Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/cef3b5-a848-43d5-873a-0757a6d28224/1/CGZINfiq_mFJcf-oaD-fdL9ND_Q.mft
File: CGZINfiq_mFJcf-oaD-fdL9ND_Q.mft (raw, json)
Hash identifier: CufhoteBTZ6rROdts9tLFZTB5BKk6qu0iEzwpCoDltY=
Subject key identifier: 41:AA:2B:65:37:34:AA:0F:51:68:3A:AD:05:9D:29:CB:06:E0:F6:1D
Authority key identifier: 08:66:48:35:F8:AA:FE:61:49:71:FF:A8:68:3F:9F:74:BF:4D:0F:F4
Certificate issuer: /CN=08664835f8aafe614971ffa8683f9f74bf4d0ff4
Certificate serial: 019D98BDC233D3469344B5CB894C80FC3A1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CGZINfiq_mFJcf-oaD-fdL9ND_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/cef3b5-a848-43d5-873a-0757a6d28224/1/CGZINfiq_mFJcf-oaD-fdL9ND_Q.mft
Manifest number: 1105
Signing time: Fri 17 Apr 2026 00:01:05 +0000
Manifest this update: Fri 17 Apr 2026 00:01:05 +0000
Manifest next update: Sat 18 Apr 2026 00:01:05 +0000
Files and hashes: 1: 5F8EPRCwAO9R0s3emE3nMIVi-i8.roa (hash: nyuBuPwwDb0keiCkpqhAWuHjHqCL5kLPWyJJ50t6Ers=)
2: CGZINfiq_mFJcf-oaD-fdL9ND_Q.crl (hash: BWvOc6+8vchf+lMyNxc3yEn9w7opHVpSM0/IhggmlVY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/cef3b5-a848-43d5-873a-0757a6d28224/1/CGZINfiq_mFJcf-oaD-fdL9ND_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/cef3b5-a848-43d5-873a-0757a6d28224/1/CGZINfiq_mFJcf-oaD-fdL9ND_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/CGZINfiq_mFJcf-oaD-fdL9ND_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:c2:33:d3:46:93:44:b5:cb:89:4c:80:fc:3a:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08664835f8aafe614971ffa8683f9f74bf4d0ff4
Validity
Not Before: Apr 17 00:01:05 2026 GMT
Not After : Apr 18 00:01:05 2026 GMT
Subject: CN=41aa2b653734aa0f51683aad059d29cb06e0f61d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ee:ac:a0:f8:21:f7:74:16:43:96:7a:69:c8:
21:14:cf:c5:28:f6:cc:65:69:9a:71:ac:29:b2:61:
16:f9:a5:b3:72:ab:03:8f:f8:03:da:66:c0:6f:ba:
ee:e2:5b:40:70:23:52:7e:55:7d:1c:b0:63:06:c4:
53:2c:91:35:46:15:4a:0f:8c:d7:0a:ad:ed:c7:b6:
91:2e:17:67:2e:98:65:61:ba:98:0a:c5:4e:32:ce:
e2:e4:a5:b8:3e:28:39:47:d8:73:17:95:27:41:cc:
66:da:86:7e:56:9d:92:fe:20:49:44:50:26:db:5c:
ee:fc:7c:b4:b0:6c:4d:75:0e:3f:28:be:01:9e:14:
fb:8d:43:8d:5e:a4:30:f4:8f:7f:d0:1d:14:1d:18:
3c:96:24:62:cc:5c:80:e2:a5:a0:20:a3:36:4a:15:
1e:ff:b1:d5:c5:65:bb:c3:4c:10:c2:c6:a8:72:93:
02:01:2b:4d:17:44:f8:86:43:85:15:5a:83:2c:ba:
35:e3:56:5d:ca:22:19:c1:62:bf:8c:23:45:3d:5d:
73:86:af:2e:c3:60:56:0b:c2:ca:a7:7f:5c:70:6d:
0e:8d:60:67:d7:61:ee:59:4e:bd:3b:a6:ed:ab:7e:
4a:1c:a8:f1:a1:d5:5a:8f:bf:fb:50:29:1b:47:7b:
32:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:AA:2B:65:37:34:AA:0F:51:68:3A:AD:05:9D:29:CB:06:E0:F6:1D
X509v3 Authority Key Identifier:
keyid:08:66:48:35:F8:AA:FE:61:49:71:FF:A8:68:3F:9F:74:BF:4D:0F:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CGZINfiq_mFJcf-oaD-fdL9ND_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/cef3b5-a848-43d5-873a-0757a6d28224/1/CGZINfiq_mFJcf-oaD-fdL9ND_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/cef3b5-a848-43d5-873a-0757a6d28224/1/CGZINfiq_mFJcf-oaD-fdL9ND_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:ff:6f:db:23:48:7f:1a:e5:a8:08:39:c5:a8:ac:af:cf:70:
29:f8:b2:e1:06:19:6d:03:a8:07:08:eb:26:86:f2:2b:1e:0c:
c7:ad:8f:73:97:e0:52:ad:b5:61:3c:9a:65:e2:d4:4c:17:dd:
f7:d6:d3:b7:59:29:c8:fe:9c:f7:ff:78:7c:0d:6e:23:20:90:
b8:87:82:4f:39:7e:b7:27:85:75:e6:9a:31:c6:a0:d6:be:c9:
0e:be:63:68:17:30:cf:a5:9d:ab:5c:6d:9c:55:26:5a:5d:82:
29:47:a2:59:ec:58:8a:8e:62:26:4c:2b:13:0b:b9:44:0c:41:
17:9d:34:86:70:2a:97:ba:2b:60:bc:c0:d7:dd:5f:2c:2e:68:
03:3e:dc:76:7a:c9:8a:42:66:3f:b6:bf:e6:a0:a0:d7:49:65:
3d:7b:4c:37:e7:de:ec:11:42:aa:23:b3:23:2c:2f:9c:dc:a3:
a5:60:a0:6b:d0:9e:82:a9:91:db:6b:a7:b5:0a:9f:a3:88:f0:
2e:42:e9:a8:5f:ca:8a:2c:00:6b:db:a3:39:81:33:41:ab:29:
6b:d3:2a:9a:0a:1c:75:96:2d:37:d4:cc:0b:54:ef:32:7d:b7:
5d:70:89:ed:c0:63:95:36:42:d7:2e:38:ea:a7:74:1c:4e:0e:
ae:a1:7c:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:41:46 2026 by rpki-client