Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/4baad5-2b6a-4b64-8f57-b70b95539df4/1/cgs1_DZuhLRYDu6nmJEe1OGOOus.mft
File: cgs1_DZuhLRYDu6nmJEe1OGOOus.mft (raw, json)
Hash identifier: pj9A7VMsnpkoehVueUGv1l010WiQqV91ZdN5urz6N4U=
Subject key identifier: 48:06:9F:CA:4B:AE:A2:22:A5:55:91:49:62:32:35:A8:47:1D:51:5B
Authority key identifier: 72:0B:35:FC:36:6E:84:B4:58:0E:EE:A7:98:91:1E:D4:E1:8E:3A:EB
Certificate issuer: /CN=720b35fc366e84b4580eeea798911ed4e18e3aeb
Certificate serial: 019D37C0DC989AC292A3BB16BC7E80E08232
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgs1_DZuhLRYDu6nmJEe1OGOOus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/4baad5-2b6a-4b64-8f57-b70b95539df4/1/cgs1_DZuhLRYDu6nmJEe1OGOOus.mft
Manifest number: 08A0
Signing time: Sun 29 Mar 2026 04:01:19 +0000
Manifest this update: Sun 29 Mar 2026 04:01:19 +0000
Manifest next update: Mon 30 Mar 2026 04:01:19 +0000
Files and hashes: 1: cgs1_DZuhLRYDu6nmJEe1OGOOus.crl (hash: F4ikdVzkoFThBV/MGQDHYBAdJ1RfYrhplmbg5Ihyqfo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/4baad5-2b6a-4b64-8f57-b70b95539df4/1/cgs1_DZuhLRYDu6nmJEe1OGOOus.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/4baad5-2b6a-4b64-8f57-b70b95539df4/1/cgs1_DZuhLRYDu6nmJEe1OGOOus.mft
rsync://rpki.ripe.net/repository/DEFAULT/cgs1_DZuhLRYDu6nmJEe1OGOOus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:dc:98:9a:c2:92:a3:bb:16:bc:7e:80:e0:82:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=720b35fc366e84b4580eeea798911ed4e18e3aeb
Validity
Not Before: Mar 29 04:01:19 2026 GMT
Not After : Mar 30 04:01:19 2026 GMT
Subject: CN=48069fca4baea222a5559149623235a8471d515b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:cb:c0:71:ff:f8:c9:a8:44:25:ee:16:fd:85:
58:72:9a:10:ad:cc:a7:e2:5a:b9:15:46:36:ec:b2:
b1:f4:88:45:b0:89:22:34:17:d6:09:84:d9:bd:74:
12:16:f4:30:6c:4b:fb:e5:2b:69:86:f7:ac:91:5c:
9f:d6:73:3f:88:7f:bc:37:56:e6:39:4c:7c:9b:74:
38:6d:dd:07:1b:41:cc:72:d0:b1:72:d5:d8:55:ff:
25:73:41:15:9b:b2:15:04:6e:5e:10:1c:a9:c3:5a:
0e:7b:64:35:da:b4:80:09:eb:5d:ae:a2:6b:cb:5c:
08:d7:89:3c:ba:d7:5f:82:ac:e1:1f:3f:73:3f:d2:
62:0d:ee:51:aa:59:05:cf:91:a7:b2:a2:84:19:2a:
2c:89:30:6c:c4:19:10:3d:b5:09:37:94:92:35:51:
0e:b8:2c:f2:dc:20:a5:f0:37:3e:9d:7a:dd:87:58:
87:0f:30:78:ed:3a:ca:7f:ae:94:06:3b:b4:cc:da:
05:ee:4e:f5:9d:95:5a:fb:4b:4d:06:41:8a:5c:11:
b2:6b:5d:23:7e:2d:9a:fa:bb:cd:d8:b0:76:79:9d:
02:f7:db:46:a0:b7:d2:ef:c3:e2:cf:30:30:29:79:
22:45:31:74:41:fc:fd:f3:0f:26:73:77:5a:6e:b0:
b7:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:06:9F:CA:4B:AE:A2:22:A5:55:91:49:62:32:35:A8:47:1D:51:5B
X509v3 Authority Key Identifier:
keyid:72:0B:35:FC:36:6E:84:B4:58:0E:EE:A7:98:91:1E:D4:E1:8E:3A:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgs1_DZuhLRYDu6nmJEe1OGOOus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/4baad5-2b6a-4b64-8f57-b70b95539df4/1/cgs1_DZuhLRYDu6nmJEe1OGOOus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/4baad5-2b6a-4b64-8f57-b70b95539df4/1/cgs1_DZuhLRYDu6nmJEe1OGOOus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:45:2e:98:f1:8f:f7:f7:6d:63:ba:d2:a6:2a:04:c7:66:15:
be:ed:9b:6d:87:8b:36:48:63:46:19:4f:0b:76:1e:4f:d5:fc:
90:ce:10:28:23:9e:66:38:99:e7:00:29:de:e2:c6:02:72:02:
b7:33:cc:61:98:29:57:7a:29:6b:fd:32:9c:57:83:9c:1a:9d:
81:f9:a9:0f:90:85:40:b7:ea:0a:c5:d5:09:bf:b8:06:c5:39:
35:bf:31:cc:9a:bb:9a:bd:55:76:82:32:98:e8:2e:be:47:bc:
46:78:ad:18:e7:67:36:60:76:54:fc:15:4a:db:93:91:f4:a2:
66:82:a6:df:29:55:e4:2c:f1:d6:d1:12:fd:cc:83:4f:26:d9:
fe:95:d1:68:61:54:89:c6:b7:78:45:99:bb:76:47:db:af:48:
01:de:12:00:aa:38:e2:d9:cf:30:9b:38:73:ca:7e:10:89:c8:
6e:bc:dd:89:e2:c2:26:5a:6d:4d:b1:08:fa:9f:e3:c5:1e:9c:
33:4f:89:36:49:a3:d4:ac:58:95:08:ab:9f:c2:ca:15:08:5b:
3a:db:de:c1:cf:59:d3:f7:6d:e4:a5:3d:b1:38:bc:80:de:89:
45:29:fb:bc:b5:1e:3b:4c:e4:8c:4a:b4:b9:09:69:04:01:24:
84:da:18:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03wNyYmsKSo7sWvH6A4IIyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMGIzNWZjMzY2ZTg0YjQ1ODBlZWVhNzk4OTExZWQ0ZTE4
ZTNhZWIwHhcNMjYwMzI5MDQwMTE5WhcNMjYwMzMwMDQwMTE5WjAzMTEwLwYDVQQD
Eyg0ODA2OWZjYTRiYWVhMjIyYTU1NTkxNDk2MjMyMzVhODQ3MWQ1MTViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsvAcf/4yahEJe4W/YVYcpoQrcyn
4lq5FUY27LKx9IhFsIkiNBfWCYTZvXQSFvQwbEv75StphveskVyf1nM/iH+8N1bm
OUx8m3Q4bd0HG0HMctCxctXYVf8lc0EVm7IVBG5eEBypw1oOe2Q12rSACetdrqJr
y1wI14k8utdfgqzhHz9zP9JiDe5RqlkFz5GnsqKEGSosiTBsxBkQPbUJN5SSNVEO
uCzy3CCl8Dc+nXrdh1iHDzB47TrKf66UBju0zNoF7k71nZVa+0tNBkGKXBGya10j
fi2a+rvN2LB2eZ0C99tGoLfS78PizzAwKXkiRTF0Qfz98w8mc3dabrC3mQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEgGn8pLrqIipVWRSWIyNahHHVFbMB8GA1UdIwQY
MBaAFHILNfw2boS0WA7up5iRHtThjjrrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dzMV9EWnVoTFJZRHU2bm1KRWUxT0dPT3VzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi80YmFhZDUtMmI2YS00YjY0LThmNTct
YjcwYjk1NTM5ZGY0LzEvY2dzMV9EWnVoTFJZRHU2bm1KRWUxT0dPT3VzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi80YmFhZDUtMmI2YS00YjY0LThmNTctYjcwYjk1NTM5ZGY0
LzEvY2dzMV9EWnVoTFJZRHU2bm1KRWUxT0dPT3VzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfEUumPGP
9/dtY7rSpioEx2YVvu2bbYeLNkhjRhlPC3YeT9X8kM4QKCOeZjiZ5wAp3uLGAnIC
tzPMYZgpV3opa/0ynFeDnBqdgfmpD5CFQLfqCsXVCb+4BsU5Nb8xzJq7mr1VdoIy
mOguvke8RnitGOdnNmB2VPwVStuTkfSiZoKm3ylV5Czx1tES/cyDTybZ/pXRaGFU
ica3eEWZu3ZH269IAd4SAKo44tnPMJs4c8p+EInIbrzdieLCJlptTbEI+p/jxR6c
M0+JNkmj1KxYlQirn8LKFQhbOtvewc9Z0/dt5KU9sTi8gN6JRSn7vLUeO0zkjEq0
uQlpBAEkhNoYag==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:37:44 2026 by rpki-client