Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.mft
File: CGQ46YiTiYKfpfUbaiEHMQgurCI.mft (raw, json)
Hash identifier: ewizAdo/H9b1qDm3d0XpRyQ0reKFlpR+W/rK1jR7NeE=
Subject key identifier: 81:4C:87:2B:E7:A3:A2:6A:20:45:1F:96:30:07:74:85:BB:36:30:5C
Authority key identifier: 08:64:38:E9:88:93:89:82:9F:A5:F5:1B:6A:21:07:31:08:2E:AC:22
Certificate issuer: /CN=086438e9889389829fa5f51b6a210731082eac22
Certificate serial: 019E1DC79F9DB812865494BB45767D23D62D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CGQ46YiTiYKfpfUbaiEHMQgurCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.mft
Manifest number: 08A3
Signing time: Tue 12 May 2026 20:01:22 +0000
Manifest this update: Tue 12 May 2026 20:01:22 +0000
Manifest next update: Wed 13 May 2026 20:01:22 +0000
Files and hashes: 1: Axye6lnTQ2trM0NHgM46yPjQ3MM.roa (hash: 9auVk/IbutJ4boG/8uYOIyssY/B2u2+Nq7L55636P0g=)
2: CGQ46YiTiYKfpfUbaiEHMQgurCI.crl (hash: eIcj2smqVHpRCYx9valD0UEPtp/l/nsJcdUckGbVfY0=)
3: X9mUy2Qmlcpzq97SwEuUMl5clw8.roa (hash: mfJZmnebhhFlGgYhM59XqpgvJNro8sf2A4t93xuL91I=)
4: Zw5WYMZLpFX4Ksnc0ifaTvkcsXY.roa (hash: C18fBB7Cy74JOp9p1wDCXKCvqBCj8z0bWarhgimOnzk=)
5: _ussT5RkZH-7W87cA2uGw42C8U0.roa (hash: 3dSzoFgNBeGblUUioE5+ZT8IgwplKW5Jsk723lgi4Ks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.mft
rsync://rpki.ripe.net/repository/DEFAULT/CGQ46YiTiYKfpfUbaiEHMQgurCI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:9f:9d:b8:12:86:54:94:bb:45:76:7d:23:d6:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=086438e9889389829fa5f51b6a210731082eac22
Validity
Not Before: May 12 20:01:22 2026 GMT
Not After : May 13 20:01:22 2026 GMT
Subject: CN=814c872be7a3a26a20451f9630077485bb36305c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a4:5a:6c:69:39:b5:a4:35:b9:d2:2e:09:8f:
90:66:66:b5:20:8f:ee:fc:71:9b:1d:00:6b:fa:a4:
1f:d3:1d:18:b3:5d:50:ca:c3:e9:6e:6c:0e:85:24:
77:18:d2:77:dd:52:6c:db:da:b1:d7:a2:d3:3e:bc:
79:28:62:03:71:47:cd:bb:51:8a:03:a5:dc:78:74:
9c:22:fc:25:ff:53:f8:cb:be:8a:ca:1c:fc:34:ec:
f8:53:98:53:89:40:15:37:b7:0c:ee:3f:f7:92:c8:
8c:68:67:4d:e7:84:96:92:e4:d5:dc:0d:86:aa:1a:
32:6e:d0:60:6e:1f:a2:1e:ee:53:12:ea:13:95:6e:
6f:fc:41:eb:f5:98:a7:5c:cc:58:39:a5:fc:4c:19:
6a:92:a8:ad:01:6b:f0:04:24:b6:d5:2d:89:03:b5:
a8:e6:e1:3e:f4:6a:45:43:cd:a9:d1:81:29:bf:77:
1a:b2:88:9d:cf:45:e8:63:c5:a2:b7:90:fc:5e:00:
69:c9:e7:05:4d:a8:f7:ed:c7:ee:df:73:f5:f0:18:
cb:b5:34:9c:bb:49:d8:5c:40:a5:a4:6b:e1:e7:7b:
79:e0:19:46:92:eb:fc:7c:24:ec:58:70:15:2d:da:
8e:d7:67:98:68:61:e2:11:5d:fb:01:ac:c8:73:c3:
89:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:4C:87:2B:E7:A3:A2:6A:20:45:1F:96:30:07:74:85:BB:36:30:5C
X509v3 Authority Key Identifier:
keyid:08:64:38:E9:88:93:89:82:9F:A5:F5:1B:6A:21:07:31:08:2E:AC:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CGQ46YiTiYKfpfUbaiEHMQgurCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:1d:97:1f:fc:b0:be:9b:b1:ad:73:72:0c:96:6e:1f:11:2d:
6e:56:de:a8:7f:e3:2a:96:43:fe:44:ea:52:6d:4b:e9:1c:a9:
ce:eb:5e:d2:c1:b5:32:dc:e6:84:7b:be:88:bd:73:3a:49:1e:
54:88:07:21:93:b0:27:9b:4f:f2:70:13:66:d4:95:d3:41:68:
4f:0a:4e:8b:6c:b6:1e:5c:a9:ad:5a:fe:5e:63:bc:0c:cc:0d:
ad:bd:a6:4c:f2:9b:95:d1:4b:03:ec:83:66:fe:f7:4d:f2:5b:
4a:f1:f2:28:57:8b:1d:cf:ff:6a:06:8c:62:00:36:a7:d8:6d:
1b:66:11:29:27:72:e7:0c:a4:fa:dc:c0:6a:b1:68:93:cd:7e:
0f:c5:88:c0:94:18:f8:81:3f:e4:04:85:cd:5a:eb:11:0e:3c:
72:37:3d:e9:86:65:bc:c1:07:52:59:40:a5:b4:db:67:5e:dd:
d6:98:84:a3:17:e4:b2:c8:60:19:8a:4d:8f:f6:19:2d:f6:a7:
a1:18:c8:80:5d:d9:e2:af:23:02:9b:63:2f:c8:c2:f4:76:ba:
27:bc:54:d7:a7:ec:83:5d:29:43:1d:78:97:71:b8:47:e4:b2:
7b:2a:e3:17:e6:7b:b2:e0:f1:2d:02:c1:3b:23:cc:ce:4f:f5:
21:8d:ef:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:56:44 2026 by rpki-client