Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/cef3b5-a848-43d5-873a-0757a6d28224/1/CGZINfiq_mFJcf-oaD-fdL9ND_Q.mft
File: CGZINfiq_mFJcf-oaD-fdL9ND_Q.mft (raw, json)
Hash identifier: HuI3R3jbPhHDARD22Esyv2A9a0ViRvtbhlUlrbhIqxk=
Subject key identifier: 1B:16:06:8E:88:F2:63:8A:30:D7:1A:73:38:79:4A:DD:E0:76:3C:A0
Authority key identifier: 08:66:48:35:F8:AA:FE:61:49:71:FF:A8:68:3F:9F:74:BF:4D:0F:F4
Certificate issuer: /CN=08664835f8aafe614971ffa8683f9f74bf4d0ff4
Certificate serial: 01A000CA8D767645FFDCAB84A52D4C329A1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CGZINfiq_mFJcf-oaD-fdL9ND_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/cef3b5-a848-43d5-873a-0757a6d28224/1/CGZINfiq_mFJcf-oaD-fdL9ND_Q.mft
Manifest number: 1244
Signing time: Fri 14 Aug 2026 15:01:09 +0000
Manifest this update: Fri 14 Aug 2026 15:01:09 +0000
Manifest next update: Sat 15 Aug 2026 15:01:09 +0000
Files and hashes: 1: 5F8EPRCwAO9R0s3emE3nMIVi-i8.roa (hash: nyuBuPwwDb0keiCkpqhAWuHjHqCL5kLPWyJJ50t6Ers=)
2: CGZINfiq_mFJcf-oaD-fdL9ND_Q.crl (hash: psMhBzVfmy6cpBtGKj90as/a9+qkY9AakiGOB4L0+zc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/cef3b5-a848-43d5-873a-0757a6d28224/1/CGZINfiq_mFJcf-oaD-fdL9ND_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/cef3b5-a848-43d5-873a-0757a6d28224/1/CGZINfiq_mFJcf-oaD-fdL9ND_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/CGZINfiq_mFJcf-oaD-fdL9ND_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:ca:8d:76:76:45:ff:dc:ab:84:a5:2d:4c:32:9a:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08664835f8aafe614971ffa8683f9f74bf4d0ff4
Validity
Not Before: Aug 14 15:01:09 2026 GMT
Not After : Aug 15 15:01:09 2026 GMT
Subject: CN=1b16068e88f2638a30d71a7338794adde0763ca0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e1:4c:e8:dd:76:28:94:77:bd:50:c5:66:19:
5c:30:88:7e:58:19:ad:7b:19:3e:18:3b:d8:04:44:
9f:2b:de:fc:ad:a1:b6:0c:b7:b5:37:68:62:17:66:
50:54:29:40:64:4c:7b:07:85:aa:bb:47:9f:09:67:
eb:8b:0a:16:ca:43:d5:0e:8c:2c:03:a2:aa:a3:4f:
4f:bf:fe:f4:93:49:8a:0e:5a:22:8a:3e:50:1f:b4:
9c:62:8c:c1:05:d6:48:33:37:fc:5d:1e:c8:3c:c6:
db:a0:a8:b8:87:db:2a:34:5f:da:54:b8:33:df:f4:
e1:92:85:7f:dd:d1:c6:de:ab:71:55:69:db:8d:01:
e6:0a:68:24:3a:cf:20:8b:3b:ad:00:f7:95:5d:98:
64:81:c2:b7:00:03:0f:a7:ab:7a:eb:db:cd:6a:3a:
41:71:23:03:b3:82:74:ca:ff:3c:0c:69:0b:ae:59:
54:89:d1:eb:46:50:75:f6:9d:7e:2c:6c:8c:7d:92:
d1:17:71:02:72:ce:46:b8:10:06:f2:21:0b:ac:39:
88:a3:c9:b1:12:d2:7b:c0:36:bb:8b:8d:9b:48:2a:
76:b3:07:cf:f5:76:66:9a:13:dd:34:ed:c7:0e:70:
28:0d:29:3c:04:5a:8c:33:a3:f1:3e:6c:fa:e3:93:
d9:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:16:06:8E:88:F2:63:8A:30:D7:1A:73:38:79:4A:DD:E0:76:3C:A0
X509v3 Authority Key Identifier:
keyid:08:66:48:35:F8:AA:FE:61:49:71:FF:A8:68:3F:9F:74:BF:4D:0F:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CGZINfiq_mFJcf-oaD-fdL9ND_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/cef3b5-a848-43d5-873a-0757a6d28224/1/CGZINfiq_mFJcf-oaD-fdL9ND_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/cef3b5-a848-43d5-873a-0757a6d28224/1/CGZINfiq_mFJcf-oaD-fdL9ND_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:0f:12:f3:ed:62:08:48:d8:7e:88:ba:99:25:a5:a9:be:d2:
46:1c:c9:4e:e2:84:90:22:51:c7:a5:57:aa:e1:69:22:3b:97:
77:d3:22:2f:b6:85:90:02:9a:e8:39:30:10:26:d6:c2:31:4e:
f9:0c:10:e5:11:90:bb:7a:f7:f9:c5:16:07:44:01:d0:f1:1e:
47:da:fa:66:d0:eb:bf:f3:e9:8e:22:b5:36:a1:7e:14:8f:be:
76:41:ba:7e:34:7f:9b:83:dd:52:cd:b6:39:cf:51:b9:b8:ef:
28:19:b5:b9:79:4f:22:34:0d:75:59:ea:20:7e:8f:ad:48:03:
8f:9c:3a:e5:50:c5:36:ff:5b:06:08:a0:23:28:e2:ee:9c:26:
3c:50:8d:11:cd:aa:1e:dc:7d:77:2f:47:af:68:53:b6:9c:80:
9d:78:be:ea:df:fa:dc:ac:8e:3d:42:ce:b7:59:9b:f0:b4:f4:
12:e2:95:51:eb:b0:a4:7f:8e:ea:a9:2c:db:66:cb:19:55:41:
23:ad:59:d1:c2:a3:60:34:2f:26:c1:c1:39:9d:89:ac:e4:10:
41:31:ff:e7:87:b6:b6:91:a1:88:1f:c3:1b:7a:5c:a3:82:08:
fd:5c:c2:aa:d6:82:c3:b2:5a:6e:ba:4a:b9:fb:d6:10:af:8d:
43:c3:28:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:33:36 2026 by rpki-client