
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/e485e1-a65f-43d4-b572-d3326c59bcd2/1/_CgqeUs_erTNb-tsX9az0lavxGE.mft
File: _CgqeUs_erTNb-tsX9az0lavxGE.mft (raw, json)
Hash identifier: W05pzkqJNx7VUsWO/OvCKodjegMxTCaRtjtX7tBgg+o=
Subject key identifier: F8:77:5B:CD:C6:19:00:CB:70:54:74:57:22:02:25:6B:67:A5:94:0F
Authority key identifier: FC:28:2A:79:4B:3F:7A:B4:CD:6F:EB:6C:5F:D6:B3:D2:56:AF:C4:61
Certificate issuer: /CN=fc282a794b3f7ab4cd6feb6c5fd6b3d256afc461
Certificate serial: 019F90C80F52AE1667118552784C7FBDC0D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_CgqeUs_erTNb-tsX9az0lavxGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/e485e1-a65f-43d4-b572-d3326c59bcd2/1/_CgqeUs_erTNb-tsX9az0lavxGE.mft
Manifest number: 19CE
Signing time: Thu 23 Jul 2026 21:00:57 +0000
Manifest this update: Thu 23 Jul 2026 21:00:57 +0000
Manifest next update: Fri 24 Jul 2026 21:00:57 +0000
Files and hashes: 1: HxA8indcAYi8lBDTHZnwWgbkAio.roa (hash: em1TlDQMm/m+whiE9c240Qp5U+ubPa/+m3LSAa1d6LI=)
2: _AgXfmrENJRGa8SUzw8r4QbpeFc.roa (hash: 5DSjA+45VSfY58OSfrhbacz2KkNvODMfoUqLbPQQxis=)
3: _CgqeUs_erTNb-tsX9az0lavxGE.crl (hash: h17r9MZectEtsSXPWWHX8sCO+Isw6HtjVFjXCIbx5Ks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/e485e1-a65f-43d4-b572-d3326c59bcd2/1/_CgqeUs_erTNb-tsX9az0lavxGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/e485e1-a65f-43d4-b572-d3326c59bcd2/1/_CgqeUs_erTNb-tsX9az0lavxGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/_CgqeUs_erTNb-tsX9az0lavxGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c8:0f:52:ae:16:67:11:85:52:78:4c:7f:bd:c0:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc282a794b3f7ab4cd6feb6c5fd6b3d256afc461
Validity
Not Before: Jul 23 21:00:57 2026 GMT
Not After : Jul 24 21:00:57 2026 GMT
Subject: CN=f8775bcdc61900cb705474572202256b67a5940f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ff:08:1f:4b:94:41:b4:0a:a3:c6:a3:1e:3b:
0f:a5:7d:f9:9a:9e:0b:d4:bb:c6:c7:43:66:54:0e:
5d:c6:e9:07:f1:fa:7f:fa:e0:e3:60:ef:1a:a4:6c:
9b:7b:37:44:8b:d2:ad:68:c7:1f:a0:eb:3e:c6:d4:
f5:02:8d:9d:45:40:4a:17:6c:a9:0d:10:b7:1b:4e:
a5:25:21:61:23:c8:c2:77:17:8d:02:5f:da:df:d9:
62:d7:47:10:13:ac:12:39:c1:00:9d:19:08:46:c1:
d4:d0:c9:94:ce:a5:f0:7d:b2:c8:ff:08:e5:2f:04:
f3:c3:12:f4:e0:66:14:42:5b:1e:c5:b3:5c:21:15:
f2:40:e0:8d:ce:6b:62:53:f4:f8:46:2f:a3:92:b5:
fe:ef:88:a9:18:21:d8:84:ca:73:13:33:90:11:b0:
bd:94:83:db:c4:18:9e:f1:a1:da:d9:5f:d0:9f:35:
af:18:cf:d2:7d:87:89:95:48:7e:5a:1f:11:41:86:
71:31:a6:08:85:f9:e2:47:cc:66:30:af:3e:33:54:
31:1c:95:1c:a4:bf:53:d4:6b:e0:48:11:3d:a0:e7:
3c:57:88:10:9d:ee:aa:67:73:e7:c3:24:fc:d0:d3:
31:a3:b1:8b:dd:6f:b4:74:63:50:1c:d0:7e:8d:cd:
d0:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:77:5B:CD:C6:19:00:CB:70:54:74:57:22:02:25:6B:67:A5:94:0F
X509v3 Authority Key Identifier:
keyid:FC:28:2A:79:4B:3F:7A:B4:CD:6F:EB:6C:5F:D6:B3:D2:56:AF:C4:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_CgqeUs_erTNb-tsX9az0lavxGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e485e1-a65f-43d4-b572-d3326c59bcd2/1/_CgqeUs_erTNb-tsX9az0lavxGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e485e1-a65f-43d4-b572-d3326c59bcd2/1/_CgqeUs_erTNb-tsX9az0lavxGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:94:58:1b:35:2c:7e:93:03:33:0e:e1:d4:14:ea:b3:11:11:
ee:d3:ad:70:ee:aa:e6:a5:54:91:e6:b8:74:e1:05:e8:38:71:
9e:75:74:1b:40:8d:a7:fd:0c:d5:7d:5c:e8:39:03:59:d2:be:
6d:e3:4a:38:78:94:7c:b6:87:af:5f:38:92:9f:a8:1f:78:46:
72:fd:04:a7:6d:86:8a:86:06:82:79:a4:e9:60:d2:3b:14:a3:
9b:fc:ee:8c:b8:f3:37:0e:ca:d4:9c:e5:6d:de:a9:2e:07:dc:
08:fa:95:19:3c:5b:ea:f8:5d:dc:82:e3:dd:63:f2:45:df:2d:
dc:78:fa:ce:63:7e:bb:b6:37:c4:e6:54:3c:f9:d5:2f:2a:56:
b6:26:21:ff:13:65:6c:9a:67:64:32:6b:fa:b1:cc:cf:c6:7b:
d0:60:20:5f:9d:53:b9:06:85:96:87:99:ab:32:e1:d8:20:50:
6f:23:43:19:26:d0:0b:0e:38:da:15:b6:ff:d5:70:65:15:38:
4f:d1:58:fe:9a:c0:a7:de:a6:e3:27:88:08:87:3c:c5:9a:ab:
55:41:4d:4a:d0:2e:31:e1:f5:0d:24:93:03:d7:a1:25:59:84:
44:3c:95:50:dd:2a:8e:68:c4:93:d8:e7:e4:5f:bf:e9:cf:c1:
10:0b:0e:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:30:56 2026 by rpki-client