Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.mft
File: cGmgJahPQu8-8LYFLeP9ZejAhpI.mft (raw, json)
Hash identifier: O3DT7EqDQOu3Ie8m9aU/uox0NovLc5Uw9ahR0e4ovnk=
Subject key identifier: 37:DE:2D:46:E2:86:94:63:BA:D7:E7:C4:68:D9:D2:61:29:BC:E8:EA
Authority key identifier: 70:69:A0:25:A8:4F:42:EF:3E:F0:B6:05:2D:E3:FD:65:E8:C0:86:92
Certificate issuer: /CN=7069a025a84f42ef3ef0b6052de3fd65e8c08692
Certificate serial: 01A0DD97788036FBD394730F94070888526E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cGmgJahPQu8-8LYFLeP9ZejAhpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.mft
Manifest number: 129B
Signing time: Sat 26 Sep 2026 12:01:26 +0000
Manifest this update: Sat 26 Sep 2026 12:01:26 +0000
Manifest next update: Sun 27 Sep 2026 12:01:26 +0000
Files and hashes: 1: cGmgJahPQu8-8LYFLeP9ZejAhpI.crl (hash: aJCSeBvB8fVvh/vMZiUwBBuCqeGgB93p+9/LgVdPVno=)
2: vkFegJrdqmSpqizX-1jFyrdM-Ok.roa (hash: n5V1OMe1FNTO7+dn3GHVNrTtgdxzbNdUe5BzE1mBm1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cGmgJahPQu8-8LYFLeP9ZejAhpI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 09:18:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:97:78:80:36:fb:d3:94:73:0f:94:07:08:88:52:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7069a025a84f42ef3ef0b6052de3fd65e8c08692
Validity
Not Before: Sep 26 12:01:26 2026 GMT
Not After : Sep 27 12:01:26 2026 GMT
Subject: CN=37de2d46e2869463bad7e7c468d9d26129bce8ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:06:39:b5:19:a8:a0:4a:a0:ac:58:f3:0a:56:
52:aa:2f:1b:b3:d5:e3:af:07:c6:1e:6b:51:1f:73:
fe:81:5b:bb:55:bc:a2:f5:5d:a8:fb:68:cc:11:13:
04:46:50:df:0f:81:0b:21:42:08:69:f2:d8:58:35:
30:1b:b1:f4:0f:2b:cd:8a:99:f8:08:30:3a:c4:d8:
3b:75:bd:a0:8d:c1:40:49:62:be:ac:12:ca:63:ab:
58:c5:4a:3f:ca:4b:1c:87:86:1f:65:a2:c3:76:99:
9b:d2:fd:3d:0a:30:f4:c8:90:be:68:81:86:0f:51:
78:43:21:2e:ee:03:f0:c6:d9:9e:69:d7:c3:50:d5:
b3:0f:4a:ab:b9:df:f5:64:78:ad:82:99:0a:2f:9a:
a6:4d:63:f7:c5:34:d3:ab:1b:d2:75:17:26:a2:38:
35:6a:70:fe:0a:41:27:c0:91:f1:72:2a:3f:5c:2c:
4f:a7:d0:94:fd:64:ab:8e:d4:3e:d7:b3:51:a7:57:
72:a5:8a:ae:c1:b6:89:04:88:7d:ca:7c:70:84:96:
79:00:cd:c1:ec:7a:4c:fc:9b:b0:1c:55:e5:1f:33:
1a:ed:8b:49:34:4b:05:45:0d:dd:6f:69:fb:36:1a:
55:e7:ae:0b:23:41:89:d5:76:09:33:40:66:f2:55:
86:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:DE:2D:46:E2:86:94:63:BA:D7:E7:C4:68:D9:D2:61:29:BC:E8:EA
X509v3 Authority Key Identifier:
keyid:70:69:A0:25:A8:4F:42:EF:3E:F0:B6:05:2D:E3:FD:65:E8:C0:86:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cGmgJahPQu8-8LYFLeP9ZejAhpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:85:8c:e0:8e:b2:a3:31:a3:c3:ec:3d:57:de:f7:4f:86:aa:
9c:66:b4:a3:1a:37:5f:68:ac:74:5e:ee:6c:6a:60:b2:20:f3:
de:f8:46:b8:76:3f:de:02:4d:a4:12:83:59:4c:68:b5:af:61:
78:74:47:dc:c7:9c:1e:5d:b6:64:77:01:c4:05:2f:d4:53:45:
cd:c7:0c:90:53:95:85:83:00:cd:1d:95:a6:6c:00:07:74:6f:
3a:00:4d:29:0c:c9:10:74:69:2a:a4:2a:ef:ca:a0:8c:67:d2:
3d:a7:ed:91:0d:72:cb:54:4e:13:a5:2c:97:9b:55:e8:38:ec:
b6:99:23:0a:ff:91:6d:bb:67:23:c7:0f:f8:0e:a9:0d:f4:de:
46:30:ee:63:ff:49:a7:33:b3:1a:bf:9c:c2:86:4b:88:87:89:
43:26:6c:1c:9e:87:23:32:ff:ae:7c:00:68:cd:70:11:82:a3:
dd:2e:49:a8:d6:e7:35:b1:bd:c7:7d:7d:3d:8c:43:08:dc:e8:
e9:6b:77:3b:6a:73:6d:0b:98:47:67:bc:1f:1f:69:03:80:79:
51:fd:5b:ba:57:10:ae:d2:ca:1b:c4:d4:92:47:e8:54:fb:34:
49:92:5f:f6:5d:18:40:2a:bd:61:75:2c:c2:b6:6e:6c:ba:4d:
d5:3e:bb:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 16:38:57 2026 by rpki-client