Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/4baad5-2b6a-4b64-8f57-b70b95539df4/1/cgs1_DZuhLRYDu6nmJEe1OGOOus.mft
File: cgs1_DZuhLRYDu6nmJEe1OGOOus.mft (raw, json)
Hash identifier: Jr/5xhqQ6pOxCr6AFVnOK1Vi8kca9oW9ikf2BOeuY0E=
Subject key identifier: 6D:1B:74:82:B2:D0:76:FB:7C:16:67:3F:A6:02:39:1A:EB:93:1F:72
Authority key identifier: 72:0B:35:FC:36:6E:84:B4:58:0E:EE:A7:98:91:1E:D4:E1:8E:3A:EB
Certificate issuer: /CN=720b35fc366e84b4580eeea798911ed4e18e3aeb
Certificate serial: 019CAAC61DB6CCE94886A5FB04DAEDC17A4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgs1_DZuhLRYDu6nmJEe1OGOOus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/4baad5-2b6a-4b64-8f57-b70b95539df4/1/cgs1_DZuhLRYDu6nmJEe1OGOOus.mft
Manifest number: 0857
Signing time: Sun 01 Mar 2026 19:00:36 +0000
Manifest this update: Sun 01 Mar 2026 19:00:36 +0000
Manifest next update: Mon 02 Mar 2026 19:00:36 +0000
Files and hashes: 1: cgs1_DZuhLRYDu6nmJEe1OGOOus.crl (hash: oqN6FqYS1wVPcc8Dm24NY8NLd6hdzceLWVhJVyM/yoE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/4baad5-2b6a-4b64-8f57-b70b95539df4/1/cgs1_DZuhLRYDu6nmJEe1OGOOus.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/4baad5-2b6a-4b64-8f57-b70b95539df4/1/cgs1_DZuhLRYDu6nmJEe1OGOOus.mft
rsync://rpki.ripe.net/repository/DEFAULT/cgs1_DZuhLRYDu6nmJEe1OGOOus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:1d:b6:cc:e9:48:86:a5:fb:04:da:ed:c1:7a:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=720b35fc366e84b4580eeea798911ed4e18e3aeb
Validity
Not Before: Mar 1 19:00:36 2026 GMT
Not After : Mar 2 19:00:36 2026 GMT
Subject: CN=6d1b7482b2d076fb7c16673fa602391aeb931f72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0c:d3:5a:25:d1:e5:d0:2c:5d:da:3a:36:aa:
90:1d:19:16:82:36:66:fc:b9:d0:b3:ea:cb:61:30:
3f:2b:3c:92:4d:74:9f:36:a4:62:f4:d1:75:1d:32:
87:cb:4c:6a:02:d5:26:07:3c:11:45:2c:e7:9c:bf:
ac:fd:90:11:27:33:97:91:9a:8b:a0:04:98:9d:5f:
5b:0f:a2:23:4c:46:f5:0c:ca:84:88:76:4a:d3:a6:
a6:2c:34:35:53:9b:45:6f:76:81:23:5e:e9:a0:23:
ab:df:f4:43:d1:c8:f1:c0:f2:27:32:a1:06:7e:0c:
7e:15:17:3d:0d:ac:d8:d6:3a:20:04:9c:90:5e:ec:
bf:68:ab:26:1a:c7:9f:9e:b4:44:1c:75:f7:c5:31:
f0:0b:dd:8d:0a:c9:50:3b:f9:79:aa:91:45:9a:a7:
46:bd:83:f0:5c:59:21:8a:44:21:12:84:7a:0f:7f:
7d:c1:4f:c5:e5:a7:95:e9:60:d9:38:41:7e:ae:81:
5e:24:96:72:6a:72:3a:82:79:24:5c:58:a7:52:7f:
5e:7e:e9:6b:6b:e2:01:2b:f4:12:04:e4:bd:6b:a2:
82:bb:76:fa:04:12:27:ad:a1:38:9c:35:f5:db:35:
f7:33:35:ba:75:04:eb:e0:19:00:92:a8:50:dd:1a:
87:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:1B:74:82:B2:D0:76:FB:7C:16:67:3F:A6:02:39:1A:EB:93:1F:72
X509v3 Authority Key Identifier:
keyid:72:0B:35:FC:36:6E:84:B4:58:0E:EE:A7:98:91:1E:D4:E1:8E:3A:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgs1_DZuhLRYDu6nmJEe1OGOOus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/4baad5-2b6a-4b64-8f57-b70b95539df4/1/cgs1_DZuhLRYDu6nmJEe1OGOOus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/4baad5-2b6a-4b64-8f57-b70b95539df4/1/cgs1_DZuhLRYDu6nmJEe1OGOOus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:4a:fc:c3:f7:f9:8b:3d:e1:4e:0c:5d:f9:10:af:4a:81:3f:
dc:b0:8b:2d:bf:cf:78:03:65:dc:28:07:ed:9e:d1:b9:b4:12:
d4:fe:32:9b:e8:8d:48:ab:95:18:12:58:c1:3f:83:09:fb:f6:
22:aa:49:82:b2:5e:df:3a:77:ef:c3:da:65:b5:b7:76:8b:52:
18:fa:5b:11:5e:76:6c:73:a1:43:fd:76:79:15:37:fa:62:3a:
5e:d8:c1:09:57:e4:80:72:72:fe:f1:2a:1d:6e:1b:e1:11:14:
27:a1:02:15:07:5f:ff:d0:cb:d8:3c:68:aa:79:37:09:f5:a0:
77:b3:a6:e0:87:66:3f:89:cc:c3:55:a0:d0:4a:71:0d:1e:55:
c4:5e:9b:01:95:b5:be:4a:b4:2d:16:e9:29:97:10:98:fe:53:
da:c2:e7:91:1d:d2:ab:05:70:ba:a1:c4:32:29:7c:ea:6a:91:
15:06:42:ff:75:11:d9:bb:27:bf:94:e9:f2:a5:1e:39:97:3e:
fc:d2:65:75:43:80:31:6c:0b:31:0c:4c:90:7a:70:40:29:ca:
0d:b5:c7:94:14:08:3e:0d:ed:f8:61:b3:ea:da:6b:b0:3a:ed:
50:ac:ef:d2:44:64:6e:32:66:de:4b:f4:25:5f:df:43:e3:25:
56:dc:f3:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqxh22zOlIhqX7BNrtwXpLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMGIzNWZjMzY2ZTg0YjQ1ODBlZWVhNzk4OTExZWQ0ZTE4
ZTNhZWIwHhcNMjYwMzAxMTkwMDM2WhcNMjYwMzAyMTkwMDM2WjAzMTEwLwYDVQQD
Eyg2ZDFiNzQ4MmIyZDA3NmZiN2MxNjY3M2ZhNjAyMzkxYWViOTMxZjcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwzTWiXR5dAsXdo6NqqQHRkWgjZm
/LnQs+rLYTA/KzySTXSfNqRi9NF1HTKHy0xqAtUmBzwRRSznnL+s/ZARJzOXkZqL
oASYnV9bD6IjTEb1DMqEiHZK06amLDQ1U5tFb3aBI17poCOr3/RD0cjxwPInMqEG
fgx+FRc9DazY1jogBJyQXuy/aKsmGsefnrREHHX3xTHwC92NCslQO/l5qpFFmqdG
vYPwXFkhikQhEoR6D399wU/F5aeV6WDZOEF+roFeJJZyanI6gnkkXFinUn9efulr
a+IBK/QSBOS9a6KCu3b6BBInraE4nDX12zX3MzW6dQTr4BkAkqhQ3RqHfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG0bdIKy0Hb7fBZnP6YCORrrkx9yMB8GA1UdIwQY
MBaAFHILNfw2boS0WA7up5iRHtThjjrrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dzMV9EWnVoTFJZRHU2bm1KRWUxT0dPT3VzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi80YmFhZDUtMmI2YS00YjY0LThmNTct
YjcwYjk1NTM5ZGY0LzEvY2dzMV9EWnVoTFJZRHU2bm1KRWUxT0dPT3VzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi80YmFhZDUtMmI2YS00YjY0LThmNTctYjcwYjk1NTM5ZGY0
LzEvY2dzMV9EWnVoTFJZRHU2bm1KRWUxT0dPT3VzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZEr8w/f5
iz3hTgxd+RCvSoE/3LCLLb/PeANl3CgH7Z7RubQS1P4ym+iNSKuVGBJYwT+DCfv2
IqpJgrJe3zp378PaZbW3dotSGPpbEV52bHOhQ/12eRU3+mI6XtjBCVfkgHJy/vEq
HW4b4REUJ6ECFQdf/9DL2Dxoqnk3CfWgd7Om4IdmP4nMw1Wg0EpxDR5VxF6bAZW1
vkq0LRbpKZcQmP5T2sLnkR3SqwVwuqHEMil86mqRFQZC/3UR2bsnv5Tp8qUeOZc+
/NJldUOAMWwLMQxMkHpwQCnKDbXHlBQIPg3t+GGz6tprsDrtUKzv0kRkbjJm3kv0
JV/fQ+MlVtzz5w==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:18:20 2026 by rpki-client