Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b9/cf6f84-de39-4737-ac0d-e6febed1f5b2/1/cGHLKb3Ndzhxg60jn77X3QwHDCU.mft
File: cGHLKb3Ndzhxg60jn77X3QwHDCU.mft (raw, json)
Hash identifier: +07iCtLHS/uwpfZjxE7Ub26sA8TQ8tYVZtkla4Ez5Bs=
Subject key identifier: 11:B5:E7:67:FE:D5:35:F2:0E:8E:3F:ED:C8:93:8F:52:D5:02:5E:E1
Authority key identifier: 70:61:CB:29:BD:CD:77:38:71:83:AD:23:9F:BE:D7:DD:0C:07:0C:25
Certificate issuer: /CN=7061cb29bdcd77387183ad239fbed7dd0c070c25
Certificate serial: 01A1DE02B530776F4F0954A477CA005F3E32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cGHLKb3Ndzhxg60jn77X3QwHDCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/cf6f84-de39-4737-ac0d-e6febed1f5b2/1/cGHLKb3Ndzhxg60jn77X3QwHDCU.mft
Manifest number: A4
Signing time: Sun 15 Nov 2026 07:01:21 +0000
Manifest this update: Sun 15 Nov 2026 07:01:21 +0000
Manifest next update: Mon 16 Nov 2026 07:01:21 +0000
Files and hashes: 1: V0My9THlBc0YLlGKU0lk51nLT9Q.roa (hash: jnanOnE2E3WLlm+hKnnts1NGwhP+hFoapes6AYG4EzY=)
2: cGHLKb3Ndzhxg60jn77X3QwHDCU.crl (hash: tFugKtcjMQzL4pNirXW3H37FiQu/StAkg96sRHiWW9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/cf6f84-de39-4737-ac0d-e6febed1f5b2/1/cGHLKb3Ndzhxg60jn77X3QwHDCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/cf6f84-de39-4737-ac0d-e6febed1f5b2/1/cGHLKb3Ndzhxg60jn77X3QwHDCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/cGHLKb3Ndzhxg60jn77X3QwHDCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:02:b5:30:77:6f:4f:09:54:a4:77:ca:00:5f:3e:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7061cb29bdcd77387183ad239fbed7dd0c070c25
Validity
Not Before: Nov 15 07:01:21 2026 GMT
Not After : Nov 16 07:01:21 2026 GMT
Subject: CN=11b5e767fed535f20e8e3fedc8938f52d5025ee1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:9a:4f:3c:a0:2a:a6:f1:c9:67:81:e7:b6:5c:
c2:1e:1e:42:98:6a:09:db:29:6e:57:e1:65:9d:4e:
0f:cc:83:31:73:46:26:52:91:1c:f5:93:94:d4:25:
dc:ad:24:e2:6b:3f:08:5f:bc:59:28:af:d0:70:f8:
a7:5f:97:f2:43:da:49:75:3f:92:60:48:af:17:54:
d7:03:ec:d5:36:45:f6:24:62:c3:f5:97:8b:53:42:
90:9c:b7:1c:c6:38:58:d3:45:54:84:7d:0e:6f:91:
fc:2d:8c:00:2a:e1:85:a1:62:07:08:e5:c3:00:6a:
51:4a:8d:fc:2f:86:c0:97:51:7e:03:a7:00:e5:c1:
11:1f:6e:01:a8:59:39:0d:a2:de:0a:8f:cd:ad:9b:
16:d9:3d:93:38:7a:b6:dc:93:cf:88:fa:88:6c:7e:
ec:2a:5e:c8:1e:5c:3c:72:6d:03:18:1e:af:4a:65:
58:83:30:30:a3:32:1a:87:70:ec:2a:24:1d:30:37:
7c:42:7a:df:fc:75:3e:f2:21:70:ba:2f:b9:23:26:
60:97:9d:14:bf:05:e3:f3:3e:e4:c8:43:0d:9c:93:
0e:b7:00:07:d4:16:ad:9e:30:8b:c6:47:b4:84:08:
b0:69:86:c5:34:f5:be:26:ea:7c:d8:a1:5e:81:c6:
97:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:B5:E7:67:FE:D5:35:F2:0E:8E:3F:ED:C8:93:8F:52:D5:02:5E:E1
X509v3 Authority Key Identifier:
keyid:70:61:CB:29:BD:CD:77:38:71:83:AD:23:9F:BE:D7:DD:0C:07:0C:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cGHLKb3Ndzhxg60jn77X3QwHDCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/cf6f84-de39-4737-ac0d-e6febed1f5b2/1/cGHLKb3Ndzhxg60jn77X3QwHDCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/cf6f84-de39-4737-ac0d-e6febed1f5b2/1/cGHLKb3Ndzhxg60jn77X3QwHDCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:aa:0e:89:29:98:bc:76:cd:d6:94:16:39:d6:fa:62:22:e1:
7d:27:05:ec:69:05:36:81:a8:dc:67:63:ca:4d:d1:c0:81:b7:
fe:31:b5:29:20:ee:70:f1:ec:17:3b:31:f2:90:54:8b:76:08:
bf:6e:e9:88:3e:1c:c6:73:f1:83:26:8d:dd:ca:b4:7d:3d:b6:
ce:41:13:91:dc:d2:9c:4a:71:13:77:f7:a5:1b:31:27:a8:73:
52:c5:bb:44:2d:23:3a:76:37:2a:5f:a3:01:75:2f:27:59:98:
db:d7:ec:b0:71:23:49:fa:53:86:73:74:8c:14:d4:be:50:7b:
35:e3:f9:cd:dd:25:9c:ad:b4:cb:a4:b5:65:0b:43:f8:a2:c3:
e4:42:34:10:74:1a:49:27:4c:8c:56:0f:8c:63:e4:58:11:6c:
76:52:cf:15:ea:3b:54:90:b0:77:37:56:32:0b:48:d0:db:3d:
63:d7:ed:40:af:77:9e:e6:0d:9d:74:06:f3:79:02:b6:44:0a:
40:d2:63:50:b7:aa:bf:a1:16:3a:3e:77:7e:7d:8d:95:d3:b4:
aa:bc:ca:99:41:06:37:71:a0:af:79:82:88:23:56:36:1e:4c:
ef:26:f2:21:88:21:e1:62:c2:e9:40:72:27:fd:57:d0:ca:ba:
0e:b9:d9:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHeArUwd29PCVSkd8oAXz4yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwNjFjYjI5YmRjZDc3Mzg3MTgzYWQyMzlmYmVkN2RkMGMw
NzBjMjUwHhcNMjYxMTE1MDcwMTIxWhcNMjYxMTE2MDcwMTIxWjAzMTEwLwYDVQQD
EygxMWI1ZTc2N2ZlZDUzNWYyMGU4ZTNmZWRjODkzOGY1MmQ1MDI1ZWUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0JpPPKAqpvHJZ4HntlzCHh5CmGoJ
2yluV+FlnU4PzIMxc0YmUpEc9ZOU1CXcrSTiaz8IX7xZKK/QcPinX5fyQ9pJdT+S
YEivF1TXA+zVNkX2JGLD9ZeLU0KQnLccxjhY00VUhH0Ob5H8LYwAKuGFoWIHCOXD
AGpRSo38L4bAl1F+A6cA5cERH24BqFk5DaLeCo/NrZsW2T2TOHq23JPPiPqIbH7s
Kl7IHlw8cm0DGB6vSmVYgzAwozIah3DsKiQdMDd8Qnrf/HU+8iFwui+5IyZgl50U
vwXj8z7kyEMNnJMOtwAH1BatnjCLxke0hAiwaYbFNPW+Jup82KFegcaXxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBG152f+1TXyDo4/7ciTj1LVAl7hMB8GA1UdIwQY
MBaAFHBhyym9zXc4cYOtI5++190MBwwlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0dITEtiM05kemh4ZzYwam43N1gzUXdIRENVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9jZjZmODQtZGUzOS00NzM3LWFjMGQt
ZTZmZWJlZDFmNWIyLzEvY0dITEtiM05kemh4ZzYwam43N1gzUXdIRENVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS9jZjZmODQtZGUzOS00NzM3LWFjMGQtZTZmZWJlZDFmNWIy
LzEvY0dITEtiM05kemh4ZzYwam43N1gzUXdIRENVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARKoOiSmY
vHbN1pQWOdb6YiLhfScF7GkFNoGo3Gdjyk3RwIG3/jG1KSDucPHsFzsx8pBUi3YI
v27piD4cxnPxgyaN3cq0fT22zkETkdzSnEpxE3f3pRsxJ6hzUsW7RC0jOnY3Kl+j
AXUvJ1mY29fssHEjSfpThnN0jBTUvlB7NeP5zd0lnK20y6S1ZQtD+KLD5EI0EHQa
SSdMjFYPjGPkWBFsdlLPFeo7VJCwdzdWMgtI0Ns9Y9ftQK93nuYNnXQG83kCtkQK
QNJjULeqv6EWOj53fn2NldO0qrzKmUEGN3Ggr3mCiCNWNh5M7ybyIYgh4WLC6UBy
J/1X0Mq6DrnZ+Q==
-----END CERTIFICATE-----
Generated at Sun Nov 15 10:16:36 2026 by rpki-client