Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/e485e1-a65f-43d4-b572-d3326c59bcd2/1/_CgqeUs_erTNb-tsX9az0lavxGE.mft
File: _CgqeUs_erTNb-tsX9az0lavxGE.mft (raw, json)
Hash identifier: JjcGmPVsiIFbkVjFFK7IN9Jsb4OJ0Q0j77UTmCO8d+c=
Subject key identifier: C9:3C:C4:E6:2F:AB:53:0C:49:BD:8E:1B:5C:EE:A7:EE:FF:6C:AD:5B
Authority key identifier: FC:28:2A:79:4B:3F:7A:B4:CD:6F:EB:6C:5F:D6:B3:D2:56:AF:C4:61
Certificate issuer: /CN=fc282a794b3f7ab4cd6feb6c5fd6b3d256afc461
Certificate serial: 019D28BB375B96F224F93A4C06B461C42391
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_CgqeUs_erTNb-tsX9az0lavxGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/e485e1-a65f-43d4-b572-d3326c59bcd2/1/_CgqeUs_erTNb-tsX9az0lavxGE.mft
Manifest number: 188F
Signing time: Thu 26 Mar 2026 06:00:51 +0000
Manifest this update: Thu 26 Mar 2026 06:00:51 +0000
Manifest next update: Fri 27 Mar 2026 06:00:51 +0000
Files and hashes: 1: HxA8indcAYi8lBDTHZnwWgbkAio.roa (hash: em1TlDQMm/m+whiE9c240Qp5U+ubPa/+m3LSAa1d6LI=)
2: _AgXfmrENJRGa8SUzw8r4QbpeFc.roa (hash: 5DSjA+45VSfY58OSfrhbacz2KkNvODMfoUqLbPQQxis=)
3: _CgqeUs_erTNb-tsX9az0lavxGE.crl (hash: Lec7QMUp5oh++fVFXiZ+D9lFvufvpGtkxqdPWnyEg1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/e485e1-a65f-43d4-b572-d3326c59bcd2/1/_CgqeUs_erTNb-tsX9az0lavxGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/e485e1-a65f-43d4-b572-d3326c59bcd2/1/_CgqeUs_erTNb-tsX9az0lavxGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/_CgqeUs_erTNb-tsX9az0lavxGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:37:5b:96:f2:24:f9:3a:4c:06:b4:61:c4:23:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc282a794b3f7ab4cd6feb6c5fd6b3d256afc461
Validity
Not Before: Mar 26 06:00:51 2026 GMT
Not After : Mar 27 06:00:51 2026 GMT
Subject: CN=c93cc4e62fab530c49bd8e1b5ceea7eeff6cad5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d7:9b:ae:d2:10:60:06:46:c6:eb:c4:12:09:
34:27:08:e3:11:17:b2:d2:ff:63:55:d2:40:18:df:
55:8d:d0:1d:7e:72:1e:1b:59:2a:f4:40:d1:ad:b7:
1f:6e:d4:d8:20:61:28:24:24:d7:f5:74:5c:f2:cb:
82:aa:6c:0c:35:7f:3e:f0:b5:a6:02:3c:54:38:aa:
24:01:4f:61:cd:20:0d:ce:28:34:cb:a8:b5:6f:1f:
ee:77:d0:56:21:fb:a5:15:7e:42:69:47:5b:fa:20:
02:d5:ba:ad:89:d0:06:f2:5c:0b:85:50:d7:9d:21:
0c:c0:32:2f:f9:e9:19:e5:17:63:a9:a0:35:f1:17:
df:81:7a:3d:2e:ac:85:2e:f8:b3:38:20:c8:cf:1d:
5e:2f:7c:28:49:93:41:1d:47:8f:42:b2:53:ed:36:
32:c6:0e:a2:b6:44:1e:03:d8:b3:02:21:ca:47:e5:
e5:43:e8:cf:99:c9:df:d0:04:d3:de:ee:b9:c4:c8:
c3:d0:df:ca:54:22:d8:8c:59:ee:7f:52:1c:d6:9b:
de:2a:16:31:4f:db:c5:2b:96:29:16:9e:28:20:c3:
af:22:d2:16:f2:eb:eb:c5:34:47:17:9c:aa:cd:66:
81:73:45:1c:4f:b7:8f:e9:8e:8d:9f:f0:4c:b9:fc:
34:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:3C:C4:E6:2F:AB:53:0C:49:BD:8E:1B:5C:EE:A7:EE:FF:6C:AD:5B
X509v3 Authority Key Identifier:
keyid:FC:28:2A:79:4B:3F:7A:B4:CD:6F:EB:6C:5F:D6:B3:D2:56:AF:C4:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_CgqeUs_erTNb-tsX9az0lavxGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e485e1-a65f-43d4-b572-d3326c59bcd2/1/_CgqeUs_erTNb-tsX9az0lavxGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e485e1-a65f-43d4-b572-d3326c59bcd2/1/_CgqeUs_erTNb-tsX9az0lavxGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:a1:fe:dc:7c:5f:62:2d:83:f2:3d:c3:b8:3a:c6:58:80:bd:
9e:f9:6c:9a:60:6d:9a:36:d2:82:0c:ae:f3:02:b2:92:36:b1:
c8:e2:4f:59:f9:7b:c5:6e:be:4e:31:5d:89:08:a2:27:bf:a2:
ab:1c:55:9c:c6:f2:4b:63:f5:de:60:0f:62:d7:76:52:40:82:
77:4c:c2:22:73:bb:53:50:05:58:8e:50:bd:c6:d7:a4:d0:60:
cf:57:cf:c1:ef:c0:56:37:d2:8f:4d:fe:00:99:e0:ba:4e:99:
64:d6:32:f6:73:74:c0:b1:ce:8d:e1:d4:f3:00:e4:93:06:58:
4a:67:b2:b8:2b:51:2a:f1:a0:1f:7f:f8:d7:c2:89:d5:cf:4f:
cd:4f:b3:ac:db:01:9c:f9:cc:c3:ca:40:ab:d7:4b:4f:4a:3e:
84:84:d7:ec:8b:13:da:a5:94:87:a7:d7:fc:a2:f2:47:84:bc:
9d:17:a8:f7:52:ef:e9:68:c9:b0:43:e9:46:37:e8:fe:95:e9:
4d:39:87:c4:78:5a:03:37:00:bd:51:ff:41:7a:e7:ee:06:d1:
96:9d:c2:18:50:29:1a:19:1a:a4:ee:f0:4d:c6:2b:4b:f8:bf:
64:d3:c2:17:d9:32:46:19:37:05:b9:de:07:51:17:24:e1:7b:
fa:5f:82:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:27:45 2026 by rpki-client