Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/26/4dc58c-7ce8-45bb-bace-1fe748133cef/1/CGCi2-14yoFHESZ33F1tPfKavCA.mft
File: CGCi2-14yoFHESZ33F1tPfKavCA.mft (raw, json)
Hash identifier: 6Wj4+ox67/RlohpyPJyhvqVBDnLfLWMJ2wYGaquaPtg=
Subject key identifier: C0:8B:C6:79:C8:FC:DA:DD:53:5F:56:54:BE:F0:4D:9E:98:CD:E8:AC
Authority key identifier: 08:60:A2:DB:ED:78:CA:81:47:11:26:77:DC:5D:6D:3D:F2:9A:BC:20
Certificate issuer: /CN=0860a2dbed78ca8147112677dc5d6d3df29abc20
Certificate serial: 01A0D124E484064052E0D1A1B6992FF7CE4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CGCi2-14yoFHESZ33F1tPfKavCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/4dc58c-7ce8-45bb-bace-1fe748133cef/1/CGCi2-14yoFHESZ33F1tPfKavCA.mft
Manifest number: E5
Signing time: Thu 24 Sep 2026 02:00:50 +0000
Manifest this update: Thu 24 Sep 2026 02:00:50 +0000
Manifest next update: Fri 25 Sep 2026 02:00:50 +0000
Files and hashes: 1: CGCi2-14yoFHESZ33F1tPfKavCA.crl (hash: I824DAP0ruFhAJlrzbdCvTJyFmgyehi68zEuAVhhzrQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/4dc58c-7ce8-45bb-bace-1fe748133cef/1/CGCi2-14yoFHESZ33F1tPfKavCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/4dc58c-7ce8-45bb-bace-1fe748133cef/1/CGCi2-14yoFHESZ33F1tPfKavCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/CGCi2-14yoFHESZ33F1tPfKavCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:24:e4:84:06:40:52:e0:d1:a1:b6:99:2f:f7:ce:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0860a2dbed78ca8147112677dc5d6d3df29abc20
Validity
Not Before: Sep 24 02:00:50 2026 GMT
Not After : Sep 25 02:00:50 2026 GMT
Subject: CN=c08bc679c8fcdadd535f5654bef04d9e98cde8ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:4f:70:1a:15:81:b7:7a:27:e4:a8:1a:8b:c8:
c3:88:b2:09:d4:6d:dd:65:79:aa:75:21:6a:dd:94:
cf:d1:db:98:89:33:80:33:91:5e:26:55:b5:8d:d4:
ed:b0:cb:9a:27:0f:e8:b7:e5:f2:de:f7:4d:a4:9b:
82:e3:d8:48:a5:a0:62:20:02:d2:2a:1f:00:d1:63:
f1:4f:86:40:6f:55:a8:47:b2:98:72:a1:48:c3:07:
50:9d:02:ef:18:e1:9f:d7:38:2d:b1:af:f9:f5:4d:
c3:62:ef:60:c7:90:3e:a7:f5:99:e1:cc:ed:49:5d:
58:8c:11:ca:f0:c5:16:06:bd:a5:6a:a9:9d:3f:c8:
95:51:f0:1e:17:b0:2c:f0:70:31:9f:8f:da:91:86:
19:72:7c:e2:51:f2:fb:28:98:65:2e:7e:aa:8e:64:
49:dc:92:f9:6e:37:aa:8e:be:de:6a:1d:95:c8:dd:
1c:66:08:cd:72:93:29:4e:2c:cd:54:36:d3:1a:a8:
00:f0:11:4e:f3:e1:77:cb:45:20:ee:70:58:cd:2a:
31:bb:f7:5e:40:f0:e9:d2:53:4a:91:48:41:e5:07:
ca:eb:9e:37:7c:05:10:ba:83:77:50:43:dd:cc:df:
25:cd:48:bb:28:f1:d3:51:16:87:4f:44:57:a9:20:
4b:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:8B:C6:79:C8:FC:DA:DD:53:5F:56:54:BE:F0:4D:9E:98:CD:E8:AC
X509v3 Authority Key Identifier:
keyid:08:60:A2:DB:ED:78:CA:81:47:11:26:77:DC:5D:6D:3D:F2:9A:BC:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CGCi2-14yoFHESZ33F1tPfKavCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/4dc58c-7ce8-45bb-bace-1fe748133cef/1/CGCi2-14yoFHESZ33F1tPfKavCA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/4dc58c-7ce8-45bb-bace-1fe748133cef/1/CGCi2-14yoFHESZ33F1tPfKavCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:08:ab:41:86:64:eb:fc:f6:18:98:37:ea:31:5b:7c:e1:05:
7c:19:49:53:97:38:d6:48:36:b8:db:bd:73:70:ea:cb:d0:1d:
2e:b1:41:95:c9:82:8d:00:bf:1a:35:4c:66:7c:cb:2f:94:e1:
c2:c9:27:3d:41:13:d1:b5:6b:af:63:40:0b:b6:f1:6e:8f:fc:
24:00:36:2c:47:47:a8:ce:4b:1b:b6:7f:82:9f:b7:c4:ac:e8:
0f:8d:21:1d:51:3d:35:b3:34:30:52:aa:39:1a:80:42:c8:61:
cf:85:fa:a6:da:57:1b:b0:69:da:ed:22:83:39:0d:e2:28:f4:
e3:37:b3:93:79:a0:5d:5a:e8:f6:bc:f0:9f:3f:e6:ef:be:67:
29:0f:0b:cb:d0:32:87:0d:61:84:b6:1f:1f:52:a5:60:18:7b:
dc:5d:51:bd:1e:6f:e5:0c:27:9a:09:9f:e1:94:78:70:04:bf:
b1:c6:03:97:eb:66:c8:49:15:b8:d7:aa:dc:18:87:a2:2a:6e:
89:f8:90:34:5b:5e:01:9f:be:c4:f1:2b:15:09:58:cf:ee:dc:
4f:41:df:bf:4d:4b:33:dc:74:55:4e:82:86:5a:e2:72:c3:c5:
45:98:0d:50:8a:bc:71:71:bf:8f:5c:2c:45:45:6d:4c:10:48:
63:d4:9a:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:15:51 2026 by rpki-client