Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e5/cef3b5-a848-43d5-873a-0757a6d28224/1/CGZINfiq_mFJcf-oaD-fdL9ND_Q.mft
File: CGZINfiq_mFJcf-oaD-fdL9ND_Q.mft (raw, json)
Hash identifier: JcVc7Rtx9drGI0Duf+/1JcfNUxXSfzKmhCJ7sHRogsE=
Subject key identifier: FB:79:32:95:D8:B9:0D:CA:D2:77:4C:31:DB:C4:2B:FC:3F:35:D4:B7
Authority key identifier: 08:66:48:35:F8:AA:FE:61:49:71:FF:A8:68:3F:9F:74:BF:4D:0F:F4
Certificate issuer: /CN=08664835f8aafe614971ffa8683f9f74bf4d0ff4
Certificate serial: 01A0D5395F088EA0CDE328C6077875E0459B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CGZINfiq_mFJcf-oaD-fdL9ND_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/cef3b5-a848-43d5-873a-0757a6d28224/1/CGZINfiq_mFJcf-oaD-fdL9ND_Q.mft
Manifest number: 12B2
Signing time: Thu 24 Sep 2026 21:01:41 +0000
Manifest this update: Thu 24 Sep 2026 21:01:41 +0000
Manifest next update: Fri 25 Sep 2026 21:01:41 +0000
Files and hashes: 1: 5F8EPRCwAO9R0s3emE3nMIVi-i8.roa (hash: nyuBuPwwDb0keiCkpqhAWuHjHqCL5kLPWyJJ50t6Ers=)
2: CGZINfiq_mFJcf-oaD-fdL9ND_Q.crl (hash: mqozigqnmKPmluT4pcJOzYye4AE+hWHFDDlgX8UoktM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/cef3b5-a848-43d5-873a-0757a6d28224/1/CGZINfiq_mFJcf-oaD-fdL9ND_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/cef3b5-a848-43d5-873a-0757a6d28224/1/CGZINfiq_mFJcf-oaD-fdL9ND_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/CGZINfiq_mFJcf-oaD-fdL9ND_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:39:5f:08:8e:a0:cd:e3:28:c6:07:78:75:e0:45:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08664835f8aafe614971ffa8683f9f74bf4d0ff4
Validity
Not Before: Sep 24 21:01:41 2026 GMT
Not After : Sep 25 21:01:41 2026 GMT
Subject: CN=fb793295d8b90dcad2774c31dbc42bfc3f35d4b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:00:3a:de:4d:83:a8:79:40:de:1c:32:da:59:
f3:54:71:53:a9:66:d9:e0:d6:d9:b2:37:79:84:cd:
ea:ec:8e:d8:fb:e8:25:66:88:bd:18:69:e9:6d:63:
80:94:89:11:18:d9:e6:f2:1e:0e:d2:37:4e:46:98:
c7:36:47:21:16:55:1a:5b:26:8f:81:62:fd:cc:b1:
cc:54:44:84:be:08:ab:fd:b1:d3:8b:9e:b0:55:89:
c5:43:56:0f:a7:52:58:55:cb:ea:bc:e2:c2:ae:4b:
7c:cc:46:7d:7a:e2:86:d1:94:6f:28:f7:4e:fd:ca:
00:e8:18:4e:b2:91:39:18:8b:07:80:9a:8e:9a:3a:
b4:56:68:53:03:d1:82:4f:7e:b1:62:81:05:72:b0:
75:ad:06:16:9e:9d:fb:f5:cc:8c:3f:db:52:d7:b8:
c4:87:c2:17:84:10:52:fb:71:9b:bb:45:b7:6e:a0:
1c:b3:94:31:5a:07:10:3d:d0:30:49:0a:bb:25:61:
4b:54:9f:97:b4:f5:4e:4c:ac:d2:0e:6c:76:d7:f9:
26:d4:96:90:c2:52:c4:ea:7c:60:29:ee:4c:c3:e6:
7e:54:3a:b6:f5:e8:eb:13:c1:a6:c1:fa:6e:12:d0:
74:fa:bb:b6:a2:e4:d1:ae:c0:a2:ec:23:d1:83:91:
e3:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:79:32:95:D8:B9:0D:CA:D2:77:4C:31:DB:C4:2B:FC:3F:35:D4:B7
X509v3 Authority Key Identifier:
keyid:08:66:48:35:F8:AA:FE:61:49:71:FF:A8:68:3F:9F:74:BF:4D:0F:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CGZINfiq_mFJcf-oaD-fdL9ND_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/cef3b5-a848-43d5-873a-0757a6d28224/1/CGZINfiq_mFJcf-oaD-fdL9ND_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/cef3b5-a848-43d5-873a-0757a6d28224/1/CGZINfiq_mFJcf-oaD-fdL9ND_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:69:40:06:d1:92:b1:79:2b:99:f5:7a:d6:3c:c0:83:56:12:
00:6e:1a:bc:0d:b9:95:c3:c3:60:b9:bc:75:7f:33:60:4d:53:
ed:da:8d:96:60:54:40:7f:82:0a:08:d9:64:d3:8c:c7:bd:ad:
31:f7:ff:a9:1e:43:88:95:a7:cc:06:13:91:db:f4:2b:c7:18:
32:d6:d9:8e:83:47:f2:5c:e5:96:6a:eb:51:26:f1:71:36:84:
73:c2:16:26:cb:19:bb:0f:da:89:13:a4:12:93:7d:cd:18:38:
db:46:b7:ea:df:6c:2e:cc:8d:37:be:7a:f3:fc:70:38:f9:0c:
09:85:40:ed:b0:aa:d9:c9:1b:c6:bf:38:d5:36:90:4b:20:8d:
2d:fe:5b:eb:18:1c:78:e1:a2:97:c2:94:5c:0d:1e:b1:04:62:
09:d0:44:f2:a2:93:80:3d:24:18:e1:f8:12:fa:73:88:29:18:
fd:5f:3c:ad:26:26:5b:5e:ad:8e:24:54:9c:d8:2e:34:0a:17:
4c:81:3a:a9:e3:d8:13:4c:cc:61:f6:2d:d5:fb:2c:74:7a:d6:
37:a3:e0:bc:5e:3b:6d:18:7a:38:99:b1:9a:cd:af:ac:09:d0:
81:4e:00:58:c7:0d:f7:b4:71:77:9d:9f:bd:9a:ec:71:76:6b:
90:51:9c:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDVOV8IjqDN4yjGB3h14EWbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4NjY0ODM1ZjhhYWZlNjE0OTcxZmZhODY4M2Y5Zjc0YmY0
ZDBmZjQwHhcNMjYwOTI0MjEwMTQxWhcNMjYwOTI1MjEwMTQxWjAzMTEwLwYDVQQD
EyhmYjc5MzI5NWQ4YjkwZGNhZDI3NzRjMzFkYmM0MmJmYzNmMzVkNGI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAygA63k2DqHlA3hwy2lnzVHFTqWbZ
4NbZsjd5hM3q7I7Y++glZoi9GGnpbWOAlIkRGNnm8h4O0jdORpjHNkchFlUaWyaP
gWL9zLHMVESEvgir/bHTi56wVYnFQ1YPp1JYVcvqvOLCrkt8zEZ9euKG0ZRvKPdO
/coA6BhOspE5GIsHgJqOmjq0VmhTA9GCT36xYoEFcrB1rQYWnp379cyMP9tS17jE
h8IXhBBS+3Gbu0W3bqAcs5QxWgcQPdAwSQq7JWFLVJ+XtPVOTKzSDmx21/km1JaQ
wlLE6nxgKe5Mw+Z+VDq29ejrE8GmwfpuEtB0+ru2ouTRrsCi7CPRg5HjawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPt5MpXYuQ3K0ndMMdvEK/w/NdS3MB8GA1UdIwQY
MBaAFAhmSDX4qv5hSXH/qGg/n3S/TQ/0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0daSU5maXFfbUZKY2Ytb2FELWZkTDlORF9RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9jZWYzYjUtYTg0OC00M2Q1LTg3M2Et
MDc1N2E2ZDI4MjI0LzEvQ0daSU5maXFfbUZKY2Ytb2FELWZkTDlORF9RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS9jZWYzYjUtYTg0OC00M2Q1LTg3M2EtMDc1N2E2ZDI4MjI0
LzEvQ0daSU5maXFfbUZKY2Ytb2FELWZkTDlORF9RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQWlABtGS
sXkrmfV61jzAg1YSAG4avA25lcPDYLm8dX8zYE1T7dqNlmBUQH+CCgjZZNOMx72t
Mff/qR5DiJWnzAYTkdv0K8cYMtbZjoNH8lzllmrrUSbxcTaEc8IWJssZuw/aiROk
EpN9zRg420a36t9sLsyNN7568/xwOPkMCYVA7bCq2ckbxr841TaQSyCNLf5b6xgc
eOGil8KUXA0esQRiCdBE8qKTgD0kGOH4EvpziCkY/V88rSYmW16tjiRUnNguNAoX
TIE6qePYE0zMYfYt1fssdHrWN6PgvF47bRh6OJmxms2vrAnQgU4AWMcN97Rxd52f
vZrscXZrkFGc+A==
-----END CERTIFICATE-----
Generated at Thu Sep 24 23:50:07 2026 by rpki-client