Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/9d8598-e9e2-4709-b535-6b04aadeef10/1/CGKC51Eob7vsx16m7cwlQZLFXHY.mft
File: CGKC51Eob7vsx16m7cwlQZLFXHY.mft (raw, json)
Hash identifier: K5vgu7ybj9Idt0rcIMLtJPfJJrTW2jekt4yHYZptRx0=
Subject key identifier: C1:4F:29:47:11:F6:EE:50:BB:A4:F3:49:BF:D2:E3:56:AE:31:47:16
Authority key identifier: 08:62:82:E7:51:28:6F:BB:EC:C7:5E:A6:ED:CC:25:41:92:C5:5C:76
Certificate issuer: /CN=086282e751286fbbecc75ea6edcc254192c55c76
Certificate serial: 019E1E354737950C3667CB8FBF4BEC08F66B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CGKC51Eob7vsx16m7cwlQZLFXHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/9d8598-e9e2-4709-b535-6b04aadeef10/1/CGKC51Eob7vsx16m7cwlQZLFXHY.mft
Manifest number: 190A
Signing time: Tue 12 May 2026 22:01:08 +0000
Manifest this update: Tue 12 May 2026 22:01:08 +0000
Manifest next update: Wed 13 May 2026 22:01:08 +0000
Files and hashes: 1: CGKC51Eob7vsx16m7cwlQZLFXHY.crl (hash: Rgsz6M+LiMqlQq1qG5cCOsmBWLiBQfVRi4ob0hcZ8N4=)
2: EWdn2dAvIsQSnWq-qfqoFQud5JU.roa (hash: vWk3309wRqpMvn92uqTEGWfnbFV7KQGX6oN/Zj7IR6g=)
3: sV-mYML_TKE38eTlgadihi7XoEg.roa (hash: DlzC9cilbThgBPbjJV0pjmCFEg1K/ZCcTUpF4AIBnD4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/9d8598-e9e2-4709-b535-6b04aadeef10/1/CGKC51Eob7vsx16m7cwlQZLFXHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/9d8598-e9e2-4709-b535-6b04aadeef10/1/CGKC51Eob7vsx16m7cwlQZLFXHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CGKC51Eob7vsx16m7cwlQZLFXHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:35:47:37:95:0c:36:67:cb:8f:bf:4b:ec:08:f6:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=086282e751286fbbecc75ea6edcc254192c55c76
Validity
Not Before: May 12 22:01:08 2026 GMT
Not After : May 13 22:01:08 2026 GMT
Subject: CN=c14f294711f6ee50bba4f349bfd2e356ae314716
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:59:cc:e6:6d:d9:3a:08:64:09:af:98:0d:66:
ff:08:30:9d:01:81:c2:3a:84:84:1e:3d:ba:0f:1d:
6b:ce:c1:0c:df:95:de:a0:ee:c4:79:b0:dd:d0:ea:
95:a8:df:97:13:d9:ac:77:95:05:8c:0c:f2:f3:45:
ca:23:1a:a2:20:8f:d7:c0:22:bc:4f:a3:40:4c:0d:
f8:a1:de:fb:f7:23:0e:5a:2a:07:34:05:c6:41:3c:
84:66:e9:88:25:ab:71:63:be:ff:62:6b:20:3e:71:
33:a4:06:20:d5:a5:8f:e0:31:96:eb:a4:86:d2:0f:
30:ec:57:b7:c8:10:a3:c7:ab:07:61:fa:c6:21:00:
0c:dc:38:dc:ec:33:bb:29:96:ff:c3:ba:8f:4b:2c:
61:6b:dc:d3:b2:b5:ec:f7:bd:a0:ca:57:06:ea:ef:
df:43:ef:e5:00:a3:1e:51:77:6c:5c:c7:9e:bc:35:
5f:8f:d7:65:dc:91:7a:7e:18:3e:9a:d9:a6:a8:4b:
e4:c2:2a:5f:b0:4e:c3:4c:13:0d:c6:d8:dc:9a:b5:
ee:e2:b2:e5:78:b8:f7:ee:ab:e9:19:c9:63:91:9c:
73:69:16:01:48:e7:50:86:e1:25:68:57:a3:52:d3:
78:07:63:e5:50:67:f2:16:69:73:51:a0:4f:a1:93:
85:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:4F:29:47:11:F6:EE:50:BB:A4:F3:49:BF:D2:E3:56:AE:31:47:16
X509v3 Authority Key Identifier:
keyid:08:62:82:E7:51:28:6F:BB:EC:C7:5E:A6:ED:CC:25:41:92:C5:5C:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CGKC51Eob7vsx16m7cwlQZLFXHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/9d8598-e9e2-4709-b535-6b04aadeef10/1/CGKC51Eob7vsx16m7cwlQZLFXHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/9d8598-e9e2-4709-b535-6b04aadeef10/1/CGKC51Eob7vsx16m7cwlQZLFXHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:27:c1:e9:cf:d8:1e:84:08:09:3d:3c:ca:28:b0:f1:9d:5f:
44:4a:62:b0:16:fb:00:be:bf:96:db:66:78:4e:15:1f:9f:5d:
b6:af:20:9e:03:2f:57:7e:3d:94:af:b1:b2:92:e6:6c:84:8e:
0f:70:eb:79:ef:5e:75:35:2d:a4:1c:b9:ee:e4:66:f0:14:66:
81:62:1a:4a:55:76:68:e6:dd:04:aa:a3:43:2a:d0:cd:b0:4f:
0c:35:bd:60:d2:cb:b8:e0:f8:7e:0c:0b:67:ce:69:b1:34:70:
bf:c9:21:95:3a:71:36:b4:4c:d2:1e:07:72:81:8b:6b:6a:89:
0b:e6:66:ad:b7:97:46:5d:70:0a:7c:38:7a:08:09:0c:8f:f5:
14:d1:f3:7c:75:f5:3c:cf:44:b3:cb:82:2e:85:69:b1:9c:1e:
ed:6c:8d:3e:c9:24:83:8f:83:e7:0e:95:fa:93:93:8c:3a:d4:
00:a5:83:cc:7c:26:92:fd:ca:5e:c1:46:03:96:0b:8b:50:df:
1e:b8:2a:a3:71:12:c7:fe:d3:4e:64:92:9b:3e:61:2c:7a:c3:
5f:dd:74:20:ae:99:5b:94:13:99:7d:d4:07:1d:06:62:80:2b:
26:e8:79:62:5b:bd:81:c2:ea:c9:f3:f5:06:0d:9b:e1:be:89:
e5:67:3e:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:12:26 2026 by rpki-client