Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/cef3b5-a848-43d5-873a-0757a6d28224/1/CGZINfiq_mFJcf-oaD-fdL9ND_Q.mft
File: CGZINfiq_mFJcf-oaD-fdL9ND_Q.mft (raw, json)
Hash identifier: axi44uVqa+al/0o0Pcw+MPUqlYjb5QkADMcB87+44cI=
Subject key identifier: 0C:09:EA:CA:79:59:E0:BA:95:D2:D2:A3:AF:3E:12:16:5F:37:07:B7
Authority key identifier: 08:66:48:35:F8:AA:FE:61:49:71:FF:A8:68:3F:9F:74:BF:4D:0F:F4
Certificate issuer: /CN=08664835f8aafe614971ffa8683f9f74bf4d0ff4
Certificate serial: 019D2AA9EACCB5BD1720DA501C2F7B1E591F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CGZINfiq_mFJcf-oaD-fdL9ND_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/cef3b5-a848-43d5-873a-0757a6d28224/1/CGZINfiq_mFJcf-oaD-fdL9ND_Q.mft
Manifest number: 10CC
Signing time: Thu 26 Mar 2026 15:01:11 +0000
Manifest this update: Thu 26 Mar 2026 15:01:11 +0000
Manifest next update: Fri 27 Mar 2026 15:01:11 +0000
Files and hashes: 1: 5F8EPRCwAO9R0s3emE3nMIVi-i8.roa (hash: nyuBuPwwDb0keiCkpqhAWuHjHqCL5kLPWyJJ50t6Ers=)
2: CGZINfiq_mFJcf-oaD-fdL9ND_Q.crl (hash: T1+eQ88mIeXIzXXglqAnOTUFQFHV9hCXgcUIqSX+OJo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/cef3b5-a848-43d5-873a-0757a6d28224/1/CGZINfiq_mFJcf-oaD-fdL9ND_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/cef3b5-a848-43d5-873a-0757a6d28224/1/CGZINfiq_mFJcf-oaD-fdL9ND_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/CGZINfiq_mFJcf-oaD-fdL9ND_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:a9:ea:cc:b5:bd:17:20:da:50:1c:2f:7b:1e:59:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08664835f8aafe614971ffa8683f9f74bf4d0ff4
Validity
Not Before: Mar 26 15:01:11 2026 GMT
Not After : Mar 27 15:01:11 2026 GMT
Subject: CN=0c09eaca7959e0ba95d2d2a3af3e12165f3707b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:6c:36:f9:00:a4:a8:1f:31:35:09:f6:45:62:
87:b1:6f:a5:e8:a4:ec:ba:ad:b5:3d:a3:18:28:2b:
55:76:c6:19:62:b3:02:64:5f:90:b0:fc:27:05:27:
04:b9:78:ce:9b:15:0d:5b:04:bb:aa:b6:f6:4e:d4:
b0:5d:46:3a:82:d8:dd:6d:7c:5a:10:f3:11:24:59:
c8:03:8d:29:8b:b0:60:07:b9:3a:de:e1:3d:29:fa:
7f:cf:08:ad:7f:d8:3e:6c:3f:30:1e:ab:fb:16:58:
e7:31:17:cc:c2:bd:5e:35:47:41:e3:a5:d5:29:6b:
f5:a4:b9:6c:16:3e:72:0c:0e:5e:9d:4a:0e:8c:e7:
b3:89:4a:80:72:92:44:b7:8b:00:cf:72:1d:c7:f4:
be:76:a3:5a:80:f4:a9:e0:b3:0b:ee:5d:d1:9c:9a:
fa:94:74:c8:66:2f:07:aa:c3:2b:eb:23:e8:8e:51:
de:eb:b9:d8:e5:b6:4f:19:a9:ad:84:b0:73:f4:f6:
d4:53:62:e3:e9:3e:47:92:9f:fe:b1:a4:b1:4b:22:
db:75:33:25:e5:da:f0:fa:70:9f:c2:20:06:b1:df:
b0:f8:c2:c1:a3:cb:8c:2f:7d:bd:eb:06:4f:a0:da:
0b:f5:de:23:8b:b8:6c:7c:a7:cd:92:f3:60:70:76:
e0:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:09:EA:CA:79:59:E0:BA:95:D2:D2:A3:AF:3E:12:16:5F:37:07:B7
X509v3 Authority Key Identifier:
keyid:08:66:48:35:F8:AA:FE:61:49:71:FF:A8:68:3F:9F:74:BF:4D:0F:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CGZINfiq_mFJcf-oaD-fdL9ND_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/cef3b5-a848-43d5-873a-0757a6d28224/1/CGZINfiq_mFJcf-oaD-fdL9ND_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/cef3b5-a848-43d5-873a-0757a6d28224/1/CGZINfiq_mFJcf-oaD-fdL9ND_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:85:58:48:11:57:6a:67:fa:2f:82:35:db:0d:43:f0:2e:c5:
17:21:fa:68:af:70:10:a6:bf:a1:c4:3c:a9:4a:f7:6e:02:9b:
5a:07:8c:04:45:f6:cf:b9:81:44:c8:56:54:db:84:d9:80:6d:
ef:02:ec:05:7e:0d:f0:d9:20:99:8f:73:5a:f4:2c:41:01:09:
4c:c3:56:31:b8:56:c2:0f:ff:9c:3c:31:43:80:86:2d:dc:66:
a6:81:ef:63:ab:cb:ba:03:27:b7:98:32:d3:ac:90:e2:94:aa:
96:92:19:5e:1f:b4:8b:88:61:7e:5b:53:1d:b9:08:f2:a1:fe:
da:ce:67:92:cb:e8:d0:ab:c4:f0:fe:b1:38:1b:87:44:5e:57:
97:89:f9:b9:89:2b:3c:72:4e:38:78:ef:9e:46:bc:ea:22:fa:
9e:40:30:f3:6a:17:53:9a:fe:25:bb:08:31:81:fb:c6:68:81:
59:75:48:08:b5:8d:4b:68:5d:a6:88:e3:e7:73:ff:a0:3b:0d:
be:f9:5a:ee:bf:d9:54:d7:a5:ae:5f:21:84:60:95:a9:20:e1:
78:06:97:9e:a9:74:08:e9:27:ce:2a:5a:04:79:4b:40:02:2a:
f1:ca:53:4a:83:1e:36:38:55:64:91:81:7c:f3:90:45:a2:ea:
21:e2:c7:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:14:49 2026 by rpki-client