Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.mft
File: cGmgJahPQu8-8LYFLeP9ZejAhpI.mft (raw, json)
Hash identifier: jRYH3DeM3yeZXMAETsgHLs/UCdhTk0WV2tZaUbAAPRk=
Subject key identifier: BF:A9:F3:A2:57:41:A0:AE:BE:6B:6E:0A:3C:36:4B:CA:FE:8D:EF:93
Authority key identifier: 70:69:A0:25:A8:4F:42:EF:3E:F0:B6:05:2D:E3:FD:65:E8:C0:86:92
Certificate issuer: /CN=7069a025a84f42ef3ef0b6052de3fd65e8c08692
Certificate serial: 019EC2C98353FA8BD68B7201B1A678190312
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cGmgJahPQu8-8LYFLeP9ZejAhpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.mft
Manifest number: 1184
Signing time: Sat 13 Jun 2026 21:00:46 +0000
Manifest this update: Sat 13 Jun 2026 21:00:46 +0000
Manifest next update: Sun 14 Jun 2026 21:00:46 +0000
Files and hashes: 1: cGmgJahPQu8-8LYFLeP9ZejAhpI.crl (hash: ZvTjZ/8XFXJsD3HkVn5FpV1g60ELyWdWTSC+8xKNOKE=)
2: vkFegJrdqmSpqizX-1jFyrdM-Ok.roa (hash: n5V1OMe1FNTO7+dn3GHVNrTtgdxzbNdUe5BzE1mBm1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cGmgJahPQu8-8LYFLeP9ZejAhpI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 19:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:c9:83:53:fa:8b:d6:8b:72:01:b1:a6:78:19:03:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7069a025a84f42ef3ef0b6052de3fd65e8c08692
Validity
Not Before: Jun 13 21:00:46 2026 GMT
Not After : Jun 14 21:00:46 2026 GMT
Subject: CN=bfa9f3a25741a0aebe6b6e0a3c364bcafe8def93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:15:cf:4c:9e:94:3a:af:5e:cf:8f:75:99:61:
1c:6f:85:c1:fe:6b:6b:f0:d3:e5:1f:00:f6:96:c0:
6f:05:1e:3d:07:5f:84:c7:33:69:73:5a:ff:a6:a7:
51:43:aa:4f:1c:22:27:d9:63:4a:3d:a3:39:47:77:
e6:c5:e8:6b:49:49:45:2b:3e:56:39:0d:0f:2e:28:
2e:93:9a:a3:c1:14:28:e2:f5:cf:fc:2b:86:ec:7f:
04:8f:ca:62:bc:ab:fd:79:8a:e4:1b:dd:e3:47:4b:
03:10:47:db:fb:01:73:80:80:f7:8f:64:c1:ae:3b:
43:84:4e:dc:ac:46:8a:9a:71:f3:79:6f:25:3e:7a:
63:2a:4c:2a:88:75:dc:51:94:6f:00:b2:d2:9f:99:
79:80:c6:7d:80:69:20:09:95:e7:3f:9f:a6:93:27:
92:31:05:8c:8d:f3:36:e5:73:b8:18:73:6a:1b:8b:
73:17:6e:36:4a:a7:66:e5:07:72:4e:f3:b7:3c:e2:
5a:a4:50:ce:bc:e5:c0:36:42:07:58:77:59:78:48:
5f:4b:7e:b7:03:ba:6a:00:cf:d1:1d:a4:8f:e3:18:
36:58:e2:5d:6b:5c:04:3c:b0:3c:74:1f:f7:1f:12:
83:0f:13:ad:f5:73:9e:5e:4f:f0:d3:cf:06:c5:51:
b2:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:A9:F3:A2:57:41:A0:AE:BE:6B:6E:0A:3C:36:4B:CA:FE:8D:EF:93
X509v3 Authority Key Identifier:
keyid:70:69:A0:25:A8:4F:42:EF:3E:F0:B6:05:2D:E3:FD:65:E8:C0:86:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cGmgJahPQu8-8LYFLeP9ZejAhpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:50:07:79:cf:b6:e6:3c:27:c9:c9:2a:df:59:52:af:c2:17:
08:46:8e:57:a1:82:f7:6e:21:e2:a9:4b:09:b3:f1:65:a7:7a:
9c:ef:65:f5:f7:ed:bf:4c:19:d6:93:4a:ee:5b:a5:bc:c4:ea:
67:2e:37:11:e6:b6:1b:4e:87:9f:71:85:dc:86:3e:be:7a:13:
c1:bd:80:38:d5:63:eb:19:7f:74:cc:7c:4d:b1:28:c3:7e:eb:
37:c3:a8:25:e0:f0:26:22:df:2a:44:64:82:00:a1:11:0d:6a:
7a:25:e1:bb:1a:76:0f:08:39:f3:e0:54:0e:53:28:fd:03:1c:
2e:a2:62:8e:c1:5e:95:c2:1d:cb:31:d8:75:6e:0f:88:11:27:
73:9d:e3:c1:3f:e1:7d:07:87:1b:d9:34:5e:8b:13:ff:d7:aa:
23:0b:3a:31:a2:c8:a2:67:a0:d8:6a:ab:86:d0:70:d6:a2:c7:
b0:fd:b4:25:ca:e8:53:99:32:bf:ed:25:92:50:df:fd:54:9b:
5c:f4:49:47:eb:29:86:65:89:f5:ce:56:b4:ed:12:c8:15:86:
07:7c:d4:bc:69:8c:5f:46:a7:9f:77:8d:da:2c:28:95:95:f8:
de:29:5d:e9:5b:92:72:1f:ae:b9:fa:dc:9a:7e:b6:28:69:c8:
b6:bb:ad:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:44:00 2026 by rpki-client