Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/26/4dc58c-7ce8-45bb-bace-1fe748133cef/1/CGCi2-14yoFHESZ33F1tPfKavCA.mft
File: CGCi2-14yoFHESZ33F1tPfKavCA.mft (raw, json)
Hash identifier: jbgYZDy/edRdwnpttRLCdEND69Qtql15Ta37f+KRvFk=
Subject key identifier: 75:10:2B:F6:0A:94:F7:F6:6C:EF:A8:49:E1:1C:9E:8E:9C:48:2C:97
Authority key identifier: 08:60:A2:DB:ED:78:CA:81:47:11:26:77:DC:5D:6D:3D:F2:9A:BC:20
Certificate issuer: /CN=0860a2dbed78ca8147112677dc5d6d3df29abc20
Certificate serial: 01A0404DB3FA989D58CCCF6334D0BD796C98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CGCi2-14yoFHESZ33F1tPfKavCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/4dc58c-7ce8-45bb-bace-1fe748133cef/1/CGCi2-14yoFHESZ33F1tPfKavCA.mft
Manifest number: 9A
Signing time: Wed 26 Aug 2026 23:00:29 +0000
Manifest this update: Wed 26 Aug 2026 23:00:29 +0000
Manifest next update: Thu 27 Aug 2026 23:00:29 +0000
Files and hashes: 1: CGCi2-14yoFHESZ33F1tPfKavCA.crl (hash: WrpW8HTmV4zINOzBPnWxVE37L7d3kqvC+z596ikrT0A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/4dc58c-7ce8-45bb-bace-1fe748133cef/1/CGCi2-14yoFHESZ33F1tPfKavCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/4dc58c-7ce8-45bb-bace-1fe748133cef/1/CGCi2-14yoFHESZ33F1tPfKavCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/CGCi2-14yoFHESZ33F1tPfKavCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:4d:b3:fa:98:9d:58:cc:cf:63:34:d0:bd:79:6c:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0860a2dbed78ca8147112677dc5d6d3df29abc20
Validity
Not Before: Aug 26 23:00:29 2026 GMT
Not After : Aug 27 23:00:29 2026 GMT
Subject: CN=75102bf60a94f7f66cefa849e11c9e8e9c482c97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5b:00:aa:7d:b6:6c:fd:47:53:e1:8c:7e:41:
6f:0b:6a:ff:6c:7f:c2:d4:f5:e3:e3:be:19:04:6d:
ca:07:ef:40:72:52:16:a7:2c:b1:be:b1:85:e8:28:
2f:58:01:ba:f6:93:f8:3b:63:e0:79:b7:4e:d9:85:
9b:8e:f2:49:f0:d9:53:30:d9:b7:8f:43:7e:9e:70:
2b:0e:69:36:76:b6:da:16:72:52:6b:ac:99:01:6d:
49:b1:db:29:f7:55:51:a0:9b:97:05:c6:f2:58:fd:
9b:f9:a7:3e:5a:72:13:29:59:4b:ba:e8:46:14:ac:
75:3a:92:4c:78:bf:b9:85:af:1c:8d:49:d6:94:9d:
bf:dc:e9:f5:f7:e0:ff:9d:8c:06:f6:0c:1c:fc:7d:
83:e0:46:c8:83:c9:03:36:ea:2c:f0:a6:02:07:a0:
23:e1:a7:53:e0:73:6c:c4:80:c2:80:50:b2:d5:22:
dd:29:f2:03:37:07:4a:d8:75:f3:1f:93:0b:20:e1:
17:0e:c6:ee:2e:33:1d:bc:b0:12:06:d7:9b:63:3a:
67:40:ab:7c:ee:c0:97:7c:f4:a7:84:c5:37:e4:14:
e6:ec:c2:d0:30:49:e0:a6:97:80:05:7d:91:e0:76:
95:bd:7e:da:5b:c7:8a:50:76:d8:e4:02:6a:54:b1:
af:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:10:2B:F6:0A:94:F7:F6:6C:EF:A8:49:E1:1C:9E:8E:9C:48:2C:97
X509v3 Authority Key Identifier:
keyid:08:60:A2:DB:ED:78:CA:81:47:11:26:77:DC:5D:6D:3D:F2:9A:BC:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CGCi2-14yoFHESZ33F1tPfKavCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/4dc58c-7ce8-45bb-bace-1fe748133cef/1/CGCi2-14yoFHESZ33F1tPfKavCA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/4dc58c-7ce8-45bb-bace-1fe748133cef/1/CGCi2-14yoFHESZ33F1tPfKavCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:0c:ea:df:b2:88:9e:f0:1d:54:b9:6e:10:33:12:5b:ac:f0:
e1:15:01:4d:bd:a7:86:38:8d:96:41:ff:a9:36:6b:6c:f3:6a:
9d:13:69:41:2b:b0:e7:77:59:3e:4a:75:4c:7d:07:de:91:99:
12:6b:30:18:e3:55:3b:7b:24:dd:21:8f:71:ff:ba:24:83:ce:
cf:a7:32:b0:25:39:9b:cb:cd:1b:3b:02:1c:e5:2f:30:94:c6:
62:b5:40:6b:18:6b:da:f7:5a:6e:9c:10:82:71:10:9b:f2:c8:
48:17:8d:0c:48:7b:04:27:0c:22:df:e8:dc:15:84:6f:3c:c8:
1e:c6:8b:ba:49:2b:18:36:ed:bc:cc:1c:bd:79:6a:7a:75:c3:
a7:75:23:fa:36:6a:48:75:ce:11:1c:42:0c:a2:11:d4:e3:cb:
a6:3e:24:97:dc:b2:df:5a:98:03:74:c2:1c:ce:e6:07:72:79:
47:a2:e5:89:a3:95:5e:d9:38:70:6d:2a:05:6f:29:75:6e:f8:
67:2c:ee:8c:e1:e9:9c:ba:01:cc:32:51:24:f1:92:a7:e1:e5:
20:1d:4b:93:f4:22:b2:58:3e:8b:84:ac:8c:28:de:41:2e:85:
eb:6c:c8:21:f4:97:e7:05:8e:0d:1f:ee:b7:25:aa:d3:62:84:
21:a4:f9:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBATbP6mJ1YzM9jNNC9eWyYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4NjBhMmRiZWQ3OGNhODE0NzExMjY3N2RjNWQ2ZDNkZjI5
YWJjMjAwHhcNMjYwODI2MjMwMDI5WhcNMjYwODI3MjMwMDI5WjAzMTEwLwYDVQQD
Eyg3NTEwMmJmNjBhOTRmN2Y2NmNlZmE4NDllMTFjOWU4ZTljNDgyYzk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1sAqn22bP1HU+GMfkFvC2r/bH/C
1PXj474ZBG3KB+9AclIWpyyxvrGF6CgvWAG69pP4O2PgebdO2YWbjvJJ8NlTMNm3
j0N+nnArDmk2drbaFnJSa6yZAW1Jsdsp91VRoJuXBcbyWP2b+ac+WnITKVlLuuhG
FKx1OpJMeL+5ha8cjUnWlJ2/3On19+D/nYwG9gwc/H2D4EbIg8kDNuos8KYCB6Aj
4adT4HNsxIDCgFCy1SLdKfIDNwdK2HXzH5MLIOEXDsbuLjMdvLASBtebYzpnQKt8
7sCXfPSnhMU35BTm7MLQMEngppeABX2R4HaVvX7aW8eKUHbY5AJqVLGvXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHUQK/YKlPf2bO+oSeEcno6cSCyXMB8GA1UdIwQY
MBaAFAhgotvteMqBRxEmd9xdbT3ymrwgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0dDaTItMTR5b0ZIRVNaMzNGMXRQZkthdkNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi80ZGM1OGMtN2NlOC00NWJiLWJhY2Ut
MWZlNzQ4MTMzY2VmLzEvQ0dDaTItMTR5b0ZIRVNaMzNGMXRQZkthdkNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi80ZGM1OGMtN2NlOC00NWJiLWJhY2UtMWZlNzQ4MTMzY2Vm
LzEvQ0dDaTItMTR5b0ZIRVNaMzNGMXRQZkthdkNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbAzq37KI
nvAdVLluEDMSW6zw4RUBTb2nhjiNlkH/qTZrbPNqnRNpQSuw53dZPkp1TH0H3pGZ
EmswGONVO3sk3SGPcf+6JIPOz6cysCU5m8vNGzsCHOUvMJTGYrVAaxhr2vdabpwQ
gnEQm/LISBeNDEh7BCcMIt/o3BWEbzzIHsaLukkrGDbtvMwcvXlqenXDp3Uj+jZq
SHXOERxCDKIR1OPLpj4kl9yy31qYA3TCHM7mB3J5R6LliaOVXtk4cG0qBW8pdW74
ZyzujOHpnLoBzDJRJPGSp+HlIB1Lk/Qislg+i4SsjCjeQS6F62zIIfSX5wWODR/u
tyWq02KEIaT55Q==
-----END CERTIFICATE-----
Generated at Thu Aug 27 05:23:21 2026 by rpki-client