Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.mft
File: cGmgJahPQu8-8LYFLeP9ZejAhpI.mft (raw, json)
Hash identifier: RaEtSiojsaOoknF+VOlXCCkaPQBmW+1WgbXceJg9fFc=
Subject key identifier: FB:B9:59:EF:1E:04:14:9C:CE:1E:E9:16:F8:25:ED:95:C5:90:95:AA
Authority key identifier: 70:69:A0:25:A8:4F:42:EF:3E:F0:B6:05:2D:E3:FD:65:E8:C0:86:92
Certificate issuer: /CN=7069a025a84f42ef3ef0b6052de3fd65e8c08692
Certificate serial: 019D27726C37583A279563578386BAFC2208
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cGmgJahPQu8-8LYFLeP9ZejAhpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.mft
Manifest number: 10AF
Signing time: Thu 26 Mar 2026 00:01:43 +0000
Manifest this update: Thu 26 Mar 2026 00:01:43 +0000
Manifest next update: Fri 27 Mar 2026 00:01:43 +0000
Files and hashes: 1: cGmgJahPQu8-8LYFLeP9ZejAhpI.crl (hash: GJ+ADSQvdROJ/JM9wbRXbQhO6vt0hR+z1yVSxzPWOvA=)
2: vkFegJrdqmSpqizX-1jFyrdM-Ok.roa (hash: n5V1OMe1FNTO7+dn3GHVNrTtgdxzbNdUe5BzE1mBm1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cGmgJahPQu8-8LYFLeP9ZejAhpI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:6c:37:58:3a:27:95:63:57:83:86:ba:fc:22:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7069a025a84f42ef3ef0b6052de3fd65e8c08692
Validity
Not Before: Mar 26 00:01:43 2026 GMT
Not After : Mar 27 00:01:43 2026 GMT
Subject: CN=fbb959ef1e04149cce1ee916f825ed95c59095aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ec:ad:b6:54:77:d7:66:86:81:3c:36:92:5b:
81:b7:40:ae:08:55:ce:19:c4:9e:fc:ec:7d:93:18:
2a:cc:f9:27:dd:ba:6e:45:34:91:f3:5d:80:7d:ae:
6c:24:8a:95:9d:6c:87:da:5c:8c:4b:bf:4f:86:5c:
c0:ea:70:f6:82:a6:cf:26:40:0e:b2:8c:44:58:37:
56:38:18:75:63:d6:52:e8:35:12:58:9c:b2:b9:d5:
e7:31:c1:0b:12:bf:76:6a:71:74:94:6f:81:69:f6:
59:c7:ac:15:d1:af:16:c8:3e:08:c2:39:8c:2a:97:
14:95:0a:37:fe:6a:58:67:e3:97:3e:a3:10:48:6c:
41:98:81:24:4c:f5:30:8a:e0:e9:7c:03:e3:1d:bd:
87:f7:cb:c7:df:72:b1:02:a8:ce:e6:b8:d7:be:48:
e0:e8:6c:3b:c9:e8:2c:fb:e9:98:4a:22:04:e1:6c:
2d:73:b2:a4:4d:c4:c7:71:4a:c0:06:96:e3:84:18:
52:18:89:cc:c6:e8:25:27:37:a7:b9:1e:29:68:49:
04:f4:4e:67:80:be:34:c7:2d:9e:40:a3:64:86:9d:
e5:11:2f:76:e5:cd:88:53:3c:ac:05:59:02:3f:ad:
51:e2:39:45:89:19:62:20:2c:c2:c3:83:57:46:2d:
c6:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:B9:59:EF:1E:04:14:9C:CE:1E:E9:16:F8:25:ED:95:C5:90:95:AA
X509v3 Authority Key Identifier:
keyid:70:69:A0:25:A8:4F:42:EF:3E:F0:B6:05:2D:E3:FD:65:E8:C0:86:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cGmgJahPQu8-8LYFLeP9ZejAhpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:10:b4:7e:e1:34:ed:5c:9a:5f:67:6b:23:dd:69:ce:b1:44:
8e:06:e2:26:80:49:3f:ba:66:02:27:c6:0c:76:14:b4:8b:e1:
cb:30:a7:7a:17:63:2f:37:a4:0e:d7:3f:34:ba:6e:3d:99:be:
bf:44:d7:6e:01:31:cf:dc:36:7f:68:93:5d:34:cb:3d:73:ea:
e0:3e:8e:a4:d5:0a:4c:df:9c:c3:ee:11:99:92:3c:ba:82:ef:
50:cd:52:5b:eb:bf:d5:0e:81:5a:d5:f3:ba:39:10:35:13:62:
27:f6:74:f8:ee:19:7a:1b:98:6d:4a:41:9b:51:0f:99:68:2f:
d5:7c:a7:61:c3:96:aa:00:82:9a:1c:b2:8a:c0:0f:d1:c7:56:
c8:3a:7e:46:87:fe:a3:7d:04:81:4f:15:ca:46:47:81:34:8d:
a3:6b:66:02:8c:5f:ac:7a:16:c5:ea:40:a4:fb:49:66:11:6a:
ba:5d:07:2d:6c:c5:ec:a0:a1:56:c9:88:e8:6f:32:ab:e0:38:
64:69:a1:1a:da:6a:14:f8:c6:91:f8:bd:e5:90:b9:9c:ff:50:
ea:de:94:a4:88:7a:01:41:ac:6b:ea:70:1a:6c:d9:a0:64:ea:
0c:a2:86:20:29:06:fb:f9:8f:31:74:9a:fd:da:dd:62:d2:85:
a2:aa:d7:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:10:54 2026 by rpki-client