Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e5/cef3b5-a848-43d5-873a-0757a6d28224/1/CGZINfiq_mFJcf-oaD-fdL9ND_Q.mft
File: CGZINfiq_mFJcf-oaD-fdL9ND_Q.mft (raw, json)
Hash identifier: Vm1TakQrRxqTPrEgZeZGWoBYKAzRG+iSCHEbgd4fuok=
Subject key identifier: 99:16:1F:6C:DC:B1:A6:3F:E6:1C:DC:8E:B7:66:94:5B:73:87:20:D2
Authority key identifier: 08:66:48:35:F8:AA:FE:61:49:71:FF:A8:68:3F:9F:74:BF:4D:0F:F4
Certificate issuer: /CN=08664835f8aafe614971ffa8683f9f74bf4d0ff4
Certificate serial: 01A13D810F0C866DE70164F634BE377D584A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CGZINfiq_mFJcf-oaD-fdL9ND_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/cef3b5-a848-43d5-873a-0757a6d28224/1/CGZINfiq_mFJcf-oaD-fdL9ND_Q.mft
Manifest number: 12E8
Signing time: Thu 15 Oct 2026 03:00:30 +0000
Manifest this update: Thu 15 Oct 2026 03:00:30 +0000
Manifest next update: Fri 16 Oct 2026 03:00:30 +0000
Files and hashes: 1: 5F8EPRCwAO9R0s3emE3nMIVi-i8.roa (hash: nyuBuPwwDb0keiCkpqhAWuHjHqCL5kLPWyJJ50t6Ers=)
2: CGZINfiq_mFJcf-oaD-fdL9ND_Q.crl (hash: meBdS+E/8BmftTZpZZpdYwZPqRHTSOLkwH0Xu6qsxDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/cef3b5-a848-43d5-873a-0757a6d28224/1/CGZINfiq_mFJcf-oaD-fdL9ND_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/cef3b5-a848-43d5-873a-0757a6d28224/1/CGZINfiq_mFJcf-oaD-fdL9ND_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/CGZINfiq_mFJcf-oaD-fdL9ND_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:81:0f:0c:86:6d:e7:01:64:f6:34:be:37:7d:58:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08664835f8aafe614971ffa8683f9f74bf4d0ff4
Validity
Not Before: Oct 15 03:00:30 2026 GMT
Not After : Oct 16 03:00:30 2026 GMT
Subject: CN=99161f6cdcb1a63fe61cdc8eb766945b738720d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:df:62:19:c7:4a:8b:e3:9c:02:f3:5d:9c:5d:
d1:34:d6:fb:67:0b:b7:28:c6:5a:42:04:e3:25:06:
57:b1:da:b8:78:af:14:c2:81:14:47:ba:b0:5c:b6:
1b:09:b9:0f:7b:48:44:f5:3e:91:cd:ec:9a:63:b3:
e7:aa:7f:73:13:7e:a4:56:28:75:4a:a2:ef:e7:cd:
56:30:0e:39:48:ab:0e:a5:8a:12:bc:1e:1f:a0:4e:
62:b6:7f:f1:82:29:ff:f5:0a:c9:05:6e:12:c7:b0:
54:31:3c:99:59:c7:e1:d8:16:ca:34:0f:e4:e1:c0:
da:5e:41:4a:cd:f4:fc:db:d4:ef:1b:f4:90:65:b5:
3d:d0:4e:21:64:1b:67:f4:11:e7:e3:5f:50:b1:a9:
63:38:10:a0:d5:08:14:4c:c7:25:c9:44:3f:c2:d0:
90:67:27:34:b3:ee:65:26:80:54:bf:f5:ab:36:b5:
11:af:d9:55:d8:1b:5c:4a:f9:9d:8e:f6:2d:1a:45:
a9:49:29:9d:95:5e:fc:e5:50:5f:6e:2e:e2:8c:f2:
03:33:73:c6:45:65:6f:46:bf:00:8a:cb:88:aa:ac:
4e:36:54:cf:b1:33:f6:04:49:45:20:a7:33:79:9b:
46:71:01:09:07:90:af:79:b2:02:d5:b8:a8:a0:d7:
8c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:16:1F:6C:DC:B1:A6:3F:E6:1C:DC:8E:B7:66:94:5B:73:87:20:D2
X509v3 Authority Key Identifier:
keyid:08:66:48:35:F8:AA:FE:61:49:71:FF:A8:68:3F:9F:74:BF:4D:0F:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CGZINfiq_mFJcf-oaD-fdL9ND_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/cef3b5-a848-43d5-873a-0757a6d28224/1/CGZINfiq_mFJcf-oaD-fdL9ND_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/cef3b5-a848-43d5-873a-0757a6d28224/1/CGZINfiq_mFJcf-oaD-fdL9ND_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:46:3e:17:1b:37:5a:7c:6f:08:13:58:66:5e:2d:87:eb:41:
2a:d9:4f:dc:65:16:cb:d9:7d:6d:ab:73:79:a0:d5:ad:87:e7:
e4:3d:d6:25:aa:f7:32:31:e1:e5:89:78:03:30:29:a6:8a:ec:
18:6f:c6:de:b2:13:c9:07:d1:f6:32:cd:1c:88:7e:2e:a7:68:
af:86:f5:cd:43:52:a5:e2:9e:ba:bb:13:fe:f8:bc:b6:2e:45:
8a:e8:6a:d7:df:96:ec:88:a0:31:f2:3d:43:08:86:cb:34:2b:
b7:6c:26:1e:3c:a4:c7:d6:83:2a:2c:80:28:cd:84:27:0c:65:
b8:ef:bd:a0:77:05:80:b5:22:14:24:48:a7:60:ba:b5:0a:d9:
8f:fc:94:1f:7b:94:ef:52:99:5d:21:3b:50:1f:e2:ac:64:3b:
f5:4b:45:b2:06:c5:1c:a1:22:e3:21:46:b5:cc:e7:93:6b:fb:
94:16:17:5f:88:ca:75:ef:6a:1e:21:5a:24:31:4b:ad:a1:df:
5d:dc:f9:16:7d:c4:7f:f3:63:29:79:1c:2f:1e:0e:67:50:3d:
c3:76:42:5a:d6:97:d0:a0:87:6e:59:fe:f8:3e:b1:fb:38:51:
8e:97:49:0d:5f:16:29:43:36:fe:2a:dd:65:91:87:b6:cb:86:
d0:c2:62:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:29:13 2026 by rpki-client