Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/4baad5-2b6a-4b64-8f57-b70b95539df4/1/cgs1_DZuhLRYDu6nmJEe1OGOOus.mft
File: cgs1_DZuhLRYDu6nmJEe1OGOOus.mft (raw, json)
Hash identifier: XLjmKBbRuIrw7KfbePpBnuRQKilIDn6G0hj0R/w1f6c=
Subject key identifier: 1D:E4:20:6B:5E:2D:27:C6:42:45:DC:B9:B3:B2:0E:EA:11:51:89:90
Authority key identifier: 72:0B:35:FC:36:6E:84:B4:58:0E:EE:A7:98:91:1E:D4:E1:8E:3A:EB
Certificate issuer: /CN=720b35fc366e84b4580eeea798911ed4e18e3aeb
Certificate serial: 019D284E05714B2E06B8CE925DA93CF8C7A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgs1_DZuhLRYDu6nmJEe1OGOOus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/4baad5-2b6a-4b64-8f57-b70b95539df4/1/cgs1_DZuhLRYDu6nmJEe1OGOOus.mft
Manifest number: 0898
Signing time: Thu 26 Mar 2026 04:01:34 +0000
Manifest this update: Thu 26 Mar 2026 04:01:34 +0000
Manifest next update: Fri 27 Mar 2026 04:01:34 +0000
Files and hashes: 1: cgs1_DZuhLRYDu6nmJEe1OGOOus.crl (hash: t5O5s+eMUeNxYc4duSwWfvvGvPNqujzh5KSy+/5/0Dk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/4baad5-2b6a-4b64-8f57-b70b95539df4/1/cgs1_DZuhLRYDu6nmJEe1OGOOus.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/4baad5-2b6a-4b64-8f57-b70b95539df4/1/cgs1_DZuhLRYDu6nmJEe1OGOOus.mft
rsync://rpki.ripe.net/repository/DEFAULT/cgs1_DZuhLRYDu6nmJEe1OGOOus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:05:71:4b:2e:06:b8:ce:92:5d:a9:3c:f8:c7:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=720b35fc366e84b4580eeea798911ed4e18e3aeb
Validity
Not Before: Mar 26 04:01:34 2026 GMT
Not After : Mar 27 04:01:34 2026 GMT
Subject: CN=1de4206b5e2d27c64245dcb9b3b20eea11518990
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:19:05:59:43:90:e4:dc:fa:6f:a0:c1:30:64:
f4:50:c2:7a:3f:8d:1c:13:85:b3:2a:39:14:d8:b4:
dd:b4:7e:e1:cf:05:1f:12:1d:fe:98:ba:d2:df:28:
ce:43:40:0e:92:c5:f2:2e:14:76:3f:3a:e2:ec:a7:
91:78:ef:30:98:46:9a:65:e1:78:5b:7b:93:ed:cf:
43:e4:75:9d:fd:69:23:85:66:38:8f:d4:44:b0:77:
58:7d:56:64:6f:ac:76:da:ca:33:be:d6:6e:91:c6:
8c:55:28:41:5f:8e:43:71:f7:11:90:db:c5:91:92:
ca:26:05:25:c4:af:bd:02:cc:e7:7b:f0:82:fe:03:
bd:04:27:28:30:5b:7e:5b:34:5c:58:33:01:e9:d9:
b2:cb:f0:00:54:e2:1e:e5:c3:b1:d9:9d:52:66:21:
bc:1b:21:49:dd:17:c1:6e:6f:f7:8e:ac:ee:37:54:
26:04:3d:34:c7:c5:ef:f7:07:e9:62:77:4a:e4:0e:
c4:18:24:0a:76:2c:fb:55:73:b0:3a:3c:de:11:31:
4a:dc:64:12:9a:ae:ec:4a:42:b7:2a:1c:8f:38:9f:
95:0d:f6:da:65:22:ab:43:8b:f9:ad:9c:76:9e:7e:
e2:10:84:63:d3:a3:7a:df:69:7c:90:fc:a2:8e:1a:
83:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:E4:20:6B:5E:2D:27:C6:42:45:DC:B9:B3:B2:0E:EA:11:51:89:90
X509v3 Authority Key Identifier:
keyid:72:0B:35:FC:36:6E:84:B4:58:0E:EE:A7:98:91:1E:D4:E1:8E:3A:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgs1_DZuhLRYDu6nmJEe1OGOOus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/4baad5-2b6a-4b64-8f57-b70b95539df4/1/cgs1_DZuhLRYDu6nmJEe1OGOOus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/4baad5-2b6a-4b64-8f57-b70b95539df4/1/cgs1_DZuhLRYDu6nmJEe1OGOOus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:13:e4:3c:a2:90:cb:55:67:e0:b4:84:05:14:a2:4e:9c:cd:
e6:da:e0:21:59:a1:d3:10:2f:84:f0:f7:80:c2:7f:e2:b1:03:
a7:26:04:e4:7d:43:03:7f:d7:ef:78:87:88:bd:ce:1b:d3:e7:
4d:34:74:f1:7a:29:d7:e8:fa:0e:b2:19:ee:f0:4c:ec:ba:43:
69:07:e2:b0:90:23:2e:24:b1:fd:72:0b:da:b6:26:0a:76:28:
49:ac:4e:87:d3:75:72:10:b1:cf:e4:cc:05:eb:5a:6d:a7:ec:
2b:a3:54:54:42:ce:da:e2:9c:8a:3a:40:cf:59:b9:c2:2a:ff:
4a:64:08:b4:4f:af:f4:1d:5f:f3:fc:09:70:ff:50:9f:ed:5d:
1c:b9:29:c6:0c:cd:e1:0c:ee:89:db:06:2b:4d:b5:d8:f9:c6:
69:93:ac:d4:26:18:9c:ce:3e:cb:f6:5a:6e:98:58:86:f8:5e:
67:e3:e3:5f:7d:fa:c1:6e:0b:a6:32:7a:3e:2e:53:2c:e8:9d:
46:d8:a7:b5:5a:dd:8e:fc:fe:7d:be:16:09:a5:75:0d:88:95:
ef:b5:df:14:1f:40:4a:a8:bd:2f:8f:87:43:0f:dc:52:6c:98:
e9:f9:4f:45:e1:a9:c4:ea:17:af:11:6c:f6:bc:5c:3c:de:df:
2f:47:5d:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:00:49 2026 by rpki-client