Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b9/cf6f84-de39-4737-ac0d-e6febed1f5b2/1/cGHLKb3Ndzhxg60jn77X3QwHDCU.mft
File: cGHLKb3Ndzhxg60jn77X3QwHDCU.mft (raw, json)
Hash identifier: KR+RGGlCAtW9SK7aMU0bHCi2BuzWAiw0fv3lY1vDUgk=
Subject key identifier: BC:E6:33:57:7A:75:64:CC:48:57:04:25:65:6B:7F:B4:51:BF:47:B3
Authority key identifier: 70:61:CB:29:BD:CD:77:38:71:83:AD:23:9F:BE:D7:DD:0C:07:0C:25
Certificate issuer: /CN=7061cb29bdcd77387183ad239fbed7dd0c070c25
Certificate serial: 01A107A63B3460702DD07FF36E62178FDE2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cGHLKb3Ndzhxg60jn77X3QwHDCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/cf6f84-de39-4737-ac0d-e6febed1f5b2/1/cGHLKb3Ndzhxg60jn77X3QwHDCU.mft
Manifest number: 35
Signing time: Sun 04 Oct 2026 16:01:36 +0000
Manifest this update: Sun 04 Oct 2026 16:01:36 +0000
Manifest next update: Mon 05 Oct 2026 16:01:36 +0000
Files and hashes: 1: V0My9THlBc0YLlGKU0lk51nLT9Q.roa (hash: jnanOnE2E3WLlm+hKnnts1NGwhP+hFoapes6AYG4EzY=)
2: cGHLKb3Ndzhxg60jn77X3QwHDCU.crl (hash: v/VfyRw0wZldEJhIOLyogcwZZCGrMZFK1EodpVER5V0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/cf6f84-de39-4737-ac0d-e6febed1f5b2/1/cGHLKb3Ndzhxg60jn77X3QwHDCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/cf6f84-de39-4737-ac0d-e6febed1f5b2/1/cGHLKb3Ndzhxg60jn77X3QwHDCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/cGHLKb3Ndzhxg60jn77X3QwHDCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 12:07:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:07:a6:3b:34:60:70:2d:d0:7f:f3:6e:62:17:8f:de:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7061cb29bdcd77387183ad239fbed7dd0c070c25
Validity
Not Before: Oct 4 16:01:36 2026 GMT
Not After : Oct 5 16:01:36 2026 GMT
Subject: CN=bce633577a7564cc48570425656b7fb451bf47b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:07:7d:91:73:5a:57:f8:94:0b:b4:1e:30:fc:
09:b0:2e:7e:52:1a:8d:99:5d:a9:3c:41:3c:7c:9d:
7d:04:af:2f:33:67:49:e2:4e:b1:37:38:da:1e:62:
15:db:25:4a:bb:3d:55:6b:e2:58:c8:33:02:87:e2:
d5:3d:d3:ce:d4:93:11:d1:d8:92:09:b9:32:0e:04:
8f:c9:82:eb:7f:1f:31:bf:b3:b4:02:7f:35:1b:44:
f5:67:68:02:6f:39:94:ff:c4:8a:68:60:3f:c2:1a:
52:fe:ff:2b:82:bb:1d:1a:24:80:ad:c5:d3:f5:3e:
fe:26:09:c2:2b:29:fd:0e:44:99:46:c4:05:fb:64:
4f:4d:40:6e:f6:b8:86:e7:b0:f4:86:21:aa:eb:91:
e4:4c:33:05:c4:7b:e8:69:0e:7e:18:27:1c:44:1e:
82:f0:76:c4:2a:99:76:86:c5:f0:9b:6d:2c:04:47:
6b:90:4d:1a:96:2e:fd:5b:c0:06:ca:78:2b:e0:9a:
31:7a:f9:0f:ef:18:5f:0a:b7:8a:cf:3c:e8:ce:71:
04:b8:09:d2:4f:53:0c:0e:dc:cc:fb:b0:c7:7b:34:
b3:54:f1:72:a5:46:d5:c3:a8:34:7a:7f:0d:6c:60:
d6:93:e9:d7:15:31:cb:83:dc:40:c7:e1:75:d6:bd:
27:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:E6:33:57:7A:75:64:CC:48:57:04:25:65:6B:7F:B4:51:BF:47:B3
X509v3 Authority Key Identifier:
keyid:70:61:CB:29:BD:CD:77:38:71:83:AD:23:9F:BE:D7:DD:0C:07:0C:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cGHLKb3Ndzhxg60jn77X3QwHDCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/cf6f84-de39-4737-ac0d-e6febed1f5b2/1/cGHLKb3Ndzhxg60jn77X3QwHDCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/cf6f84-de39-4737-ac0d-e6febed1f5b2/1/cGHLKb3Ndzhxg60jn77X3QwHDCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:76:54:7d:0c:4b:ec:82:07:a1:12:25:f3:64:d7:83:f9:9c:
08:01:d7:5b:42:f4:80:23:93:d0:81:52:e0:1a:d6:33:c8:4a:
eb:f7:59:a8:21:5a:99:b0:78:06:38:58:d2:dc:cc:d8:04:3c:
06:0f:1a:71:46:ba:91:91:b6:67:ec:6e:51:c5:73:d5:56:6a:
8d:c1:46:1f:20:20:97:5c:dc:7e:3b:6e:9c:e6:db:6b:55:a1:
59:2d:61:2d:54:34:5f:8f:3a:d3:e9:73:6f:0b:fe:ff:0d:28:
f5:93:18:7a:a8:a6:36:ad:66:2c:07:29:b3:92:2c:43:4d:b8:
1a:e7:8f:d9:21:a1:35:5e:ce:1f:1e:4f:b6:fb:6c:f1:ba:69:
eb:f4:36:42:f2:d0:9a:7b:e5:59:82:30:7f:22:f2:83:9e:d0:
9a:02:96:e0:ab:c0:77:c4:46:60:89:35:ea:6a:cc:40:d3:15:
44:3e:81:9e:22:87:c5:a1:bf:1d:2e:16:02:73:58:f5:9d:f8:
53:b7:d9:18:d4:68:0c:6a:f7:8b:fa:da:20:a0:0f:e6:cb:c8:
eb:74:2e:14:99:4b:cf:8e:33:93:d9:63:83:b0:06:97:57:1e:
24:e0:08:3e:22:91:ec:c7:28:d5:ed:6b:71:35:0f:2c:de:09:
22:d2:2d:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 00:57:32 2026 by rpki-client