Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.mft
File: cGmgJahPQu8-8LYFLeP9ZejAhpI.mft (raw, json)
Hash identifier: kJBYsFUJQ20iuhgMeR7BAzX0WmcNa27PogRI1joIZCE=
Subject key identifier: 87:94:54:30:8C:1E:4B:87:58:31:6C:24:49:63:EE:AD:94:C6:66:D5
Authority key identifier: 70:69:A0:25:A8:4F:42:EF:3E:F0:B6:05:2D:E3:FD:65:E8:C0:86:92
Certificate issuer: /CN=7069a025a84f42ef3ef0b6052de3fd65e8c08692
Certificate serial: 01A0035DB90D774895FE50AFB6ACF5E5FC19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cGmgJahPQu8-8LYFLeP9ZejAhpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.mft
Manifest number: 122A
Signing time: Sat 15 Aug 2026 03:01:08 +0000
Manifest this update: Sat 15 Aug 2026 03:01:08 +0000
Manifest next update: Sun 16 Aug 2026 03:01:08 +0000
Files and hashes: 1: cGmgJahPQu8-8LYFLeP9ZejAhpI.crl (hash: wZZM/uu9wliBw15OSbBws8n/lkyIFLjxLlm3bwzqJM8=)
2: vkFegJrdqmSpqizX-1jFyrdM-Ok.roa (hash: n5V1OMe1FNTO7+dn3GHVNrTtgdxzbNdUe5BzE1mBm1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cGmgJahPQu8-8LYFLeP9ZejAhpI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:03:5d:b9:0d:77:48:95:fe:50:af:b6:ac:f5:e5:fc:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7069a025a84f42ef3ef0b6052de3fd65e8c08692
Validity
Not Before: Aug 15 03:01:08 2026 GMT
Not After : Aug 16 03:01:08 2026 GMT
Subject: CN=879454308c1e4b8758316c244963eead94c666d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:02:ef:c8:89:e8:62:ca:a9:0b:42:97:0f:7e:
97:a7:72:3a:df:23:30:70:75:2e:aa:0b:e4:a3:1d:
08:19:3a:80:6c:9e:2a:4f:b9:ce:24:5b:16:23:8f:
9f:53:10:6c:af:30:25:a2:67:42:cd:e4:14:8d:60:
62:cd:cc:d7:e9:c4:e6:ad:3e:1b:9c:9d:2d:81:69:
3b:44:d7:0c:fd:66:ab:77:91:61:72:a0:ac:07:3b:
0f:c7:43:67:51:ce:f5:6b:1a:e4:b1:c2:47:98:c0:
5c:9d:f8:27:c7:e5:e3:44:c6:68:83:79:cf:2a:60:
d3:90:ca:a8:a7:a0:ad:57:a0:db:9d:29:d7:91:16:
29:d6:df:31:4b:c8:42:fe:96:e7:5f:49:c6:02:13:
57:d3:ce:d8:9b:05:a6:25:69:19:ff:8a:d7:af:2c:
fb:07:12:68:1f:ce:03:64:d1:ee:0c:d0:92:2e:f3:
7b:db:51:d7:65:f4:01:c7:72:b1:81:e7:f7:d4:9a:
c4:88:eb:46:2d:73:b1:36:88:cf:40:6d:04:43:6a:
87:06:af:87:da:24:4f:89:13:7b:3b:e0:83:73:3c:
5c:8f:ba:67:46:36:ba:82:0c:2c:70:a2:25:59:86:
83:26:ad:91:29:93:43:bb:5d:13:7b:71:22:77:55:
b0:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:94:54:30:8C:1E:4B:87:58:31:6C:24:49:63:EE:AD:94:C6:66:D5
X509v3 Authority Key Identifier:
keyid:70:69:A0:25:A8:4F:42:EF:3E:F0:B6:05:2D:E3:FD:65:E8:C0:86:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cGmgJahPQu8-8LYFLeP9ZejAhpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:50:39:d3:4f:0b:db:31:23:b3:fe:22:94:cb:9d:78:ff:e1:
71:67:22:f5:7f:f0:45:6f:6a:d3:71:aa:d3:08:b7:94:08:b8:
2a:8f:6e:eb:dc:f3:38:9e:9f:9b:82:71:06:e1:49:d1:41:8c:
d3:39:ed:c6:2b:34:33:c7:9b:cb:95:5f:61:fd:03:0f:c2:ca:
bb:e6:8b:35:f2:3f:d0:79:53:59:b4:dc:20:67:58:66:72:6e:
c2:14:53:bb:92:ac:ee:19:26:6d:ea:88:3d:83:a1:27:89:96:
e0:97:40:7f:3a:6b:cf:9e:85:99:22:2b:6c:3a:5e:ad:a4:87:
b3:6a:28:22:c6:d5:19:0d:8d:01:24:08:0e:75:07:1c:36:57:
92:59:18:5b:33:a0:29:1f:75:35:ff:df:f9:6c:ac:0c:86:a4:
77:05:37:fc:de:c6:e9:04:70:b7:6e:88:b9:8e:70:f4:35:d8:
9c:ed:78:4c:5f:0f:a2:2b:30:5e:b3:7b:90:59:93:3e:f4:01:
0c:cf:db:06:d0:53:0c:29:89:f6:72:c9:ef:70:f2:ee:03:6b:
e4:d2:6a:b0:0c:2a:d3:f2:ef:97:c5:b3:f8:d4:af:90:61:d4:
e5:4d:d0:02:40:22:9b:50:91:4f:48:0b:f1:24:90:09:00:88:
38:37:20:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 07:07:27 2026 by rpki-client