Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.mft
File: cGmgJahPQu8-8LYFLeP9ZejAhpI.mft (raw, json)
Hash identifier: sSbsolok0s/xQxaaEpB3dm7Y0TmyRGFtGY0yEAqBKqo=
Subject key identifier: AB:7E:CF:6D:AB:AA:3B:C6:AA:BF:DB:B0:11:F5:2C:38:69:6E:C6:E9
Authority key identifier: 70:69:A0:25:A8:4F:42:EF:3E:F0:B6:05:2D:E3:FD:65:E8:C0:86:92
Certificate issuer: /CN=7069a025a84f42ef3ef0b6052de3fd65e8c08692
Certificate serial: 01A0D200582A6EA28AD4B40AB79C2B6AED9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cGmgJahPQu8-8LYFLeP9ZejAhpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.mft
Manifest number: 1295
Signing time: Thu 24 Sep 2026 06:00:32 +0000
Manifest this update: Thu 24 Sep 2026 06:00:32 +0000
Manifest next update: Fri 25 Sep 2026 06:00:32 +0000
Files and hashes: 1: cGmgJahPQu8-8LYFLeP9ZejAhpI.crl (hash: IWzjKFy9hqNX9aXzN5d80Pul9cg9m2I/4otXTlWD6zY=)
2: vkFegJrdqmSpqizX-1jFyrdM-Ok.roa (hash: n5V1OMe1FNTO7+dn3GHVNrTtgdxzbNdUe5BzE1mBm1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cGmgJahPQu8-8LYFLeP9ZejAhpI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:00:58:2a:6e:a2:8a:d4:b4:0a:b7:9c:2b:6a:ed:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7069a025a84f42ef3ef0b6052de3fd65e8c08692
Validity
Not Before: Sep 24 06:00:32 2026 GMT
Not After : Sep 25 06:00:32 2026 GMT
Subject: CN=ab7ecf6dabaa3bc6aabfdbb011f52c38696ec6e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:04:44:ff:d6:0e:ac:bb:3a:23:45:20:b8:8f:
23:cf:2a:8c:2c:2c:d9:92:f3:9d:71:ec:07:ff:f3:
5c:da:3d:c6:0e:9b:a8:fb:24:df:73:89:ab:c5:c5:
48:29:5c:74:d8:5d:a1:74:70:3d:c1:f0:04:2e:86:
07:1d:30:fa:ee:d8:c9:d6:7e:8c:e8:67:c1:1e:66:
fa:df:7a:d1:14:6f:c6:14:c8:31:7e:16:4e:ea:08:
8e:34:bd:1e:b3:34:83:25:51:07:b6:cd:97:3f:d7:
ad:ed:27:2a:58:dd:2a:00:d2:8d:04:74:93:6c:6c:
e2:82:cb:1b:55:8c:c9:39:0e:25:3c:d8:07:5a:40:
b3:db:56:b7:b2:89:33:f9:33:43:68:4e:02:db:68:
28:6e:1d:d5:e3:4a:00:03:d8:44:6c:5d:06:1c:87:
30:5a:83:78:67:dd:88:03:41:6a:91:26:ba:50:a1:
22:1a:80:75:b6:7f:ed:cb:06:7e:1c:8d:7a:7d:e4:
2c:3c:f5:fa:ce:20:17:ac:df:a2:59:e3:3a:b0:bb:
0d:3f:83:c9:7c:da:65:1d:9b:b8:09:8c:94:e0:a0:
d3:aa:b5:79:b8:6e:8e:e2:81:bc:c4:c5:e1:76:d7:
de:8f:0a:89:19:8a:22:5e:c0:32:52:e2:1c:e6:b2:
a4:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:7E:CF:6D:AB:AA:3B:C6:AA:BF:DB:B0:11:F5:2C:38:69:6E:C6:E9
X509v3 Authority Key Identifier:
keyid:70:69:A0:25:A8:4F:42:EF:3E:F0:B6:05:2D:E3:FD:65:E8:C0:86:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cGmgJahPQu8-8LYFLeP9ZejAhpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:43:a7:1b:09:86:13:4d:4a:ff:1c:d4:8b:42:00:23:84:84:
3f:2b:14:2a:f4:d1:32:4e:d7:c5:9d:a9:91:8f:b1:f5:16:8f:
a3:59:d3:dc:a9:e6:1d:c6:a5:25:0e:51:ec:41:88:61:af:77:
68:a1:2f:a9:cd:35:73:aa:46:0c:41:c2:45:19:b7:a7:03:1d:
5a:83:3b:72:3a:0d:d9:d5:47:fb:2b:a2:48:8d:33:54:10:ad:
48:85:c2:88:d1:de:7e:31:c8:3b:33:dd:da:d9:a9:04:50:bc:
2f:7c:b0:70:6e:84:61:71:c9:89:3b:2f:77:4b:92:6f:35:17:
28:3e:bc:53:f3:98:27:b9:e9:0e:2e:15:2d:09:f8:0c:68:57:
2c:47:d7:ba:8f:85:62:c7:20:e9:09:50:82:0b:d6:53:49:0c:
a0:ac:7c:df:f8:80:ed:79:d5:52:d9:ef:48:4a:ae:14:4e:67:
5f:ec:a8:cd:cc:09:2b:8e:5a:9d:e8:17:04:ec:5a:87:0f:ff:
a7:92:54:03:5d:de:52:a0:14:36:20:b9:11:40:02:f8:9d:4c:
47:da:e3:14:b8:f5:c0:cb:05:fc:75:80:7e:71:bf:66:c0:1f:
d7:dc:db:74:ca:9b:bb:24:ef:49:ca:d1:f6:e1:6e:de:12:31:
96:4b:ca:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDSAFgqbqKK1LQKt5wrau2aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwNjlhMDI1YTg0ZjQyZWYzZWYwYjYwNTJkZTNmZDY1ZThj
MDg2OTIwHhcNMjYwOTI0MDYwMDMyWhcNMjYwOTI1MDYwMDMyWjAzMTEwLwYDVQQD
EyhhYjdlY2Y2ZGFiYWEzYmM2YWFiZmRiYjAxMWY1MmMzODY5NmVjNmU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtARE/9YOrLs6I0UguI8jzyqMLCzZ
kvOdcewH//Nc2j3GDpuo+yTfc4mrxcVIKVx02F2hdHA9wfAELoYHHTD67tjJ1n6M
6GfBHmb633rRFG/GFMgxfhZO6giONL0eszSDJVEHts2XP9et7ScqWN0qANKNBHST
bGzigssbVYzJOQ4lPNgHWkCz21a3sokz+TNDaE4C22gobh3V40oAA9hEbF0GHIcw
WoN4Z92IA0FqkSa6UKEiGoB1tn/tywZ+HI16feQsPPX6ziAXrN+iWeM6sLsNP4PJ
fNplHZu4CYyU4KDTqrV5uG6O4oG8xMXhdtfejwqJGYoiXsAyUuIc5rKk+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKt+z22rqjvGqr/bsBH1LDhpbsbpMB8GA1UdIwQY
MBaAFHBpoCWoT0LvPvC2BS3j/WXowIaSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0dtZ0phaFBRdTgtOExZRkxlUDlaZWpBaHBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9hZDAxMTYtNzU1OC00NjU2LTlmYjMt
NTE5OWE3MTE2ODRkLzEvY0dtZ0phaFBRdTgtOExZRkxlUDlaZWpBaHBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS9hZDAxMTYtNzU1OC00NjU2LTlmYjMtNTE5OWE3MTE2ODRk
LzEvY0dtZ0phaFBRdTgtOExZRkxlUDlaZWpBaHBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYkOnGwmG
E01K/xzUi0IAI4SEPysUKvTRMk7XxZ2pkY+x9RaPo1nT3KnmHcalJQ5R7EGIYa93
aKEvqc01c6pGDEHCRRm3pwMdWoM7cjoN2dVH+yuiSI0zVBCtSIXCiNHefjHIOzPd
2tmpBFC8L3ywcG6EYXHJiTsvd0uSbzUXKD68U/OYJ7npDi4VLQn4DGhXLEfXuo+F
Yscg6QlQggvWU0kMoKx83/iA7XnVUtnvSEquFE5nX+yozcwJK45anegXBOxahw//
p5JUA13eUqAUNiC5EUAC+J1MR9rjFLj1wMsF/HWAfnG/ZsAf19zbdMqbuyTvScrR
9uFu3hIxlkvKpA==
-----END CERTIFICATE-----
Generated at Thu Sep 24 08:44:41 2026 by rpki-client