Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.mft
File: cGmgJahPQu8-8LYFLeP9ZejAhpI.mft (raw, json)
Hash identifier: 6pZL4akfCAQkLW3w89dj2sxX94zMqSbtISDj+G565G4=
Subject key identifier: C1:2C:52:95:F9:2C:37:C0:4C:B8:77:24:F3:26:6F:9E:AE:2F:2E:DC
Authority key identifier: 70:69:A0:25:A8:4F:42:EF:3E:F0:B6:05:2D:E3:FD:65:E8:C0:86:92
Certificate issuer: /CN=7069a025a84f42ef3ef0b6052de3fd65e8c08692
Certificate serial: 019F916C8CBAD567462D00A5D7D717F75D13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cGmgJahPQu8-8LYFLeP9ZejAhpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.mft
Manifest number: 11EF
Signing time: Fri 24 Jul 2026 00:00:37 +0000
Manifest this update: Fri 24 Jul 2026 00:00:37 +0000
Manifest next update: Sat 25 Jul 2026 00:00:37 +0000
Files and hashes: 1: cGmgJahPQu8-8LYFLeP9ZejAhpI.crl (hash: PQoDy6UKp7v64SDx0ezZgYIq/ePoXPtrOtzwVeYI/jU=)
2: vkFegJrdqmSpqizX-1jFyrdM-Ok.roa (hash: n5V1OMe1FNTO7+dn3GHVNrTtgdxzbNdUe5BzE1mBm1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cGmgJahPQu8-8LYFLeP9ZejAhpI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6c:8c:ba:d5:67:46:2d:00:a5:d7:d7:17:f7:5d:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7069a025a84f42ef3ef0b6052de3fd65e8c08692
Validity
Not Before: Jul 24 00:00:37 2026 GMT
Not After : Jul 25 00:00:37 2026 GMT
Subject: CN=c12c5295f92c37c04cb87724f3266f9eae2f2edc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:23:ab:46:ff:49:da:80:df:94:4e:47:11:df:
57:a2:d7:8b:75:84:c2:2f:81:77:e9:d5:47:42:65:
e0:3b:3a:79:77:12:e6:7e:3d:fe:79:8b:2d:8a:fc:
e4:ee:03:f7:f4:77:65:26:50:40:a6:d6:8a:3e:36:
78:87:88:db:be:ac:78:87:23:b8:32:11:c5:dc:36:
86:61:42:0d:d5:e0:95:c0:70:b4:b7:66:46:97:cb:
9e:b7:d6:d3:23:55:04:df:ba:82:fe:43:05:23:b2:
6d:ac:7a:06:9f:84:a6:ac:d5:05:4e:b8:eb:6e:35:
27:0e:6c:fa:e9:ff:74:95:32:26:c8:57:70:1b:2f:
86:ca:d3:cf:a0:3d:f7:f3:02:d9:18:a1:23:38:3e:
b8:55:18:8c:c2:90:88:f4:c0:5b:cc:4d:e2:b7:02:
e2:81:78:bc:1b:03:77:6f:7f:03:8e:46:dc:0f:1f:
1b:82:2d:2e:00:cd:54:a8:71:f4:73:9d:61:6e:84:
d8:92:a2:2a:a6:c2:54:43:aa:b6:e2:7e:5b:b1:27:
bf:fa:11:ad:99:00:34:1a:4c:f4:d5:e2:55:d7:8c:
b1:5d:e1:01:95:f0:2f:65:62:86:b8:12:cb:b1:7f:
06:cc:91:35:29:a2:82:db:81:1e:de:01:35:41:89:
7d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:2C:52:95:F9:2C:37:C0:4C:B8:77:24:F3:26:6F:9E:AE:2F:2E:DC
X509v3 Authority Key Identifier:
keyid:70:69:A0:25:A8:4F:42:EF:3E:F0:B6:05:2D:E3:FD:65:E8:C0:86:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cGmgJahPQu8-8LYFLeP9ZejAhpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:00:49:9a:92:91:43:5d:1e:e7:dd:81:14:6e:34:6e:29:43:
b8:c4:77:f7:b3:8c:33:68:69:77:fa:90:3b:2c:99:8a:31:6a:
db:9b:4a:8b:1d:25:d8:ed:ef:df:06:d1:fc:47:09:d4:8d:05:
bf:0b:ec:db:12:c0:62:ec:87:eb:67:7f:fa:76:12:9e:4b:60:
7b:58:31:b5:04:ce:64:6d:a4:3e:42:21:68:df:51:65:1f:1e:
fe:2f:70:d1:38:81:17:0c:20:fc:76:4e:76:b3:e9:f0:98:5c:
0f:2e:5c:c2:ad:53:30:a9:04:8a:e8:16:6e:b3:1a:ec:92:4b:
33:73:0f:4e:a0:33:6b:10:61:a3:28:13:b3:a7:31:f1:b8:b7:
8e:35:f8:67:4b:0f:c7:a6:f7:0e:f6:e5:e7:37:ea:a6:38:7c:
14:0b:43:a4:7b:b7:e8:15:75:d0:d0:7e:a6:55:1d:a9:09:a1:
18:e4:79:8c:88:f4:09:a7:93:b9:b2:4c:fc:10:1b:91:c4:14:
f4:11:df:b2:83:bd:ce:b3:6f:e2:0e:36:e1:e0:9c:6f:53:4c:
63:e2:8e:d4:94:c7:82:3c:60:33:03:d3:f7:ff:4f:de:9f:e8:
9b:11:6e:6f:b7:cd:ad:a3:56:b3:42:97:30:ce:40:3f:db:3a:
09:f8:84:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:26:15 2026 by rpki-client