Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.mft
File: CGQ46YiTiYKfpfUbaiEHMQgurCI.mft (raw, json)
Hash identifier: FTGA4Zc4nN2Iv9k9zbt5jIyakssbw6NxmwMU3V95njE=
Subject key identifier: 8C:4C:77:8E:BB:37:80:DD:63:49:64:55:1B:77:7B:50:F8:CA:6F:BD
Authority key identifier: 08:64:38:E9:88:93:89:82:9F:A5:F5:1B:6A:21:07:31:08:2E:AC:22
Certificate issuer: /CN=086438e9889389829fa5f51b6a210731082eac22
Certificate serial: 01A0DBA9A71CFB1BF2B814B1F6787B30A237
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CGQ46YiTiYKfpfUbaiEHMQgurCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.mft
Manifest number: 0A11
Signing time: Sat 26 Sep 2026 03:02:03 +0000
Manifest this update: Sat 26 Sep 2026 03:02:03 +0000
Manifest next update: Sun 27 Sep 2026 03:02:03 +0000
Files and hashes: 1: 1-qgEtfD7o34ZK5y_c1RY5TzHJL8.roa (hash: X2khWZbYiIgXPJldeRx2uDRFmMi59ge/KSoidBbk1W0=)
2: CGQ46YiTiYKfpfUbaiEHMQgurCI.crl (hash: TaGzAjdqqCfy6xUSk8ozdZ7FdTc42ABijihpRY372vM=)
3: KS3gSsDRatqoleacB_dktcBbY2M.roa (hash: WbFmHVs4aB8N9NQu1Q9tJalzkeMamudIYW/ZZUkdB1k=)
4: Moxn3iWlB5DXKcsT3Hpix-jum0w.roa (hash: 3VaeGFqKYdLPf7mP0u+ieEaG1+gde8oE5cPWlEgSrKI=)
5: Zw5WYMZLpFX4Ksnc0ifaTvkcsXY.roa (hash: C18fBB7Cy74JOp9p1wDCXKCvqBCj8z0bWarhgimOnzk=)
6: _ussT5RkZH-7W87cA2uGw42C8U0.roa (hash: 3dSzoFgNBeGblUUioE5+ZT8IgwplKW5Jsk723lgi4Ks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.mft
rsync://rpki.ripe.net/repository/DEFAULT/CGQ46YiTiYKfpfUbaiEHMQgurCI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:a9:a7:1c:fb:1b:f2:b8:14:b1:f6:78:7b:30:a2:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=086438e9889389829fa5f51b6a210731082eac22
Validity
Not Before: Sep 26 03:02:03 2026 GMT
Not After : Sep 27 03:02:03 2026 GMT
Subject: CN=8c4c778ebb3780dd634964551b777b50f8ca6fbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:cc:b1:9d:3b:36:68:65:cd:fb:c0:b8:74:01:
ed:04:1c:7c:26:4b:0d:3a:5f:6a:f7:14:2c:df:0e:
ae:22:cc:d4:38:e1:56:f9:3c:32:de:b5:29:6d:7b:
01:4a:14:6f:5d:dd:ed:49:9c:ab:00:13:2a:3f:ac:
65:95:e7:e6:ea:15:ae:4c:6d:15:67:c1:eb:62:f2:
19:89:24:63:64:33:a8:6f:4f:59:ed:44:23:c8:2a:
de:8e:5a:3f:78:ae:ca:92:86:48:f7:cb:75:ec:2b:
3c:2f:e1:da:38:04:83:48:97:87:24:43:a9:31:12:
d1:a2:2a:63:3f:52:0a:3c:81:7e:42:1b:04:b5:03:
07:7d:42:2f:61:bc:d9:22:77:5d:45:a4:8b:e9:1d:
54:9a:55:27:8a:03:7d:d5:14:ad:3c:f8:27:81:84:
98:9c:e9:e1:05:70:08:d2:67:d5:f4:e7:64:10:4e:
5a:8e:e6:67:8c:81:7e:22:3d:23:e4:eb:f0:4a:85:
36:be:ae:b5:5c:f3:ca:8f:b7:18:df:b9:a0:37:2d:
33:6b:46:0d:72:61:a8:c9:6d:4b:bc:62:71:b9:c0:
5e:b1:b5:7a:d6:7b:ed:d4:d8:4b:63:17:f7:3e:ea:
6a:6a:f5:db:ad:31:b0:64:bb:73:45:f4:dd:61:6f:
69:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:4C:77:8E:BB:37:80:DD:63:49:64:55:1B:77:7B:50:F8:CA:6F:BD
X509v3 Authority Key Identifier:
keyid:08:64:38:E9:88:93:89:82:9F:A5:F5:1B:6A:21:07:31:08:2E:AC:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CGQ46YiTiYKfpfUbaiEHMQgurCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:fd:65:4f:b7:df:4c:b1:8b:e6:08:53:23:8a:cb:05:6e:e3:
f9:3b:7e:51:1f:12:83:c6:66:3e:f4:3c:ed:3c:1b:20:10:ca:
13:57:3b:2b:93:fc:4f:9c:23:51:b6:33:ce:82:0c:df:6e:62:
6e:6f:33:8b:4e:a7:b9:c6:3a:d7:0c:d8:4d:9a:ca:73:19:e0:
22:21:1d:fb:a2:23:a1:82:81:36:da:aa:c9:7f:f2:8c:e2:df:
4f:bc:3b:7d:49:3e:8c:24:df:e7:c9:6f:8f:d9:97:a4:54:a8:
63:73:38:38:94:37:b3:1e:d3:ec:11:7a:f2:e1:cc:8e:d5:c6:
8c:58:71:14:dd:63:27:1b:ba:c4:89:7a:43:77:b9:44:39:37:
3d:7a:b1:f6:a1:c2:8f:66:f2:87:36:17:e3:6b:6e:24:9d:72:
56:8f:10:cb:a4:1a:5e:14:06:01:d3:c7:6f:62:ad:25:6d:85:
f8:04:50:0c:3d:54:a5:c7:36:4b:db:38:a4:2d:f0:f8:69:9c:
51:28:84:bd:d0:6d:a6:99:2f:45:0a:2f:27:af:b1:ed:55:46:
1a:62:e4:aa:44:35:be:23:44:b0:cc:17:72:32:79:91:30:de:
95:ce:76:5f:18:e5:de:cf:03:1b:d1:3e:b0:70:a1:01:df:88:
94:33:e7:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 10:44:51 2026 by rpki-client