Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b8/a7c151-74f9-41da-8f72-1a85a68d1a77/1/CGqHu_ka5o35Lo1dL0qEmrjC7Vk.mft
File: CGqHu_ka5o35Lo1dL0qEmrjC7Vk.mft (raw, json)
Hash identifier: S9MsOQAYojzGNf6XCfLgWB/CHdrv7NQX/EY3Qc4BHcY=
Subject key identifier: B9:0C:43:A6:6C:18:2D:A4:F9:BA:6E:FC:10:D0:C3:00:EB:82:C0:5F
Authority key identifier: 08:6A:87:BB:F9:1A:E6:8D:F9:2E:8D:5D:2F:4A:84:9A:B8:C2:ED:59
Certificate issuer: /CN=086a87bbf91ae68df92e8d5d2f4a849ab8c2ed59
Certificate serial: 01A0D34AFB8B88D0327B3DAE718FCB57ECC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CGqHu_ka5o35Lo1dL0qEmrjC7Vk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/a7c151-74f9-41da-8f72-1a85a68d1a77/1/CGqHu_ka5o35Lo1dL0qEmrjC7Vk.mft
Manifest number: 043E
Signing time: Thu 24 Sep 2026 12:01:41 +0000
Manifest this update: Thu 24 Sep 2026 12:01:41 +0000
Manifest next update: Fri 25 Sep 2026 12:01:41 +0000
Files and hashes: 1: CGqHu_ka5o35Lo1dL0qEmrjC7Vk.crl (hash: pxSoMbaldoCet5Dj747Bx8fF26TZzP4wy+otzi/kVYg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/a7c151-74f9-41da-8f72-1a85a68d1a77/1/CGqHu_ka5o35Lo1dL0qEmrjC7Vk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/a7c151-74f9-41da-8f72-1a85a68d1a77/1/CGqHu_ka5o35Lo1dL0qEmrjC7Vk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CGqHu_ka5o35Lo1dL0qEmrjC7Vk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 12:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:4a:fb:8b:88:d0:32:7b:3d:ae:71:8f:cb:57:ec:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=086a87bbf91ae68df92e8d5d2f4a849ab8c2ed59
Validity
Not Before: Sep 24 12:01:41 2026 GMT
Not After : Sep 25 12:01:41 2026 GMT
Subject: CN=b90c43a66c182da4f9ba6efc10d0c300eb82c05f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:43:aa:72:96:74:5e:31:75:a4:a7:51:26:0e:
f1:5e:ff:ef:99:b0:02:e4:63:78:af:10:97:08:f4:
40:93:78:fe:59:4e:ea:69:d8:35:5a:97:db:55:a6:
74:22:73:8a:ac:c8:62:96:76:b3:23:dc:4b:74:1c:
1e:32:2f:1d:ce:be:6b:2c:32:6a:92:6b:a3:0f:46:
fb:98:09:37:f4:5c:6b:18:6b:01:48:08:20:50:44:
45:b1:f9:e2:66:fc:2a:b1:f9:a7:8b:fb:f9:78:ac:
b8:22:ac:5d:99:b6:02:bb:b7:a0:7f:f6:40:4c:02:
1e:6e:ed:68:bc:13:81:a5:3f:18:4f:cf:81:4d:cf:
af:9f:0e:43:19:95:94:c9:ea:a7:d0:f4:36:86:49:
38:8a:66:be:83:37:6e:f4:df:c1:0f:b2:44:e4:5c:
9b:0f:9f:4a:3b:d5:eb:5e:fd:3f:03:04:db:48:ec:
4e:7b:ab:21:ee:ee:95:50:53:db:a9:de:fb:3d:5b:
a7:00:03:d5:d3:92:42:ac:de:c3:0d:5a:19:3d:51:
b3:fd:b5:df:4e:e9:35:aa:f2:21:17:2a:0b:91:aa:
92:d5:aa:7a:03:dc:b6:b1:fa:93:db:d3:ae:f9:08:
cd:9f:6d:7b:18:45:67:25:06:50:57:68:40:03:db:
88:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:0C:43:A6:6C:18:2D:A4:F9:BA:6E:FC:10:D0:C3:00:EB:82:C0:5F
X509v3 Authority Key Identifier:
keyid:08:6A:87:BB:F9:1A:E6:8D:F9:2E:8D:5D:2F:4A:84:9A:B8:C2:ED:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CGqHu_ka5o35Lo1dL0qEmrjC7Vk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a7c151-74f9-41da-8f72-1a85a68d1a77/1/CGqHu_ka5o35Lo1dL0qEmrjC7Vk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a7c151-74f9-41da-8f72-1a85a68d1a77/1/CGqHu_ka5o35Lo1dL0qEmrjC7Vk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:10:ad:b2:3b:1a:2d:ea:1c:7e:40:35:13:68:bc:23:23:45:
cf:b5:55:49:e8:9f:30:97:10:e6:ac:ae:2b:d0:58:a6:ed:5d:
d4:f2:d7:a1:97:97:33:32:ca:ba:97:ea:a3:5b:9d:85:fb:28:
21:77:10:90:42:1a:b7:b4:66:6e:94:cb:7c:66:d9:7e:21:86:
30:6f:ab:8d:0d:86:24:0d:cb:8a:e5:9b:0d:c9:3c:5b:e8:79:
68:7d:64:61:8f:13:94:2a:df:7b:33:40:c5:9e:b1:99:51:20:
bf:5c:3c:45:4d:61:38:91:0e:25:65:05:cc:48:10:27:3d:fd:
2e:32:7a:58:89:a8:e6:2a:ce:b6:c0:74:ab:04:84:40:17:21:
31:02:33:d8:a7:20:42:8f:61:10:30:08:ec:96:52:f7:e2:94:
08:cc:d4:55:24:bc:80:9f:44:8b:5c:60:1e:7f:05:89:c4:31:
39:00:0e:59:89:16:21:ec:92:9a:c7:38:14:ba:e4:17:7f:93:
6a:68:9e:b1:a9:40:23:0e:a2:0c:10:aa:10:c7:02:a6:50:78:
46:f1:da:22:b7:14:1d:44:de:fb:df:4a:e7:1c:e6:35:43:4a:
a8:62:a4:48:cb:b9:80:28:d6:53:52:9b:72:21:a5:32:f9:52:
24:49:f2:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 18:13:55 2026 by rpki-client