Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.mft
File: cGmgJahPQu8-8LYFLeP9ZejAhpI.mft (raw, json)
Hash identifier: JI11FxvFwzeG2ptcdV55EC5G5lAtfhbLMKkWeSIUaKA=
Subject key identifier: 1B:EB:C8:CD:BF:87:94:96:C8:65:91:01:96:F8:BE:F0:DB:CC:BE:E6
Authority key identifier: 70:69:A0:25:A8:4F:42:EF:3E:F0:B6:05:2D:E3:FD:65:E8:C0:86:92
Certificate issuer: /CN=7069a025a84f42ef3ef0b6052de3fd65e8c08692
Certificate serial: 019D38D3DAF21E059A29916D7BFEFEFE612B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cGmgJahPQu8-8LYFLeP9ZejAhpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.mft
Manifest number: 10B8
Signing time: Sun 29 Mar 2026 09:01:41 +0000
Manifest this update: Sun 29 Mar 2026 09:01:41 +0000
Manifest next update: Mon 30 Mar 2026 09:01:41 +0000
Files and hashes: 1: cGmgJahPQu8-8LYFLeP9ZejAhpI.crl (hash: nb06cG4BCtsH5v4kHIQNGqJaw9A5WR9uQuiZYQZN1U4=)
2: vkFegJrdqmSpqizX-1jFyrdM-Ok.roa (hash: n5V1OMe1FNTO7+dn3GHVNrTtgdxzbNdUe5BzE1mBm1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cGmgJahPQu8-8LYFLeP9ZejAhpI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:da:f2:1e:05:9a:29:91:6d:7b:fe:fe:fe:61:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7069a025a84f42ef3ef0b6052de3fd65e8c08692
Validity
Not Before: Mar 29 09:01:41 2026 GMT
Not After : Mar 30 09:01:41 2026 GMT
Subject: CN=1bebc8cdbf879496c865910196f8bef0dbccbee6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:78:bc:06:41:31:e6:d9:08:a3:a4:13:ff:25:
97:48:57:20:3a:83:81:64:09:18:9a:dc:26:d1:92:
98:df:1d:27:b5:df:c0:4b:9c:3f:1b:9b:35:f1:4f:
bd:10:7a:83:c9:be:5e:2a:d9:87:2f:46:95:7e:82:
03:4d:ff:ff:b6:27:b3:b1:15:e3:dd:14:90:9d:ce:
bd:52:d4:cd:97:84:89:d7:88:f5:15:e1:c1:a0:d4:
a7:c1:76:90:83:f5:67:e8:9e:76:fe:9a:5a:d5:68:
33:ba:25:44:93:d7:f5:a8:b7:f5:1b:2e:44:23:d7:
a5:a6:11:17:be:0f:f1:16:a7:7d:fc:70:cb:b5:22:
78:86:bc:8f:3f:0d:df:4e:1b:a1:ec:98:74:e3:f5:
17:8a:69:4b:35:1d:87:7a:a5:48:53:a9:18:54:52:
99:01:be:e8:c1:76:71:92:0c:87:1a:9a:d9:5c:00:
5f:d8:19:fb:1e:4d:4d:2f:04:38:52:3b:f3:1a:c0:
2c:59:77:45:53:2e:7e:c8:c5:1b:8a:e6:5f:ed:07:
bf:31:6a:a5:ea:e7:1d:f2:dc:23:7f:67:16:b0:f0:
ff:a9:a5:94:35:e7:0c:f5:0f:44:de:94:68:fb:d5:
74:dc:a9:9a:80:c9:c9:8c:28:50:41:20:03:ab:64:
53:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:EB:C8:CD:BF:87:94:96:C8:65:91:01:96:F8:BE:F0:DB:CC:BE:E6
X509v3 Authority Key Identifier:
keyid:70:69:A0:25:A8:4F:42:EF:3E:F0:B6:05:2D:E3:FD:65:E8:C0:86:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cGmgJahPQu8-8LYFLeP9ZejAhpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:43:dc:af:90:87:bc:dd:86:3b:af:7a:9b:c7:90:25:33:43:
f8:ee:2c:81:0b:4a:24:2f:50:bc:ab:7a:f0:43:17:d4:97:af:
cb:ad:55:10:43:fa:6f:6a:65:72:77:d6:7e:ce:0e:15:a9:e5:
5c:81:49:39:d7:af:ea:f4:15:c4:a8:25:3b:cf:11:cc:d4:57:
c4:a9:fd:c4:bb:f2:4d:c8:34:69:d9:df:b6:91:89:3e:3b:62:
2c:a8:24:87:46:81:95:e6:e3:ac:f9:f8:c3:a7:69:4e:0f:72:
84:ff:20:3a:3e:41:80:2b:76:4d:e6:2f:ae:63:ca:7d:99:7e:
fc:78:80:c7:db:fb:5f:62:05:fb:33:5e:fc:39:4d:6e:c4:c8:
e1:27:ee:15:89:01:32:08:31:41:3c:bb:c9:8d:3c:0a:ad:65:
0a:97:1e:19:2a:e0:a9:65:64:70:8a:71:df:02:f2:12:30:e9:
07:ad:52:08:ce:e0:04:79:49:ac:5b:f3:98:d6:e2:15:ce:77:
31:1b:bf:02:2c:c4:bc:ed:7b:bc:20:d5:97:c2:b9:2d:4c:40:
d0:ea:59:af:6a:77:d8:8f:f3:fd:d0:d0:1b:d4:b3:77:54:74:
52:95:5f:64:d1:23:83:0b:ac:9e:78:0e:ec:6e:eb:2d:b6:06:
1b:43:34:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:30:29 2026 by rpki-client