Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.mft
File: CGQ46YiTiYKfpfUbaiEHMQgurCI.mft (raw, json)
Hash identifier: 97pNCw1zXlw7RDZh+nmlMwBRmwAoqOIlTXjwXCwTbbg=
Subject key identifier: 74:FB:FB:9B:12:F9:15:19:84:E8:A9:66:ED:2D:D8:42:F5:2A:48:F9
Authority key identifier: 08:64:38:E9:88:93:89:82:9F:A5:F5:1B:6A:21:07:31:08:2E:AC:22
Certificate issuer: /CN=086438e9889389829fa5f51b6a210731082eac22
Certificate serial: 019FA89A25E0BF0433D00EF24A8843A1E624
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CGQ46YiTiYKfpfUbaiEHMQgurCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.mft
Manifest number: 0972
Signing time: Tue 28 Jul 2026 12:01:42 +0000
Manifest this update: Tue 28 Jul 2026 12:01:42 +0000
Manifest next update: Wed 29 Jul 2026 12:01:42 +0000
Files and hashes: 1: 1-qgEtfD7o34ZK5y_c1RY5TzHJL8.roa (hash: X2khWZbYiIgXPJldeRx2uDRFmMi59ge/KSoidBbk1W0=)
2: CGQ46YiTiYKfpfUbaiEHMQgurCI.crl (hash: QEXczVBprASjS/N/i3VEDniZRmIMdBs7LWqVptMRsPk=)
3: KS3gSsDRatqoleacB_dktcBbY2M.roa (hash: WbFmHVs4aB8N9NQu1Q9tJalzkeMamudIYW/ZZUkdB1k=)
4: Moxn3iWlB5DXKcsT3Hpix-jum0w.roa (hash: 3VaeGFqKYdLPf7mP0u+ieEaG1+gde8oE5cPWlEgSrKI=)
5: Zw5WYMZLpFX4Ksnc0ifaTvkcsXY.roa (hash: C18fBB7Cy74JOp9p1wDCXKCvqBCj8z0bWarhgimOnzk=)
6: _ussT5RkZH-7W87cA2uGw42C8U0.roa (hash: 3dSzoFgNBeGblUUioE5+ZT8IgwplKW5Jsk723lgi4Ks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.mft
rsync://rpki.ripe.net/repository/DEFAULT/CGQ46YiTiYKfpfUbaiEHMQgurCI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:9a:25:e0:bf:04:33:d0:0e:f2:4a:88:43:a1:e6:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=086438e9889389829fa5f51b6a210731082eac22
Validity
Not Before: Jul 28 12:01:42 2026 GMT
Not After : Jul 29 12:01:42 2026 GMT
Subject: CN=74fbfb9b12f9151984e8a966ed2dd842f52a48f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:34:5f:65:c2:54:73:41:e1:e9:00:f7:f6:63:
54:62:4a:2f:33:86:91:af:dd:19:37:04:28:69:f5:
b0:9a:3f:ed:f1:02:85:e9:16:50:7b:68:a9:3e:cd:
c6:61:e2:80:25:13:94:59:02:6e:90:bf:95:25:20:
e4:57:5a:9b:31:09:30:2f:5b:76:90:b1:ea:8c:b1:
c9:d8:89:51:ee:1f:94:b9:a5:9e:6d:cc:ac:23:b0:
5c:70:66:76:9c:b3:2e:15:30:52:a5:44:9c:96:fe:
13:78:26:a3:34:59:66:5a:a8:f1:7e:b9:02:c3:f0:
aa:4c:5e:c2:96:1e:4e:f7:e1:bd:7f:8e:4d:91:09:
65:23:53:3f:61:1c:6e:d0:58:58:f3:73:2c:89:c1:
d1:b8:93:09:65:2b:e7:22:67:ef:2a:82:29:12:f6:
34:11:37:bd:74:04:6b:23:08:d6:6a:1a:8d:9e:84:
d0:21:82:dd:b6:7d:c3:6a:41:57:97:d1:7c:8e:29:
ca:d2:1b:a4:9c:8a:a1:e1:b1:8c:23:b8:11:aa:18:
eb:15:44:e9:b5:0a:ba:c5:60:3a:aa:0a:b7:79:ac:
0f:af:16:7c:a2:0f:05:db:58:ce:0c:a7:d1:70:28:
54:92:73:5e:6d:cc:c9:4b:24:8c:6b:be:17:92:12:
a1:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:FB:FB:9B:12:F9:15:19:84:E8:A9:66:ED:2D:D8:42:F5:2A:48:F9
X509v3 Authority Key Identifier:
keyid:08:64:38:E9:88:93:89:82:9F:A5:F5:1B:6A:21:07:31:08:2E:AC:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CGQ46YiTiYKfpfUbaiEHMQgurCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:cc:9a:c7:a6:b0:91:08:67:53:9d:38:04:0e:e1:97:7f:73:
b5:07:30:ef:87:62:05:15:89:59:a1:e3:35:05:68:bc:01:96:
a2:80:bd:56:eb:b9:31:c0:19:69:dd:41:a4:08:b9:88:7d:57:
7c:18:dc:bb:24:05:66:c1:4d:ee:c2:06:76:16:0c:15:32:1f:
cf:1e:35:32:5c:b9:ed:60:a6:d6:b9:2c:04:48:e0:42:c6:48:
84:17:0e:39:0e:96:0e:24:c2:3e:7c:61:75:6a:da:86:56:e4:
8c:e6:91:5b:c0:da:c2:d6:5e:1d:67:e8:9a:0c:8b:34:c8:5a:
cd:29:fd:62:15:9b:90:b8:1b:11:50:e0:9d:ed:23:d8:f3:50:
40:66:26:52:0b:23:b8:6c:8c:c4:27:4b:b8:8b:f3:8c:a5:0e:
cf:37:4f:d2:6f:8a:4c:f1:0f:01:1f:44:55:9f:39:5d:83:8e:
d5:ed:79:ff:88:57:3a:6f:e3:15:e4:b9:a6:c5:6b:e4:72:54:
83:26:6c:d6:df:5b:a7:82:9c:0f:99:ce:5d:d2:64:9d:ec:89:
00:78:b9:2d:4b:c3:82:0e:7d:9d:3b:44:51:0f:1e:b4:99:5a:
e0:7a:73:cd:ce:1f:c7:5f:86:16:be:83:59:97:7f:f7:af:d3:
5e:6b:42:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+omiXgvwQz0A7ySohDoeYkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4NjQzOGU5ODg5Mzg5ODI5ZmE1ZjUxYjZhMjEwNzMxMDgy
ZWFjMjIwHhcNMjYwNzI4MTIwMTQyWhcNMjYwNzI5MTIwMTQyWjAzMTEwLwYDVQQD
Eyg3NGZiZmI5YjEyZjkxNTE5ODRlOGE5NjZlZDJkZDg0MmY1MmE0OGY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTRfZcJUc0Hh6QD39mNUYkovM4aR
r90ZNwQoafWwmj/t8QKF6RZQe2ipPs3GYeKAJROUWQJukL+VJSDkV1qbMQkwL1t2
kLHqjLHJ2IlR7h+UuaWebcysI7BccGZ2nLMuFTBSpUSclv4TeCajNFlmWqjxfrkC
w/CqTF7Clh5O9+G9f45NkQllI1M/YRxu0FhY83MsicHRuJMJZSvnImfvKoIpEvY0
ETe9dARrIwjWahqNnoTQIYLdtn3DakFXl9F8jinK0huknIqh4bGMI7gRqhjrFUTp
tQq6xWA6qgq3eawPrxZ8og8F21jODKfRcChUknNebczJSySMa74XkhKh1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHT7+5sS+RUZhOipZu0t2EL1Kkj5MB8GA1UdIwQY
MBaAFAhkOOmIk4mCn6X1G2ohBzEILqwiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0dRNDZZaVRpWUtmcGZVYmFpRUhNUWd1ckNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9lNDlhZTctYTUxYS00NzY0LTg1Yzgt
YTc4MTBlM2ExYmViLzEvQ0dRNDZZaVRpWUtmcGZVYmFpRUhNUWd1ckNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9lNDlhZTctYTUxYS00NzY0LTg1YzgtYTc4MTBlM2ExYmVi
LzEvQ0dRNDZZaVRpWUtmcGZVYmFpRUhNUWd1ckNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJcyax6aw
kQhnU504BA7hl39ztQcw74diBRWJWaHjNQVovAGWooC9Vuu5McAZad1BpAi5iH1X
fBjcuyQFZsFN7sIGdhYMFTIfzx41Mly57WCm1rksBEjgQsZIhBcOOQ6WDiTCPnxh
dWrahlbkjOaRW8DawtZeHWfomgyLNMhazSn9YhWbkLgbEVDgne0j2PNQQGYmUgsj
uGyMxCdLuIvzjKUOzzdP0m+KTPEPAR9EVZ85XYOO1e15/4hXOm/jFeS5psVr5HJU
gyZs1t9bp4KcD5nOXdJkneyJAHi5LUvDgg59nTtEUQ8etJla4Hpzzc4fx1+GFr6D
WZd/96/TXmtCow==
-----END CERTIFICATE-----
Generated at Tue Jul 28 18:10:28 2026 by rpki-client