Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b8/a7c151-74f9-41da-8f72-1a85a68d1a77/1/CGqHu_ka5o35Lo1dL0qEmrjC7Vk.mft
File: CGqHu_ka5o35Lo1dL0qEmrjC7Vk.mft (raw, json)
Hash identifier: 79NyVId+ohiY6+BtPCWj0EqPedPoEnzphs1A9wuU05I=
Subject key identifier: 5D:9B:C3:66:0A:7F:15:3C:DC:8B:09:20:01:03:15:CD:7F:A9:E8:52
Authority key identifier: 08:6A:87:BB:F9:1A:E6:8D:F9:2E:8D:5D:2F:4A:84:9A:B8:C2:ED:59
Certificate issuer: /CN=086a87bbf91ae68df92e8d5d2f4a849ab8c2ed59
Certificate serial: 01A0408546705E97766F31AA4CAD7ED65DA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CGqHu_ka5o35Lo1dL0qEmrjC7Vk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/a7c151-74f9-41da-8f72-1a85a68d1a77/1/CGqHu_ka5o35Lo1dL0qEmrjC7Vk.mft
Manifest number: 03F2
Signing time: Thu 27 Aug 2026 00:01:11 +0000
Manifest this update: Thu 27 Aug 2026 00:01:11 +0000
Manifest next update: Fri 28 Aug 2026 00:01:11 +0000
Files and hashes: 1: CGqHu_ka5o35Lo1dL0qEmrjC7Vk.crl (hash: 7u2Fsn4+jaWaPSn56lS0mf0Q8iycFGYMqmhG6YZEe8o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/a7c151-74f9-41da-8f72-1a85a68d1a77/1/CGqHu_ka5o35Lo1dL0qEmrjC7Vk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/a7c151-74f9-41da-8f72-1a85a68d1a77/1/CGqHu_ka5o35Lo1dL0qEmrjC7Vk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CGqHu_ka5o35Lo1dL0qEmrjC7Vk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:85:46:70:5e:97:76:6f:31:aa:4c:ad:7e:d6:5d:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=086a87bbf91ae68df92e8d5d2f4a849ab8c2ed59
Validity
Not Before: Aug 27 00:01:11 2026 GMT
Not After : Aug 28 00:01:11 2026 GMT
Subject: CN=5d9bc3660a7f153cdc8b0920010315cd7fa9e852
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:83:21:2d:e7:38:d6:a4:e0:9e:9f:ab:a0:27:
f5:67:62:08:5f:5e:eb:76:5c:49:b7:90:30:8f:75:
2c:9c:30:f3:f8:a7:f5:87:5a:4b:18:8e:e2:e4:d0:
05:d1:b5:6a:74:08:66:c8:98:77:6c:98:74:c7:d8:
b5:5e:28:78:26:c6:6d:72:3d:9e:ce:04:4d:8a:90:
54:de:b1:fe:18:d1:a2:fd:23:bf:fe:62:88:4d:25:
57:09:ce:8f:71:57:52:58:e3:d4:f2:b8:d4:65:de:
95:86:8a:92:80:e9:32:3c:d1:31:c8:f0:50:dd:62:
ae:1d:62:0c:c4:41:6c:6b:51:77:5c:ac:40:77:0f:
3f:31:40:48:c8:49:f3:2c:04:b2:3c:f0:95:9d:85:
80:70:77:7a:4d:97:49:c2:15:72:ea:b3:26:ad:ba:
0d:89:c8:aa:7d:ce:28:de:2e:d4:64:1a:6b:d3:ab:
af:0f:72:b5:4f:fb:c6:6e:85:d7:a5:cb:9d:6f:af:
53:ad:5e:28:bf:04:eb:24:53:04:f4:91:09:2b:51:
39:9d:64:b6:7d:aa:0c:48:fa:0a:54:3a:b8:71:b9:
82:a3:d0:76:c7:74:11:b5:1c:f4:03:57:8c:c1:eb:
30:f3:fb:ca:75:71:d9:30:08:2f:a9:41:fe:25:29:
18:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:9B:C3:66:0A:7F:15:3C:DC:8B:09:20:01:03:15:CD:7F:A9:E8:52
X509v3 Authority Key Identifier:
keyid:08:6A:87:BB:F9:1A:E6:8D:F9:2E:8D:5D:2F:4A:84:9A:B8:C2:ED:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CGqHu_ka5o35Lo1dL0qEmrjC7Vk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a7c151-74f9-41da-8f72-1a85a68d1a77/1/CGqHu_ka5o35Lo1dL0qEmrjC7Vk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a7c151-74f9-41da-8f72-1a85a68d1a77/1/CGqHu_ka5o35Lo1dL0qEmrjC7Vk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:84:8c:96:81:bf:ab:93:a7:ad:6e:98:84:0a:eb:ec:6b:c0:
f7:45:45:84:69:39:cd:33:52:5a:20:6a:24:1b:54:4d:b9:e8:
76:d1:4c:e7:b4:65:f7:2f:93:55:76:29:cf:c8:67:47:07:cf:
de:8c:6a:1e:6e:09:55:80:48:62:11:50:c9:ad:8a:bb:20:6a:
f5:9d:a9:15:6a:0b:66:a4:f2:f7:7d:5c:40:e0:5a:64:7f:e6:
2c:e8:2e:b0:ac:d9:d1:15:cd:57:cc:35:94:08:ca:c4:03:95:
d4:9b:79:d9:69:9a:84:6a:e7:34:84:93:05:1f:0d:1f:05:5b:
d0:b9:3a:a8:09:41:46:be:fb:b9:22:dd:e6:3d:66:d7:1d:b5:
32:42:48:7c:b6:18:91:18:3f:ad:53:84:8b:71:ad:4a:74:a7:
9b:ab:63:d2:44:c2:08:ca:c2:bf:27:52:1c:77:08:59:97:c5:
89:9d:04:d1:17:53:f6:05:be:3b:99:a2:8c:f8:fa:8a:f1:aa:
a9:5f:b8:f4:f0:36:4f:56:ed:66:0f:1d:2b:2a:dd:51:5c:dc:
a1:8e:09:7d:72:c2:e8:a8:77:1e:d4:b9:87:37:e5:fb:ea:5f:
0f:61:dc:5f:ef:19:64:b0:2f:15:37:54:14:28:73:37:f8:06:
c4:eb:39:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:53:57 2026 by rpki-client