Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/a7c151-74f9-41da-8f72-1a85a68d1a77/1/CGqHu_ka5o35Lo1dL0qEmrjC7Vk.mft
File: CGqHu_ka5o35Lo1dL0qEmrjC7Vk.mft (raw, json)
Hash identifier: A3AOkj0AnWduk3cONJB1ID/SIt78uyu+0FR+OI94qjg=
Subject key identifier: 60:82:33:D2:53:35:EB:E9:4E:45:C7:15:93:56:B5:51:FB:32:EB:9E
Authority key identifier: 08:6A:87:BB:F9:1A:E6:8D:F9:2E:8D:5D:2F:4A:84:9A:B8:C2:ED:59
Certificate issuer: /CN=086a87bbf91ae68df92e8d5d2f4a849ab8c2ed59
Certificate serial: 019D3A1CBEF0891FE8EB256CAE6E032C737F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CGqHu_ka5o35Lo1dL0qEmrjC7Vk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/a7c151-74f9-41da-8f72-1a85a68d1a77/1/CGqHu_ka5o35Lo1dL0qEmrjC7Vk.mft
Manifest number: 0261
Signing time: Sun 29 Mar 2026 15:00:55 +0000
Manifest this update: Sun 29 Mar 2026 15:00:55 +0000
Manifest next update: Mon 30 Mar 2026 15:00:55 +0000
Files and hashes: 1: CGqHu_ka5o35Lo1dL0qEmrjC7Vk.crl (hash: rQctRBaWBKUYWbOmqpuE4yFIyjEOvFnrNpfAa5JZUG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/a7c151-74f9-41da-8f72-1a85a68d1a77/1/CGqHu_ka5o35Lo1dL0qEmrjC7Vk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/a7c151-74f9-41da-8f72-1a85a68d1a77/1/CGqHu_ka5o35Lo1dL0qEmrjC7Vk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CGqHu_ka5o35Lo1dL0qEmrjC7Vk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 15:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:be:f0:89:1f:e8:eb:25:6c:ae:6e:03:2c:73:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=086a87bbf91ae68df92e8d5d2f4a849ab8c2ed59
Validity
Not Before: Mar 29 15:00:55 2026 GMT
Not After : Mar 30 15:00:55 2026 GMT
Subject: CN=608233d25335ebe94e45c7159356b551fb32eb9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:1e:e7:99:2a:8d:59:90:68:4b:49:64:10:9a:
25:56:ae:47:d5:53:b5:3a:ae:bc:54:16:7d:e3:29:
1d:55:ae:9f:35:41:ce:bb:8b:2f:7f:ff:7b:0a:fd:
da:9f:59:2c:f2:e9:b9:15:45:3e:71:96:69:ec:c3:
ca:c0:98:f9:03:7e:3b:ec:d4:38:9e:d6:9e:ba:38:
5d:9a:20:1e:c2:96:45:dc:84:4d:4f:ce:99:33:85:
0e:91:04:9d:79:20:f6:e6:1c:e0:39:4b:71:54:10:
ef:01:bc:9a:d1:ef:f4:7e:92:9f:95:45:6f:4b:de:
08:90:f2:e2:1f:ea:98:06:4e:ed:b9:e6:7d:f3:61:
46:e3:4d:8f:29:c5:5e:ac:da:22:93:4e:e0:e2:72:
7f:57:bb:ea:57:75:95:e4:10:cd:48:8b:e9:ab:0a:
b1:32:37:67:17:c1:22:15:52:ea:af:bc:af:92:46:
dc:9d:88:aa:a1:b8:11:96:27:c1:1c:ae:ad:f8:9e:
96:0f:82:0c:23:df:27:3e:35:7b:ff:7e:d0:b6:0b:
13:f7:9d:fe:b2:8a:e7:d7:ba:be:e0:61:2e:f1:c4:
45:b7:fa:44:72:bd:d5:fa:5e:a5:42:4d:18:43:23:
2b:c6:9f:f6:18:5a:ee:25:c8:8a:8f:e5:54:c8:0d:
1b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:82:33:D2:53:35:EB:E9:4E:45:C7:15:93:56:B5:51:FB:32:EB:9E
X509v3 Authority Key Identifier:
keyid:08:6A:87:BB:F9:1A:E6:8D:F9:2E:8D:5D:2F:4A:84:9A:B8:C2:ED:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CGqHu_ka5o35Lo1dL0qEmrjC7Vk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a7c151-74f9-41da-8f72-1a85a68d1a77/1/CGqHu_ka5o35Lo1dL0qEmrjC7Vk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a7c151-74f9-41da-8f72-1a85a68d1a77/1/CGqHu_ka5o35Lo1dL0qEmrjC7Vk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:fb:66:0d:c3:59:a8:86:84:20:bf:b6:e3:4f:0e:e8:c8:df:
3b:01:b2:2c:3f:64:f9:c4:ec:91:1b:9b:21:55:19:ea:49:7a:
22:40:f4:83:93:ea:a6:b1:54:2d:a6:e7:04:f8:8c:02:b3:e3:
1d:a6:b9:0b:08:43:c3:b1:57:d5:bf:ef:a8:71:95:04:70:1b:
dc:70:9e:a4:d1:60:62:60:47:a0:ce:be:8a:1e:f0:91:aa:5d:
3f:75:7d:00:4f:af:1f:52:a4:d5:e5:e4:38:4e:8f:ae:95:0e:
47:1e:df:3d:86:08:3d:1b:eb:6a:5a:e1:48:1d:1d:7c:74:0f:
12:0f:dc:d0:fa:45:4e:3e:66:9d:46:57:d9:92:13:42:de:7f:
cc:42:db:e2:11:f2:74:c7:ff:56:d9:e5:46:f7:47:33:1f:c6:
b3:bb:14:96:0b:54:09:ae:22:78:ea:e9:7b:ab:bb:ea:c7:ec:
e3:9d:2f:44:4b:60:a2:cf:56:54:a2:e4:99:1d:2c:4c:2e:d5:
dc:96:ca:03:fe:68:9f:27:72:6b:c8:35:e0:2e:02:91:75:55:
a0:29:1f:ff:7b:6c:0c:3b:07:4d:67:5f:e5:f1:c3:c8:95:f5:
28:bc:5a:7e:df:72:0e:2d:b8:1d:aa:8c:ef:62:ae:ed:11:7d:
24:eb:e7:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:52:26 2026 by rpki-client