Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.mft
File: cGmgJahPQu8-8LYFLeP9ZejAhpI.mft (raw, json)
Hash identifier: GJHxDKstGC7WlyFIYA2M9s4KtxXRnIZmQw+YxW/lvhg=
Subject key identifier: 9F:AB:87:9E:CF:B1:1F:61:6F:59:69:D8:C7:51:A2:D9:C8:79:0E:CE
Authority key identifier: 70:69:A0:25:A8:4F:42:EF:3E:F0:B6:05:2D:E3:FD:65:E8:C0:86:92
Certificate issuer: /CN=7069a025a84f42ef3ef0b6052de3fd65e8c08692
Certificate serial: 01A14BABC100E8D66BD6936E56928317BFAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cGmgJahPQu8-8LYFLeP9ZejAhpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.mft
Manifest number: 12D4
Signing time: Sat 17 Oct 2026 21:01:49 +0000
Manifest this update: Sat 17 Oct 2026 21:01:49 +0000
Manifest next update: Sun 18 Oct 2026 21:01:49 +0000
Files and hashes: 1: cGmgJahPQu8-8LYFLeP9ZejAhpI.crl (hash: CMDqxQM+B9tnoEo0dBgbelLDK1pyADQkEJT25LLOUGs=)
2: vkFegJrdqmSpqizX-1jFyrdM-Ok.roa (hash: n5V1OMe1FNTO7+dn3GHVNrTtgdxzbNdUe5BzE1mBm1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cGmgJahPQu8-8LYFLeP9ZejAhpI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 21:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4b:ab:c1:00:e8:d6:6b:d6:93:6e:56:92:83:17:bf:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7069a025a84f42ef3ef0b6052de3fd65e8c08692
Validity
Not Before: Oct 17 21:01:49 2026 GMT
Not After : Oct 18 21:01:49 2026 GMT
Subject: CN=9fab879ecfb11f616f5969d8c751a2d9c8790ece
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:23:59:ae:f8:62:f1:85:05:46:be:d2:91:a2:
68:98:c7:4f:19:fd:36:f8:7c:d8:48:bd:41:d1:d8:
66:3e:b2:6a:95:bf:57:ad:84:e8:54:39:87:f9:b6:
59:02:a4:9e:d5:57:ea:e1:15:ce:e5:dc:ad:b1:05:
72:36:a3:01:49:90:6b:9c:b0:9a:fd:2b:b9:93:64:
25:4b:ea:60:79:cb:7c:6a:84:36:d4:ad:87:cf:a0:
76:a2:f3:d7:7c:29:3a:c9:33:bf:aa:fb:4b:69:0a:
2a:e4:7b:d6:fd:72:03:34:5a:d6:a0:9a:5b:e7:ac:
d5:4f:f7:ec:d4:0b:01:cd:bd:31:ff:2b:21:c7:4d:
9e:b8:b0:ae:09:25:40:58:67:05:b5:4a:84:d8:66:
b7:19:fb:fe:35:fe:8e:ce:bc:1a:be:5f:8c:51:50:
7a:5d:28:a8:51:d1:88:b6:9f:a3:29:37:53:61:7a:
42:69:17:89:d4:31:8c:b9:07:d2:0b:40:70:10:3a:
84:d9:58:b7:38:16:de:c2:c5:55:35:2b:51:c1:23:
f2:24:64:16:55:92:b0:b4:1c:a1:59:3a:22:b3:73:
af:e1:1a:39:b6:01:66:6d:87:a4:42:78:eb:9a:56:
1b:2b:b1:58:b3:bc:f4:f0:23:07:08:d8:b6:02:71:
ba:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:AB:87:9E:CF:B1:1F:61:6F:59:69:D8:C7:51:A2:D9:C8:79:0E:CE
X509v3 Authority Key Identifier:
keyid:70:69:A0:25:A8:4F:42:EF:3E:F0:B6:05:2D:E3:FD:65:E8:C0:86:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cGmgJahPQu8-8LYFLeP9ZejAhpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:c2:2e:e4:d3:1a:fb:53:9c:c3:91:45:e8:bd:4d:fe:33:9e:
db:8c:c5:e3:73:fa:20:f7:2e:f2:ab:0b:55:01:69:f9:ac:21:
ff:dc:f8:63:a4:3b:99:65:72:fc:31:ff:6a:da:a7:bd:04:9a:
0a:31:23:4d:17:9a:f6:5f:f9:a6:ca:68:7d:5c:f3:f1:46:ce:
bd:c3:0d:4d:e5:20:a3:14:47:11:95:c2:df:81:df:ee:cb:e3:
4d:53:6c:b8:4c:c3:2f:b1:05:34:5e:f5:cb:7c:e3:77:04:93:
ce:d4:e1:7c:28:4c:57:88:5a:6b:6b:84:9f:90:92:7c:1b:78:
64:6e:4c:5a:fb:db:31:85:8d:3a:82:4d:f4:16:f1:5a:c2:1b:
4c:5f:3a:ec:7a:2c:e3:47:c6:8c:86:fd:bf:b2:04:56:a4:38:
4a:c6:10:2d:05:12:d2:35:02:ec:d9:b5:98:a7:bc:7e:e2:72:
8c:16:14:4a:b9:43:7c:43:8d:64:40:8a:4d:83:ba:89:19:8e:
99:45:6a:b4:40:dd:75:8a:a5:4e:6a:35:72:8f:d1:64:88:72:
17:3b:4d:45:bb:63:cd:aa:91:7c:4d:4f:30:fe:c8:68:03:1d:
4d:36:f6:b7:d0:9d:db:0a:a1:9b:29:ea:7e:03:9a:0d:08:cc:
db:ec:48:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFLq8EA6NZr1pNuVpKDF7+uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwNjlhMDI1YTg0ZjQyZWYzZWYwYjYwNTJkZTNmZDY1ZThj
MDg2OTIwHhcNMjYxMDE3MjEwMTQ5WhcNMjYxMDE4MjEwMTQ5WjAzMTEwLwYDVQQD
Eyg5ZmFiODc5ZWNmYjExZjYxNmY1OTY5ZDhjNzUxYTJkOWM4NzkwZWNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqyNZrvhi8YUFRr7SkaJomMdPGf02
+HzYSL1B0dhmPrJqlb9XrYToVDmH+bZZAqSe1Vfq4RXO5dytsQVyNqMBSZBrnLCa
/Su5k2QlS+pgect8aoQ21K2Hz6B2ovPXfCk6yTO/qvtLaQoq5HvW/XIDNFrWoJpb
56zVT/fs1AsBzb0x/yshx02euLCuCSVAWGcFtUqE2Ga3Gfv+Nf6Ozrwavl+MUVB6
XSioUdGItp+jKTdTYXpCaReJ1DGMuQfSC0BwEDqE2Vi3OBbewsVVNStRwSPyJGQW
VZKwtByhWTois3Ov4Ro5tgFmbYekQnjrmlYbK7FYs7z08CMHCNi2AnG6RwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ+rh57PsR9hb1lp2MdRotnIeQ7OMB8GA1UdIwQY
MBaAFHBpoCWoT0LvPvC2BS3j/WXowIaSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0dtZ0phaFBRdTgtOExZRkxlUDlaZWpBaHBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9hZDAxMTYtNzU1OC00NjU2LTlmYjMt
NTE5OWE3MTE2ODRkLzEvY0dtZ0phaFBRdTgtOExZRkxlUDlaZWpBaHBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS9hZDAxMTYtNzU1OC00NjU2LTlmYjMtNTE5OWE3MTE2ODRk
LzEvY0dtZ0phaFBRdTgtOExZRkxlUDlaZWpBaHBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEsIu5NMa
+1Ocw5FF6L1N/jOe24zF43P6IPcu8qsLVQFp+awh/9z4Y6Q7mWVy/DH/atqnvQSa
CjEjTRea9l/5pspofVzz8UbOvcMNTeUgoxRHEZXC34Hf7svjTVNsuEzDL7EFNF71
y3zjdwSTztThfChMV4haa2uEn5CSfBt4ZG5MWvvbMYWNOoJN9BbxWsIbTF867Hos
40fGjIb9v7IEVqQ4SsYQLQUS0jUC7Nm1mKe8fuJyjBYUSrlDfEONZECKTYO6iRmO
mUVqtEDddYqlTmo1co/RZIhyFztNRbtjzaqRfE1PMP7IaAMdTTb2t9Cd2wqhmynq
fgOaDQjM2+xIzg==
-----END CERTIFICATE-----
Generated at Sun Oct 18 07:08:27 2026 by rpki-client