Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/cef3b5-a848-43d5-873a-0757a6d28224/1/CGZINfiq_mFJcf-oaD-fdL9ND_Q.mft
File: CGZINfiq_mFJcf-oaD-fdL9ND_Q.mft (raw, json)
Hash identifier: XL69nCFFy7qtKn+jdb6gmp8ecDBPwaN9FPsjZuz7mKU=
Subject key identifier: B6:26:EE:88:C9:A8:42:FB:C6:B6:AB:67:11:5C:AD:05:74:F0:C9:D8
Authority key identifier: 08:66:48:35:F8:AA:FE:61:49:71:FF:A8:68:3F:9F:74:BF:4D:0F:F4
Certificate issuer: /CN=08664835f8aafe614971ffa8683f9f74bf4d0ff4
Certificate serial: 019E1DFEA63989DD5CC10121E3DED7146487
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CGZINfiq_mFJcf-oaD-fdL9ND_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/cef3b5-a848-43d5-873a-0757a6d28224/1/CGZINfiq_mFJcf-oaD-fdL9ND_Q.mft
Manifest number: 114A
Signing time: Tue 12 May 2026 21:01:28 +0000
Manifest this update: Tue 12 May 2026 21:01:28 +0000
Manifest next update: Wed 13 May 2026 21:01:28 +0000
Files and hashes: 1: 5F8EPRCwAO9R0s3emE3nMIVi-i8.roa (hash: nyuBuPwwDb0keiCkpqhAWuHjHqCL5kLPWyJJ50t6Ers=)
2: CGZINfiq_mFJcf-oaD-fdL9ND_Q.crl (hash: ht5jSYV0fmmx+eD91rjEtD0SISPcA1wLpUhbsQAbIw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/cef3b5-a848-43d5-873a-0757a6d28224/1/CGZINfiq_mFJcf-oaD-fdL9ND_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/cef3b5-a848-43d5-873a-0757a6d28224/1/CGZINfiq_mFJcf-oaD-fdL9ND_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/CGZINfiq_mFJcf-oaD-fdL9ND_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:a6:39:89:dd:5c:c1:01:21:e3:de:d7:14:64:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08664835f8aafe614971ffa8683f9f74bf4d0ff4
Validity
Not Before: May 12 21:01:28 2026 GMT
Not After : May 13 21:01:28 2026 GMT
Subject: CN=b626ee88c9a842fbc6b6ab67115cad0574f0c9d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:1a:5e:02:84:da:23:d5:c3:fe:d9:da:de:22:
f2:a7:63:52:4b:24:f7:c9:28:d9:ec:62:9f:a1:62:
6f:ef:32:9f:08:c8:29:57:8a:2b:a2:c4:5f:7b:d3:
c3:6c:48:05:52:9c:83:6e:ad:d0:bb:36:b5:05:13:
e0:83:86:af:d0:3b:41:86:04:c7:da:96:20:28:2a:
11:d4:2d:88:78:b1:25:33:7c:53:63:ea:59:54:8a:
39:d7:5f:a9:10:27:5a:e3:b4:f9:8a:0d:58:b6:4f:
cd:08:e5:d8:ab:f5:cd:9a:df:fa:c4:c1:50:6d:59:
ec:b8:74:dd:f5:5b:57:5a:58:c1:80:cc:97:ae:06:
9a:1d:98:48:35:ac:dc:21:61:b3:7b:a2:5d:48:af:
af:5a:d2:c1:40:67:63:87:2a:09:24:46:d3:8d:58:
31:11:42:cd:71:ac:b6:8f:76:d6:2d:9b:b7:43:6f:
0e:2a:5f:44:5d:96:51:a5:55:28:00:ec:b7:35:ad:
ce:44:7d:a0:dc:0a:b9:53:d1:74:af:3b:36:34:c5:
4a:34:5e:19:66:98:20:71:0b:66:fd:a1:20:03:aa:
33:c3:59:40:b0:d7:aa:4b:cf:83:22:98:8b:9d:4b:
d9:18:2d:35:23:5b:ef:b5:fe:c4:96:38:f2:74:28:
d9:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:26:EE:88:C9:A8:42:FB:C6:B6:AB:67:11:5C:AD:05:74:F0:C9:D8
X509v3 Authority Key Identifier:
keyid:08:66:48:35:F8:AA:FE:61:49:71:FF:A8:68:3F:9F:74:BF:4D:0F:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CGZINfiq_mFJcf-oaD-fdL9ND_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/cef3b5-a848-43d5-873a-0757a6d28224/1/CGZINfiq_mFJcf-oaD-fdL9ND_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/cef3b5-a848-43d5-873a-0757a6d28224/1/CGZINfiq_mFJcf-oaD-fdL9ND_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:30:06:cb:a0:93:e8:ca:2a:c3:78:0f:7a:89:57:a9:9c:ef:
e4:41:a9:c7:6e:d8:97:7c:38:38:45:1d:f3:fc:57:16:cf:2f:
14:97:81:61:fc:a6:c3:fb:ba:e9:81:96:49:de:06:3c:55:cf:
b4:ae:43:a8:6b:df:dc:bf:cd:d0:c6:8f:29:ce:68:c7:38:42:
e3:a4:49:5f:30:03:2d:36:cb:56:1a:b0:10:b1:6c:69:3e:e1:
b1:51:74:42:8d:b4:fa:11:d7:c2:97:07:d6:c5:05:18:f9:3a:
06:41:93:c2:fa:e6:d9:d4:b7:63:51:c8:0d:09:17:f9:b5:fb:
39:43:cf:d1:aa:40:fb:3e:48:32:66:cf:4c:d5:e1:3d:db:34:
13:ae:a8:6d:f8:14:a5:a9:8c:27:4f:f7:b6:a8:eb:3b:04:6d:
7b:b8:a5:f6:7d:09:11:10:c1:9e:85:01:54:ee:c9:b0:f1:e0:
96:c1:1e:68:9f:d8:c1:53:c1:3d:bf:7d:8b:27:29:6e:f4:04:
c0:1f:2b:89:5e:75:3f:54:b3:cc:c4:a5:b3:12:c0:21:87:24:
16:24:d3:d9:24:61:db:d7:77:96:e1:28:80:53:10:cd:9a:cc:
ac:1c:00:9c:0a:0d:5f:49:86:39:c4:47:a4:90:db:16:0b:9d:
e9:ba:f8:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:02:54 2026 by rpki-client