Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/e485e1-a65f-43d4-b572-d3326c59bcd2/1/_CgqeUs_erTNb-tsX9az0lavxGE.mft
File: _CgqeUs_erTNb-tsX9az0lavxGE.mft (raw, json)
Hash identifier: x6LJKHPWPeCO8XBPEmkMQB2Q5bSD5LxPTYxuipQnQPM=
Subject key identifier: 62:AA:48:29:0D:EA:43:FC:84:F7:3D:31:7D:7B:2C:94:D6:5E:0C:64
Authority key identifier: FC:28:2A:79:4B:3F:7A:B4:CD:6F:EB:6C:5F:D6:B3:D2:56:AF:C4:61
Certificate issuer: /CN=fc282a794b3f7ab4cd6feb6c5fd6b3d256afc461
Certificate serial: 019D05F8203B225F3DEFDEF8C7C61691493A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_CgqeUs_erTNb-tsX9az0lavxGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/e485e1-a65f-43d4-b572-d3326c59bcd2/1/_CgqeUs_erTNb-tsX9az0lavxGE.mft
Manifest number: 187D
Signing time: Thu 19 Mar 2026 12:00:40 +0000
Manifest this update: Thu 19 Mar 2026 12:00:40 +0000
Manifest next update: Fri 20 Mar 2026 12:00:40 +0000
Files and hashes: 1: HxA8indcAYi8lBDTHZnwWgbkAio.roa (hash: em1TlDQMm/m+whiE9c240Qp5U+ubPa/+m3LSAa1d6LI=)
2: _AgXfmrENJRGa8SUzw8r4QbpeFc.roa (hash: 5DSjA+45VSfY58OSfrhbacz2KkNvODMfoUqLbPQQxis=)
3: _CgqeUs_erTNb-tsX9az0lavxGE.crl (hash: gRKm36FwYOBmn/xwSUi/9QYWGsFk37FTV/GeAb2JoTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/e485e1-a65f-43d4-b572-d3326c59bcd2/1/_CgqeUs_erTNb-tsX9az0lavxGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/e485e1-a65f-43d4-b572-d3326c59bcd2/1/_CgqeUs_erTNb-tsX9az0lavxGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/_CgqeUs_erTNb-tsX9az0lavxGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Mar 2026 08:03:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:05:f8:20:3b:22:5f:3d:ef:de:f8:c7:c6:16:91:49:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc282a794b3f7ab4cd6feb6c5fd6b3d256afc461
Validity
Not Before: Mar 19 12:00:40 2026 GMT
Not After : Mar 20 12:00:40 2026 GMT
Subject: CN=62aa48290dea43fc84f73d317d7b2c94d65e0c64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:10:b0:ce:59:18:3c:b4:39:df:07:bb:da:0b:
ae:cc:29:e1:f6:17:7f:c3:93:fe:b5:11:c1:3d:34:
c6:b5:f7:9a:3f:e1:8b:91:48:85:40:e7:84:0c:d1:
ea:01:7e:3f:ff:e3:21:38:8c:a0:ec:d0:43:cd:df:
6c:80:7f:92:10:d9:47:c1:46:e9:c8:e9:7b:01:77:
70:c7:89:c6:88:1e:1b:97:a8:b4:1c:05:8c:9a:08:
89:7c:06:2c:b7:2e:38:d1:7f:69:2f:aa:4f:58:48:
f9:46:70:d9:4b:86:ac:bc:8c:28:83:03:a5:c6:06:
5b:8a:74:f1:08:b6:e5:34:42:c2:98:fd:e9:1f:1d:
9e:41:d5:22:bc:d1:d8:e5:be:4f:90:19:15:9e:89:
8f:a9:8d:92:94:30:75:f4:54:b5:24:f7:c7:d9:cc:
75:03:11:56:1f:bc:e6:6d:a2:c4:5b:32:81:98:da:
e0:ef:ed:b6:7f:8a:bf:f5:11:7a:63:7f:bc:da:e8:
77:eb:5c:31:14:2e:ae:7b:b3:8a:0f:d8:49:16:ca:
26:e9:89:0d:da:e6:10:c2:82:42:84:5d:48:6e:27:
84:c8:2c:e6:e5:51:67:bf:57:54:1a:fa:4f:d6:b0:
1f:cf:01:73:65:12:d0:95:f3:ea:c9:6b:a1:57:66:
9e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:AA:48:29:0D:EA:43:FC:84:F7:3D:31:7D:7B:2C:94:D6:5E:0C:64
X509v3 Authority Key Identifier:
keyid:FC:28:2A:79:4B:3F:7A:B4:CD:6F:EB:6C:5F:D6:B3:D2:56:AF:C4:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_CgqeUs_erTNb-tsX9az0lavxGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e485e1-a65f-43d4-b572-d3326c59bcd2/1/_CgqeUs_erTNb-tsX9az0lavxGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e485e1-a65f-43d4-b572-d3326c59bcd2/1/_CgqeUs_erTNb-tsX9az0lavxGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:d7:6c:c9:ee:a9:ea:85:7a:91:ae:5b:d6:b1:92:0e:60:f9:
14:a0:97:4d:f0:9e:f8:7d:f5:bd:4d:92:59:e6:53:c9:57:8d:
b7:34:7d:c6:01:0d:68:30:21:6e:7b:ae:68:6e:96:a2:e2:5f:
81:4d:9c:de:d7:9b:77:f2:a0:cd:ff:c2:22:98:8c:4c:93:b2:
a3:6c:3a:c6:c1:ae:db:a3:ce:57:78:41:e5:72:2a:0c:5b:db:
e9:1d:83:4d:20:67:be:3f:77:36:8a:ea:8f:22:c7:a6:2a:54:
b0:74:cb:e6:b0:56:a5:8f:35:01:8a:90:36:47:82:bb:3d:a8:
2e:f0:de:03:ff:88:c7:77:e7:2f:2d:d9:5a:fa:9f:54:6b:04:
31:86:50:74:58:d5:c7:c2:ae:3c:65:ed:ce:f7:bf:cc:c1:58:
bc:e0:56:a8:1c:c9:4e:e9:d8:b7:46:49:e8:1f:b5:82:65:b3:
3b:92:24:24:eb:56:5a:5e:9a:bb:8e:11:5d:b5:93:26:01:66:
c0:78:88:b9:28:2b:04:06:5f:26:66:8e:23:27:0f:9b:2b:f6:
16:0c:55:f2:61:68:13:64:6c:da:a7:5e:b3:3c:d4:c9:23:2c:
c8:ac:ea:e7:41:7e:44:fb:a1:eb:d8:23:14:71:52:72:31:ae:
2a:09:03:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 13:58:00 2026 by rpki-client