Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/cgSGQdj3M3_OojrlMyv24RoR4io.mft
File: cgSGQdj3M3_OojrlMyv24RoR4io.mft (raw, json)
Hash identifier: bkb7hixUIkfmuQEH1FSlbO33chxIxG0PgCEHYgi1NhU=
Subject key identifier: 17:B1:2B:D7:F3:74:54:87:56:B9:42:B6:03:99:60:00:F4:B3:D1:1C
Authority key identifier: 72:04:86:41:D8:F7:33:7F:CE:A2:3A:E5:33:2B:F6:E1:1A:11:E2:2A
Certificate issuer: /CN=72048641d8f7337fcea23ae5332bf6e11a11e22a
Certificate serial: 019D2816D4B23ACC4660103696B2FECA91B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgSGQdj3M3_OojrlMyv24RoR4io.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/cgSGQdj3M3_OojrlMyv24RoR4io.mft
Manifest number: 181A
Signing time: Thu 26 Mar 2026 03:01:18 +0000
Manifest this update: Thu 26 Mar 2026 03:01:18 +0000
Manifest next update: Fri 27 Mar 2026 03:01:18 +0000
Files and hashes: 1: Jl68zYVqXRal67PopoREeqdxbg8.roa (hash: xD50qSlfLrwmHdVWTozHtqTpDA+X5IuU1okzXOkjlqM=)
2: UKyAXaXI_RgZmsQiZ2Wkng394Hs.roa (hash: cJqApiAQC0vkIOP1XsZGHhIZOCWBHw73NHuSL/144Ig=)
3: cgSGQdj3M3_OojrlMyv24RoR4io.crl (hash: RuxxiYMs+hIqzovcbXClaFF5lA+tqeDTWLOctcwBxYU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/cgSGQdj3M3_OojrlMyv24RoR4io.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/cgSGQdj3M3_OojrlMyv24RoR4io.mft
rsync://rpki.ripe.net/repository/DEFAULT/cgSGQdj3M3_OojrlMyv24RoR4io.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 03:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:d4:b2:3a:cc:46:60:10:36:96:b2:fe:ca:91:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72048641d8f7337fcea23ae5332bf6e11a11e22a
Validity
Not Before: Mar 26 03:01:18 2026 GMT
Not After : Mar 27 03:01:18 2026 GMT
Subject: CN=17b12bd7f374548756b942b603996000f4b3d11c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:06:01:ff:d2:a5:65:d1:b0:59:4a:3e:05:c7:
d9:14:12:fe:33:0c:07:84:4e:71:4a:42:f1:7c:1a:
ed:85:b5:30:39:21:3c:63:e8:c7:8f:80:0f:a0:e7:
a0:09:fc:72:6c:86:95:93:8d:26:52:4e:1c:30:8f:
d1:5e:34:09:7e:d6:e2:c7:29:0f:88:d5:dd:3d:c2:
1b:cc:29:a9:fa:ea:a6:bd:84:fe:e3:b5:03:e7:90:
db:3a:9f:16:77:ab:7b:44:6f:77:4b:61:e3:fa:51:
90:37:66:d7:97:d0:5b:29:fc:24:e9:d8:39:a6:77:
1f:7a:9d:e9:90:2a:02:a3:f5:be:71:a3:d9:90:ff:
69:da:1c:a2:01:56:34:30:6c:b4:e4:67:c7:80:c1:
e9:8d:ec:be:89:ff:9c:c4:3e:c1:92:d9:80:06:e8:
d5:9b:84:29:9e:4a:6d:7b:8b:29:12:34:82:ab:ab:
bd:01:cb:c7:b5:e5:40:41:ca:5b:aa:db:fb:04:2d:
9e:52:aa:2e:70:a2:1a:35:eb:68:47:b7:08:25:2f:
a7:f1:b8:07:1b:c7:60:9f:a8:de:88:4b:9c:dd:e6:
46:ea:ee:fa:cd:d4:b3:4d:85:8b:30:5a:e0:b7:fe:
2e:91:6c:97:f7:2c:dd:74:c1:c4:0a:21:c7:3a:41:
98:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:B1:2B:D7:F3:74:54:87:56:B9:42:B6:03:99:60:00:F4:B3:D1:1C
X509v3 Authority Key Identifier:
keyid:72:04:86:41:D8:F7:33:7F:CE:A2:3A:E5:33:2B:F6:E1:1A:11:E2:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgSGQdj3M3_OojrlMyv24RoR4io.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/cgSGQdj3M3_OojrlMyv24RoR4io.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/cgSGQdj3M3_OojrlMyv24RoR4io.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:4f:8e:5f:08:2c:20:29:2b:88:ce:73:88:6c:aa:e4:e4:7a:
87:2b:26:74:e5:82:d1:52:96:35:c6:81:74:df:99:13:30:ec:
96:be:1e:be:11:c8:36:ff:aa:83:89:d1:44:cc:f3:cc:4a:0d:
1d:b4:a9:c0:55:b2:09:07:91:ec:0f:01:b9:33:a0:25:8b:a4:
1b:a2:77:3c:6e:0b:71:54:74:f5:e8:53:aa:cb:88:fc:5d:b5:
fe:72:ba:a3:2a:c8:58:44:c1:f5:db:41:47:2a:d8:4d:a6:6b:
4c:33:74:bc:70:cd:b9:49:b7:dd:7f:a8:b0:b7:a2:ae:02:ba:
88:97:ba:9b:99:5d:03:44:fb:f6:e5:56:5f:a3:8c:d9:1f:33:
4c:98:4f:29:36:44:16:dc:13:06:62:6a:75:52:c6:c1:61:6a:
b0:13:cd:d7:b7:d5:be:8f:b5:fa:1b:86:a4:e1:c5:5a:ab:26:
4d:a1:26:b9:08:16:3b:4e:2b:1e:f8:7c:59:04:91:25:c4:1d:
3f:d8:07:65:78:1f:4b:50:89:ff:c1:56:fd:fe:99:07:f8:31:
11:29:6c:44:73:80:ee:61:d4:46:48:ea:c4:2b:86:3f:f4:a5:
a0:19:a3:ec:d1:16:5e:20:28:1c:e9:42:62:06:2e:55:28:13:
d8:a0:a4:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:43:08 2026 by rpki-client