Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/cef3b5-a848-43d5-873a-0757a6d28224/1/CGZINfiq_mFJcf-oaD-fdL9ND_Q.mft
File: CGZINfiq_mFJcf-oaD-fdL9ND_Q.mft (raw, json)
Hash identifier: Us5y2kEXfYngPGeB/XZYRpAXsYQGFZdeP0Fn7dmm2RM=
Subject key identifier: AC:D4:59:F0:C0:DE:31:C0:5B:90:C0:BE:05:5B:5B:1D:6E:F1:9A:48
Authority key identifier: 08:66:48:35:F8:AA:FE:61:49:71:FF:A8:68:3F:9F:74:BF:4D:0F:F4
Certificate issuer: /CN=08664835f8aafe614971ffa8683f9f74bf4d0ff4
Certificate serial: 019FA9E2FEE96ED2C52B926D0026522BA071
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CGZINfiq_mFJcf-oaD-fdL9ND_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/cef3b5-a848-43d5-873a-0757a6d28224/1/CGZINfiq_mFJcf-oaD-fdL9ND_Q.mft
Manifest number: 1217
Signing time: Tue 28 Jul 2026 18:00:53 +0000
Manifest this update: Tue 28 Jul 2026 18:00:53 +0000
Manifest next update: Wed 29 Jul 2026 18:00:53 +0000
Files and hashes: 1: 5F8EPRCwAO9R0s3emE3nMIVi-i8.roa (hash: nyuBuPwwDb0keiCkpqhAWuHjHqCL5kLPWyJJ50t6Ers=)
2: CGZINfiq_mFJcf-oaD-fdL9ND_Q.crl (hash: pi+gQs49ByprrcN8B8XoXK3J+PuA9mCixXfzAP2LaYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/cef3b5-a848-43d5-873a-0757a6d28224/1/CGZINfiq_mFJcf-oaD-fdL9ND_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/cef3b5-a848-43d5-873a-0757a6d28224/1/CGZINfiq_mFJcf-oaD-fdL9ND_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/CGZINfiq_mFJcf-oaD-fdL9ND_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e2:fe:e9:6e:d2:c5:2b:92:6d:00:26:52:2b:a0:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08664835f8aafe614971ffa8683f9f74bf4d0ff4
Validity
Not Before: Jul 28 18:00:53 2026 GMT
Not After : Jul 29 18:00:53 2026 GMT
Subject: CN=acd459f0c0de31c05b90c0be055b5b1d6ef19a48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d7:d4:5f:1e:13:0f:a8:f9:08:04:a4:32:25:
8e:58:de:f4:4d:0d:bd:d9:a6:b0:0d:68:68:e2:28:
9b:de:f3:38:3c:b5:66:5d:c5:0e:02:a0:f9:72:87:
0a:00:7b:a0:5a:27:08:6d:8a:62:c4:16:5b:c0:8d:
60:45:70:ac:de:fa:52:da:d7:c9:6e:f8:4c:85:35:
28:9d:1f:bb:bd:c2:81:98:6b:17:39:8a:ae:c4:c4:
ee:91:fb:15:2c:87:43:84:96:0f:5c:33:31:d5:0a:
43:14:17:2a:54:94:93:20:d7:7f:b2:18:2a:4c:27:
d2:28:25:78:f2:88:02:80:82:e0:bc:fb:6d:d0:fe:
f8:26:67:27:f3:22:58:df:74:d8:97:42:72:55:c8:
f0:98:92:52:a5:ce:7b:c3:93:f9:e3:1c:5d:ac:61:
22:71:29:99:f8:3f:bd:90:a1:ce:ca:16:f1:79:ac:
af:74:e8:c7:ae:32:c7:5c:12:f7:65:68:78:c9:9a:
b5:f6:38:fb:7d:3f:47:ad:23:fe:9f:54:9e:c2:23:
55:0c:f7:ae:34:57:22:13:22:73:82:4c:bb:48:55:
07:e4:75:cd:94:1a:c3:fe:b9:20:51:40:a9:d5:00:
1e:3e:fd:fa:cc:7f:13:97:bd:54:3e:76:a4:cf:49:
19:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:D4:59:F0:C0:DE:31:C0:5B:90:C0:BE:05:5B:5B:1D:6E:F1:9A:48
X509v3 Authority Key Identifier:
keyid:08:66:48:35:F8:AA:FE:61:49:71:FF:A8:68:3F:9F:74:BF:4D:0F:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CGZINfiq_mFJcf-oaD-fdL9ND_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/cef3b5-a848-43d5-873a-0757a6d28224/1/CGZINfiq_mFJcf-oaD-fdL9ND_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/cef3b5-a848-43d5-873a-0757a6d28224/1/CGZINfiq_mFJcf-oaD-fdL9ND_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:2b:cd:43:83:ba:ed:f1:2e:45:68:a8:fe:59:c3:ad:91:c3:
8d:3f:b2:8c:dc:f6:6e:74:45:f8:e9:82:e8:d7:27:b1:b1:46:
63:90:be:50:c7:8a:ea:14:00:a9:c1:af:5c:a2:48:2f:fe:ee:
3e:98:27:a8:ea:45:a1:aa:4c:70:da:af:a9:97:c3:91:d4:02:
29:bf:99:ce:b6:69:0a:15:af:63:55:ae:68:c9:02:46:e4:1c:
de:e8:4b:de:f9:96:e3:51:0d:8e:a8:38:52:07:99:ce:29:eb:
b4:98:a8:8c:f2:84:f2:77:1c:83:70:69:89:71:cf:db:4f:9d:
91:35:2a:2c:b2:d9:5c:94:0b:2f:91:4e:48:a1:0a:e5:ac:04:
e8:9e:60:c2:7b:12:77:3f:8a:89:ae:67:5a:3b:cf:05:6a:46:
25:50:38:05:99:b9:2b:38:ac:aa:86:c8:7d:9d:cf:f4:07:a4:
d3:93:59:0c:73:6e:87:c4:c1:e4:c4:b6:9b:00:d1:ab:14:52:
17:f3:37:77:a5:06:28:48:ec:8c:4f:59:90:6c:04:fa:ea:2c:
5f:45:70:d3:79:59:b4:bf:5b:78:76:6d:db:bf:7d:91:b6:10:
7a:61:5a:d0:31:96:2e:2b:97:6a:da:53:0c:bf:a0:9f:7b:c3:
cd:ab:d4:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:33:15 2026 by rpki-client