Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.mft
File: cGmgJahPQu8-8LYFLeP9ZejAhpI.mft (raw, json)
Hash identifier: rkK45jHKwBQlxHmDhJBPDogXeeVkE0i7DB4oYSEpoV4=
Subject key identifier: 98:12:CA:2E:A7:4B:2D:97:F2:45:0E:3A:86:0B:2F:62:91:F9:88:6F
Authority key identifier: 70:69:A0:25:A8:4F:42:EF:3E:F0:B6:05:2D:E3:FD:65:E8:C0:86:92
Certificate issuer: /CN=7069a025a84f42ef3ef0b6052de3fd65e8c08692
Certificate serial: 019DA30AD9E67625A93660F3206352896605
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cGmgJahPQu8-8LYFLeP9ZejAhpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.mft
Manifest number: 10EF
Signing time: Sun 19 Apr 2026 00:01:30 +0000
Manifest this update: Sun 19 Apr 2026 00:01:30 +0000
Manifest next update: Mon 20 Apr 2026 00:01:30 +0000
Files and hashes: 1: cGmgJahPQu8-8LYFLeP9ZejAhpI.crl (hash: iWzLpb4QEDaz+2x7/OGglnsxXrwDIokBzIVcyNp3W9A=)
2: vkFegJrdqmSpqizX-1jFyrdM-Ok.roa (hash: n5V1OMe1FNTO7+dn3GHVNrTtgdxzbNdUe5BzE1mBm1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cGmgJahPQu8-8LYFLeP9ZejAhpI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 00:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:0a:d9:e6:76:25:a9:36:60:f3:20:63:52:89:66:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7069a025a84f42ef3ef0b6052de3fd65e8c08692
Validity
Not Before: Apr 19 00:01:30 2026 GMT
Not After : Apr 20 00:01:30 2026 GMT
Subject: CN=9812ca2ea74b2d97f2450e3a860b2f6291f9886f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:77:2e:1a:86:36:a1:85:46:2f:82:40:f3:f7:
d3:23:f3:c9:3e:d0:60:41:89:df:d2:4b:4a:f0:7e:
01:b9:a8:47:0b:b9:e0:a8:c4:50:61:f5:8f:50:a5:
4f:48:82:d8:8c:eb:74:fc:97:4c:35:a4:27:64:d5:
3a:4a:9e:c0:f5:ae:c8:a3:21:4c:37:9f:93:db:fc:
16:8e:ee:8c:e6:06:4a:0d:00:e6:63:3e:0f:59:b5:
46:fc:e1:0f:e8:7f:fe:d3:52:64:a6:85:bb:d7:05:
9c:cd:23:79:d9:34:79:d0:1d:9f:c8:7f:ef:4e:c0:
2a:37:e6:0b:47:dc:29:86:f9:11:c8:21:89:ef:46:
fd:45:99:fe:ac:93:97:7c:27:b8:ec:86:70:5e:8c:
8e:30:3f:8e:ee:c4:4c:cc:90:a1:c7:1b:2f:6d:ea:
d0:8d:14:78:ee:2e:c0:cc:a0:47:3c:47:39:8a:1c:
6b:f1:20:b9:d2:86:73:c1:e5:14:b5:d9:00:a1:7b:
67:91:64:0d:97:cf:de:46:58:5b:9f:c9:90:a2:0c:
bb:b7:d9:41:23:04:44:7e:93:3e:b6:69:b9:1f:df:
b9:74:71:a8:de:89:43:da:01:a2:d3:e5:f8:95:ce:
f4:04:18:fd:1b:4b:9d:ed:55:13:c8:55:cb:e4:15:
c1:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:12:CA:2E:A7:4B:2D:97:F2:45:0E:3A:86:0B:2F:62:91:F9:88:6F
X509v3 Authority Key Identifier:
keyid:70:69:A0:25:A8:4F:42:EF:3E:F0:B6:05:2D:E3:FD:65:E8:C0:86:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cGmgJahPQu8-8LYFLeP9ZejAhpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:ad:09:fd:90:e0:f0:01:e6:44:e6:03:ca:23:3a:db:ad:19:
ef:51:85:0d:9c:87:0c:e3:18:e9:44:06:12:af:51:aa:f7:e6:
dd:be:83:cd:4a:69:ac:8f:63:53:8f:41:e8:de:67:25:7e:d1:
4a:bb:a0:b8:c1:f5:a6:5f:bd:8c:42:c5:5d:f0:f2:0e:ee:38:
9b:ab:68:a4:e8:d0:29:30:c9:1b:fd:d0:b2:82:26:04:48:44:
0c:39:b5:43:2a:e1:69:8e:28:02:cd:6f:3d:c5:b0:38:30:4e:
94:a2:ad:5e:8e:7c:5c:e9:81:32:53:ce:c0:f5:03:85:d9:e1:
27:81:8d:ee:3d:9c:ca:e3:45:13:97:cf:67:a2:a2:7c:51:9d:
87:6f:c1:04:97:f5:b7:fa:37:ac:03:2a:64:7d:d5:84:81:22:
b6:6b:3c:e3:d4:1d:1f:fd:6d:9b:4d:1e:72:78:ed:63:46:eb:
a5:a5:e3:fa:14:b6:2c:a3:13:63:66:77:09:49:46:61:55:50:
91:ba:3d:83:2c:8d:ee:05:68:77:2b:ab:e2:65:6f:85:01:08:
f2:b2:c6:ce:a8:87:0c:d5:b8:f8:31:79:4c:d3:b1:49:14:ed:
c3:09:c2:76:7a:5f:3c:88:8a:eb:42:d8:fc:29:56:24:27:7f:
15:f6:50:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:14:34 2026 by rpki-client