Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/9d8598-e9e2-4709-b535-6b04aadeef10/1/CGKC51Eob7vsx16m7cwlQZLFXHY.mft
File: CGKC51Eob7vsx16m7cwlQZLFXHY.mft (raw, json)
Hash identifier: jwnv9lZE9BKtCZc1V1aJUpd8o+gSQgEh5MstQfLpEUg=
Subject key identifier: DB:6F:70:BE:E7:F3:35:1E:AA:81:9A:B2:99:04:AB:9D:40:E2:9C:B5
Authority key identifier: 08:62:82:E7:51:28:6F:BB:EC:C7:5E:A6:ED:CC:25:41:92:C5:5C:76
Certificate issuer: /CN=086282e751286fbbecc75ea6edcc254192c55c76
Certificate serial: 019E2F9716BC21BEEC152A71D5E8A0BCBB66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CGKC51Eob7vsx16m7cwlQZLFXHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/9d8598-e9e2-4709-b535-6b04aadeef10/1/CGKC51Eob7vsx16m7cwlQZLFXHY.mft
Manifest number: 1913
Signing time: Sat 16 May 2026 07:01:31 +0000
Manifest this update: Sat 16 May 2026 07:01:31 +0000
Manifest next update: Sun 17 May 2026 07:01:31 +0000
Files and hashes: 1: CGKC51Eob7vsx16m7cwlQZLFXHY.crl (hash: kbQRMc6oz86oHH3WeDGhAt+LSZaO1isA8O7LaPNDa8c=)
2: EWdn2dAvIsQSnWq-qfqoFQud5JU.roa (hash: vWk3309wRqpMvn92uqTEGWfnbFV7KQGX6oN/Zj7IR6g=)
3: sV-mYML_TKE38eTlgadihi7XoEg.roa (hash: DlzC9cilbThgBPbjJV0pjmCFEg1K/ZCcTUpF4AIBnD4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/9d8598-e9e2-4709-b535-6b04aadeef10/1/CGKC51Eob7vsx16m7cwlQZLFXHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/9d8598-e9e2-4709-b535-6b04aadeef10/1/CGKC51Eob7vsx16m7cwlQZLFXHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CGKC51Eob7vsx16m7cwlQZLFXHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 07:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2f:97:16:bc:21:be:ec:15:2a:71:d5:e8:a0:bc:bb:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=086282e751286fbbecc75ea6edcc254192c55c76
Validity
Not Before: May 16 07:01:31 2026 GMT
Not After : May 17 07:01:31 2026 GMT
Subject: CN=db6f70bee7f3351eaa819ab29904ab9d40e29cb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:09:63:57:b7:42:e2:df:31:c8:d2:04:1e:e2:
a3:50:a3:c2:23:f4:38:59:05:c0:61:04:af:f8:d1:
56:8b:3c:e8:76:12:7a:51:42:2d:28:7f:da:5c:e4:
42:08:d8:bd:06:c2:ca:db:f6:cd:0e:1b:8b:e9:cd:
9f:fc:1e:d6:c1:07:93:a8:2a:8d:a1:eb:fa:4b:8b:
7b:5c:1b:e0:0a:c7:f1:98:be:03:97:35:22:77:3f:
70:50:a8:36:23:12:09:00:ed:a4:9b:8e:5a:95:06:
4f:77:e4:88:f7:5b:27:e3:88:ef:1e:78:60:f0:86:
bf:ce:6d:2b:ac:96:57:5e:18:84:54:16:23:65:26:
86:91:2c:fe:91:b2:2b:36:2d:44:15:93:81:ce:10:
34:85:ca:f8:3e:f6:9e:08:cf:35:4c:b2:cd:82:73:
6d:2b:dd:fd:f5:cf:bc:2f:4a:c7:ae:73:d7:0a:aa:
c9:6c:9b:f5:34:67:53:82:0c:73:a4:44:6d:5a:28:
d2:6c:a1:cf:c7:d9:58:4b:ed:89:3f:05:01:60:3d:
61:4b:d7:1e:ef:e7:6c:47:af:68:f4:95:f7:b7:43:
3b:b7:08:ed:ae:d6:61:db:5d:26:14:3b:5d:0e:8f:
76:e1:e1:52:1e:11:96:f3:9c:4f:b2:f8:ce:e4:87:
4e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:6F:70:BE:E7:F3:35:1E:AA:81:9A:B2:99:04:AB:9D:40:E2:9C:B5
X509v3 Authority Key Identifier:
keyid:08:62:82:E7:51:28:6F:BB:EC:C7:5E:A6:ED:CC:25:41:92:C5:5C:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CGKC51Eob7vsx16m7cwlQZLFXHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/9d8598-e9e2-4709-b535-6b04aadeef10/1/CGKC51Eob7vsx16m7cwlQZLFXHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/9d8598-e9e2-4709-b535-6b04aadeef10/1/CGKC51Eob7vsx16m7cwlQZLFXHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:ec:94:3d:e4:74:e5:03:f1:b5:89:5d:02:54:36:bd:63:52:
9a:e6:eb:87:00:10:d3:4a:22:d6:88:08:17:fb:f9:db:b1:da:
06:65:b4:43:d8:2f:6c:45:5a:69:7c:31:16:65:08:ef:71:2e:
75:3d:30:cf:f0:10:d3:ca:e5:17:83:08:10:7d:20:17:ee:30:
f4:da:a0:a2:f5:6a:ff:f9:1b:b7:ca:c4:5c:3e:a5:be:1a:11:
87:a7:78:32:3d:79:68:0f:03:e0:7c:78:81:42:0e:77:83:fe:
3d:14:42:e0:00:35:94:fc:e1:75:cb:3f:b7:0c:c0:12:ae:61:
8f:ae:c5:bd:09:aa:65:cf:eb:46:8a:6f:1a:57:dc:d3:f3:f1:
8f:dd:cb:d1:2e:a6:58:dd:7f:d7:39:40:ef:30:6a:76:f9:01:
d1:09:7f:9c:01:18:06:ef:07:fb:d0:bb:21:a7:0d:61:f3:7e:
63:84:cf:65:3f:fb:41:c3:00:9f:b7:e5:ef:b3:17:a0:f5:69:
81:d5:dc:f8:96:8f:ec:32:64:38:4f:96:d6:7a:34:c8:50:40:
fd:df:3c:7e:22:62:de:00:e6:3f:cf:83:83:e2:9d:42:80:cb:
27:b2:63:9c:f7:82:0d:08:90:19:b0:9c:d2:b8:27:e8:00:59:
5b:37:75:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:38:17 2026 by rpki-client