Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b9/cf6f84-de39-4737-ac0d-e6febed1f5b2/1/cGHLKb3Ndzhxg60jn77X3QwHDCU.mft
File: cGHLKb3Ndzhxg60jn77X3QwHDCU.mft (raw, json)
Hash identifier: NgfHEW85AvgNd3kpR4iJdk6nryGMlqvTaSPVrINHcg0=
Subject key identifier: 86:BE:8D:08:6C:EB:04:F0:52:B4:65:35:3E:25:89:94:BB:AD:BF:1D
Authority key identifier: 70:61:CB:29:BD:CD:77:38:71:83:AD:23:9F:BE:D7:DD:0C:07:0C:25
Certificate issuer: /CN=7061cb29bdcd77387183ad239fbed7dd0c070c25
Certificate serial: 01A0C40E6A09D7F3D17B278F54831D6823F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cGHLKb3Ndzhxg60jn77X3QwHDCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/cf6f84-de39-4737-ac0d-e6febed1f5b2/1/cGHLKb3Ndzhxg60jn77X3QwHDCU.mft
Manifest number: 12
Signing time: Mon 21 Sep 2026 13:01:13 +0000
Manifest this update: Mon 21 Sep 2026 13:01:13 +0000
Manifest next update: Tue 22 Sep 2026 13:01:13 +0000
Files and hashes: 1: V0My9THlBc0YLlGKU0lk51nLT9Q.roa (hash: jnanOnE2E3WLlm+hKnnts1NGwhP+hFoapes6AYG4EzY=)
2: cGHLKb3Ndzhxg60jn77X3QwHDCU.crl (hash: o2SgWxbgD7UVgG2DJ4SbEhaCMOgglRC0FkAWPIPtHQs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/cf6f84-de39-4737-ac0d-e6febed1f5b2/1/cGHLKb3Ndzhxg60jn77X3QwHDCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/cf6f84-de39-4737-ac0d-e6febed1f5b2/1/cGHLKb3Ndzhxg60jn77X3QwHDCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/cGHLKb3Ndzhxg60jn77X3QwHDCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 13:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:0e:6a:09:d7:f3:d1:7b:27:8f:54:83:1d:68:23:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7061cb29bdcd77387183ad239fbed7dd0c070c25
Validity
Not Before: Sep 21 13:01:13 2026 GMT
Not After : Sep 22 13:01:13 2026 GMT
Subject: CN=86be8d086ceb04f052b465353e258994bbadbf1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:33:af:c6:36:51:57:4f:d8:ab:51:79:cb:e3:
b4:d5:d6:46:6d:49:04:85:59:3a:63:aa:6f:ce:82:
32:8f:eb:5e:1b:62:51:77:9b:56:42:4d:70:94:b9:
78:5a:dc:7d:ea:53:5b:cc:d0:8c:88:3c:b2:50:d9:
d4:7f:e3:f7:b7:4e:5d:2a:e2:f1:7f:f9:2c:f7:bf:
e4:b1:10:08:1e:9c:60:44:02:68:12:58:7d:24:74:
c8:50:16:93:63:91:43:4d:dc:62:41:61:7c:14:37:
cf:aa:c8:9e:97:3b:57:30:c1:93:89:5f:a8:77:39:
2c:89:2b:fe:93:b6:e6:45:66:0b:f5:39:92:9d:4e:
11:38:73:6d:d4:68:0e:1b:f4:d6:87:fe:bd:6f:c9:
31:f7:15:e9:16:44:ae:36:47:f6:bb:fd:8b:be:e4:
a1:d4:18:fa:f1:e2:30:fe:45:c6:eb:02:33:df:25:
bd:81:a8:45:81:e5:f0:79:dd:5e:30:8d:de:75:4f:
28:cf:d9:6f:28:69:f2:61:a4:82:27:37:96:95:a7:
02:be:8a:85:38:3c:d3:b7:4b:68:5f:bc:aa:5f:0d:
4f:ec:fb:a3:78:50:ab:a2:65:76:99:79:c8:c5:5b:
42:e5:ac:e4:77:4c:cc:95:32:64:d7:7a:ef:3e:37:
17:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:BE:8D:08:6C:EB:04:F0:52:B4:65:35:3E:25:89:94:BB:AD:BF:1D
X509v3 Authority Key Identifier:
keyid:70:61:CB:29:BD:CD:77:38:71:83:AD:23:9F:BE:D7:DD:0C:07:0C:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cGHLKb3Ndzhxg60jn77X3QwHDCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/cf6f84-de39-4737-ac0d-e6febed1f5b2/1/cGHLKb3Ndzhxg60jn77X3QwHDCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/cf6f84-de39-4737-ac0d-e6febed1f5b2/1/cGHLKb3Ndzhxg60jn77X3QwHDCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:52:19:ab:16:2a:94:2a:d7:b1:40:bb:78:f9:88:38:10:bb:
fa:02:ac:fd:1b:5e:02:00:e0:fd:6e:c4:fc:8d:3a:fe:5f:dd:
de:2c:f2:08:e1:65:da:26:f1:cc:eb:c8:87:5c:4d:7e:cc:d4:
1a:a3:96:05:35:ec:15:ba:b3:b2:80:99:88:7a:11:e5:35:55:
e7:10:56:08:40:b5:ee:ac:3c:01:e7:46:07:af:f3:98:79:2f:
05:27:69:b7:a6:b3:07:0d:6c:fb:6e:7c:a8:f5:0a:e0:04:ea:
75:1a:c3:6a:a0:72:8e:f1:ac:01:e2:61:68:9b:6d:4f:bb:d3:
1e:95:87:a5:62:9b:e2:a0:95:41:6b:d6:53:60:74:c9:d9:ab:
16:62:65:da:27:fd:c0:e7:65:8a:63:b0:a0:67:d2:d3:f6:a5:
f7:ce:ca:e9:a5:5b:ad:aa:c7:7d:10:38:33:6f:ef:13:78:7e:
92:8c:15:52:ed:bf:71:77:eb:89:21:65:b5:72:93:7f:d7:f4:
e0:bd:82:d6:58:d0:a8:1e:60:c7:6b:ab:c1:04:69:cc:2e:11:
c4:b9:29:54:54:a3:79:c1:a3:9b:9c:9c:71:2f:0c:c9:a4:5c:
50:23:8a:fa:7b:f3:21:38:4b:cb:62:05:64:17:e1:ff:f0:df:
a3:8c:73:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 01:31:33 2026 by rpki-client