Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.mft
File: cGmgJahPQu8-8LYFLeP9ZejAhpI.mft (raw, json)
Hash identifier: kjTkapLCoRcdkhNxltUxnvKFFSxEaL7XNTN1SyFDJr0=
Subject key identifier: C8:BA:53:C1:FB:B5:05:C9:E3:27:8C:3D:E5:46:3A:E3:37:1E:8A:89
Authority key identifier: 70:69:A0:25:A8:4F:42:EF:3E:F0:B6:05:2D:E3:FD:65:E8:C0:86:92
Certificate issuer: /CN=7069a025a84f42ef3ef0b6052de3fd65e8c08692
Certificate serial: 019E31F3B50AD37139E881EA8C006CAFEA01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cGmgJahPQu8-8LYFLeP9ZejAhpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.mft
Manifest number: 1139
Signing time: Sat 16 May 2026 18:01:55 +0000
Manifest this update: Sat 16 May 2026 18:01:55 +0000
Manifest next update: Sun 17 May 2026 18:01:55 +0000
Files and hashes: 1: cGmgJahPQu8-8LYFLeP9ZejAhpI.crl (hash: y33190vIBjmkpwXpKbQzR+epypy+O6htXWkCo0zFtz0=)
2: vkFegJrdqmSpqizX-1jFyrdM-Ok.roa (hash: n5V1OMe1FNTO7+dn3GHVNrTtgdxzbNdUe5BzE1mBm1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cGmgJahPQu8-8LYFLeP9ZejAhpI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:f3:b5:0a:d3:71:39:e8:81:ea:8c:00:6c:af:ea:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7069a025a84f42ef3ef0b6052de3fd65e8c08692
Validity
Not Before: May 16 18:01:55 2026 GMT
Not After : May 17 18:01:55 2026 GMT
Subject: CN=c8ba53c1fbb505c9e3278c3de5463ae3371e8a89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:39:ba:5d:1c:83:7f:64:07:50:f8:aa:05:d6:
a9:74:a8:8f:49:e1:1c:6d:74:07:2e:d4:59:70:66:
31:8e:f7:ea:45:49:b7:20:3e:ca:2b:86:c7:ee:6e:
eb:73:6f:e5:3c:a7:20:67:1a:79:bd:ad:1a:82:b8:
0e:61:12:2a:ef:f1:fc:78:2d:c9:1e:ed:79:5b:7e:
f2:81:67:49:02:92:80:2a:2d:3e:f1:ff:bb:0a:f9:
b8:08:1d:a3:ab:74:29:a1:a1:9e:79:75:a3:95:10:
4b:b5:8e:da:f0:f1:3a:3f:b6:db:ea:e1:9d:9a:4f:
9d:1f:66:6b:14:83:ac:89:ec:a1:14:29:28:29:ef:
fe:03:db:64:24:6e:db:06:ba:89:44:b9:fa:17:83:
1c:67:a7:33:bf:91:14:6f:e1:e6:df:d4:1d:80:4e:
2a:6d:f5:d5:f1:6d:cc:d2:ad:77:1b:e7:65:49:27:
bd:02:07:6d:21:67:15:44:30:41:b7:6b:9c:31:57:
c1:94:07:9a:77:a2:28:2b:1a:70:8c:ca:2a:8c:19:
d6:e3:75:78:f5:03:5d:b5:77:d8:38:0f:bf:cc:f1:
82:c3:e3:37:6a:49:f1:27:64:27:d1:b8:19:63:7c:
04:be:5a:bf:92:1e:8b:75:34:81:f4:9c:f7:f7:3f:
53:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:BA:53:C1:FB:B5:05:C9:E3:27:8C:3D:E5:46:3A:E3:37:1E:8A:89
X509v3 Authority Key Identifier:
keyid:70:69:A0:25:A8:4F:42:EF:3E:F0:B6:05:2D:E3:FD:65:E8:C0:86:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cGmgJahPQu8-8LYFLeP9ZejAhpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:e1:5c:9d:3a:b7:a3:cd:18:87:e7:ea:b6:df:8c:7b:d6:15:
06:02:08:39:8e:12:22:56:a5:6a:ea:ee:76:32:90:bb:b3:a3:
f7:64:1c:64:2f:d0:31:b2:21:52:1a:60:86:63:88:da:ac:ba:
fd:69:1d:c1:b4:de:16:1e:40:07:5b:e2:d5:af:30:60:b8:d4:
94:f7:2b:27:53:0d:bc:6b:41:bc:d0:0d:a9:32:a4:c9:25:d5:
8d:56:d8:7c:14:9d:89:47:d6:b9:72:d7:d7:13:03:2a:e6:96:
cb:33:d2:c2:09:b6:c2:56:df:ce:5a:54:61:cd:7c:48:69:96:
6c:9c:4c:19:43:8f:9e:e9:8f:46:06:5b:7f:a7:dc:40:59:dd:
e7:3d:91:31:85:34:94:2f:0f:c3:84:4b:d0:c0:3f:bb:7a:21:
f6:e4:5c:01:f2:3b:ec:06:18:05:4a:bf:0e:07:7f:46:a4:e5:
83:d1:74:b5:0c:92:90:d6:2f:73:12:a4:10:df:81:6b:03:d7:
38:52:e0:f8:e5:39:a0:ed:6f:1b:7b:98:c0:67:20:f6:fa:41:
e3:3e:7a:66:e7:07:4b:19:4f:5d:62:1f:0a:d2:81:0b:f5:aa:
96:fa:59:9f:8b:62:bc:ab:4e:19:45:5a:c0:bc:b1:ed:fd:cc:
ef:31:67:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4x87UK03E56IHqjABsr+oBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwNjlhMDI1YTg0ZjQyZWYzZWYwYjYwNTJkZTNmZDY1ZThj
MDg2OTIwHhcNMjYwNTE2MTgwMTU1WhcNMjYwNTE3MTgwMTU1WjAzMTEwLwYDVQQD
EyhjOGJhNTNjMWZiYjUwNWM5ZTMyNzhjM2RlNTQ2M2FlMzM3MWU4YTg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxTm6XRyDf2QHUPiqBdapdKiPSeEc
bXQHLtRZcGYxjvfqRUm3ID7KK4bH7m7rc2/lPKcgZxp5va0agrgOYRIq7/H8eC3J
Hu15W37ygWdJApKAKi0+8f+7Cvm4CB2jq3QpoaGeeXWjlRBLtY7a8PE6P7bb6uGd
mk+dH2ZrFIOsieyhFCkoKe/+A9tkJG7bBrqJRLn6F4McZ6czv5EUb+Hm39QdgE4q
bfXV8W3M0q13G+dlSSe9AgdtIWcVRDBBt2ucMVfBlAead6IoKxpwjMoqjBnW43V4
9QNdtXfYOA+/zPGCw+M3aknxJ2Qn0bgZY3wEvlq/kh6LdTSB9Jz39z9TZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMi6U8H7tQXJ4yeMPeVGOuM3HoqJMB8GA1UdIwQY
MBaAFHBpoCWoT0LvPvC2BS3j/WXowIaSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0dtZ0phaFBRdTgtOExZRkxlUDlaZWpBaHBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9hZDAxMTYtNzU1OC00NjU2LTlmYjMt
NTE5OWE3MTE2ODRkLzEvY0dtZ0phaFBRdTgtOExZRkxlUDlaZWpBaHBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS9hZDAxMTYtNzU1OC00NjU2LTlmYjMtNTE5OWE3MTE2ODRk
LzEvY0dtZ0phaFBRdTgtOExZRkxlUDlaZWpBaHBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn+FcnTq3
o80Yh+fqtt+Me9YVBgIIOY4SIlalaurudjKQu7Oj92QcZC/QMbIhUhpghmOI2qy6
/WkdwbTeFh5AB1vi1a8wYLjUlPcrJ1MNvGtBvNANqTKkySXVjVbYfBSdiUfWuXLX
1xMDKuaWyzPSwgm2wlbfzlpUYc18SGmWbJxMGUOPnumPRgZbf6fcQFnd5z2RMYU0
lC8Pw4RL0MA/u3oh9uRcAfI77AYYBUq/Dgd/RqTlg9F0tQySkNYvcxKkEN+BawPX
OFLg+OU5oO1vG3uYwGcg9vpB4z56ZucHSxlPXWIfCtKBC/WqlvpZn4tivKtOGUVa
wLyx7f3M7zFnvQ==
-----END CERTIFICATE-----
Generated at Sat May 16 22:40:15 2026 by rpki-client