Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.mft
File: CGQ46YiTiYKfpfUbaiEHMQgurCI.mft (raw, json)
Hash identifier: WkymD3snd3wacFVChOX2DSOdT8XOPoOZIJF/SCAltpo=
Subject key identifier: 72:CB:FE:31:F9:6E:54:39:C6:B9:6E:B5:60:A3:78:19:7D:CC:C5:9B
Authority key identifier: 08:64:38:E9:88:93:89:82:9F:A5:F5:1B:6A:21:07:31:08:2E:AC:22
Certificate issuer: /CN=086438e9889389829fa5f51b6a210731082eac22
Certificate serial: 019F17C23E6CD65ADD322C8E64FF27C3973C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CGQ46YiTiYKfpfUbaiEHMQgurCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.mft
Manifest number: 0927
Signing time: Tue 30 Jun 2026 09:00:33 +0000
Manifest this update: Tue 30 Jun 2026 09:00:33 +0000
Manifest next update: Wed 01 Jul 2026 09:00:33 +0000
Files and hashes: 1: 1-qgEtfD7o34ZK5y_c1RY5TzHJL8.roa (hash: X2khWZbYiIgXPJldeRx2uDRFmMi59ge/KSoidBbk1W0=)
2: CGQ46YiTiYKfpfUbaiEHMQgurCI.crl (hash: EgdY+vLrbsZqII/ZBfRVczJEIZUqfvN7SBdaXwtHPyc=)
3: KS3gSsDRatqoleacB_dktcBbY2M.roa (hash: WbFmHVs4aB8N9NQu1Q9tJalzkeMamudIYW/ZZUkdB1k=)
4: Moxn3iWlB5DXKcsT3Hpix-jum0w.roa (hash: 3VaeGFqKYdLPf7mP0u+ieEaG1+gde8oE5cPWlEgSrKI=)
5: Zw5WYMZLpFX4Ksnc0ifaTvkcsXY.roa (hash: C18fBB7Cy74JOp9p1wDCXKCvqBCj8z0bWarhgimOnzk=)
6: _ussT5RkZH-7W87cA2uGw42C8U0.roa (hash: 3dSzoFgNBeGblUUioE5+ZT8IgwplKW5Jsk723lgi4Ks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.mft
rsync://rpki.ripe.net/repository/DEFAULT/CGQ46YiTiYKfpfUbaiEHMQgurCI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 09:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:c2:3e:6c:d6:5a:dd:32:2c:8e:64:ff:27:c3:97:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=086438e9889389829fa5f51b6a210731082eac22
Validity
Not Before: Jun 30 09:00:33 2026 GMT
Not After : Jul 1 09:00:33 2026 GMT
Subject: CN=72cbfe31f96e5439c6b96eb560a378197dccc59b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3e:1b:90:20:5a:54:b9:ab:9e:31:15:91:76:
f2:e3:b6:b4:7a:c9:39:d1:17:0b:f9:c2:1c:9a:0d:
9c:6d:e7:59:b2:f2:72:70:b7:88:54:af:74:a2:4b:
c0:2e:c7:96:8a:75:33:70:17:d2:f2:e6:28:3e:19:
a6:1a:dd:d0:54:18:7b:a7:2a:7f:ec:65:9d:5a:c4:
11:4b:d9:1a:8e:a8:23:ac:58:17:23:cd:e1:5e:ab:
49:09:50:a0:f7:65:83:9b:d3:31:e2:f9:d8:b8:74:
2c:98:d0:da:0a:74:53:57:aa:9a:bc:0c:75:23:a2:
41:0d:5a:f8:f0:51:b7:1e:81:83:92:de:84:94:28:
8f:1c:bb:60:e8:d6:b8:06:e3:87:7b:40:d4:0a:02:
18:a4:c5:84:8f:27:48:e2:7d:b1:e9:1e:46:68:56:
e8:6e:ca:12:26:b9:fa:d6:e4:9b:77:cb:89:ef:cd:
30:e0:ed:cd:21:34:53:fa:84:9f:09:5a:2a:88:9f:
43:4b:60:35:04:5e:6c:da:ab:9c:c5:fb:89:7e:e2:
cf:8c:b7:50:a8:d6:58:9b:a6:79:9d:82:3d:6d:93:
12:ed:52:bc:7c:ac:ec:1e:a9:54:b0:0f:71:bf:88:
1b:25:97:d6:70:25:cf:c6:ed:e2:4b:f7:30:0d:aa:
c7:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:CB:FE:31:F9:6E:54:39:C6:B9:6E:B5:60:A3:78:19:7D:CC:C5:9B
X509v3 Authority Key Identifier:
keyid:08:64:38:E9:88:93:89:82:9F:A5:F5:1B:6A:21:07:31:08:2E:AC:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CGQ46YiTiYKfpfUbaiEHMQgurCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:48:27:ec:5e:03:b0:20:e1:a6:20:95:cf:a4:cc:ce:14:6b:
68:5c:79:80:3f:ad:6c:7e:95:41:e8:3f:c3:c4:f3:b7:3b:c4:
1c:29:76:4e:73:8b:ab:cd:f4:18:1a:81:b7:8d:07:8c:e7:48:
2f:71:1b:1c:bf:a7:d3:93:d9:b7:85:83:d7:0b:a3:fc:b8:1b:
68:40:d9:de:21:88:db:0d:5d:7c:31:e2:37:3a:71:eb:9b:f6:
92:29:db:7a:33:0f:b7:08:df:b2:8f:07:ed:fd:05:09:68:17:
27:c5:52:a4:2b:08:dd:ba:0c:9e:68:f7:53:e6:a6:26:60:af:
59:2b:34:c5:66:b7:8d:42:d9:27:fa:b9:8c:dd:d8:65:b9:21:
e4:3c:20:e6:e6:df:e3:11:71:53:b8:2b:1d:03:1e:ed:f5:fb:
0f:fc:d6:4c:52:23:e7:60:6b:08:2d:4f:42:ea:5b:6e:8b:fd:
c2:44:03:6e:56:5e:77:0c:56:fd:07:8b:c4:46:7d:b6:76:b7:
ef:d1:3a:2b:68:04:a0:a9:bc:51:5b:42:c2:06:b1:60:2e:bb:
8d:92:d6:b6:17:c9:60:0e:d6:f7:1d:11:10:17:9a:e4:14:6d:
e8:bb:31:4e:ea:61:76:59:d1:01:2e:02:cd:a6:b8:96:fd:99:
04:94:c7:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:18:13 2026 by rpki-client