Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/e485e1-a65f-43d4-b572-d3326c59bcd2/1/_CgqeUs_erTNb-tsX9az0lavxGE.mft
File: _CgqeUs_erTNb-tsX9az0lavxGE.mft (raw, json)
Hash identifier: GK0u5rojRUdc4EAu52S8ivZudp4qvY87kC8upU1Agig=
Subject key identifier: E4:C5:4D:93:FC:F0:60:1D:E8:E9:57:28:D0:98:18:CA:71:4B:30:38
Authority key identifier: FC:28:2A:79:4B:3F:7A:B4:CD:6F:EB:6C:5F:D6:B3:D2:56:AF:C4:61
Certificate issuer: /CN=fc282a794b3f7ab4cd6feb6c5fd6b3d256afc461
Certificate serial: 019D2AA9BFDE4A16CF7B819B20B78BC511C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_CgqeUs_erTNb-tsX9az0lavxGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/e485e1-a65f-43d4-b572-d3326c59bcd2/1/_CgqeUs_erTNb-tsX9az0lavxGE.mft
Manifest number: 1890
Signing time: Thu 26 Mar 2026 15:01:00 +0000
Manifest this update: Thu 26 Mar 2026 15:01:00 +0000
Manifest next update: Fri 27 Mar 2026 15:01:00 +0000
Files and hashes: 1: HxA8indcAYi8lBDTHZnwWgbkAio.roa (hash: em1TlDQMm/m+whiE9c240Qp5U+ubPa/+m3LSAa1d6LI=)
2: _AgXfmrENJRGa8SUzw8r4QbpeFc.roa (hash: 5DSjA+45VSfY58OSfrhbacz2KkNvODMfoUqLbPQQxis=)
3: _CgqeUs_erTNb-tsX9az0lavxGE.crl (hash: rdpV4o39yVxGTpRiZXVyHaTY6pQ0njW8KhHpzpmoLxs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/e485e1-a65f-43d4-b572-d3326c59bcd2/1/_CgqeUs_erTNb-tsX9az0lavxGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/e485e1-a65f-43d4-b572-d3326c59bcd2/1/_CgqeUs_erTNb-tsX9az0lavxGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/_CgqeUs_erTNb-tsX9az0lavxGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:a9:bf:de:4a:16:cf:7b:81:9b:20:b7:8b:c5:11:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc282a794b3f7ab4cd6feb6c5fd6b3d256afc461
Validity
Not Before: Mar 26 15:01:00 2026 GMT
Not After : Mar 27 15:01:00 2026 GMT
Subject: CN=e4c54d93fcf0601de8e95728d09818ca714b3038
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b4:e2:76:b9:2a:88:2b:c5:ad:ee:81:00:29:
79:91:86:46:b7:ea:c7:ba:5c:ae:e5:1b:ea:20:ad:
db:90:49:2d:01:2a:57:7a:2a:be:3e:ee:7e:b9:7f:
b3:6a:d3:dd:47:58:39:fe:e0:34:ac:33:38:62:a4:
df:90:1f:55:43:6a:ac:a3:05:9e:6c:f3:ba:cc:73:
8f:54:e9:7f:9e:1f:f0:17:db:27:2a:8f:1b:cb:68:
00:3f:d4:c1:2c:b1:97:a9:c2:91:1e:0e:da:78:be:
5a:19:0e:07:c7:bd:49:fc:3a:07:99:e6:c0:db:85:
ce:df:bf:82:b2:6f:42:14:5f:52:40:e3:bc:68:d2:
aa:f7:ae:01:ba:57:e5:04:67:a3:a3:95:46:a2:8e:
f0:89:5c:a4:ee:07:79:9a:2e:a4:0e:aa:b6:c0:4a:
ef:02:46:98:5c:9c:50:08:06:f7:69:99:f5:c3:19:
cb:31:8d:12:c3:c6:7c:8e:c3:9a:38:56:a8:87:29:
e8:37:12:f5:9d:17:bf:3b:4f:22:40:03:64:1c:fa:
1b:da:9c:6b:5b:ec:04:e4:2e:9a:df:5a:4d:73:79:
43:99:ca:02:c8:7b:58:7d:d4:b5:8a:bb:42:cf:58:
ac:94:6c:bc:30:9e:44:b6:2e:7b:27:1b:eb:18:cf:
07:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:C5:4D:93:FC:F0:60:1D:E8:E9:57:28:D0:98:18:CA:71:4B:30:38
X509v3 Authority Key Identifier:
keyid:FC:28:2A:79:4B:3F:7A:B4:CD:6F:EB:6C:5F:D6:B3:D2:56:AF:C4:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_CgqeUs_erTNb-tsX9az0lavxGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e485e1-a65f-43d4-b572-d3326c59bcd2/1/_CgqeUs_erTNb-tsX9az0lavxGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e485e1-a65f-43d4-b572-d3326c59bcd2/1/_CgqeUs_erTNb-tsX9az0lavxGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:71:c6:c9:e2:7c:85:0c:77:9a:2b:4b:95:d1:e2:cf:09:2f:
26:ee:14:fd:5f:98:f9:73:20:fc:11:9f:63:e8:e3:a4:48:d4:
bc:95:46:ee:99:e7:c1:7d:07:74:67:a5:e5:6e:47:ef:07:8d:
74:79:3a:1c:cf:a4:c8:d9:84:09:80:39:b1:05:c4:37:58:28:
f8:08:2c:4a:1d:07:b8:c2:28:96:d6:0f:1c:b3:9b:8b:9f:99:
e8:34:58:10:3a:81:cb:82:44:03:c3:19:68:6c:80:13:cc:b2:
71:de:e3:af:d6:da:76:f4:0c:bc:f2:d3:aa:6f:1c:43:aa:d1:
3f:13:65:9b:ba:10:eb:a6:97:e9:f5:a8:49:51:42:90:c0:15:
2a:26:54:1f:0d:b7:c3:38:0d:82:79:dc:87:34:d0:3f:4b:61:
20:6d:ff:ae:e2:dd:65:93:60:9d:cf:b3:73:df:5b:a0:4c:4b:
5f:ba:ff:bc:b4:f8:51:3d:62:68:66:1e:a8:cb:b7:98:a6:d4:
7c:ab:38:90:39:6f:bb:88:0c:ce:e8:cf:e0:c8:bb:ee:86:0c:
01:16:ec:2e:2a:c3:85:f6:90:ea:da:df:52:60:55:5e:0d:1b:
db:d0:80:98:59:47:9d:c4:79:4e:e4:2c:4b:4a:74:df:59:b9:
f2:c3:a4:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0qqb/eShbPe4GbILeLxRHGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjMjgyYTc5NGIzZjdhYjRjZDZmZWI2YzVmZDZiM2QyNTZh
ZmM0NjEwHhcNMjYwMzI2MTUwMTAwWhcNMjYwMzI3MTUwMTAwWjAzMTEwLwYDVQQD
EyhlNGM1NGQ5M2ZjZjA2MDFkZThlOTU3MjhkMDk4MThjYTcxNGIzMDM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnLTidrkqiCvFre6BACl5kYZGt+rH
ulyu5RvqIK3bkEktASpXeiq+Pu5+uX+zatPdR1g5/uA0rDM4YqTfkB9VQ2qsowWe
bPO6zHOPVOl/nh/wF9snKo8by2gAP9TBLLGXqcKRHg7aeL5aGQ4Hx71J/DoHmebA
24XO37+Csm9CFF9SQOO8aNKq964BulflBGejo5VGoo7wiVyk7gd5mi6kDqq2wErv
AkaYXJxQCAb3aZn1wxnLMY0Sw8Z8jsOaOFaohynoNxL1nRe/O08iQANkHPob2pxr
W+wE5C6a31pNc3lDmcoCyHtYfdS1irtCz1islGy8MJ5Eti57JxvrGM8H4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOTFTZP88GAd6OlXKNCYGMpxSzA4MB8GA1UdIwQY
MBaAFPwoKnlLP3q0zW/rbF/Ws9JWr8RhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0NncWVVc19lclROYi10c1g5YXowbGF2eEdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9lNDg1ZTEtYTY1Zi00M2Q0LWI1NzIt
ZDMzMjZjNTliY2QyLzEvX0NncWVVc19lclROYi10c1g5YXowbGF2eEdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My9lNDg1ZTEtYTY1Zi00M2Q0LWI1NzItZDMzMjZjNTliY2Qy
LzEvX0NncWVVc19lclROYi10c1g5YXowbGF2eEdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvHHGyeJ8
hQx3mitLldHizwkvJu4U/V+Y+XMg/BGfY+jjpEjUvJVG7pnnwX0HdGel5W5H7weN
dHk6HM+kyNmECYA5sQXEN1go+AgsSh0HuMIoltYPHLObi5+Z6DRYEDqBy4JEA8MZ
aGyAE8yycd7jr9badvQMvPLTqm8cQ6rRPxNlm7oQ66aX6fWoSVFCkMAVKiZUHw23
wzgNgnnchzTQP0thIG3/ruLdZZNgnc+zc99boExLX7r/vLT4UT1iaGYeqMu3mKbU
fKs4kDlvu4gMzujP4Mi77oYMARbsLirDhfaQ6trfUmBVXg0b29CAmFlHncR5TuQs
S0p031m58sOkIQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:14:55 2026 by rpki-client