Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.mft
File: CGQ46YiTiYKfpfUbaiEHMQgurCI.mft (raw, json)
Hash identifier: hjNQOrcHJExNaV9TGnFsGWg8hADf36FCYWfElh8st24=
Subject key identifier: FF:68:95:C7:00:D5:A4:66:2E:03:38:31:51:83:45:B5:6B:F8:A9:0B
Authority key identifier: 08:64:38:E9:88:93:89:82:9F:A5:F5:1B:6A:21:07:31:08:2E:AC:22
Certificate issuer: /CN=086438e9889389829fa5f51b6a210731082eac22
Certificate serial: 019E258145A8D35FAA2A3E4B448896FA0DFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CGQ46YiTiYKfpfUbaiEHMQgurCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.mft
Manifest number: 08A7
Signing time: Thu 14 May 2026 08:01:29 +0000
Manifest this update: Thu 14 May 2026 08:01:29 +0000
Manifest next update: Fri 15 May 2026 08:01:29 +0000
Files and hashes: 1: Axye6lnTQ2trM0NHgM46yPjQ3MM.roa (hash: 9auVk/IbutJ4boG/8uYOIyssY/B2u2+Nq7L55636P0g=)
2: CGQ46YiTiYKfpfUbaiEHMQgurCI.crl (hash: 04nq3oyMRBbWzva56CTxD+M1kbIn1pRdr5EBsyWnOP8=)
3: X9mUy2Qmlcpzq97SwEuUMl5clw8.roa (hash: mfJZmnebhhFlGgYhM59XqpgvJNro8sf2A4t93xuL91I=)
4: Zw5WYMZLpFX4Ksnc0ifaTvkcsXY.roa (hash: C18fBB7Cy74JOp9p1wDCXKCvqBCj8z0bWarhgimOnzk=)
5: _ussT5RkZH-7W87cA2uGw42C8U0.roa (hash: 3dSzoFgNBeGblUUioE5+ZT8IgwplKW5Jsk723lgi4Ks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.mft
rsync://rpki.ripe.net/repository/DEFAULT/CGQ46YiTiYKfpfUbaiEHMQgurCI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 15 May 2026 07:02:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:25:81:45:a8:d3:5f:aa:2a:3e:4b:44:88:96:fa:0d:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=086438e9889389829fa5f51b6a210731082eac22
Validity
Not Before: May 14 08:01:29 2026 GMT
Not After : May 15 08:01:29 2026 GMT
Subject: CN=ff6895c700d5a4662e033831518345b56bf8a90b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:3a:3a:10:c4:a8:5a:1f:0e:da:e8:b4:86:bb:
9e:06:79:ee:d2:47:3e:0b:42:f5:d9:0d:72:f5:d8:
7a:cc:7b:4e:f6:3a:0d:a3:87:dd:11:d0:e6:66:f5:
27:4b:db:7a:e4:82:50:9d:01:35:45:18:fa:8e:04:
2c:06:06:0f:f6:a2:de:15:47:43:05:a1:2a:f2:e0:
c4:fe:d4:f4:2f:4a:34:46:62:55:a5:f5:27:84:6e:
a6:43:cf:b2:f6:07:22:a5:4a:d1:eb:dd:84:92:3a:
97:a9:03:7a:eb:d8:62:68:6b:82:77:ec:13:6a:94:
15:04:1c:b0:bc:a7:f3:be:a1:87:46:4b:3b:4a:69:
fe:2c:a2:72:07:99:a7:60:26:90:85:0e:2f:3d:ae:
53:c0:d9:00:bd:43:96:29:11:90:03:76:f8:c8:e9:
2a:43:1a:a3:4a:be:4a:64:5a:f9:d9:18:44:88:51:
20:5f:a8:77:46:53:c5:c6:93:03:c4:e9:bf:ab:66:
42:d9:07:3d:2d:88:f1:11:20:59:71:ee:bd:5c:b6:
ee:48:f4:e3:c5:76:4f:ed:f0:b9:0b:9a:9b:60:25:
81:7f:75:0c:ed:4f:88:4a:12:3d:49:a9:9f:d4:34:
96:7a:cf:aa:68:78:87:d6:da:8d:e3:27:72:43:6b:
1e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:68:95:C7:00:D5:A4:66:2E:03:38:31:51:83:45:B5:6B:F8:A9:0B
X509v3 Authority Key Identifier:
keyid:08:64:38:E9:88:93:89:82:9F:A5:F5:1B:6A:21:07:31:08:2E:AC:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CGQ46YiTiYKfpfUbaiEHMQgurCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:c1:78:2c:29:f3:d0:a1:fc:74:a3:86:0d:a4:96:8c:8f:9a:
b4:7a:a1:d9:c3:91:02:c5:e1:c5:96:aa:0f:3d:0c:b7:89:3e:
03:0e:7d:ba:16:41:0d:13:c4:2b:ba:6b:cf:4f:8c:b3:c5:3e:
c2:eb:39:79:88:72:68:82:a0:2d:00:4a:b1:26:71:86:29:7b:
9c:58:de:22:86:31:78:54:83:2a:ab:50:e4:03:d6:e2:66:95:
be:6b:4a:90:db:a7:d6:f1:49:86:19:74:2a:dc:d1:24:f5:b5:
51:ae:d8:ad:48:4a:4a:91:92:f0:50:7d:29:02:4a:38:ab:e3:
c4:fc:37:c8:ff:97:4e:e0:aa:7a:17:07:b8:36:aa:78:19:d3:
65:36:4a:87:57:fc:80:5c:75:1d:28:97:14:c1:99:a5:d3:7e:
c9:72:28:c8:d7:44:0e:71:27:14:14:15:9a:45:c9:24:b7:5d:
3b:45:58:f2:d0:35:52:ff:4e:ee:59:68:c0:3e:fe:42:dc:d6:
44:ca:bc:d2:9c:87:9d:31:8e:33:6b:e7:83:b9:d7:d5:8e:d4:
a0:99:53:ae:5f:e6:8d:7b:1d:87:92:eb:e9:95:2d:8d:d2:80:
05:47:ee:67:09:d4:27:45:65:34:4b:c4:cb:c5:08:5a:9a:87:
5c:eb:3d:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 14 10:44:13 2026 by rpki-client