Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/9d8598-e9e2-4709-b535-6b04aadeef10/1/CGKC51Eob7vsx16m7cwlQZLFXHY.mft
File: CGKC51Eob7vsx16m7cwlQZLFXHY.mft (raw, json)
Hash identifier: 3jBkv+NeCnromnFkjjCY7i0+dI7fe+f5Qr5ON+7TA7Q=
Subject key identifier: 3A:06:53:6D:86:FA:C4:A2:C2:6F:45:82:25:7F:FA:F4:68:B2:6C:15
Authority key identifier: 08:62:82:E7:51:28:6F:BB:EC:C7:5E:A6:ED:CC:25:41:92:C5:5C:76
Certificate issuer: /CN=086282e751286fbbecc75ea6edcc254192c55c76
Certificate serial: 019F90FE7C9B6DD9D5499BE6BD92C0821FE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CGKC51Eob7vsx16m7cwlQZLFXHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/9d8598-e9e2-4709-b535-6b04aadeef10/1/CGKC51Eob7vsx16m7cwlQZLFXHY.mft
Manifest number: 19CA
Signing time: Thu 23 Jul 2026 22:00:24 +0000
Manifest this update: Thu 23 Jul 2026 22:00:24 +0000
Manifest next update: Fri 24 Jul 2026 22:00:24 +0000
Files and hashes: 1: CGKC51Eob7vsx16m7cwlQZLFXHY.crl (hash: nLYCqSBSjxBrIbOEpmLaHHsJsPQOvyeBsvMOHzPDuBY=)
2: EWdn2dAvIsQSnWq-qfqoFQud5JU.roa (hash: vWk3309wRqpMvn92uqTEGWfnbFV7KQGX6oN/Zj7IR6g=)
3: sV-mYML_TKE38eTlgadihi7XoEg.roa (hash: DlzC9cilbThgBPbjJV0pjmCFEg1K/ZCcTUpF4AIBnD4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/9d8598-e9e2-4709-b535-6b04aadeef10/1/CGKC51Eob7vsx16m7cwlQZLFXHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/9d8598-e9e2-4709-b535-6b04aadeef10/1/CGKC51Eob7vsx16m7cwlQZLFXHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CGKC51Eob7vsx16m7cwlQZLFXHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:fe:7c:9b:6d:d9:d5:49:9b:e6:bd:92:c0:82:1f:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=086282e751286fbbecc75ea6edcc254192c55c76
Validity
Not Before: Jul 23 22:00:24 2026 GMT
Not After : Jul 24 22:00:24 2026 GMT
Subject: CN=3a06536d86fac4a2c26f4582257ffaf468b26c15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:18:6d:ce:18:06:d1:54:a6:b1:30:6e:d1:52:
2f:5d:ba:d5:a4:d4:bd:a3:64:49:d0:86:20:a7:f2:
f6:b8:e8:0c:7f:b2:19:82:0e:28:98:21:13:5e:e9:
da:1a:a5:82:85:bd:64:ff:30:06:64:50:3d:54:af:
63:c0:47:d7:da:c0:8d:31:55:74:bc:b5:89:d2:49:
3e:81:1f:60:60:3a:88:62:f5:3a:6e:ca:50:b4:d4:
82:ee:0b:5f:7e:58:72:d3:2a:40:ba:00:61:5a:7b:
65:dd:d8:39:38:d0:f5:53:b4:28:b3:bb:4c:e4:e8:
2a:18:67:5a:08:5d:57:56:0a:8e:81:8f:63:b4:fb:
29:1b:f5:f1:11:61:7d:1e:fa:3f:6c:f5:03:8d:88:
a9:62:03:ca:41:31:c1:b3:8b:40:12:21:6d:0b:77:
1c:bd:e4:58:92:fa:75:e3:84:2c:6f:bd:11:71:1d:
55:6d:d1:d6:4d:33:06:c5:b9:2c:56:2e:88:27:21:
f5:61:f4:e4:19:49:32:90:c1:10:9d:0e:b5:95:5d:
9a:e9:60:d2:d4:58:35:40:1c:7c:bb:ab:1f:2f:8d:
f7:65:93:16:83:43:b4:80:a4:44:d8:18:09:b1:21:
a2:19:59:20:70:46:c4:2d:9a:5e:a6:ca:3a:ec:48:
91:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:06:53:6D:86:FA:C4:A2:C2:6F:45:82:25:7F:FA:F4:68:B2:6C:15
X509v3 Authority Key Identifier:
keyid:08:62:82:E7:51:28:6F:BB:EC:C7:5E:A6:ED:CC:25:41:92:C5:5C:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CGKC51Eob7vsx16m7cwlQZLFXHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/9d8598-e9e2-4709-b535-6b04aadeef10/1/CGKC51Eob7vsx16m7cwlQZLFXHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/9d8598-e9e2-4709-b535-6b04aadeef10/1/CGKC51Eob7vsx16m7cwlQZLFXHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:24:b7:6b:1a:0f:50:52:07:b4:19:d3:f1:95:c5:d5:fb:18:
61:b7:02:3a:fa:98:1e:a6:f7:fa:61:c9:36:ed:b6:df:c8:71:
0d:35:be:a8:2c:67:bd:24:ad:88:29:5f:d2:74:86:bb:9b:74:
38:ce:78:6d:20:a8:f6:14:2e:8b:e6:05:ac:46:95:0b:43:bf:
9f:98:80:58:3f:f8:90:6f:a9:f3:ff:a7:d2:f7:22:30:52:2e:
b6:f2:ec:1d:6f:c8:68:a9:76:00:b1:ab:03:c1:a8:6d:55:5f:
cc:af:48:57:1d:d6:ae:ae:cd:d9:08:90:56:89:08:13:49:dc:
f4:ca:25:ee:0c:f9:1f:d5:ab:69:c4:f9:92:a0:19:0a:fa:8d:
22:ae:91:85:e0:03:8a:6d:68:8a:71:bb:a2:30:1d:74:f1:2e:
5e:84:f7:5c:52:7f:25:35:33:54:4f:dc:fe:0a:ac:57:9e:70:
62:0a:b1:a3:e8:f0:e8:ca:8e:4f:a4:19:de:11:11:05:4b:10:
3e:f7:0e:e2:14:08:be:5b:35:af:74:99:a0:0b:03:96:19:bd:
1b:61:92:e9:11:b5:cc:d2:2a:82:94:0b:09:47:5f:d4:e9:83:
c7:04:ee:e5:99:d7:0d:07:75:5e:29:b7:00:03:de:d7:6c:0d:
6e:84:bc:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:42:15 2026 by rpki-client