Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/a7c151-74f9-41da-8f72-1a85a68d1a77/1/CGqHu_ka5o35Lo1dL0qEmrjC7Vk.mft
File: CGqHu_ka5o35Lo1dL0qEmrjC7Vk.mft (raw, json)
Hash identifier: kYKjSBt5CUfuaWKwd2kJlaCcxvCUscXRrP9zWCwkyVU=
Subject key identifier: 2E:35:76:E5:80:73:55:59:95:14:3A:94:52:42:E3:16:53:5E:F0:70
Authority key identifier: 08:6A:87:BB:F9:1A:E6:8D:F9:2E:8D:5D:2F:4A:84:9A:B8:C2:ED:59
Certificate issuer: /CN=086a87bbf91ae68df92e8d5d2f4a849ab8c2ed59
Certificate serial: 019F92B654323F93CB695E6271424EA27C28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CGqHu_ka5o35Lo1dL0qEmrjC7Vk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/a7c151-74f9-41da-8f72-1a85a68d1a77/1/CGqHu_ka5o35Lo1dL0qEmrjC7Vk.mft
Manifest number: 0398
Signing time: Fri 24 Jul 2026 06:00:50 +0000
Manifest this update: Fri 24 Jul 2026 06:00:50 +0000
Manifest next update: Sat 25 Jul 2026 06:00:50 +0000
Files and hashes: 1: CGqHu_ka5o35Lo1dL0qEmrjC7Vk.crl (hash: OXzFKhseCDDKEwtsRon7vzmGLRu83pMhYZQUMEe7pjM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/a7c151-74f9-41da-8f72-1a85a68d1a77/1/CGqHu_ka5o35Lo1dL0qEmrjC7Vk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/a7c151-74f9-41da-8f72-1a85a68d1a77/1/CGqHu_ka5o35Lo1dL0qEmrjC7Vk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CGqHu_ka5o35Lo1dL0qEmrjC7Vk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 06:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:b6:54:32:3f:93:cb:69:5e:62:71:42:4e:a2:7c:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=086a87bbf91ae68df92e8d5d2f4a849ab8c2ed59
Validity
Not Before: Jul 24 06:00:50 2026 GMT
Not After : Jul 25 06:00:50 2026 GMT
Subject: CN=2e3576e58073555995143a945242e316535ef070
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:57:0d:b0:65:8d:58:06:25:1a:0f:83:d6:6a:
96:e4:fc:83:c1:52:a4:59:f5:6e:78:f3:d4:6d:22:
57:fa:af:16:c2:24:b1:2b:06:95:58:92:b5:43:4a:
7c:41:52:4b:dc:2f:fa:4d:36:12:88:33:80:1b:94:
69:43:b7:38:64:e9:29:4c:48:4a:1f:a9:73:0c:58:
04:ef:93:56:f7:0d:ad:1a:1c:9c:f6:55:8a:7e:7d:
40:1a:2c:c1:75:f2:f4:c6:1c:21:57:b0:4e:c8:7c:
b1:d0:08:d4:ff:4b:64:1b:7a:c1:ee:fb:34:76:63:
57:01:2d:96:b7:9f:7f:9b:90:21:ca:f9:da:b0:d2:
a7:c6:e9:10:93:2d:ae:e1:09:8b:fc:97:a0:1c:ef:
f1:33:41:37:59:ab:f1:1c:a9:02:02:cf:30:8d:06:
b1:2c:a4:7f:2e:74:92:13:54:dd:17:5a:02:51:51:
e7:a3:c4:23:68:cd:a9:f8:71:3f:cb:e8:f9:3f:f5:
cb:70:89:66:8b:33:2b:2a:3b:4a:2b:05:c5:7a:13:
66:cb:e7:3c:2f:14:68:9e:e8:84:54:ed:03:36:e7:
2d:3c:ff:26:3e:11:2e:67:17:bf:0c:2a:66:72:55:
7f:7d:58:ac:ac:98:68:6e:96:82:86:78:bd:9c:e3:
67:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:35:76:E5:80:73:55:59:95:14:3A:94:52:42:E3:16:53:5E:F0:70
X509v3 Authority Key Identifier:
keyid:08:6A:87:BB:F9:1A:E6:8D:F9:2E:8D:5D:2F:4A:84:9A:B8:C2:ED:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CGqHu_ka5o35Lo1dL0qEmrjC7Vk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a7c151-74f9-41da-8f72-1a85a68d1a77/1/CGqHu_ka5o35Lo1dL0qEmrjC7Vk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a7c151-74f9-41da-8f72-1a85a68d1a77/1/CGqHu_ka5o35Lo1dL0qEmrjC7Vk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:04:e4:c6:3f:d2:ba:80:2e:c1:7d:54:e9:13:b7:f4:1e:9b:
8b:39:22:4e:68:b5:b3:4d:36:1f:e4:98:13:e4:32:98:7b:26:
3c:f5:4a:ea:18:3a:e5:57:76:24:92:08:91:9c:11:ef:09:d1:
97:b0:27:c0:0f:fa:68:82:f2:9a:f3:fd:a0:96:0a:44:a9:39:
3d:e5:cf:1d:52:83:51:1f:b6:02:58:c8:af:ec:15:02:ea:6b:
92:f5:0c:db:fb:58:67:9e:a0:7d:78:01:33:29:01:c7:e5:77:
a7:1b:15:b4:93:83:7f:fc:55:20:a5:1f:2f:c3:e1:40:be:fa:
ee:a8:38:0d:4e:6d:78:b7:83:94:0a:75:ef:6c:a8:14:d7:a5:
3c:12:7f:d2:32:7f:96:1c:a8:e0:e0:68:bc:7f:11:cb:aa:03:
cd:67:51:b9:9b:16:6f:64:3d:92:d8:da:62:7a:1c:d4:54:85:
54:3a:f1:b5:ff:69:90:07:70:0f:09:87:11:20:7c:f7:0d:fa:
f3:d2:f1:ba:4a:f1:0c:85:2a:e8:c1:b6:e2:aa:3b:9b:a2:73:
c4:99:b3:d9:31:ce:01:dc:f0:f0:49:4f:88:6f:36:17:ed:ad:
a0:f6:c4:f4:94:29:64:7f:fe:1e:51:0e:a9:7f:b2:15:1a:30:
c9:d2:4b:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:11:09 2026 by rpki-client