Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/9d8598-e9e2-4709-b535-6b04aadeef10/1/CGKC51Eob7vsx16m7cwlQZLFXHY.mft
File: CGKC51Eob7vsx16m7cwlQZLFXHY.mft (raw, json)
Hash identifier: ciUXT9yHUbAIeDxd9ugUXQjjvxXTdDoUOa0JsH5105w=
Subject key identifier: CB:08:05:E4:63:ED:CE:97:41:F5:25:C0:2D:4E:EC:C7:D7:9F:5B:EC
Authority key identifier: 08:62:82:E7:51:28:6F:BB:EC:C7:5E:A6:ED:CC:25:41:92:C5:5C:76
Certificate issuer: /CN=086282e751286fbbecc75ea6edcc254192c55c76
Certificate serial: 01A0D192E05589B8A59397478E0F0FAA360D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CGKC51Eob7vsx16m7cwlQZLFXHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/9d8598-e9e2-4709-b535-6b04aadeef10/1/CGKC51Eob7vsx16m7cwlQZLFXHY.mft
Manifest number: 1A70
Signing time: Thu 24 Sep 2026 04:00:58 +0000
Manifest this update: Thu 24 Sep 2026 04:00:58 +0000
Manifest next update: Fri 25 Sep 2026 04:00:58 +0000
Files and hashes: 1: CGKC51Eob7vsx16m7cwlQZLFXHY.crl (hash: PUK22smSpgMoHcoPwigGXvPUIRUwG/bh1CPNfPZN7xo=)
2: EWdn2dAvIsQSnWq-qfqoFQud5JU.roa (hash: vWk3309wRqpMvn92uqTEGWfnbFV7KQGX6oN/Zj7IR6g=)
3: sV-mYML_TKE38eTlgadihi7XoEg.roa (hash: DlzC9cilbThgBPbjJV0pjmCFEg1K/ZCcTUpF4AIBnD4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/9d8598-e9e2-4709-b535-6b04aadeef10/1/CGKC51Eob7vsx16m7cwlQZLFXHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/9d8598-e9e2-4709-b535-6b04aadeef10/1/CGKC51Eob7vsx16m7cwlQZLFXHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CGKC51Eob7vsx16m7cwlQZLFXHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 04:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:92:e0:55:89:b8:a5:93:97:47:8e:0f:0f:aa:36:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=086282e751286fbbecc75ea6edcc254192c55c76
Validity
Not Before: Sep 24 04:00:58 2026 GMT
Not After : Sep 25 04:00:58 2026 GMT
Subject: CN=cb0805e463edce9741f525c02d4eecc7d79f5bec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:83:05:97:c9:be:ef:5b:16:39:1c:19:d8:86:
d5:6d:c8:64:61:d6:2f:d8:39:b4:6f:ab:83:a9:b5:
b2:a3:4f:50:93:7b:5a:f6:b9:c9:29:ee:72:2c:e5:
89:7a:70:e1:c8:75:3b:89:86:5a:7f:8e:f7:f4:de:
79:03:b6:7f:f2:e5:5b:60:9c:40:f6:6d:66:6f:93:
ee:3b:59:f7:c2:7f:b8:e1:ef:5b:d4:ba:2f:8e:0c:
7e:8f:34:47:a2:90:3b:76:16:8e:6b:12:7f:b7:d0:
27:a0:ec:6e:97:b4:19:94:03:a0:59:f7:4e:16:84:
23:61:60:32:fb:5e:b2:b2:f2:76:bb:9b:03:93:f0:
99:c6:4e:6c:5b:52:0f:e2:4e:6b:ff:77:bb:04:bd:
6e:a8:79:e9:12:72:c8:2a:2f:3c:ab:cc:8c:d7:02:
5f:2f:b6:87:ca:be:98:1e:cd:ba:0f:09:28:31:d4:
d0:51:1f:3a:11:17:c9:08:36:88:84:9a:31:6d:43:
6a:5c:3f:6c:06:cc:95:fe:0d:75:fa:7f:f6:48:9f:
40:36:34:67:09:ea:bd:b1:4b:ff:91:ed:a8:4d:db:
b4:62:b5:39:f2:21:d5:91:0c:33:56:6f:f2:94:9b:
89:17:55:2a:d0:80:72:51:1e:50:00:0e:2e:bc:b8:
cb:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:08:05:E4:63:ED:CE:97:41:F5:25:C0:2D:4E:EC:C7:D7:9F:5B:EC
X509v3 Authority Key Identifier:
keyid:08:62:82:E7:51:28:6F:BB:EC:C7:5E:A6:ED:CC:25:41:92:C5:5C:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CGKC51Eob7vsx16m7cwlQZLFXHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/9d8598-e9e2-4709-b535-6b04aadeef10/1/CGKC51Eob7vsx16m7cwlQZLFXHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/9d8598-e9e2-4709-b535-6b04aadeef10/1/CGKC51Eob7vsx16m7cwlQZLFXHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:20:1f:8f:8b:30:c5:17:da:d0:0f:43:d0:af:79:74:6e:8d:
0a:62:0b:27:2e:ae:7d:43:80:d5:d8:5d:06:85:98:fe:ac:3d:
f8:cc:9a:c7:2c:ed:06:82:b7:3c:eb:1c:bf:c4:d2:ef:78:a0:
86:62:18:c1:d0:41:79:17:60:88:8b:9b:60:c6:73:f6:40:28:
10:b0:20:44:69:aa:51:ba:30:a5:23:5f:ee:56:09:73:c4:8d:
71:25:32:5a:4f:0f:10:86:ba:79:e7:a9:40:b8:69:ac:d5:ab:
f0:e6:ff:e0:14:ec:61:60:a3:c9:8b:27:90:b0:7d:e4:04:fe:
5c:fa:5b:44:2e:0a:28:17:95:74:84:35:60:8a:70:0a:5c:b4:
2c:fd:8f:38:c2:ba:83:e7:5f:8b:0d:18:52:00:bc:c8:61:26:
84:d4:74:04:21:ed:4c:7a:75:a1:ef:ce:64:c4:cf:92:24:f3:
a8:69:f3:30:95:1d:3e:ff:79:12:01:dc:ca:95:60:ba:dd:b9:
f3:f9:65:c9:c7:18:1e:3a:f9:8c:d1:66:7a:0b:32:5a:02:71:
13:05:06:6f:d5:55:6b:1d:70:0b:63:d1:a5:01:b1:93:17:98:
fb:01:00:b3:ee:4c:68:cb:66:73:5d:e6:ee:92:bc:a8:c3:30:
fc:79:af:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 12:58:31 2026 by rpki-client