Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/4baad5-2b6a-4b64-8f57-b70b95539df4/1/cgs1_DZuhLRYDu6nmJEe1OGOOus.mft
File: cgs1_DZuhLRYDu6nmJEe1OGOOus.mft (raw, json)
Hash identifier: kNgR4egr76D9RaCW1rAVL4XD93OGqXQWGViSnNZaZY0=
Subject key identifier: 90:D0:E7:C3:21:F4:74:50:FC:84:CF:B3:4C:A9:65:F6:37:B5:E8:45
Authority key identifier: 72:0B:35:FC:36:6E:84:B4:58:0E:EE:A7:98:91:1E:D4:E1:8E:3A:EB
Certificate issuer: /CN=720b35fc366e84b4580eeea798911ed4e18e3aeb
Certificate serial: 019DA3E638D4BC679EDE09A28E31FAE57A66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgs1_DZuhLRYDu6nmJEe1OGOOus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/4baad5-2b6a-4b64-8f57-b70b95539df4/1/cgs1_DZuhLRYDu6nmJEe1OGOOus.mft
Manifest number: 08D8
Signing time: Sun 19 Apr 2026 04:01:07 +0000
Manifest this update: Sun 19 Apr 2026 04:01:07 +0000
Manifest next update: Mon 20 Apr 2026 04:01:07 +0000
Files and hashes: 1: cgs1_DZuhLRYDu6nmJEe1OGOOus.crl (hash: z7b3rOJx/wT9O1iy0uZ0HrXnP1h3UbRwuWeKJid+4EE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/4baad5-2b6a-4b64-8f57-b70b95539df4/1/cgs1_DZuhLRYDu6nmJEe1OGOOus.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/4baad5-2b6a-4b64-8f57-b70b95539df4/1/cgs1_DZuhLRYDu6nmJEe1OGOOus.mft
rsync://rpki.ripe.net/repository/DEFAULT/cgs1_DZuhLRYDu6nmJEe1OGOOus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:e6:38:d4:bc:67:9e:de:09:a2:8e:31:fa:e5:7a:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=720b35fc366e84b4580eeea798911ed4e18e3aeb
Validity
Not Before: Apr 19 04:01:07 2026 GMT
Not After : Apr 20 04:01:07 2026 GMT
Subject: CN=90d0e7c321f47450fc84cfb34ca965f637b5e845
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ef:8e:fc:25:78:2c:9b:44:8d:35:c2:93:95:
07:85:6a:0e:3a:d2:17:4d:5f:89:e9:32:17:cd:ae:
3b:31:ef:cd:61:91:0e:cf:c5:78:81:ce:cf:5f:70:
09:9b:05:ab:78:04:36:67:4d:e6:e7:d2:a1:00:91:
94:68:6d:25:82:07:b5:23:64:c0:9f:12:b1:67:5c:
7a:5e:a3:2f:e7:c6:22:ba:b6:ab:91:e5:b1:ef:e4:
bd:f4:c0:24:12:70:56:84:3a:26:58:5c:04:04:91:
8b:bb:13:71:82:c1:e3:7c:dc:be:ae:01:8e:c2:b7:
bd:2e:61:c6:d9:28:bf:14:41:2d:72:a8:72:4f:b9:
2f:b5:80:d8:1b:17:58:65:0e:56:3c:00:d1:75:62:
58:2c:c3:2d:9e:dd:b6:24:f9:5f:b0:0b:e6:86:eb:
fe:34:3c:ce:f6:7f:a5:a4:d0:7a:9f:e8:bc:ff:b9:
a7:f7:54:32:97:87:2e:59:1f:dd:95:1c:6c:4f:db:
7f:83:27:f3:c6:91:ff:70:13:af:83:81:73:3c:b6:
c6:32:52:bc:28:c3:bc:34:3d:51:b1:cd:1c:51:66:
5e:2c:ca:44:f0:49:cc:4b:af:68:26:7a:4e:f4:14:
ed:81:2a:91:f9:d3:16:34:70:1a:3c:92:d8:cb:fa:
46:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:D0:E7:C3:21:F4:74:50:FC:84:CF:B3:4C:A9:65:F6:37:B5:E8:45
X509v3 Authority Key Identifier:
keyid:72:0B:35:FC:36:6E:84:B4:58:0E:EE:A7:98:91:1E:D4:E1:8E:3A:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgs1_DZuhLRYDu6nmJEe1OGOOus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/4baad5-2b6a-4b64-8f57-b70b95539df4/1/cgs1_DZuhLRYDu6nmJEe1OGOOus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/4baad5-2b6a-4b64-8f57-b70b95539df4/1/cgs1_DZuhLRYDu6nmJEe1OGOOus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:f5:cb:ca:c3:d3:48:48:04:f6:ca:5a:cf:50:7e:ff:f7:aa:
d8:df:2b:35:ff:a3:c2:f0:4a:27:c2:5b:ed:8f:60:4b:3e:e7:
74:3b:19:c8:e4:2a:4a:19:77:08:cc:99:24:63:78:e0:d1:a5:
aa:1e:13:cc:c7:e0:ef:18:79:2b:20:63:ef:d1:d5:f9:11:22:
82:d7:bd:5a:4f:8e:87:3e:cf:4b:e9:57:64:3b:5e:37:fd:6f:
36:81:dd:a4:f2:b0:04:7a:79:ae:5f:b2:c8:10:e0:e8:68:d8:
eb:49:c1:80:be:f2:a1:c6:6a:7e:6c:1d:e9:aa:88:4e:41:e2:
ee:32:77:f5:95:79:92:ee:45:e1:86:b7:b1:d4:05:7f:fc:bd:
06:6d:a2:63:5d:cf:89:29:98:33:c6:79:0d:17:57:11:57:d3:
57:4a:ea:aa:ac:95:d7:62:e0:bd:dc:b2:97:bd:28:25:42:bf:
93:b7:02:6c:64:84:75:80:cd:37:f6:1e:20:31:c5:62:3d:cf:
d3:36:f8:9c:f3:29:f0:78:f8:4a:f8:4c:c0:0e:3c:8e:70:2b:
1c:ee:ee:6c:e6:cf:f2:8e:46:05:01:56:83:7f:ab:e0:d3:f9:
a0:62:6e:83:d4:40:74:f9:a4:90:a9:72:05:b9:ec:45:cb:96:
84:20:e4:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:57:13 2026 by rpki-client