Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.mft
File: cGmgJahPQu8-8LYFLeP9ZejAhpI.mft (raw, json)
Hash identifier: QHFZOftPMSD++LvhXe2frK0W6iHex4Uz28bmBkB+/V4=
Subject key identifier: E1:9C:23:63:D2:9D:1C:F3:EE:E2:E7:AB:02:DC:92:33:F6:8A:EC:4D
Authority key identifier: 70:69:A0:25:A8:4F:42:EF:3E:F0:B6:05:2D:E3:FD:65:E8:C0:86:92
Certificate issuer: /CN=7069a025a84f42ef3ef0b6052de3fd65e8c08692
Certificate serial: 019E1EA34363BA48887F1A186A5BD20B3AFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cGmgJahPQu8-8LYFLeP9ZejAhpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.mft
Manifest number: 112F
Signing time: Wed 13 May 2026 00:01:16 +0000
Manifest this update: Wed 13 May 2026 00:01:16 +0000
Manifest next update: Thu 14 May 2026 00:01:16 +0000
Files and hashes: 1: cGmgJahPQu8-8LYFLeP9ZejAhpI.crl (hash: acXuTEcFyHmEpx1CcSfG5Jx9B9+7Jgx8KaPIMOvWfUM=)
2: vkFegJrdqmSpqizX-1jFyrdM-Ok.roa (hash: n5V1OMe1FNTO7+dn3GHVNrTtgdxzbNdUe5BzE1mBm1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cGmgJahPQu8-8LYFLeP9ZejAhpI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:43:63:ba:48:88:7f:1a:18:6a:5b:d2:0b:3a:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7069a025a84f42ef3ef0b6052de3fd65e8c08692
Validity
Not Before: May 13 00:01:16 2026 GMT
Not After : May 14 00:01:16 2026 GMT
Subject: CN=e19c2363d29d1cf3eee2e7ab02dc9233f68aec4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:04:4a:a9:8f:27:20:be:b9:1f:ea:8b:4c:60:
55:97:1b:95:11:fc:c1:4d:9b:1f:1a:c4:98:b9:ed:
ec:c1:f1:db:0b:17:8b:4e:36:b0:bd:ec:67:17:fe:
b2:21:5d:a4:0f:50:40:eb:bb:50:14:c2:39:2a:f3:
6e:b9:2e:a2:97:01:2c:8c:79:95:80:59:e2:68:80:
d2:84:12:1a:a6:92:00:b0:f8:ed:10:6d:06:35:06:
49:99:12:c8:89:48:9d:81:51:1b:e5:49:38:44:7d:
32:fe:60:a9:9b:19:34:9d:5b:41:e8:53:69:c1:be:
46:39:81:07:c5:b5:7e:a0:30:65:6a:d7:3c:66:48:
54:af:b5:39:e9:2e:2e:c7:9b:98:c9:20:3e:86:98:
64:73:10:c4:aa:68:a8:86:3f:a6:14:b7:8b:57:e9:
d2:dc:c2:4d:8a:64:bc:99:b0:f2:ab:e5:fb:39:68:
ac:8e:63:ac:81:3c:7e:96:5f:96:bd:d4:af:0f:b4:
59:1c:2b:c3:69:04:7a:f4:66:7d:8d:30:19:02:b8:
0a:ef:ec:4e:42:fe:8a:3c:4a:72:d8:d6:25:77:0b:
db:f6:5a:22:23:14:cc:26:b9:d8:29:e3:8d:44:7f:
a7:9b:50:61:92:34:2f:b8:e1:be:56:73:ca:d2:a8:
db:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:9C:23:63:D2:9D:1C:F3:EE:E2:E7:AB:02:DC:92:33:F6:8A:EC:4D
X509v3 Authority Key Identifier:
keyid:70:69:A0:25:A8:4F:42:EF:3E:F0:B6:05:2D:E3:FD:65:E8:C0:86:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cGmgJahPQu8-8LYFLeP9ZejAhpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:2e:23:b3:51:5f:e1:92:bd:71:77:a3:34:e8:c8:40:c7:e8:
40:69:33:12:05:ff:ce:6b:32:d5:c1:58:99:85:db:d1:bd:96:
7c:fa:2d:e3:21:3e:18:a8:5e:b3:fa:b6:43:7c:66:3d:96:7e:
56:22:3d:3b:7c:3e:70:ec:6b:ae:00:ea:72:c9:96:8f:6e:a1:
80:b5:2a:e3:8f:84:fa:27:d7:68:4d:5c:6a:55:7a:6c:1c:e5:
1d:5e:22:0b:d1:8e:e8:87:b3:1d:05:75:be:a2:84:ce:cf:39:
08:34:8e:d4:ec:4c:99:ca:c2:b5:ed:1e:91:0d:5c:89:cc:0e:
1d:4a:be:f3:a3:69:10:c9:10:53:5a:f3:c7:db:94:18:bc:1e:
ba:47:4c:4b:b4:65:6a:76:ba:15:7c:c4:2d:be:d0:86:13:fa:
1b:b3:c4:c5:62:23:18:08:50:8b:1b:86:99:6d:0b:33:aa:4b:
ca:be:28:c7:bc:93:1e:11:69:2f:8d:a1:3f:59:9a:a6:9f:3a:
36:7d:48:d8:6e:5f:36:0c:58:1a:aa:21:47:64:74:1a:b1:e1:
51:76:8b:fe:0c:d2:25:e3:45:38:9d:dc:8f:32:6c:ef:76:2a:
87:3c:3c:75:86:93:d1:dd:8b:5a:e7:56:8f:e6:ba:6b:f8:a1:
d9:a2:e2:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:29:31 2026 by rpki-client