Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.mft
File: CGQ46YiTiYKfpfUbaiEHMQgurCI.mft (raw, json)
Hash identifier: A/n4t9vq77hZZf1g+V3AbIkv2h0DY7vu7ZOV4+9L7W8=
Subject key identifier: 5E:31:22:2C:0E:35:BB:A5:CE:22:AD:1C:C4:19:C4:EE:E6:93:96:14
Authority key identifier: 08:64:38:E9:88:93:89:82:9F:A5:F5:1B:6A:21:07:31:08:2E:AC:22
Certificate issuer: /CN=086438e9889389829fa5f51b6a210731082eac22
Certificate serial: 019F916D8A0DF821163DEF3FDF9CFBF3D3A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CGQ46YiTiYKfpfUbaiEHMQgurCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.mft
Manifest number: 0966
Signing time: Fri 24 Jul 2026 00:01:42 +0000
Manifest this update: Fri 24 Jul 2026 00:01:42 +0000
Manifest next update: Sat 25 Jul 2026 00:01:42 +0000
Files and hashes: 1: 1-qgEtfD7o34ZK5y_c1RY5TzHJL8.roa (hash: X2khWZbYiIgXPJldeRx2uDRFmMi59ge/KSoidBbk1W0=)
2: CGQ46YiTiYKfpfUbaiEHMQgurCI.crl (hash: PFlHDsT0bExKXjPHUJJ1DE/stte7ea4DgcGFDs4D1W4=)
3: KS3gSsDRatqoleacB_dktcBbY2M.roa (hash: WbFmHVs4aB8N9NQu1Q9tJalzkeMamudIYW/ZZUkdB1k=)
4: Moxn3iWlB5DXKcsT3Hpix-jum0w.roa (hash: 3VaeGFqKYdLPf7mP0u+ieEaG1+gde8oE5cPWlEgSrKI=)
5: Zw5WYMZLpFX4Ksnc0ifaTvkcsXY.roa (hash: C18fBB7Cy74JOp9p1wDCXKCvqBCj8z0bWarhgimOnzk=)
6: _ussT5RkZH-7W87cA2uGw42C8U0.roa (hash: 3dSzoFgNBeGblUUioE5+ZT8IgwplKW5Jsk723lgi4Ks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.mft
rsync://rpki.ripe.net/repository/DEFAULT/CGQ46YiTiYKfpfUbaiEHMQgurCI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6d:8a:0d:f8:21:16:3d:ef:3f:df:9c:fb:f3:d3:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=086438e9889389829fa5f51b6a210731082eac22
Validity
Not Before: Jul 24 00:01:42 2026 GMT
Not After : Jul 25 00:01:42 2026 GMT
Subject: CN=5e31222c0e35bba5ce22ad1cc419c4eee6939614
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b0:08:d2:a3:6c:57:00:94:36:dc:82:f3:24:
57:12:9d:48:8a:00:ed:98:b7:19:c2:22:82:69:b7:
42:89:2a:71:7c:00:f8:58:6b:cb:51:5a:1c:12:81:
25:4c:ee:c3:3c:78:d9:88:d7:60:a8:c1:7a:10:f2:
10:fc:8b:cb:f9:92:b0:ad:9a:a8:93:a6:13:a5:48:
0f:e3:14:3b:0f:e2:83:a7:e1:98:44:72:4c:07:e3:
cc:3d:48:ca:2e:a5:86:78:8e:60:18:84:fb:15:46:
93:74:22:e4:97:a2:8a:bc:8a:36:e2:de:bb:07:ce:
f4:68:4c:13:9e:0c:5b:64:96:05:83:ba:42:2d:c2:
30:50:bc:ae:cb:62:60:fb:dc:34:af:7a:45:54:f1:
c7:81:c3:49:75:93:87:ca:c6:0f:a2:e9:73:b3:31:
3b:07:0e:a0:0f:ec:55:02:5d:1f:86:cb:63:c5:f4:
5e:9e:be:81:fb:8c:e3:92:4e:20:34:1c:d9:3b:01:
3d:64:90:39:c8:2d:67:8c:f1:f6:1c:4f:c3:5d:8d:
2d:c2:3c:3c:14:37:05:d5:fb:e0:ac:57:16:a7:f6:
38:fe:a3:a2:0f:3b:18:96:f7:85:cd:b3:eb:af:f2:
e1:56:97:6d:92:a4:80:fd:3c:ea:31:ea:4e:24:e7:
28:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:31:22:2C:0E:35:BB:A5:CE:22:AD:1C:C4:19:C4:EE:E6:93:96:14
X509v3 Authority Key Identifier:
keyid:08:64:38:E9:88:93:89:82:9F:A5:F5:1B:6A:21:07:31:08:2E:AC:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CGQ46YiTiYKfpfUbaiEHMQgurCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:45:fd:84:16:24:08:39:3f:b7:79:3b:02:82:88:fd:4c:79:
3b:d7:35:63:6e:db:c1:e6:84:f8:8a:cf:c1:01:c3:67:82:5f:
aa:4d:83:dd:74:c4:54:bb:e1:21:00:11:e7:dd:e2:a4:b0:6f:
08:e6:78:45:93:da:f7:13:d4:93:5d:7d:33:fc:08:17:a2:56:
0d:d0:07:fb:55:42:96:93:57:00:5a:81:52:a1:1c:fa:5d:75:
3f:e3:cd:7e:c8:18:fb:e2:3c:7f:5e:99:87:48:23:a0:7b:55:
84:13:47:f8:7b:9d:cc:3c:d4:0d:2f:a7:1c:44:b7:c4:62:6a:
13:28:6f:11:88:eb:cf:88:53:7b:de:b3:06:e7:cd:b2:cd:a9:
bf:e9:13:2f:ab:5b:73:e4:92:dc:fe:f4:52:43:e4:b4:de:9b:
50:5c:0b:64:6c:31:c9:9d:06:3a:c7:46:4e:79:61:01:db:a6:
db:03:60:2f:a3:d6:bf:33:3e:7b:77:b0:2a:99:f1:5b:4f:fd:
ae:7b:e1:ce:ba:56:de:95:f1:21:da:e6:ea:61:3c:99:a1:2b:
5d:59:54:86:cd:b0:57:ec:dc:1e:c8:9b:da:91:7d:10:0b:75:
27:06:30:de:9d:d7:ac:b6:52:24:ea:03:b6:42:9c:36:be:93:
c6:eb:ee:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:03:05 2026 by rpki-client