Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e5/cef3b5-a848-43d5-873a-0757a6d28224/1/CGZINfiq_mFJcf-oaD-fdL9ND_Q.mft
File: CGZINfiq_mFJcf-oaD-fdL9ND_Q.mft (raw, json)
Hash identifier: /RGPVa+BpTVfZxSfv2fvLh9bzau9Xt2PG/ibl2gqL3s=
Subject key identifier: 80:EC:BE:06:AF:C9:49:0F:10:CF:3E:09:0D:1E:10:5C:44:B2:0A:D0
Authority key identifier: 08:66:48:35:F8:AA:FE:61:49:71:FF:A8:68:3F:9F:74:BF:4D:0F:F4
Certificate issuer: /CN=08664835f8aafe614971ffa8683f9f74bf4d0ff4
Certificate serial: 01A0D15C38A7F200FC2E5D4B6EE54EFB69FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CGZINfiq_mFJcf-oaD-fdL9ND_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/cef3b5-a848-43d5-873a-0757a6d28224/1/CGZINfiq_mFJcf-oaD-fdL9ND_Q.mft
Manifest number: 12B0
Signing time: Thu 24 Sep 2026 03:01:16 +0000
Manifest this update: Thu 24 Sep 2026 03:01:16 +0000
Manifest next update: Fri 25 Sep 2026 03:01:16 +0000
Files and hashes: 1: 5F8EPRCwAO9R0s3emE3nMIVi-i8.roa (hash: nyuBuPwwDb0keiCkpqhAWuHjHqCL5kLPWyJJ50t6Ers=)
2: CGZINfiq_mFJcf-oaD-fdL9ND_Q.crl (hash: f5ROyQgXljC417ltW9f1T6QW92o7tjBi75xnf4o/+do=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/cef3b5-a848-43d5-873a-0757a6d28224/1/CGZINfiq_mFJcf-oaD-fdL9ND_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/cef3b5-a848-43d5-873a-0757a6d28224/1/CGZINfiq_mFJcf-oaD-fdL9ND_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/CGZINfiq_mFJcf-oaD-fdL9ND_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:5c:38:a7:f2:00:fc:2e:5d:4b:6e:e5:4e:fb:69:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08664835f8aafe614971ffa8683f9f74bf4d0ff4
Validity
Not Before: Sep 24 03:01:16 2026 GMT
Not After : Sep 25 03:01:16 2026 GMT
Subject: CN=80ecbe06afc9490f10cf3e090d1e105c44b20ad0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:50:ef:fe:4b:36:c7:a9:0d:fa:80:f7:13:9e:
74:99:90:ab:d9:ef:b9:c4:d3:21:2d:12:19:bd:19:
89:0d:d8:bd:74:4a:4e:b1:bf:50:8b:b0:34:9d:19:
5b:d1:39:75:4a:69:64:24:0c:d1:85:97:42:12:dd:
47:06:b9:d0:93:bf:0a:18:df:4c:d5:a4:a1:36:14:
34:f3:ac:be:33:3c:57:01:18:3b:25:22:5d:17:5f:
f9:e5:61:c6:b4:33:ea:cf:de:0f:c4:bb:73:b0:3a:
c6:2f:ef:d7:0c:b9:c8:83:1e:ea:ae:40:b8:e6:d0:
9f:f0:97:50:87:f3:55:38:a3:f0:2a:54:ea:bf:1f:
63:99:67:71:a9:d8:6c:98:97:f2:7d:fc:7c:e6:0b:
f4:94:4e:d3:27:91:f6:dd:be:13:6c:93:75:69:db:
06:1a:3e:46:51:e3:dd:49:5f:f3:6c:ec:41:b1:53:
a4:b3:f4:e1:8e:f5:da:28:63:7a:03:e1:ff:2d:94:
9e:99:69:a2:56:0b:58:eb:fc:97:c0:80:3a:13:7c:
95:c8:cd:4c:af:a4:50:f1:29:d6:d3:12:dc:1a:42:
c3:2e:be:ed:be:69:82:a9:c2:bd:8e:d3:46:5f:27:
7c:f8:d5:66:31:97:aa:93:2e:f0:28:38:17:eb:52:
79:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:EC:BE:06:AF:C9:49:0F:10:CF:3E:09:0D:1E:10:5C:44:B2:0A:D0
X509v3 Authority Key Identifier:
keyid:08:66:48:35:F8:AA:FE:61:49:71:FF:A8:68:3F:9F:74:BF:4D:0F:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CGZINfiq_mFJcf-oaD-fdL9ND_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/cef3b5-a848-43d5-873a-0757a6d28224/1/CGZINfiq_mFJcf-oaD-fdL9ND_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/cef3b5-a848-43d5-873a-0757a6d28224/1/CGZINfiq_mFJcf-oaD-fdL9ND_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:4a:0e:d7:23:df:a6:26:37:cf:c9:72:1f:ca:ab:da:61:5f:
63:4d:5a:69:aa:28:f7:14:c2:8b:d0:b2:fa:23:4f:d9:e0:90:
1a:16:3a:dc:80:47:5e:81:e7:fb:a5:64:39:c6:08:09:c3:ab:
1d:c4:d2:34:74:8e:5b:17:8b:fe:94:f9:de:7e:41:b3:0d:42:
ae:97:e5:d4:20:cc:09:68:b7:bf:3a:61:52:a1:6b:e4:ae:35:
5d:37:3e:3b:9b:a3:4d:c0:f8:6b:62:58:4d:b3:86:c7:fd:e6:
f8:dd:e6:67:7f:3e:a5:2b:af:9e:1c:fb:6a:09:f2:5b:94:99:
7f:39:4a:5e:4a:f2:3b:14:96:8e:4c:12:3b:85:e1:7f:3c:8f:
14:a5:34:6e:69:fe:eb:22:b4:5d:d5:b6:92:12:50:03:88:22:
af:62:79:50:3d:88:16:ba:92:eb:fd:4d:f6:84:af:b6:a4:31:
a2:37:2e:83:f7:19:1c:7f:77:de:bb:2b:68:e7:51:b8:56:ba:
37:29:0e:cd:02:c8:ff:38:ec:7f:0c:6a:0c:af:04:e1:9c:b6:
0e:5f:da:9a:f6:4f:28:c5:bf:1b:0b:26:51:c0:06:fa:f9:f4:
de:2a:33:f6:a4:70:46:2a:1c:bc:61:0d:f0:7f:58:59:c3:d9:
50:2d:fd:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 07:05:51 2026 by rpki-client