Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/cef3b5-a848-43d5-873a-0757a6d28224/1/CGZINfiq_mFJcf-oaD-fdL9ND_Q.mft
File: CGZINfiq_mFJcf-oaD-fdL9ND_Q.mft (raw, json)
Hash identifier: UkRtVnEsUA+IPZthpWPj12lLZfbnpyalFSGqHY48VYc=
Subject key identifier: B5:18:9A:4D:6C:03:78:83:0F:47:1F:DC:0A:85:BB:E2:C2:8A:3E:8A
Authority key identifier: 08:66:48:35:F8:AA:FE:61:49:71:FF:A8:68:3F:9F:74:BF:4D:0F:F4
Certificate issuer: /CN=08664835f8aafe614971ffa8683f9f74bf4d0ff4
Certificate serial: 019F90C8152320A10303CA4727C9887A9295
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CGZINfiq_mFJcf-oaD-fdL9ND_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/cef3b5-a848-43d5-873a-0757a6d28224/1/CGZINfiq_mFJcf-oaD-fdL9ND_Q.mft
Manifest number: 120A
Signing time: Thu 23 Jul 2026 21:00:59 +0000
Manifest this update: Thu 23 Jul 2026 21:00:59 +0000
Manifest next update: Fri 24 Jul 2026 21:00:59 +0000
Files and hashes: 1: 5F8EPRCwAO9R0s3emE3nMIVi-i8.roa (hash: nyuBuPwwDb0keiCkpqhAWuHjHqCL5kLPWyJJ50t6Ers=)
2: CGZINfiq_mFJcf-oaD-fdL9ND_Q.crl (hash: fv3T5h3ZLeF4VU5JQDBSflvvG3Njagx0GmP5a27QrGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/cef3b5-a848-43d5-873a-0757a6d28224/1/CGZINfiq_mFJcf-oaD-fdL9ND_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/cef3b5-a848-43d5-873a-0757a6d28224/1/CGZINfiq_mFJcf-oaD-fdL9ND_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/CGZINfiq_mFJcf-oaD-fdL9ND_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c8:15:23:20:a1:03:03:ca:47:27:c9:88:7a:92:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08664835f8aafe614971ffa8683f9f74bf4d0ff4
Validity
Not Before: Jul 23 21:00:59 2026 GMT
Not After : Jul 24 21:00:59 2026 GMT
Subject: CN=b5189a4d6c0378830f471fdc0a85bbe2c28a3e8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:db:b4:f0:e3:51:bc:8b:9f:4e:c9:5b:dd:c0:
55:10:7c:68:5a:04:e2:a0:aa:1d:08:3d:d7:5f:00:
7f:9c:4d:a7:ab:70:ac:24:ab:ec:21:e5:16:1c:f9:
7a:72:02:81:b6:d5:d4:55:89:03:e3:cc:ef:2a:b9:
e9:03:f8:dc:51:22:70:61:8a:9e:2a:70:3e:8e:72:
f6:bf:da:c1:14:41:41:87:4b:0f:5e:36:3e:7c:cd:
57:00:60:7f:3d:d6:54:f5:3d:9e:54:b2:c3:36:27:
64:69:ff:91:59:29:d5:27:44:70:eb:4d:47:e3:2b:
14:7d:d6:29:3d:56:01:33:47:82:e0:6b:53:f7:61:
60:89:7b:da:4f:44:79:91:4a:40:6f:b5:ff:14:a1:
f0:7a:f0:46:d0:0b:e6:8c:d2:45:4f:eb:f9:61:b7:
25:d8:d3:22:7d:0e:45:b7:9a:ce:1e:fa:d6:f5:25:
15:be:5e:e2:17:21:9e:91:36:ba:c5:f8:41:59:18:
0e:1b:20:fe:1a:7d:8c:19:5d:8f:07:e9:ae:3d:55:
1a:76:a2:45:aa:45:15:9c:5e:49:f6:88:da:69:5e:
c1:36:42:63:7f:46:60:59:91:a0:2d:ed:bc:aa:ca:
ef:1b:db:68:d4:26:c5:7e:79:7e:d3:28:27:c4:7a:
65:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:18:9A:4D:6C:03:78:83:0F:47:1F:DC:0A:85:BB:E2:C2:8A:3E:8A
X509v3 Authority Key Identifier:
keyid:08:66:48:35:F8:AA:FE:61:49:71:FF:A8:68:3F:9F:74:BF:4D:0F:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CGZINfiq_mFJcf-oaD-fdL9ND_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/cef3b5-a848-43d5-873a-0757a6d28224/1/CGZINfiq_mFJcf-oaD-fdL9ND_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/cef3b5-a848-43d5-873a-0757a6d28224/1/CGZINfiq_mFJcf-oaD-fdL9ND_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:91:71:51:c5:50:02:13:97:d9:dc:91:29:b9:7d:ce:30:5f:
ac:3a:85:8b:2d:ed:3c:2f:0e:a7:0c:2b:4d:6e:4d:ca:89:4f:
a4:92:66:0a:c8:b6:91:90:53:2c:f1:5d:83:7e:b2:0e:99:56:
11:80:51:f0:5a:48:8e:15:aa:e4:5f:5d:27:b6:9f:47:2f:e6:
69:d8:b4:80:6b:97:99:72:47:9d:bb:76:99:fc:29:b4:11:4c:
35:86:91:f6:78:33:15:3e:bb:dd:8a:f3:31:56:7c:d3:ed:4a:
6c:9b:1d:75:80:75:08:22:8b:87:25:ab:f1:95:49:13:93:04:
5d:b7:b6:62:c4:1b:aa:de:93:29:27:9e:90:a2:f1:ab:93:8b:
81:37:ad:75:ed:74:54:89:40:af:0e:0e:bb:fe:22:34:1b:0a:
66:97:6a:32:ad:30:14:54:9d:2b:4e:1e:d1:01:be:44:d0:97:
a6:ce:e2:da:a2:a2:a4:82:16:6f:bf:74:57:89:0a:86:64:5a:
96:83:d8:6c:71:b1:1c:46:86:fa:3d:72:91:45:f2:0c:cb:6e:
87:6a:c8:7b:d7:43:7d:f5:08:8e:35:37:85:84:cb:e8:ce:64:
a9:e5:22:54:49:c7:f8:95:a8:ea:ae:a9:93:7d:b2:bc:b1:43:
6f:0c:b3:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:30:52 2026 by rpki-client