Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/cgSGQdj3M3_OojrlMyv24RoR4io.mft
File: cgSGQdj3M3_OojrlMyv24RoR4io.mft (raw, json)
Hash identifier: FoHO1hlXpaJvrxN+b7zwnJd5aHWpCKn+9OCGZ19H2rs=
Subject key identifier: 4D:A0:E6:D2:C9:B3:45:EA:4B:89:E0:3D:F1:69:B1:D4:66:D1:2F:68
Authority key identifier: 72:04:86:41:D8:F7:33:7F:CE:A2:3A:E5:33:2B:F6:E1:1A:11:E2:2A
Certificate issuer: /CN=72048641d8f7337fcea23ae5332bf6e11a11e22a
Certificate serial: 019F9211763280A44C3290076172773DE728
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgSGQdj3M3_OojrlMyv24RoR4io.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/cgSGQdj3M3_OojrlMyv24RoR4io.mft
Manifest number: 195A
Signing time: Fri 24 Jul 2026 03:00:45 +0000
Manifest this update: Fri 24 Jul 2026 03:00:45 +0000
Manifest next update: Sat 25 Jul 2026 03:00:45 +0000
Files and hashes: 1: Jl68zYVqXRal67PopoREeqdxbg8.roa (hash: xD50qSlfLrwmHdVWTozHtqTpDA+X5IuU1okzXOkjlqM=)
2: UKyAXaXI_RgZmsQiZ2Wkng394Hs.roa (hash: cJqApiAQC0vkIOP1XsZGHhIZOCWBHw73NHuSL/144Ig=)
3: cgSGQdj3M3_OojrlMyv24RoR4io.crl (hash: lKhXWQYCeALoPzmgwBZASib3Ef9MhReh4rwAtP5ZcQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/cgSGQdj3M3_OojrlMyv24RoR4io.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/cgSGQdj3M3_OojrlMyv24RoR4io.mft
rsync://rpki.ripe.net/repository/DEFAULT/cgSGQdj3M3_OojrlMyv24RoR4io.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 03:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:11:76:32:80:a4:4c:32:90:07:61:72:77:3d:e7:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72048641d8f7337fcea23ae5332bf6e11a11e22a
Validity
Not Before: Jul 24 03:00:45 2026 GMT
Not After : Jul 25 03:00:45 2026 GMT
Subject: CN=4da0e6d2c9b345ea4b89e03df169b1d466d12f68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8f:8f:af:fa:eb:b4:ea:5f:a4:39:d2:fa:5b:
6f:79:ef:f6:9f:8a:50:f3:f6:ab:0d:db:40:f4:38:
61:48:f0:cf:2e:a4:0c:37:14:51:6b:ae:4a:d9:88:
20:f5:37:84:2d:1b:bc:72:e1:12:ab:c1:dc:89:c9:
46:c3:68:8a:8c:78:26:46:36:50:cc:48:40:ee:17:
95:40:bf:1f:ea:6d:4d:19:78:d1:05:5a:c4:b5:a2:
b5:30:5c:c3:0a:f9:f8:43:14:e4:c5:a7:a8:92:74:
f1:f3:5c:15:dd:93:da:8f:3c:ea:fb:f7:e3:37:6c:
a8:a8:f3:90:11:14:10:d3:78:c9:b5:6d:e2:55:1e:
ef:53:27:b2:84:50:8b:4b:cb:d5:09:8e:e9:86:51:
91:e3:a6:fc:9e:cf:d2:32:64:21:97:8c:de:00:c3:
7e:8f:50:2b:b5:a4:c4:e2:a7:ce:12:c9:76:e2:bb:
af:4d:ca:68:38:a5:a7:a0:e0:0e:d9:8b:f7:44:aa:
ca:06:be:c3:4a:9d:f4:f9:aa:64:bb:db:dd:8f:ea:
d8:f4:e9:ae:37:a6:97:a9:76:5e:c5:93:46:7d:73:
49:a0:f3:6f:c9:7c:21:05:f9:fd:79:84:f3:7e:22:
c9:8e:74:19:22:ea:e8:2f:33:15:ee:68:ee:39:8c:
44:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:A0:E6:D2:C9:B3:45:EA:4B:89:E0:3D:F1:69:B1:D4:66:D1:2F:68
X509v3 Authority Key Identifier:
keyid:72:04:86:41:D8:F7:33:7F:CE:A2:3A:E5:33:2B:F6:E1:1A:11:E2:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgSGQdj3M3_OojrlMyv24RoR4io.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/cgSGQdj3M3_OojrlMyv24RoR4io.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/cgSGQdj3M3_OojrlMyv24RoR4io.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:71:ba:d9:38:cd:f8:40:03:21:4c:35:85:7c:57:29:16:51:
16:97:fc:29:43:0a:a2:ba:25:ab:67:ab:6f:a0:36:c7:7c:f5:
ae:84:b0:b4:15:72:65:31:96:70:11:ba:ca:a8:de:4f:bf:d9:
ee:e8:52:c8:20:c5:65:15:44:b0:35:43:7d:09:0f:40:83:b3:
c0:db:c1:c5:e1:fe:cd:61:56:54:55:31:2d:db:63:ac:51:80:
75:da:b9:25:60:c3:d8:9e:30:9a:95:da:e3:11:60:b4:af:f9:
43:9e:d9:d3:4f:b8:01:24:84:7d:6e:56:7f:be:c8:8e:3e:62:
9f:cc:bb:cd:c9:7e:78:f2:af:0b:09:a5:39:1c:9f:35:50:e0:
34:73:33:a4:fc:7c:b2:a2:c5:e7:da:f6:02:d3:7e:cc:53:36:
f7:89:4b:7a:2c:af:0b:17:f4:6a:da:c4:fe:58:f7:49:b3:af:
5a:eb:ce:30:ec:1a:38:04:ec:a9:fe:67:85:4e:78:2b:fc:f4:
ee:79:a7:f5:89:69:07:df:2e:db:cb:71:50:70:64:8a:5f:80:
01:c2:17:f2:1a:72:c5:41:67:e0:72:59:7b:f9:56:be:09:76:
e8:7c:37:50:18:41:2e:f5:4c:03:6d:53:b9:87:e5:25:a3:69:
c4:66:f1:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:42:25 2026 by rpki-client