Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.mft
File: CGQ46YiTiYKfpfUbaiEHMQgurCI.mft (raw, json)
Hash identifier: +xazPFQEjwITxlzM+5tCk5mSjlPlGLkWh7sNZ8lr0Ys=
Subject key identifier: 7D:BA:C4:80:75:C6:0F:21:2D:82:3E:50:78:D8:91:81:03:5C:DD:79
Authority key identifier: 08:64:38:E9:88:93:89:82:9F:A5:F5:1B:6A:21:07:31:08:2E:AC:22
Certificate issuer: /CN=086438e9889389829fa5f51b6a210731082eac22
Certificate serial: 01A10813CE62DFBCD7509129B7C645CD657F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CGQ46YiTiYKfpfUbaiEHMQgurCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.mft
Manifest number: 0A28
Signing time: Sun 04 Oct 2026 18:01:17 +0000
Manifest this update: Sun 04 Oct 2026 18:01:17 +0000
Manifest next update: Mon 05 Oct 2026 18:01:17 +0000
Files and hashes: 1: 1-qgEtfD7o34ZK5y_c1RY5TzHJL8.roa (hash: X2khWZbYiIgXPJldeRx2uDRFmMi59ge/KSoidBbk1W0=)
2: CGQ46YiTiYKfpfUbaiEHMQgurCI.crl (hash: 3hweogTLbIakNmYizikPtsdHasFhLfdkjg2NSaMAsQc=)
3: KS3gSsDRatqoleacB_dktcBbY2M.roa (hash: WbFmHVs4aB8N9NQu1Q9tJalzkeMamudIYW/ZZUkdB1k=)
4: Moxn3iWlB5DXKcsT3Hpix-jum0w.roa (hash: 3VaeGFqKYdLPf7mP0u+ieEaG1+gde8oE5cPWlEgSrKI=)
5: Zw5WYMZLpFX4Ksnc0ifaTvkcsXY.roa (hash: C18fBB7Cy74JOp9p1wDCXKCvqBCj8z0bWarhgimOnzk=)
6: _ussT5RkZH-7W87cA2uGw42C8U0.roa (hash: 3dSzoFgNBeGblUUioE5+ZT8IgwplKW5Jsk723lgi4Ks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.mft
rsync://rpki.ripe.net/repository/DEFAULT/CGQ46YiTiYKfpfUbaiEHMQgurCI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 18:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:08:13:ce:62:df:bc:d7:50:91:29:b7:c6:45:cd:65:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=086438e9889389829fa5f51b6a210731082eac22
Validity
Not Before: Oct 4 18:01:17 2026 GMT
Not After : Oct 5 18:01:17 2026 GMT
Subject: CN=7dbac48075c60f212d823e5078d89181035cdd79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:0a:8a:a5:c1:e4:56:01:74:d8:a5:3c:b6:a8:
81:6b:ae:52:88:6b:18:8e:74:b5:6a:b5:d2:99:7d:
73:1c:5e:75:79:38:57:1f:a2:5d:d4:a6:0c:88:68:
9b:0a:43:54:8e:f7:db:5c:00:1f:26:c9:e1:f0:a2:
fe:b3:82:61:da:5f:a2:2c:c8:fc:98:76:2b:c6:03:
21:36:aa:66:d0:f5:cd:e5:cf:a3:41:a4:ca:30:df:
81:31:b4:eb:8f:6c:a9:ab:45:e3:de:07:7e:5d:59:
af:d8:6f:b5:8c:11:02:a7:63:27:14:22:14:84:15:
0b:dd:f9:07:b9:f0:ab:03:ab:65:3c:05:82:37:b9:
24:39:22:2a:80:0a:de:60:d0:1f:98:f4:39:6c:48:
55:3f:47:1c:09:0a:9f:e3:1d:bc:61:22:ea:0a:80:
23:0b:f4:65:1d:5d:a5:d9:81:df:fa:18:8e:a3:cd:
8d:9b:96:61:bf:f7:fc:0c:47:9a:b3:27:9c:02:2f:
67:e9:9b:d4:78:13:0d:47:4a:f9:d1:d2:2a:9c:8f:
d1:64:a7:82:ed:90:03:2f:f4:ea:98:22:e0:e5:0f:
e5:ee:10:ba:a2:42:03:9d:96:80:ce:d9:66:35:d7:
82:fc:57:3f:d9:7f:fa:8b:1f:a0:42:f5:8a:65:2a:
00:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:BA:C4:80:75:C6:0F:21:2D:82:3E:50:78:D8:91:81:03:5C:DD:79
X509v3 Authority Key Identifier:
keyid:08:64:38:E9:88:93:89:82:9F:A5:F5:1B:6A:21:07:31:08:2E:AC:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CGQ46YiTiYKfpfUbaiEHMQgurCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:88:97:40:04:01:bb:e1:11:47:35:96:71:49:77:fb:0c:58:
f8:99:03:1d:91:ec:3a:c7:92:1f:a9:15:0b:ca:d3:30:95:d9:
62:b1:1e:f9:a4:33:64:91:d7:d5:3d:82:6a:54:56:c7:b4:71:
c2:ee:d5:61:8b:b8:e1:0f:a2:e7:90:0c:81:b1:f3:bb:fa:84:
13:11:d3:f9:6f:6c:9b:6f:8b:9f:ff:0a:d4:5c:b5:b1:0d:d4:
0d:80:15:99:35:a2:cf:a1:c3:84:66:c3:70:3c:58:93:c7:be:
57:e7:15:aa:02:19:62:1d:54:a5:77:98:d5:be:22:1a:12:c1:
5a:17:b0:d7:7c:9e:09:a6:4a:89:7d:ff:77:30:1f:e0:98:4c:
d8:cc:24:fd:03:a6:68:08:ed:c2:4f:4c:af:06:47:c4:ed:22:
23:a8:32:74:da:ba:3a:92:b6:39:c1:10:c9:f2:cc:94:87:9a:
2e:06:b1:ba:e3:b9:6a:6c:92:c2:a9:2d:d4:f1:99:6c:a5:4e:
96:9d:e8:98:06:ce:a8:26:f1:1c:1e:9b:5e:84:52:3b:96:64:
0e:57:00:94:d6:b2:99:ba:c9:bf:a7:2e:d4:9c:8b:7e:5b:aa:
56:20:61:8c:42:0b:e0:dd:5d:3f:40:c0:c7:ee:b2:f6:50:3f:
e9:04:ec:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEIE85i37zXUJEpt8ZFzWV/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4NjQzOGU5ODg5Mzg5ODI5ZmE1ZjUxYjZhMjEwNzMxMDgy
ZWFjMjIwHhcNMjYxMDA0MTgwMTE3WhcNMjYxMDA1MTgwMTE3WjAzMTEwLwYDVQQD
Eyg3ZGJhYzQ4MDc1YzYwZjIxMmQ4MjNlNTA3OGQ4OTE4MTAzNWNkZDc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiQqKpcHkVgF02KU8tqiBa65SiGsY
jnS1arXSmX1zHF51eThXH6Jd1KYMiGibCkNUjvfbXAAfJsnh8KL+s4Jh2l+iLMj8
mHYrxgMhNqpm0PXN5c+jQaTKMN+BMbTrj2ypq0Xj3gd+XVmv2G+1jBECp2MnFCIU
hBUL3fkHufCrA6tlPAWCN7kkOSIqgAreYNAfmPQ5bEhVP0ccCQqf4x28YSLqCoAj
C/RlHV2l2YHf+hiOo82Nm5Zhv/f8DEeasyecAi9n6ZvUeBMNR0r50dIqnI/RZKeC
7ZADL/TqmCLg5Q/l7hC6okIDnZaAztlmNdeC/Fc/2X/6ix+gQvWKZSoAuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH26xIB1xg8hLYI+UHjYkYEDXN15MB8GA1UdIwQY
MBaAFAhkOOmIk4mCn6X1G2ohBzEILqwiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0dRNDZZaVRpWUtmcGZVYmFpRUhNUWd1ckNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9lNDlhZTctYTUxYS00NzY0LTg1Yzgt
YTc4MTBlM2ExYmViLzEvQ0dRNDZZaVRpWUtmcGZVYmFpRUhNUWd1ckNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9lNDlhZTctYTUxYS00NzY0LTg1YzgtYTc4MTBlM2ExYmVi
LzEvQ0dRNDZZaVRpWUtmcGZVYmFpRUhNUWd1ckNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQYiXQAQB
u+ERRzWWcUl3+wxY+JkDHZHsOseSH6kVC8rTMJXZYrEe+aQzZJHX1T2CalRWx7Rx
wu7VYYu44Q+i55AMgbHzu/qEExHT+W9sm2+Ln/8K1Fy1sQ3UDYAVmTWiz6HDhGbD
cDxYk8e+V+cVqgIZYh1UpXeY1b4iGhLBWhew13yeCaZKiX3/dzAf4JhM2Mwk/QOm
aAjtwk9MrwZHxO0iI6gydNq6OpK2OcEQyfLMlIeaLgaxuuO5amySwqkt1PGZbKVO
lp3omAbOqCbxHB6bXoRSO5ZkDlcAlNaymbrJv6cu1JyLfluqViBhjEIL4N1dP0DA
x+6y9lA/6QTsfw==
-----END CERTIFICATE-----
Generated at Mon Oct 5 08:29:24 2026 by rpki-client