Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/9d8598-e9e2-4709-b535-6b04aadeef10/1/CGKC51Eob7vsx16m7cwlQZLFXHY.mft
File: CGKC51Eob7vsx16m7cwlQZLFXHY.mft (raw, json)
Hash identifier: hwRdPq53Z+opYe+IssUdli+gJhXlea6cwTyAZUnEYQ0=
Subject key identifier: C9:70:F9:F9:13:CF:6C:9F:A5:17:42:41:21:42:E0:3B:76:ED:7C:FA
Authority key identifier: 08:62:82:E7:51:28:6F:BB:EC:C7:5E:A6:ED:CC:25:41:92:C5:5C:76
Certificate issuer: /CN=086282e751286fbbecc75ea6edcc254192c55c76
Certificate serial: 019F1754F1EFFB170AF92AD5A9F55A93234B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CGKC51Eob7vsx16m7cwlQZLFXHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/9d8598-e9e2-4709-b535-6b04aadeef10/1/CGKC51Eob7vsx16m7cwlQZLFXHY.mft
Manifest number: 198B
Signing time: Tue 30 Jun 2026 07:01:10 +0000
Manifest this update: Tue 30 Jun 2026 07:01:10 +0000
Manifest next update: Wed 01 Jul 2026 07:01:10 +0000
Files and hashes: 1: CGKC51Eob7vsx16m7cwlQZLFXHY.crl (hash: 3TSRsE2PvH4yqaxOhvlMcZ2YLB5heutvTCPZlq460YQ=)
2: EWdn2dAvIsQSnWq-qfqoFQud5JU.roa (hash: vWk3309wRqpMvn92uqTEGWfnbFV7KQGX6oN/Zj7IR6g=)
3: sV-mYML_TKE38eTlgadihi7XoEg.roa (hash: DlzC9cilbThgBPbjJV0pjmCFEg1K/ZCcTUpF4AIBnD4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/9d8598-e9e2-4709-b535-6b04aadeef10/1/CGKC51Eob7vsx16m7cwlQZLFXHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/9d8598-e9e2-4709-b535-6b04aadeef10/1/CGKC51Eob7vsx16m7cwlQZLFXHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CGKC51Eob7vsx16m7cwlQZLFXHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 07:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:54:f1:ef:fb:17:0a:f9:2a:d5:a9:f5:5a:93:23:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=086282e751286fbbecc75ea6edcc254192c55c76
Validity
Not Before: Jun 30 07:01:10 2026 GMT
Not After : Jul 1 07:01:10 2026 GMT
Subject: CN=c970f9f913cf6c9fa51742412142e03b76ed7cfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:cb:5e:92:83:6d:a5:49:3a:de:09:b1:65:d5:
cf:cd:a4:08:4b:a9:4d:35:26:71:e9:f5:b6:6a:ff:
09:b9:8e:15:b5:a3:d5:db:da:27:25:09:81:e3:70:
d1:51:a2:72:ed:0a:cc:12:56:52:e7:07:c7:64:33:
c5:06:92:71:91:69:b5:0d:e7:2c:79:3b:f6:f0:11:
68:29:b9:e2:b7:85:54:2f:0b:c1:33:c2:94:e2:48:
6b:65:bc:e3:ea:c4:e4:a6:71:90:04:b3:18:23:8a:
48:48:22:da:94:90:cb:92:00:fa:a2:ff:91:c1:8d:
d9:ce:31:6d:48:fc:2a:2b:27:42:9e:60:16:bf:8d:
97:c8:7a:40:ab:f2:c6:6c:bd:9a:0f:37:ac:59:bd:
e7:40:15:07:78:35:99:12:b9:2a:4a:88:70:ed:1f:
08:32:c0:04:12:4d:0b:2c:26:ff:eb:2d:4c:eb:57:
c8:98:c1:61:97:69:35:91:96:ec:3c:07:0a:9e:2f:
ff:64:fd:97:cb:1a:2b:e9:70:b9:ef:41:a8:13:cb:
c9:96:f1:cf:67:77:b7:83:75:fc:aa:ad:72:52:8b:
28:c7:5f:13:7f:89:2d:4e:81:48:62:bc:8a:ed:52:
31:05:c6:20:db:7d:b9:dc:82:71:38:a4:82:5d:8a:
34:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:70:F9:F9:13:CF:6C:9F:A5:17:42:41:21:42:E0:3B:76:ED:7C:FA
X509v3 Authority Key Identifier:
keyid:08:62:82:E7:51:28:6F:BB:EC:C7:5E:A6:ED:CC:25:41:92:C5:5C:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CGKC51Eob7vsx16m7cwlQZLFXHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/9d8598-e9e2-4709-b535-6b04aadeef10/1/CGKC51Eob7vsx16m7cwlQZLFXHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/9d8598-e9e2-4709-b535-6b04aadeef10/1/CGKC51Eob7vsx16m7cwlQZLFXHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:db:d2:49:a7:ed:5d:27:70:00:28:27:57:29:0f:af:fd:62:
9c:15:d7:c8:6d:15:11:5c:15:49:d4:a4:60:f9:55:bb:4e:ce:
3a:1d:fe:82:1f:7a:33:a3:d5:e7:41:66:f6:73:b5:0e:d5:4f:
a7:87:57:e3:ce:ed:08:ff:b3:2f:00:02:cc:44:98:37:35:11:
8d:bb:37:55:37:35:ec:1b:15:1b:7d:3c:bd:ee:02:5c:4a:0c:
27:08:a3:f2:a7:fe:41:f2:da:be:02:3c:b9:52:af:5a:83:a3:
cc:f0:f0:04:b3:e9:2f:66:a8:12:be:e8:ee:3a:c1:71:36:75:
71:b4:64:46:9c:e5:87:93:69:29:12:7b:f5:04:98:e8:c2:7c:
bf:8a:8d:36:0f:93:e7:46:ac:33:cd:a1:8d:b5:61:cc:d7:a0:
05:6b:b6:99:f1:9c:14:fd:f8:86:1c:b3:3c:64:5e:47:32:51:
07:b9:53:fe:d3:c9:18:78:81:f6:87:61:07:2f:8b:df:7a:c9:
a4:b3:2f:7a:eb:5b:8e:92:9b:55:96:aa:26:33:ad:76:fa:bd:
88:11:e1:ec:ec:e2:69:0a:67:33:52:80:ff:18:8a:2a:c2:3c:
6b:07:7a:41:45:25:a5:b6:30:7e:b3:49:55:e7:e5:f3:8d:5f:
e4:a0:84:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:24:24 2026 by rpki-client