Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/cef3b5-a848-43d5-873a-0757a6d28224/1/CGZINfiq_mFJcf-oaD-fdL9ND_Q.mft
File: CGZINfiq_mFJcf-oaD-fdL9ND_Q.mft (raw, json)
Hash identifier: tKzu1UjVUM0aSwFgxx50EstryeAMmurBiSAl1twddOY=
Subject key identifier: FC:8A:7C:7B:11:5A:8B:9E:67:A0:71:CF:19:C6:84:D5:1D:AF:22:19
Authority key identifier: 08:66:48:35:F8:AA:FE:61:49:71:FF:A8:68:3F:9F:74:BF:4D:0F:F4
Certificate issuer: /CN=08664835f8aafe614971ffa8683f9f74bf4d0ff4
Certificate serial: 019CAB3481483A2CB0BA14DE2056393683D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CGZINfiq_mFJcf-oaD-fdL9ND_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/cef3b5-a848-43d5-873a-0757a6d28224/1/CGZINfiq_mFJcf-oaD-fdL9ND_Q.mft
Manifest number: 108A
Signing time: Sun 01 Mar 2026 21:01:10 +0000
Manifest this update: Sun 01 Mar 2026 21:01:10 +0000
Manifest next update: Mon 02 Mar 2026 21:01:10 +0000
Files and hashes: 1: 5F8EPRCwAO9R0s3emE3nMIVi-i8.roa (hash: nyuBuPwwDb0keiCkpqhAWuHjHqCL5kLPWyJJ50t6Ers=)
2: CGZINfiq_mFJcf-oaD-fdL9ND_Q.crl (hash: ZjTDi6WzYuCklJtSlO+EwlZ1Byn5k6Z+oE0ES9e3/mA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/cef3b5-a848-43d5-873a-0757a6d28224/1/CGZINfiq_mFJcf-oaD-fdL9ND_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/cef3b5-a848-43d5-873a-0757a6d28224/1/CGZINfiq_mFJcf-oaD-fdL9ND_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/CGZINfiq_mFJcf-oaD-fdL9ND_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:81:48:3a:2c:b0:ba:14:de:20:56:39:36:83:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08664835f8aafe614971ffa8683f9f74bf4d0ff4
Validity
Not Before: Mar 1 21:01:10 2026 GMT
Not After : Mar 2 21:01:10 2026 GMT
Subject: CN=fc8a7c7b115a8b9e67a071cf19c684d51daf2219
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:be:77:14:be:e9:ab:4e:21:ee:c2:18:85:ff:
05:8b:32:fb:44:d7:be:45:20:76:d6:ca:21:02:d2:
70:02:df:0e:5a:02:29:e0:79:5f:5e:60:a4:af:c2:
8e:40:b7:01:11:f0:e0:8a:4d:ed:a5:8b:00:d9:0c:
d9:43:f5:63:a8:8a:9c:f4:12:c4:cc:3a:19:fc:ec:
4f:2d:4d:d7:6e:19:fb:57:00:6f:81:dc:dd:4e:8f:
99:90:0f:c9:98:21:9a:0f:53:e1:d3:6f:fc:73:b3:
b7:ab:1e:1a:6a:1b:6d:bc:26:5c:f1:d0:24:bf:a0:
8b:5c:34:2e:41:4c:2b:06:ce:b5:9a:6b:d5:19:b1:
59:dd:25:e1:94:da:1f:7a:23:c3:e6:0a:0d:d6:e1:
e6:7a:88:45:e6:f8:37:6f:e3:77:00:99:b5:6e:54:
97:75:a0:a2:24:0a:f6:df:1d:ab:b9:9c:a8:68:32:
26:a9:cf:ff:1e:3e:96:c2:6c:99:b7:18:5b:6d:f7:
f7:01:01:f1:2c:db:2e:c5:f8:01:94:a7:31:42:47:
6f:c0:c3:9f:c4:3d:62:05:53:87:e7:6a:70:83:7d:
99:b5:4c:c8:7c:f8:d8:05:7a:88:97:54:c8:a3:5c:
77:f0:44:1e:ab:86:c9:4d:f4:64:c7:28:20:1b:40:
c9:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:8A:7C:7B:11:5A:8B:9E:67:A0:71:CF:19:C6:84:D5:1D:AF:22:19
X509v3 Authority Key Identifier:
keyid:08:66:48:35:F8:AA:FE:61:49:71:FF:A8:68:3F:9F:74:BF:4D:0F:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CGZINfiq_mFJcf-oaD-fdL9ND_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/cef3b5-a848-43d5-873a-0757a6d28224/1/CGZINfiq_mFJcf-oaD-fdL9ND_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/cef3b5-a848-43d5-873a-0757a6d28224/1/CGZINfiq_mFJcf-oaD-fdL9ND_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:13:87:5d:2e:2e:0a:81:19:60:0e:95:7f:59:b9:43:f4:6f:
5d:da:22:ea:c3:0c:98:84:e5:9b:b6:0f:e8:24:4a:22:27:3a:
9b:d3:ea:4d:e1:0f:95:ef:47:cb:10:85:f3:28:78:4f:35:f4:
62:ef:90:0a:2e:84:4d:33:95:cf:33:d9:d0:dc:74:18:8f:0a:
be:77:d8:08:a5:16:ff:03:a1:56:3e:9e:84:c6:89:02:8f:57:
84:16:f2:a5:e0:99:3c:21:c1:40:86:93:ca:7c:85:f6:a6:f9:
2c:17:d4:41:0b:22:db:74:c6:e5:4f:25:b0:e6:44:34:2d:31:
17:26:fa:9f:1e:0b:67:5a:0a:43:83:c7:1c:ef:5d:a4:ed:d4:
97:c9:14:70:66:48:64:8e:09:7e:96:09:c0:b4:ba:f2:e9:5b:
03:88:e9:5e:93:b9:a1:60:2a:a3:1c:65:b7:ff:bb:85:df:6e:
ee:61:04:6b:69:b0:30:05:24:8e:3c:12:f9:13:1c:fc:33:50:
ce:18:fa:29:b1:1f:64:81:ce:f1:ca:4f:0d:0a:34:6a:5a:89:
09:2a:b6:39:f7:98:b2:d4:f9:10:58:aa:a0:ec:49:cb:f5:2d:
1c:aa:88:e5:e7:9e:2f:22:d3:1a:ba:ef:c4:32:bc:4b:13:61:
b5:e5:81:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:03:09 2026 by rpki-client