Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/b4daf6-448d-4f3e-944a-573ca5a609c0/1/cgmO-q6AY8rOzE8cGgtkSDu2lQM.mft
File: cgmO-q6AY8rOzE8cGgtkSDu2lQM.mft (raw, json)
Hash identifier: QWZrH9Gx9LSm/QM1ISBgKgxJPCgc5sVFjTZUX+Q9vJ8=
Subject key identifier: 82:DE:68:C2:E5:D9:78:01:C9:E8:9C:70:09:B8:42:1E:EE:FC:E2:C4
Authority key identifier: 72:09:8E:FA:AE:80:63:CA:CE:CC:4F:1C:1A:0B:64:48:3B:B6:95:03
Certificate issuer: /CN=72098efaae8063cacecc4f1c1a0b64483bb69503
Certificate serial: 019D273A952C0903EE9A83B62D5DB45D09D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgmO-q6AY8rOzE8cGgtkSDu2lQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/b4daf6-448d-4f3e-944a-573ca5a609c0/1/cgmO-q6AY8rOzE8cGgtkSDu2lQM.mft
Manifest number: 188A
Signing time: Wed 25 Mar 2026 23:00:43 +0000
Manifest this update: Wed 25 Mar 2026 23:00:43 +0000
Manifest next update: Thu 26 Mar 2026 23:00:43 +0000
Files and hashes: 1: VMe8OCfr_t5HXDVBLz0rgr2gaks.roa (hash: MtaQQQY5h3OtFKTOTJxg1rBiAaAsL5LhtWeLWQJUvu4=)
2: cgmO-q6AY8rOzE8cGgtkSDu2lQM.crl (hash: ywgo4vJK5al/CA2AHY1Vnd4YPPAW0kh+I/U/BEolKGc=)
3: gJdGEOm66NFVTNBH0oAB9H2an10.roa (hash: jpFzkrgSWLBJPoSMspVLyUPGM0QAIkxfsEyy3UC+Dkw=)
4: iGk2rj8YCAdm3k7BovgsXR_S-tk.roa (hash: Oc1cepzzGPdaTQr0Qpo8rTuwZycHeTEsjdA+8mq9b1M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/b4daf6-448d-4f3e-944a-573ca5a609c0/1/cgmO-q6AY8rOzE8cGgtkSDu2lQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/b4daf6-448d-4f3e-944a-573ca5a609c0/1/cgmO-q6AY8rOzE8cGgtkSDu2lQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/cgmO-q6AY8rOzE8cGgtkSDu2lQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:95:2c:09:03:ee:9a:83:b6:2d:5d:b4:5d:09:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72098efaae8063cacecc4f1c1a0b64483bb69503
Validity
Not Before: Mar 25 23:00:43 2026 GMT
Not After : Mar 26 23:00:43 2026 GMT
Subject: CN=82de68c2e5d97801c9e89c7009b8421eeefce2c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:5a:e6:3c:dd:85:9c:cb:c2:76:69:f2:c2:d7:
6b:56:1d:a8:02:15:c9:cd:5d:bc:ff:4a:af:e3:fc:
18:a8:00:a7:35:29:1b:fb:90:11:60:86:c2:34:52:
92:6e:06:96:40:a6:df:fa:68:a3:9a:aa:8c:2a:a4:
57:a6:a2:a5:d0:eb:4d:82:94:9e:4e:33:d0:da:c7:
e7:6e:b5:6c:ff:9b:56:a3:95:e7:f7:b1:4b:fc:02:
37:15:4b:10:a9:9c:f4:60:1d:54:9c:66:16:1f:ab:
e6:be:af:42:8d:f9:86:41:8b:15:02:cf:4f:65:03:
65:bf:e3:e9:65:3a:38:7d:e7:eb:a0:ea:3e:7b:c0:
85:6a:cf:2c:81:6b:15:00:8f:ae:97:46:c5:14:ed:
12:fe:9d:04:6b:df:df:8c:0b:f8:9e:13:ce:a6:bb:
17:d3:2a:75:c6:32:ff:ed:4d:a2:27:f0:31:d2:3f:
39:2f:84:83:b4:13:cc:bf:25:e3:47:78:73:25:95:
e1:ac:8c:36:a9:60:38:ae:04:db:38:03:27:0c:4f:
28:f0:72:14:2e:99:7f:fa:0a:27:7c:4d:8d:84:da:
eb:16:b2:b7:1b:02:51:61:c8:08:60:9b:36:83:12:
a1:08:6e:ec:5d:03:a7:48:ae:85:11:50:85:c6:f8:
ba:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:DE:68:C2:E5:D9:78:01:C9:E8:9C:70:09:B8:42:1E:EE:FC:E2:C4
X509v3 Authority Key Identifier:
keyid:72:09:8E:FA:AE:80:63:CA:CE:CC:4F:1C:1A:0B:64:48:3B:B6:95:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgmO-q6AY8rOzE8cGgtkSDu2lQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4daf6-448d-4f3e-944a-573ca5a609c0/1/cgmO-q6AY8rOzE8cGgtkSDu2lQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4daf6-448d-4f3e-944a-573ca5a609c0/1/cgmO-q6AY8rOzE8cGgtkSDu2lQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:6b:99:8d:a9:c1:b5:58:9a:f2:36:ff:d8:13:fb:2a:82:48:
48:fc:1d:03:df:9c:cb:92:fb:cb:85:5e:b4:19:fb:7b:78:25:
1d:ce:d3:7d:ab:22:7c:9d:d7:1d:09:16:83:75:38:f7:8d:89:
81:6b:6f:21:cc:b7:c8:f3:e0:58:fb:24:d8:0a:e6:6e:37:e1:
bb:9c:f6:ff:02:33:f3:3f:b7:61:44:63:c4:59:c3:52:17:fb:
4d:7b:e8:28:17:ef:5a:5a:10:5a:16:68:79:e8:c6:8d:d7:6c:
3f:85:b9:8b:cf:42:49:d9:41:e1:c8:72:b5:a9:b8:78:78:2f:
dc:dc:7d:cd:53:a4:17:e2:95:e7:03:15:34:7f:42:b5:db:aa:
37:a7:bb:f1:3f:c2:68:16:83:ec:81:6c:e6:24:0f:c4:c9:4b:
0a:87:b6:72:3d:46:f2:ba:8f:e1:d4:c2:93:c7:34:8f:48:c8:
33:8c:8f:d6:4d:79:42:31:00:ce:9b:3b:b9:7e:67:a4:92:55:
f1:06:f2:3c:07:3f:9f:30:85:e9:38:db:a1:15:9f:ff:15:c6:
ad:2a:07:fe:27:f7:ea:f9:45:a2:26:4c:d2:dc:6a:e7:e2:ed:
c8:88:f9:20:7c:88:82:47:2e:22:dc:3a:1b:f0:b9:a9:36:17:
a8:6d:ec:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nOpUsCQPumoO2LV20XQnVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDk4ZWZhYWU4MDYzY2FjZWNjNGYxYzFhMGI2NDQ4M2Ji
Njk1MDMwHhcNMjYwMzI1MjMwMDQzWhcNMjYwMzI2MjMwMDQzWjAzMTEwLwYDVQQD
Eyg4MmRlNjhjMmU1ZDk3ODAxYzllODljNzAwOWI4NDIxZWVlZmNlMmM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6VrmPN2FnMvCdmnywtdrVh2oAhXJ
zV28/0qv4/wYqACnNSkb+5ARYIbCNFKSbgaWQKbf+mijmqqMKqRXpqKl0OtNgpSe
TjPQ2sfnbrVs/5tWo5Xn97FL/AI3FUsQqZz0YB1UnGYWH6vmvq9CjfmGQYsVAs9P
ZQNlv+PpZTo4fefroOo+e8CFas8sgWsVAI+ul0bFFO0S/p0Ea9/fjAv4nhPOprsX
0yp1xjL/7U2iJ/Ax0j85L4SDtBPMvyXjR3hzJZXhrIw2qWA4rgTbOAMnDE8o8HIU
Lpl/+gonfE2NhNrrFrK3GwJRYcgIYJs2gxKhCG7sXQOnSK6FEVCFxvi6TQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFILeaMLl2XgByeiccAm4Qh7u/OLEMB8GA1UdIwQY
MBaAFHIJjvqugGPKzsxPHBoLZEg7tpUDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dtTy1xNkFZOHJPekU4Y0dndGtTRHUybFFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9iNGRhZjYtNDQ4ZC00ZjNlLTk0NGEt
NTczY2E1YTYwOWMwLzEvY2dtTy1xNkFZOHJPekU4Y0dndGtTRHUybFFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi9iNGRhZjYtNDQ4ZC00ZjNlLTk0NGEtNTczY2E1YTYwOWMw
LzEvY2dtTy1xNkFZOHJPekU4Y0dndGtTRHUybFFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM2uZjanB
tVia8jb/2BP7KoJISPwdA9+cy5L7y4VetBn7e3glHc7TfasifJ3XHQkWg3U4942J
gWtvIcy3yPPgWPsk2Armbjfhu5z2/wIz8z+3YURjxFnDUhf7TXvoKBfvWloQWhZo
eejGjddsP4W5i89CSdlB4chytam4eHgv3Nx9zVOkF+KV5wMVNH9CtduqN6e78T/C
aBaD7IFs5iQPxMlLCoe2cj1G8rqP4dTCk8c0j0jIM4yP1k15QjEAzps7uX5npJJV
8QbyPAc/nzCF6TjboRWf/xXGrSoH/if36vlFoiZM0txq5+LtyIj5IHyIgkcuItw6
G/C5qTYXqG3sag==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:38:27 2026 by rpki-client