Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.mft
File: cGmgJahPQu8-8LYFLeP9ZejAhpI.mft (raw, json)
Hash identifier: ZlIaUeezl5Z4hiLGKpEEkCfTyfRvZoF85hyr218/W98=
Subject key identifier: 5A:22:C4:26:E6:0E:2F:E3:33:1C:E3:9A:EE:D9:7A:48:9F:19:9D:CC
Authority key identifier: 70:69:A0:25:A8:4F:42:EF:3E:F0:B6:05:2D:E3:FD:65:E8:C0:86:92
Certificate issuer: /CN=7069a025a84f42ef3ef0b6052de3fd65e8c08692
Certificate serial: 019F19B161A3C250CD39D225F2289768C6BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cGmgJahPQu8-8LYFLeP9ZejAhpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.mft
Manifest number: 11B1
Signing time: Tue 30 Jun 2026 18:01:23 +0000
Manifest this update: Tue 30 Jun 2026 18:01:23 +0000
Manifest next update: Wed 01 Jul 2026 18:01:23 +0000
Files and hashes: 1: cGmgJahPQu8-8LYFLeP9ZejAhpI.crl (hash: JhEMq890q9VFweF4Wca0Nwmd9wHMCAvYJTJDocx7UAQ=)
2: vkFegJrdqmSpqizX-1jFyrdM-Ok.roa (hash: n5V1OMe1FNTO7+dn3GHVNrTtgdxzbNdUe5BzE1mBm1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cGmgJahPQu8-8LYFLeP9ZejAhpI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 18:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:b1:61:a3:c2:50:cd:39:d2:25:f2:28:97:68:c6:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7069a025a84f42ef3ef0b6052de3fd65e8c08692
Validity
Not Before: Jun 30 18:01:23 2026 GMT
Not After : Jul 1 18:01:23 2026 GMT
Subject: CN=5a22c426e60e2fe3331ce39aeed97a489f199dcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:e4:c6:5c:5d:a9:9e:b6:c9:0a:93:64:6b:5b:
8d:3d:9b:86:1f:9c:75:3e:7d:a0:67:60:b2:5c:1a:
7e:a5:7b:bb:77:be:d5:d8:ae:c0:0c:c0:97:b3:c7:
f2:18:08:ea:62:19:f1:a5:4b:12:c8:02:5e:3a:17:
6a:ff:48:20:ae:07:02:77:80:a3:a9:f0:91:d3:eb:
3e:0e:ca:98:ff:17:ca:41:58:29:24:10:7f:ee:6f:
50:dc:41:cf:ae:f5:0c:95:f4:a6:d3:eb:91:6c:a7:
74:13:50:95:61:f3:f4:5a:9f:c0:74:9f:ac:c3:60:
57:c9:58:6a:1e:6c:aa:5a:f0:c9:b0:84:ee:46:e2:
02:62:d5:d1:4d:7e:c1:c8:8a:da:7f:1e:3f:b9:ca:
d3:fb:d6:5f:40:47:79:b0:26:16:f2:ae:3f:cf:a9:
f5:c0:96:94:9b:af:13:0b:c1:19:64:b6:d5:06:d1:
02:cd:42:5f:a7:e6:b1:30:63:17:a3:7c:da:bf:df:
b4:5c:fb:8a:4e:60:99:c8:df:ae:fd:d4:7a:3a:60:
47:77:40:d7:6d:02:5f:25:00:ce:69:0b:43:3c:a0:
6a:a9:2f:a6:78:83:84:8e:78:8a:32:a6:6c:57:bd:
ef:b4:f4:9a:da:c4:8a:28:a0:c5:fb:ca:1d:d3:ef:
e6:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:22:C4:26:E6:0E:2F:E3:33:1C:E3:9A:EE:D9:7A:48:9F:19:9D:CC
X509v3 Authority Key Identifier:
keyid:70:69:A0:25:A8:4F:42:EF:3E:F0:B6:05:2D:E3:FD:65:E8:C0:86:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cGmgJahPQu8-8LYFLeP9ZejAhpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:d6:81:40:a3:93:85:74:0b:f2:35:e6:c3:1d:5f:df:ca:b2:
af:92:1c:d3:84:18:ee:31:ef:fa:b8:a1:f4:b9:ba:42:e9:d1:
5d:99:72:92:35:ea:98:5c:39:df:6e:cd:4b:44:78:a7:2b:b0:
dc:4f:7d:68:8c:df:5e:ea:41:f9:ba:70:07:48:a3:18:cf:71:
7c:38:51:04:6b:da:56:3a:91:95:d6:83:14:3c:41:96:5d:1c:
58:dc:03:e4:77:5a:bb:19:0b:c8:bd:3a:fe:4b:23:23:4a:45:
24:c0:11:49:3c:79:61:2d:25:f9:b0:83:bd:57:41:34:85:50:
26:b0:bf:2a:15:79:8a:8a:0d:a8:6f:45:69:23:b4:02:b3:8b:
46:2b:a4:6a:e2:03:e7:dc:43:2f:f0:7a:55:bb:06:94:4d:67:
e8:0f:9b:7e:6b:05:20:fc:e5:98:c3:45:ce:90:79:ec:f8:53:
27:12:72:8d:c7:17:4a:c4:ef:b8:c6:db:7e:d6:9d:77:12:f2:
95:0e:02:67:75:92:ca:a7:b0:59:80:be:d2:8c:00:fb:10:d3:
3e:89:8f:d9:c5:63:97:06:02:72:99:b4:cf:35:0a:f0:06:68:
44:e4:4a:82:2f:3a:9a:01:7c:11:d8:26:7f:b9:42:46:f1:38:
bc:24:9f:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 02:37:16 2026 by rpki-client