79:82:c9:b3:f5:62:0d:
e5:78:b1:0e:16:8a:20:bb:04:ef:c6:df:1e:fd:a0:
dd:10:be:8f:f5:01:65:53:0e:9f:ec:0d:24:15:0b:
89:0d:ce:f7:1d:27:6d:a0:36:c5:2b:ea:52:54:41:
2f:4d:0f:35:05:b9:6e:34:ab:9a:8c:80:2c:55:9b:
cb:98:f1:74:c4:31:cc:9c:dc:b3:44:24:4a:dd:47:
e6:46:70:fd:cd:6f:e0:ad:ad:13:15:c8:c1:d3:f8:
b5:fa:13:95:bb:c2:23:4f:79:36:f5:d0:51:60:17:
82:d4:1f:da:d5:02:40:66:af:2a:da:1e:fa:52:5f:
c6:99:e9:6d:18:fe:3c:c9:55:17:d4:cf:fa:bb:f7:
3f:46:24:af:90:74:1c:2e:c4:ed:d1:ef:31:b6:94:
e3:64:a3:66:b0:cd:f5:b9:70:60:73:9a:83:91:bf:
9a:7c:9a:69:89:0e:f3:5f:9a:52:29:8e:b0:4c:4d:
f3:5b:81:7f:bd:89:49:73:f7:1e:6a:44:4a:38:88:
89:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:89:59:99:2E:E0:2D:5C:31:B1:36:84:65:5C:A0:2E:A8:54:1A:98
X509v3 Authority Key Identifier:
keyid:72:0C:63:23:CF:73:09:30:A0:3B:0E:44:60:7F:6F:ED:F5:27:A8:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgxjI89zCTCgOw5EYH9v7fUnqMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a6dae8-d98e-4aa0-b4ad-4281e38a9bf2/1/cgxjI89zCTCgOw5EYH9v7fUnqMQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a6dae8-d98e-4aa0-b4ad-4281e38a9bf2/1/cgxjI89zCTCgOw5EYH9v7fUnqMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:8f:94:85:cb:4b:d8:b7:62:0d:37:0c:2a:5d:86:6c:02:3d:
a5:83:ff:33:1d:7e:c5:74:f8:99:e1:59:bf:43:4c:bb:3b:56:
6a:8d:28:db:39:a6:4b:06:69:41:6d:21:b3:82:91:03:1d:8a:
fc:34:34:74:8d:4d:ea:b9:25:29:9f:78:b8:83:a3:72:f1:a8:
f8:7e:8f:96:03:95:2f:4d:04:77:ec:26:cf:d0:dd:94:b8:cf:
4a:b6:74:ec:9f:ff:a4:15:e2:f1:08:f6:a6:6c:44:a1:45:70:
7f:7d:45:76:79:e0:3c:f3:45:ac:36:94:fe:34:a9:2d:5b:a0:
c8:bf:fc:3e:1d:50:19:ad:6e:58:4a:93:eb:2a:9d:b5:03:73:
8b:19:af:fb:15:dc:c0:81:62:7d:76:8c:1e:f5:8f:27:a3:52:
3c:a6:9b:13:02:a1:24:d6:44:ac:95:9d:af:1f:c8:da:5f:70:
39:86:ab:cd:d0:ea:6c:a6:57:b4:3a:d7:76:f3:c8:35:fd:06:
b5:6c:b3:03:09:e0:6f:81:93:3d:0c:80:5d:a0:f9:4c:c3:a7:
b2:e8:b7:8f:20:f9:ba:24:8a:46:aa:d6:2e:a5:72:6f:6f:b9:
9e:87:c6:ae:bc:8c:81:40:64:1e:0e:4e:7a:22:e1:55:00:b6:
ff:17:c7:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 11:10:47 2026 by rpki-client