Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/a7c151-74f9-41da-8f72-1a85a68d1a77/1/CGqHu_ka5o35Lo1dL0qEmrjC7Vk.mft
File: CGqHu_ka5o35Lo1dL0qEmrjC7Vk.mft (raw, json)
Hash identifier: WiYGH5W5KAVOuBeLk+2fly2v1lj4TthJI7YFL1yCgBU=
Subject key identifier: 05:63:2C:2B:31:C2:91:7B:3A:15:77:B0:F2:03:50:B4:9A:66:8C:64
Authority key identifier: 08:6A:87:BB:F9:1A:E6:8D:F9:2E:8D:5D:2F:4A:84:9A:B8:C2:ED:59
Certificate issuer: /CN=086a87bbf91ae68df92e8d5d2f4a849ab8c2ed59
Certificate serial: 019D28BB6B9E450E64D3754536BCDAF35EC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CGqHu_ka5o35Lo1dL0qEmrjC7Vk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/a7c151-74f9-41da-8f72-1a85a68d1a77/1/CGqHu_ka5o35Lo1dL0qEmrjC7Vk.mft
Manifest number: 0258
Signing time: Thu 26 Mar 2026 06:01:04 +0000
Manifest this update: Thu 26 Mar 2026 06:01:04 +0000
Manifest next update: Fri 27 Mar 2026 06:01:04 +0000
Files and hashes: 1: CGqHu_ka5o35Lo1dL0qEmrjC7Vk.crl (hash: E+8jasuUvUX3orJAb428OQ7l9KGqhjmmnrKhxWTs1iE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/a7c151-74f9-41da-8f72-1a85a68d1a77/1/CGqHu_ka5o35Lo1dL0qEmrjC7Vk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/a7c151-74f9-41da-8f72-1a85a68d1a77/1/CGqHu_ka5o35Lo1dL0qEmrjC7Vk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CGqHu_ka5o35Lo1dL0qEmrjC7Vk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:6b:9e:45:0e:64:d3:75:45:36:bc:da:f3:5e:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=086a87bbf91ae68df92e8d5d2f4a849ab8c2ed59
Validity
Not Before: Mar 26 06:01:04 2026 GMT
Not After : Mar 27 06:01:04 2026 GMT
Subject: CN=05632c2b31c2917b3a1577b0f20350b49a668c64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a1:9e:5d:31:b9:7f:bf:06:5a:1e:2e:d0:05:
f9:21:69:fb:fc:0a:55:df:17:3d:f3:45:d4:e3:e2:
d2:a3:e9:c6:c9:aa:83:ae:47:0a:ca:43:20:68:f2:
a7:fc:8f:d3:4a:c4:b8:69:1a:dd:88:5e:e0:b5:67:
06:de:29:29:52:13:ac:0e:3c:e3:a2:19:f5:51:97:
6b:63:9d:05:05:27:3b:c1:72:30:7c:22:3f:2b:6c:
26:ab:91:40:c0:06:1e:50:d9:96:34:15:20:27:c7:
f8:a3:41:a3:d4:8d:f6:cb:bd:70:b2:79:2f:4d:89:
35:a6:0c:a0:92:0a:15:a5:ac:36:c4:60:33:f7:ee:
c7:26:db:62:9e:fa:b3:14:79:e5:57:ef:95:bc:ff:
37:48:31:57:7c:4f:30:20:dd:6a:e9:c9:6c:1d:4c:
25:ce:10:ee:86:8a:31:71:90:b5:11:1e:81:7a:93:
aa:f4:91:e5:ed:c9:09:7a:85:f3:e3:56:ff:5f:19:
aa:29:dd:0b:9f:d5:73:3e:df:51:91:1f:26:fe:84:
8b:d5:04:79:12:f5:50:bc:ea:44:3c:4e:21:15:51:
94:0a:ad:6d:ed:81:d7:2f:81:97:c1:38:b7:d2:bb:
d6:5b:6a:17:79:b9:77:38:83:87:1c:f8:8f:62:04:
f2:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:63:2C:2B:31:C2:91:7B:3A:15:77:B0:F2:03:50:B4:9A:66:8C:64
X509v3 Authority Key Identifier:
keyid:08:6A:87:BB:F9:1A:E6:8D:F9:2E:8D:5D:2F:4A:84:9A:B8:C2:ED:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CGqHu_ka5o35Lo1dL0qEmrjC7Vk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a7c151-74f9-41da-8f72-1a85a68d1a77/1/CGqHu_ka5o35Lo1dL0qEmrjC7Vk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a7c151-74f9-41da-8f72-1a85a68d1a77/1/CGqHu_ka5o35Lo1dL0qEmrjC7Vk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:1c:bf:7f:8b:48:ff:94:f8:0c:3c:12:38:38:31:ec:8b:27:
5f:6d:6e:9b:db:cc:56:81:f6:9a:11:80:63:ac:84:e7:09:73:
9f:03:9e:e0:7e:07:92:c6:ab:c8:66:79:3c:49:dd:61:f3:d1:
71:ac:53:1e:4a:6d:7c:9d:f0:95:fb:b0:8c:d1:b0:15:c2:3f:
a2:24:cb:aa:f8:9a:1c:0e:4f:c2:59:54:84:29:7e:e2:fa:55:
30:68:8a:18:2b:29:e4:48:fd:5b:b4:df:15:58:f9:00:3a:22:
52:98:1b:26:2b:d0:e7:18:34:06:70:d8:ad:db:46:bb:a0:a6:
b9:a6:3f:7a:2e:9c:e4:e1:b5:58:96:db:18:0e:d9:2c:f8:df:
40:ba:8d:1d:f6:92:19:74:1d:c1:d4:02:d9:c4:c6:87:e6:a5:
a5:c2:7e:a5:47:d6:6e:c3:8e:fa:d3:91:dc:a1:b4:53:6f:9d:
b3:56:6f:54:a7:c7:78:3e:1f:6f:f7:d9:17:e8:1c:38:8a:0f:
9b:d3:64:5c:5a:28:ab:30:36:e7:0a:d8:40:c2:2e:e8:d6:0f:
34:fb:85:e4:d8:7f:c2:8a:93:99:61:bc:c9:62:b2:b3:00:7f:
9a:81:40:96:bc:99:6e:38:b2:92:8f:cf:49:0d:53:3c:fc:70:
ee:1d:fc:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:22:04 2026 by rpki-client