Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/9d8598-e9e2-4709-b535-6b04aadeef10/1/CGKC51Eob7vsx16m7cwlQZLFXHY.mft
File: CGKC51Eob7vsx16m7cwlQZLFXHY.mft (raw, json)
Hash identifier: HcbC5cHtlMGn6fPdHZeWZqG7qNZf1VsllU4KGOPesxE=
Subject key identifier: C3:39:06:F0:85:67:47:3C:06:77:56:44:5E:68:09:4D:69:C2:4B:E6
Authority key identifier: 08:62:82:E7:51:28:6F:BB:EC:C7:5E:A6:ED:CC:25:41:92:C5:5C:76
Certificate issuer: /CN=086282e751286fbbecc75ea6edcc254192c55c76
Certificate serial: 019D2703EBB8BB97D16071193454164E93B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CGKC51Eob7vsx16m7cwlQZLFXHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/9d8598-e9e2-4709-b535-6b04aadeef10/1/CGKC51Eob7vsx16m7cwlQZLFXHY.mft
Manifest number: 188A
Signing time: Wed 25 Mar 2026 22:01:01 +0000
Manifest this update: Wed 25 Mar 2026 22:01:01 +0000
Manifest next update: Thu 26 Mar 2026 22:01:01 +0000
Files and hashes: 1: CGKC51Eob7vsx16m7cwlQZLFXHY.crl (hash: lTUZfzm3IPUatOY+ZDIxIkuo0fSPdUxOorPi8osXLeA=)
2: EWdn2dAvIsQSnWq-qfqoFQud5JU.roa (hash: vWk3309wRqpMvn92uqTEGWfnbFV7KQGX6oN/Zj7IR6g=)
3: sV-mYML_TKE38eTlgadihi7XoEg.roa (hash: DlzC9cilbThgBPbjJV0pjmCFEg1K/ZCcTUpF4AIBnD4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/9d8598-e9e2-4709-b535-6b04aadeef10/1/CGKC51Eob7vsx16m7cwlQZLFXHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/9d8598-e9e2-4709-b535-6b04aadeef10/1/CGKC51Eob7vsx16m7cwlQZLFXHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CGKC51Eob7vsx16m7cwlQZLFXHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:eb:b8:bb:97:d1:60:71:19:34:54:16:4e:93:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=086282e751286fbbecc75ea6edcc254192c55c76
Validity
Not Before: Mar 25 22:01:01 2026 GMT
Not After : Mar 26 22:01:01 2026 GMT
Subject: CN=c33906f08567473c067756445e68094d69c24be6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e0:9e:10:7a:fc:f0:c6:40:db:99:1b:29:0d:
1d:e6:87:b4:0a:47:08:6b:d2:a1:29:5f:53:e4:50:
8e:ce:14:5c:ee:fe:86:68:33:ec:b4:0e:ab:15:a3:
40:18:2e:17:11:17:c3:47:00:ab:bf:7a:14:7d:fe:
ce:71:55:1c:df:06:e7:44:1a:dd:b9:11:fd:81:b9:
c1:e4:48:33:a4:18:a0:8b:ee:44:e1:f4:fd:da:90:
e8:83:69:41:97:5e:f7:8d:70:84:7f:60:5d:61:07:
46:06:38:b3:4b:3b:29:f3:2d:aa:70:d5:1a:c7:c2:
f3:7d:8a:cb:55:77:7e:89:99:a5:fb:bc:ee:66:86:
32:14:77:6f:5e:eb:e5:74:a7:63:0a:ad:15:29:2e:
25:1d:db:f5:10:d6:f8:c0:bf:2e:c4:2b:2e:ef:0d:
70:ac:c1:8c:de:74:64:b0:99:02:db:b6:27:93:aa:
d2:30:9d:e8:b4:31:b8:0e:28:bb:21:10:b4:ec:e2:
55:a0:ea:03:95:d5:b3:d4:9e:a1:69:e5:da:d1:0b:
47:62:7d:e7:26:c4:2d:1b:10:93:8b:ff:a8:79:8d:
04:f8:c6:be:0c:ce:f5:b4:b7:69:f7:26:71:50:ab:
77:a2:ae:9a:1e:19:73:33:db:01:73:0a:10:e5:7d:
67:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:39:06:F0:85:67:47:3C:06:77:56:44:5E:68:09:4D:69:C2:4B:E6
X509v3 Authority Key Identifier:
keyid:08:62:82:E7:51:28:6F:BB:EC:C7:5E:A6:ED:CC:25:41:92:C5:5C:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CGKC51Eob7vsx16m7cwlQZLFXHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/9d8598-e9e2-4709-b535-6b04aadeef10/1/CGKC51Eob7vsx16m7cwlQZLFXHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/9d8598-e9e2-4709-b535-6b04aadeef10/1/CGKC51Eob7vsx16m7cwlQZLFXHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:2a:70:7d:0e:7f:d7:1c:90:9a:cd:c5:12:f4:c3:76:82:7c:
83:85:6a:b8:38:60:17:00:b1:6f:69:c5:1b:53:72:c5:08:b6:
20:fb:e3:54:01:00:cd:48:9d:d8:9c:13:02:b9:e5:48:85:c6:
2a:38:cc:81:70:c3:35:d6:02:c4:ac:76:1a:22:4a:3d:f3:1a:
5e:a3:9b:a7:f6:81:72:1a:22:96:83:63:99:dd:9a:ff:c6:7d:
10:38:0d:02:8c:e0:7c:48:5e:17:70:82:be:59:8e:07:b7:2c:
e1:d4:91:10:2a:25:0e:6b:6c:4a:47:08:b6:bb:ea:03:35:90:
9d:99:6a:07:a8:36:8b:25:29:4d:3c:58:ad:24:7c:d1:be:e7:
94:10:6f:62:40:c6:12:f7:b0:31:53:3a:5a:63:2d:8c:16:dd:
f2:c9:64:18:c8:71:ce:44:16:69:41:b8:a3:ca:27:dd:88:62:
b3:df:b8:f3:a1:ea:87:e0:3b:56:98:d3:c9:d8:e5:bd:fe:eb:
5d:95:43:90:10:ba:d4:25:b3:cc:3b:f9:58:41:c8:96:cf:93:
4e:ee:f4:96:6c:13:3d:47:00:c1:93:ef:90:14:60:d9:0f:8e:
0e:11:0d:e4:de:07:70:d1:76:e6:c3:32:21:6f:d2:59:70:be:
29:7d:22:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:45:12 2026 by rpki-client