Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/4dc58c-7ce8-45bb-bace-1fe748133cef/1/CGCi2-14yoFHESZ33F1tPfKavCA.mft
File: CGCi2-14yoFHESZ33F1tPfKavCA.mft (raw, json)
Hash identifier: pSNONboK+u93sym1aCM6kUar4i0RntSMCrWmDBSzUUg=
Subject key identifier: 75:DC:29:5D:D7:CB:AC:94:50:10:97:4D:2D:7C:8D:FB:71:A7:AC:B3
Authority key identifier: 08:60:A2:DB:ED:78:CA:81:47:11:26:77:DC:5D:6D:3D:F2:9A:BC:20
Certificate issuer: /CN=0860a2dbed78ca8147112677dc5d6d3df29abc20
Certificate serial: 019F909118C04F77982A4CB13995C8E7416F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CGCi2-14yoFHESZ33F1tPfKavCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/4dc58c-7ce8-45bb-bace-1fe748133cef/1/CGCi2-14yoFHESZ33F1tPfKavCA.mft
Manifest number: 3F
Signing time: Thu 23 Jul 2026 20:00:55 +0000
Manifest this update: Thu 23 Jul 2026 20:00:55 +0000
Manifest next update: Fri 24 Jul 2026 20:00:55 +0000
Files and hashes: 1: CGCi2-14yoFHESZ33F1tPfKavCA.crl (hash: bWSNwejqMiqbW6zRhty2zvZyOIs2vuNTZFT9PecpQRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/4dc58c-7ce8-45bb-bace-1fe748133cef/1/CGCi2-14yoFHESZ33F1tPfKavCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/4dc58c-7ce8-45bb-bace-1fe748133cef/1/CGCi2-14yoFHESZ33F1tPfKavCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/CGCi2-14yoFHESZ33F1tPfKavCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:91:18:c0:4f:77:98:2a:4c:b1:39:95:c8:e7:41:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0860a2dbed78ca8147112677dc5d6d3df29abc20
Validity
Not Before: Jul 23 20:00:55 2026 GMT
Not After : Jul 24 20:00:55 2026 GMT
Subject: CN=75dc295dd7cbac945010974d2d7c8dfb71a7acb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6d:4d:56:a0:89:7e:d6:6d:ec:30:cb:7a:1b:
4c:4b:e2:08:b2:3a:46:38:bd:69:57:8b:4d:a8:a9:
71:54:78:07:aa:10:e6:3a:bd:24:81:91:c0:24:2b:
ee:36:a6:d8:ce:b1:1b:3b:b8:e1:10:e1:ce:f0:24:
42:3c:fa:87:8a:fc:9f:4e:e2:ec:5a:01:cb:5d:30:
44:b3:e8:6a:c6:f5:0a:29:a0:b4:36:18:08:0c:d2:
19:f5:34:7e:e0:74:3a:3b:69:ef:26:a8:d7:d7:30:
80:fd:3a:47:c8:66:ab:c5:f5:46:fb:da:5f:20:2c:
99:20:c0:33:8a:69:22:5c:bb:e3:16:04:16:8d:a7:
7c:b3:92:89:0a:29:1e:de:d9:48:d9:c8:c2:8d:5e:
db:3d:6b:72:b9:5c:c5:6f:f2:81:f4:29:4d:65:06:
fa:b2:fd:05:b9:07:3f:c8:8d:60:06:95:c0:78:c4:
12:3e:25:35:fe:d4:56:33:20:ac:b2:66:26:f7:2d:
84:14:d2:eb:c3:ef:4f:62:fe:f4:8c:2b:78:e3:80:
14:1c:4e:d8:01:29:b9:e2:38:06:0b:98:43:21:0c:
ff:ec:40:3c:1c:78:3a:7a:c9:2b:fe:a4:76:36:8a:
85:d7:31:4f:9b:0a:89:18:b9:a1:82:60:fb:b2:27:
85:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:DC:29:5D:D7:CB:AC:94:50:10:97:4D:2D:7C:8D:FB:71:A7:AC:B3
X509v3 Authority Key Identifier:
keyid:08:60:A2:DB:ED:78:CA:81:47:11:26:77:DC:5D:6D:3D:F2:9A:BC:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CGCi2-14yoFHESZ33F1tPfKavCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/4dc58c-7ce8-45bb-bace-1fe748133cef/1/CGCi2-14yoFHESZ33F1tPfKavCA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/4dc58c-7ce8-45bb-bace-1fe748133cef/1/CGCi2-14yoFHESZ33F1tPfKavCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:e5:ef:46:6f:34:d1:91:b2:4f:a6:1f:a7:19:30:2a:c6:a5:
3c:c6:5b:73:58:f9:c3:c6:aa:38:e2:3a:e7:df:84:7c:c8:a2:
49:4c:b7:e0:cb:46:e1:d3:6a:ee:03:6e:8a:91:64:10:89:03:
e5:a8:d7:fe:a5:91:47:11:f0:2a:a6:5f:aa:fa:c9:07:c2:eb:
45:b1:d6:3f:47:a1:02:bd:13:59:e2:71:5c:a1:d1:06:e1:5a:
1c:7c:7f:6b:eb:6d:51:24:94:e6:ec:52:ef:bd:ba:2d:4d:92:
1b:9d:23:cf:c4:ea:13:83:21:66:25:1f:08:9d:21:76:27:ad:
40:b0:8b:36:a6:4c:3b:e0:ae:4a:97:f9:0f:2b:30:cb:f3:ad:
a8:67:d3:f3:e2:1a:8a:11:23:2e:67:12:a6:0d:0b:4e:42:af:
ad:e6:a8:a4:38:cb:d6:dd:2e:ae:bd:5e:f2:0c:62:f1:fa:fc:
08:db:7a:ec:eb:81:3f:05:7c:7d:f7:40:c3:1d:72:80:2f:8e:
98:1d:9b:86:21:e1:81:c1:da:21:97:21:0a:dd:9c:6d:7b:7b:
a1:7e:65:8c:87:3a:49:96:21:8e:e7:25:2c:94:94:9e:97:60:
0f:cd:34:9e:f9:2f:4a:e1:05:45:0a:da:40:03:29:78:57:6b:
2c:0a:24:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:46:06 2026 by rpki-client