Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/a7c151-74f9-41da-8f72-1a85a68d1a77/1/CGqHu_ka5o35Lo1dL0qEmrjC7Vk.mft
File: CGqHu_ka5o35Lo1dL0qEmrjC7Vk.mft (raw, json)
Hash identifier: is3kNGlAhvI+kz5Zs28RWwAbDyyB8pPVzCNM1KvYL4I=
Subject key identifier: 34:28:75:CC:95:32:20:1F:06:C3:33:93:42:4B:3C:4B:AE:36:37:AB
Authority key identifier: 08:6A:87:BB:F9:1A:E6:8D:F9:2E:8D:5D:2F:4A:84:9A:B8:C2:ED:59
Certificate issuer: /CN=086a87bbf91ae68df92e8d5d2f4a849ab8c2ed59
Certificate serial: 019E1C0F98FCA219AD567CBD7134FB0B1A5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CGqHu_ka5o35Lo1dL0qEmrjC7Vk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/a7c151-74f9-41da-8f72-1a85a68d1a77/1/CGqHu_ka5o35Lo1dL0qEmrjC7Vk.mft
Manifest number: 02D6
Signing time: Tue 12 May 2026 12:00:44 +0000
Manifest this update: Tue 12 May 2026 12:00:44 +0000
Manifest next update: Wed 13 May 2026 12:00:44 +0000
Files and hashes: 1: CGqHu_ka5o35Lo1dL0qEmrjC7Vk.crl (hash: jRdsHYK/GgpcNKUEnMiqHvqupLcts7d6XpnWHrT99rQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/a7c151-74f9-41da-8f72-1a85a68d1a77/1/CGqHu_ka5o35Lo1dL0qEmrjC7Vk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/a7c151-74f9-41da-8f72-1a85a68d1a77/1/CGqHu_ka5o35Lo1dL0qEmrjC7Vk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CGqHu_ka5o35Lo1dL0qEmrjC7Vk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:0f:98:fc:a2:19:ad:56:7c:bd:71:34:fb:0b:1a:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=086a87bbf91ae68df92e8d5d2f4a849ab8c2ed59
Validity
Not Before: May 12 12:00:44 2026 GMT
Not After : May 13 12:00:44 2026 GMT
Subject: CN=342875cc9532201f06c33393424b3c4bae3637ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c1:ff:eb:28:51:1d:6e:fc:88:75:95:11:20:
1d:6c:ed:9a:63:05:eb:d4:41:35:f9:d6:c9:16:ae:
40:4f:30:6b:92:c7:5e:24:fa:73:f8:bb:d8:9d:9d:
71:cf:e6:a3:5b:04:17:ab:fe:dd:b5:4a:79:fc:5e:
d9:00:2e:68:5b:36:f7:57:35:28:cd:ed:96:df:2f:
e8:c5:5e:a4:77:4e:8d:ef:c9:4f:18:c8:11:69:9c:
4d:4a:85:af:d6:83:0c:8a:5c:a2:3c:43:5d:12:29:
09:77:ba:4e:91:14:7d:97:67:83:fa:4d:42:48:f6:
92:a9:2f:81:03:b6:7a:3a:80:46:d0:89:6c:4c:ff:
1a:d6:bc:93:5e:3c:f2:c8:62:f4:7b:9c:d1:6e:a8:
4d:79:03:3f:9c:1b:6f:a6:09:08:00:7d:23:9a:15:
c6:e1:75:c8:a4:fc:a2:e3:6c:67:14:a9:78:cb:35:
22:27:b7:3e:76:87:1a:19:09:a3:0f:64:7b:17:cd:
a8:cc:69:46:2b:24:c8:cc:3e:c9:9b:df:2d:fe:79:
e1:d5:6d:92:21:ae:57:f2:26:fc:3e:e3:e5:fa:d5:
e9:28:f3:ec:97:9d:26:fd:47:26:da:9c:e5:a1:25:
1d:13:60:cd:b7:a4:40:f9:e1:3f:eb:81:4c:0b:6c:
09:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:28:75:CC:95:32:20:1F:06:C3:33:93:42:4B:3C:4B:AE:36:37:AB
X509v3 Authority Key Identifier:
keyid:08:6A:87:BB:F9:1A:E6:8D:F9:2E:8D:5D:2F:4A:84:9A:B8:C2:ED:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CGqHu_ka5o35Lo1dL0qEmrjC7Vk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a7c151-74f9-41da-8f72-1a85a68d1a77/1/CGqHu_ka5o35Lo1dL0qEmrjC7Vk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a7c151-74f9-41da-8f72-1a85a68d1a77/1/CGqHu_ka5o35Lo1dL0qEmrjC7Vk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:f4:65:77:51:68:52:fd:e2:39:81:17:f1:0b:0b:a1:01:3b:
a1:00:18:8d:8b:91:96:72:3f:11:03:cc:c8:a4:66:e5:b4:6d:
9d:58:5c:8a:97:80:73:ff:9c:a1:6d:31:54:7e:fe:d8:2f:12:
d5:b3:24:22:44:bc:0c:4d:b4:74:4d:1e:eb:f5:49:5e:06:d8:
33:85:10:66:ee:83:8c:8c:90:bc:1d:fe:1e:42:e1:00:74:b8:
d1:c3:4d:dd:db:ab:b1:3c:14:e1:ba:a3:dd:99:54:a4:d3:27:
6b:f4:11:c7:06:e1:21:8b:3e:02:bc:18:b7:eb:93:88:fb:d5:
37:73:11:89:a6:87:81:1f:95:6e:bf:23:1e:06:70:16:b3:eb:
8e:ac:0f:eb:86:cf:e5:84:77:ee:fc:46:07:54:8a:91:b7:3c:
43:c1:a2:a6:37:01:6a:68:22:ff:6d:35:bd:94:d5:4c:7c:3d:
d5:db:27:b0:b7:d9:a6:b0:e6:e5:08:f2:ea:aa:46:aa:e2:39:
04:3e:c2:81:34:d1:06:7b:94:6a:b0:3c:01:89:33:3f:e8:d0:
f1:71:02:c1:cc:f7:4e:59:aa:01:a7:cd:ab:f9:46:58:78:65:
d1:85:e4:28:ac:55:11:af:97:39:22:0b:39:c0:bf:e7:a0:44:
9c:c4:20:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:12:44 2026 by rpki-client