Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e3/649d06-6b3d-4704-9841-2c4dede90467/1/CgSzC_5V8d4CuQMWA6tkWL5lDhM.mft
File: CgSzC_5V8d4CuQMWA6tkWL5lDhM.mft (raw, json)
Hash identifier: rSOYFJa6J3b9Qc92RMOsaMrwJGRBwxU7aUuN93ibwWA=
Subject key identifier: D1:2C:39:7D:A2:DD:0C:19:DE:A0:40:27:64:C9:BA:E8:17:61:0E:9E
Authority key identifier: 0A:04:B3:0B:FE:55:F1:DE:02:B9:03:16:03:AB:64:58:BE:65:0E:13
Certificate issuer: /CN=0a04b30bfe55f1de02b9031603ab6458be650e13
Certificate serial: 01A0D124C7529A126D91E20993C321F80CCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CgSzC_5V8d4CuQMWA6tkWL5lDhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/649d06-6b3d-4704-9841-2c4dede90467/1/CgSzC_5V8d4CuQMWA6tkWL5lDhM.mft
Manifest number: 40
Signing time: Thu 24 Sep 2026 02:00:43 +0000
Manifest this update: Thu 24 Sep 2026 02:00:43 +0000
Manifest next update: Fri 25 Sep 2026 02:00:43 +0000
Files and hashes: 1: CgSzC_5V8d4CuQMWA6tkWL5lDhM.crl (hash: ZrQ61mDndW7GbEzLSqko0oeINmPXp9MfJy2O1iL4txo=)
2: D1L8he-Z3uaX_kv2qLosJG-F7N4.roa (hash: dDqVqlgs2qjplhwfb2N5g+Z1GMx0+9UTFVeYZq/BU7U=)
3: ug9YcPSw3H2JAfew2CYzmhfr3ac.roa (hash: isO0dVqzY4UBFCVYRI7Ych6839QQAt5MuU+ZrrrFGzM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/649d06-6b3d-4704-9841-2c4dede90467/1/CgSzC_5V8d4CuQMWA6tkWL5lDhM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/649d06-6b3d-4704-9841-2c4dede90467/1/CgSzC_5V8d4CuQMWA6tkWL5lDhM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CgSzC_5V8d4CuQMWA6tkWL5lDhM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:24:c7:52:9a:12:6d:91:e2:09:93:c3:21:f8:0c:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a04b30bfe55f1de02b9031603ab6458be650e13
Validity
Not Before: Sep 24 02:00:43 2026 GMT
Not After : Sep 25 02:00:43 2026 GMT
Subject: CN=d12c397da2dd0c19dea0402764c9bae817610e9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d7:5a:1c:ca:df:b6:2e:4b:71:d0:be:85:f6:
f9:8b:74:ee:0c:1a:49:68:fb:24:24:1c:8d:47:4f:
46:f1:48:f5:36:d6:a6:5a:e3:a1:09:08:94:31:c6:
cb:da:62:52:43:e4:8a:2e:6f:6c:82:7c:82:87:c6:
8f:85:4b:2d:00:33:65:ec:97:a6:23:f8:dd:68:aa:
52:e0:50:b5:04:fa:bd:9f:c6:02:3f:ad:03:48:f1:
a8:7e:47:7d:29:33:38:5a:fb:69:d7:f4:42:4d:92:
65:d2:6e:f1:76:c1:dc:d8:aa:dd:17:46:86:02:e7:
d8:36:16:48:a7:e5:a5:d6:ae:01:fe:55:48:b0:88:
74:66:77:6a:a1:30:7e:21:08:8e:df:a0:37:3b:ad:
e3:d4:af:c3:e7:fe:d1:f3:15:83:7a:70:28:5a:a9:
1d:6a:8b:fa:2e:1a:c1:4e:db:a2:9f:a9:fd:a3:df:
33:7b:6c:2e:a6:f0:9e:71:c7:38:dd:16:e0:12:f6:
b8:fc:d1:5f:64:ff:21:39:4c:4d:ee:03:d5:14:a8:
2b:41:73:02:15:f9:ab:73:31:cc:35:bd:57:82:3b:
62:91:c5:0e:f4:ab:9b:48:6b:56:a6:2b:ad:36:96:
0a:9b:18:be:85:7b:25:9c:84:26:e5:35:92:7f:f3:
f8:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:2C:39:7D:A2:DD:0C:19:DE:A0:40:27:64:C9:BA:E8:17:61:0E:9E
X509v3 Authority Key Identifier:
keyid:0A:04:B3:0B:FE:55:F1:DE:02:B9:03:16:03:AB:64:58:BE:65:0E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CgSzC_5V8d4CuQMWA6tkWL5lDhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/649d06-6b3d-4704-9841-2c4dede90467/1/CgSzC_5V8d4CuQMWA6tkWL5lDhM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/649d06-6b3d-4704-9841-2c4dede90467/1/CgSzC_5V8d4CuQMWA6tkWL5lDhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:a4:2d:94:33:40:e0:86:ac:0b:c4:4b:b2:63:88:48:50:00:
29:04:a2:28:55:5a:2a:00:e5:b1:e3:b3:c2:75:73:f0:f8:da:
0a:7b:9c:dd:9a:91:68:68:6c:e6:ff:4d:57:b8:18:b7:5c:75:
9e:a3:fe:bc:31:49:fb:e6:26:3c:ab:e0:32:f2:ae:6a:28:51:
b0:b7:17:b2:a0:93:29:3f:ad:04:3b:65:1a:45:7f:95:53:ef:
14:bd:da:58:e2:e4:fb:f3:11:75:90:09:3e:ec:6b:7c:f7:eb:
25:26:3b:73:2f:64:43:9f:be:17:93:9d:5d:7d:3b:16:9f:19:
07:05:dd:6f:d2:e3:f8:56:c7:94:79:b9:50:dc:fb:38:90:6b:
c1:5e:15:48:2a:85:f5:1e:ff:2d:bc:df:2b:bf:e5:ab:d6:c1:
88:2a:6b:1a:49:36:99:46:8b:79:e1:0c:b7:12:4c:3d:5f:f1:
be:63:c0:6b:1f:39:f2:bf:a4:61:d8:19:dd:43:dd:5c:d4:e3:
bd:ff:c8:e3:fd:cb:d5:fa:b5:c7:71:b1:46:a1:a2:ed:b2:ee:
ca:f7:a5:1e:53:fd:4b:a9:98:05:43:66:6c:72:d8:49:31:9b:
29:3b:41:63:19:52:7f:bb:88:86:62:2e:57:70:43:e1:6d:e9:
e2:55:1c:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDRJMdSmhJtkeIJk8Mh+AzNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhMDRiMzBiZmU1NWYxZGUwMmI5MDMxNjAzYWI2NDU4YmU2
NTBlMTMwHhcNMjYwOTI0MDIwMDQzWhcNMjYwOTI1MDIwMDQzWjAzMTEwLwYDVQQD
EyhkMTJjMzk3ZGEyZGQwYzE5ZGVhMDQwMjc2NGM5YmFlODE3NjEwZTllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNdaHMrfti5LcdC+hfb5i3TuDBpJ
aPskJByNR09G8Uj1NtamWuOhCQiUMcbL2mJSQ+SKLm9sgnyCh8aPhUstADNl7Jem
I/jdaKpS4FC1BPq9n8YCP60DSPGofkd9KTM4Wvtp1/RCTZJl0m7xdsHc2KrdF0aG
AufYNhZIp+Wl1q4B/lVIsIh0ZndqoTB+IQiO36A3O63j1K/D5/7R8xWDenAoWqkd
aov6LhrBTtuin6n9o98ze2wupvCeccc43RbgEva4/NFfZP8hOUxN7gPVFKgrQXMC
FfmrczHMNb1XgjtikcUO9KubSGtWpiutNpYKmxi+hXslnIQm5TWSf/P4SQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNEsOX2i3QwZ3qBAJ2TJuugXYQ6eMB8GA1UdIwQY
MBaAFAoEswv+VfHeArkDFgOrZFi+ZQ4TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2dTekNfNVY4ZDRDdVFNV0E2dGtXTDVsRGhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy82NDlkMDYtNmIzZC00NzA0LTk4NDEt
MmM0ZGVkZTkwNDY3LzEvQ2dTekNfNVY4ZDRDdVFNV0E2dGtXTDVsRGhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy82NDlkMDYtNmIzZC00NzA0LTk4NDEtMmM0ZGVkZTkwNDY3
LzEvQ2dTekNfNVY4ZDRDdVFNV0E2dGtXTDVsRGhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO6QtlDNA
4IasC8RLsmOISFAAKQSiKFVaKgDlseOzwnVz8PjaCnuc3ZqRaGhs5v9NV7gYt1x1
nqP+vDFJ++YmPKvgMvKuaihRsLcXsqCTKT+tBDtlGkV/lVPvFL3aWOLk+/MRdZAJ
PuxrfPfrJSY7cy9kQ5++F5OdXX07Fp8ZBwXdb9Lj+FbHlHm5UNz7OJBrwV4VSCqF
9R7/LbzfK7/lq9bBiCprGkk2mUaLeeEMtxJMPV/xvmPAax858r+kYdgZ3UPdXNTj
vf/I4/3L1fq1x3GxRqGi7bLuyvelHlP9S6mYBUNmbHLYSTGbKTtBYxlSf7uIhmIu
V3BD4W3p4lUcdQ==
-----END CERTIFICATE-----
Generated at Thu Sep 24 04:11:52 2026 by rpki-client