Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b9/cf6f84-de39-4737-ac0d-e6febed1f5b2/1/cGHLKb3Ndzhxg60jn77X3QwHDCU.mft
File: cGHLKb3Ndzhxg60jn77X3QwHDCU.mft (raw, json)
Hash identifier: wEiwniIXu+ehDJ31hU+Kq6bqAuqfQyQ1b40yOgmLWEA=
Subject key identifier: 02:EF:25:1E:DF:C6:28:EC:AB:46:F1:F9:AC:CB:5A:09:DA:1E:A5:85
Authority key identifier: 70:61:CB:29:BD:CD:77:38:71:83:AD:23:9F:BE:D7:DD:0C:07:0C:25
Certificate issuer: /CN=7061cb29bdcd77387183ad239fbed7dd0c070c25
Certificate serial: 01A0D1929CCA8FC76D78C1D04482A1CCDE3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cGHLKb3Ndzhxg60jn77X3QwHDCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/cf6f84-de39-4737-ac0d-e6febed1f5b2/1/cGHLKb3Ndzhxg60jn77X3QwHDCU.mft
Manifest number: 19
Signing time: Thu 24 Sep 2026 04:00:41 +0000
Manifest this update: Thu 24 Sep 2026 04:00:41 +0000
Manifest next update: Fri 25 Sep 2026 04:00:41 +0000
Files and hashes: 1: V0My9THlBc0YLlGKU0lk51nLT9Q.roa (hash: jnanOnE2E3WLlm+hKnnts1NGwhP+hFoapes6AYG4EzY=)
2: cGHLKb3Ndzhxg60jn77X3QwHDCU.crl (hash: 08piq5LNlybv97npgkQs4aCUKn9MqDts7ByDxFjuv2w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/cf6f84-de39-4737-ac0d-e6febed1f5b2/1/cGHLKb3Ndzhxg60jn77X3QwHDCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/cf6f84-de39-4737-ac0d-e6febed1f5b2/1/cGHLKb3Ndzhxg60jn77X3QwHDCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/cGHLKb3Ndzhxg60jn77X3QwHDCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 04:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:92:9c:ca:8f:c7:6d:78:c1:d0:44:82:a1:cc:de:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7061cb29bdcd77387183ad239fbed7dd0c070c25
Validity
Not Before: Sep 24 04:00:41 2026 GMT
Not After : Sep 25 04:00:41 2026 GMT
Subject: CN=02ef251edfc628ecab46f1f9accb5a09da1ea585
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:87:38:4b:21:a1:c7:74:bf:26:ec:17:e6:dc:
77:58:90:5a:56:da:ad:74:f7:3f:3b:59:28:08:39:
0c:69:36:f1:78:46:57:2a:3c:4c:67:aa:bd:a6:bc:
80:97:d8:71:72:aa:60:76:7a:33:fd:e8:66:ee:57:
44:7e:33:b1:a7:d9:2a:46:1e:4f:f2:91:12:8a:ec:
f0:04:09:30:04:68:51:a7:73:4d:64:58:20:36:a7:
15:ec:48:3b:90:c8:df:17:d1:00:e5:39:cd:8f:7b:
b4:e4:59:9a:55:b7:18:f3:84:3d:37:4e:88:93:3c:
ad:33:11:a3:9a:d3:67:97:e6:4d:e3:2d:8e:39:2d:
a7:d7:95:9a:b3:62:41:88:92:5a:a9:93:75:73:c1:
01:94:66:de:b2:df:71:b5:5e:b9:3d:90:53:4d:23:
d9:b0:17:30:f5:fd:ae:e1:d9:0a:10:a9:09:1a:ca:
bd:b3:82:70:91:77:94:40:77:cb:45:a3:2e:40:9d:
3d:7e:0f:6d:4d:21:83:b4:25:78:30:76:94:b9:0c:
a1:72:49:6b:32:82:d3:41:4e:0d:b3:48:92:c7:7a:
48:42:78:32:33:c8:3a:c7:e3:5e:18:ee:49:cf:16:
22:14:3e:9b:18:af:7d:fa:45:d0:0e:96:1c:ab:29:
8f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:EF:25:1E:DF:C6:28:EC:AB:46:F1:F9:AC:CB:5A:09:DA:1E:A5:85
X509v3 Authority Key Identifier:
keyid:70:61:CB:29:BD:CD:77:38:71:83:AD:23:9F:BE:D7:DD:0C:07:0C:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cGHLKb3Ndzhxg60jn77X3QwHDCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/cf6f84-de39-4737-ac0d-e6febed1f5b2/1/cGHLKb3Ndzhxg60jn77X3QwHDCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/cf6f84-de39-4737-ac0d-e6febed1f5b2/1/cGHLKb3Ndzhxg60jn77X3QwHDCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:86:fd:cb:19:85:68:03:c4:17:53:c9:0a:cb:ed:39:8b:3e:
d1:4f:c3:34:7e:5e:a8:16:e3:14:84:75:db:30:9e:4f:81:36:
0a:ee:08:f4:74:ba:96:d7:4d:d2:31:3a:0f:d0:69:4b:c6:ff:
0c:20:de:0d:91:d8:20:a9:e2:80:1b:21:bd:1a:c4:14:81:e3:
73:42:e0:ec:da:36:4f:38:3e:2a:7c:39:e0:27:be:d8:5c:71:
6e:27:0d:7c:5c:ca:d3:72:17:9f:cc:d5:96:67:e5:68:95:d7:
53:78:89:57:b4:45:a2:4b:12:2a:e0:61:86:66:11:28:35:7b:
4a:23:55:3a:88:17:d2:6f:09:75:33:fe:2a:dc:2f:49:00:c4:
8b:bd:a8:f8:28:6d:b5:ac:1d:0e:90:b6:91:f2:37:26:29:ff:
5d:39:76:5f:b7:8d:91:e9:c5:18:e8:39:da:15:92:77:b4:4c:
9a:ac:cc:e1:50:d0:86:88:75:03:31:70:34:36:82:b1:27:19:
e7:a2:35:20:c4:60:35:ec:c6:ed:42:29:c4:7b:92:b5:19:6a:
1e:6c:8a:45:9b:c3:e0:92:eb:f2:09:d5:ef:1f:e3:b7:2c:b4:
e5:ea:39:40:57:6e:4a:f0:99:5d:4e:19:e1:4b:39:f2:f0:d1:
c8:7c:32:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 15:35:49 2026 by rpki-client