Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.mft
File: CGQ46YiTiYKfpfUbaiEHMQgurCI.mft (raw, json)
Hash identifier: SidbuWrFOQuVT+if5VEKMw/RoZtfl3taqmwABPkkvN4=
Subject key identifier: 6D:10:AE:B7:FA:1C:02:86:91:B4:2F:F4:27:D2:AD:88:6C:F2:83:4F
Authority key identifier: 08:64:38:E9:88:93:89:82:9F:A5:F5:1B:6A:21:07:31:08:2E:AC:22
Certificate issuer: /CN=086438e9889389829fa5f51b6a210731082eac22
Certificate serial: 019D999921CEA787EF8C4144A399219D6701
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CGQ46YiTiYKfpfUbaiEHMQgurCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.mft
Manifest number: 085E
Signing time: Fri 17 Apr 2026 04:00:42 +0000
Manifest this update: Fri 17 Apr 2026 04:00:42 +0000
Manifest next update: Sat 18 Apr 2026 04:00:42 +0000
Files and hashes: 1: CGQ46YiTiYKfpfUbaiEHMQgurCI.crl (hash: MSc+May9nkUK+Dcnr9t2egaJBQieNC0vgAlPekPIxF0=)
2: UrU5ss9vFQ-l3nVhn8gdysZ1cTk.roa (hash: gGl8YAHcy3GZ1HEr+LWvhANtkJ104eAl3nZP0vFLmzY=)
3: Zw5WYMZLpFX4Ksnc0ifaTvkcsXY.roa (hash: C18fBB7Cy74JOp9p1wDCXKCvqBCj8z0bWarhgimOnzk=)
4: _ussT5RkZH-7W87cA2uGw42C8U0.roa (hash: 3dSzoFgNBeGblUUioE5+ZT8IgwplKW5Jsk723lgi4Ks=)
5: d2hV2NGuzvXofQO61hG5--pH-wk.roa (hash: bbNWrPoG3uFsAF1ZVXOLfUIGyZrdmJbXdSb+jiXQ9zg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.mft
rsync://rpki.ripe.net/repository/DEFAULT/CGQ46YiTiYKfpfUbaiEHMQgurCI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:21:ce:a7:87:ef:8c:41:44:a3:99:21:9d:67:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=086438e9889389829fa5f51b6a210731082eac22
Validity
Not Before: Apr 17 04:00:42 2026 GMT
Not After : Apr 18 04:00:42 2026 GMT
Subject: CN=6d10aeb7fa1c028691b42ff427d2ad886cf2834f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b4:9a:11:61:bd:09:e8:13:87:fc:55:f3:a2:
6a:f3:6c:7f:71:7f:33:29:6b:bc:54:72:9c:4f:4c:
fe:41:ff:3a:59:a4:10:9a:72:42:2c:57:eb:43:c9:
11:35:41:a2:db:1b:7d:e1:f3:d1:de:0a:e7:94:a8:
d8:be:a2:29:ec:6e:4f:98:63:e2:e2:a7:71:0a:21:
6a:5e:6c:97:be:f6:bf:35:6d:b3:9a:5f:19:6d:8d:
5b:ea:1f:6d:30:5f:fb:52:f0:61:a4:15:12:a3:14:
0b:5b:e7:ba:6a:0a:52:a2:05:e3:72:b5:fb:f3:95:
ad:51:64:cf:2c:de:d5:55:d2:31:3a:e9:01:f0:d0:
8c:18:64:8d:c5:1e:55:32:be:35:9d:ce:13:ef:aa:
15:6c:7a:9d:ab:92:bc:41:aa:1f:16:d5:b4:40:dc:
47:e3:dd:13:7c:ee:0e:35:41:5c:45:98:dc:95:8e:
db:7f:a7:35:7f:65:a0:dc:a9:cc:9c:bb:66:ac:94:
9e:63:be:bc:32:bc:66:a9:a2:45:fb:e1:9c:cc:40:
00:98:44:dc:99:8b:02:80:d6:62:af:cd:2d:75:21:
f3:03:5b:23:2e:4f:a1:07:72:b4:34:fa:c2:c0:16:
69:59:c8:3e:86:9b:06:27:54:bd:fb:03:f7:56:08:
1a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:10:AE:B7:FA:1C:02:86:91:B4:2F:F4:27:D2:AD:88:6C:F2:83:4F
X509v3 Authority Key Identifier:
keyid:08:64:38:E9:88:93:89:82:9F:A5:F5:1B:6A:21:07:31:08:2E:AC:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CGQ46YiTiYKfpfUbaiEHMQgurCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:59:c3:1c:e1:20:d5:62:4c:42:04:7d:3e:af:c4:ba:f8:44:
cb:80:a9:82:bc:f5:0b:ac:ea:26:84:a6:8b:2d:2d:9c:be:08:
b0:7b:ca:0a:26:e5:12:86:da:3f:cb:ac:ea:3f:a1:d8:0d:ea:
69:7a:8a:47:f4:c8:d9:ea:63:3c:20:51:e7:ff:86:43:d6:ed:
a1:1b:d4:f3:d9:a1:fb:4e:f5:1a:24:7a:29:07:dc:64:33:35:
b5:aa:7b:1a:85:b1:21:ce:9d:09:f3:66:a6:3e:24:79:b6:e4:
49:42:55:99:d9:a2:37:e1:8b:30:0b:48:62:4d:6f:60:1e:5b:
47:52:e7:54:ae:97:26:fc:f5:ef:24:84:0d:eb:88:bd:eb:f9:
84:aa:20:e2:47:2e:91:9c:1f:0e:bb:ba:34:87:6f:27:16:cf:
4b:fc:1f:b4:93:cf:f0:a8:57:4d:6d:80:ae:27:55:56:c5:9e:
7f:ce:46:81:78:43:41:76:4e:b6:d0:de:6c:45:17:20:89:f9:
24:04:11:a0:13:d4:37:33:fe:e1:33:37:6f:1f:8e:55:00:88:
6b:12:eb:e6:10:7b:45:0c:30:9a:d1:ae:3e:5f:5e:b3:f2:c7:
8c:75:1d:e3:45:79:d6:b9:86:0f:19:bf:5d:da:66:ba:b3:48:
78:0c:cc:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZmSHOp4fvjEFEo5khnWcBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4NjQzOGU5ODg5Mzg5ODI5ZmE1ZjUxYjZhMjEwNzMxMDgy
ZWFjMjIwHhcNMjYwNDE3MDQwMDQyWhcNMjYwNDE4MDQwMDQyWjAzMTEwLwYDVQQD
Eyg2ZDEwYWViN2ZhMWMwMjg2OTFiNDJmZjQyN2QyYWQ4ODZjZjI4MzRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobSaEWG9CegTh/xV86Jq82x/cX8z
KWu8VHKcT0z+Qf86WaQQmnJCLFfrQ8kRNUGi2xt94fPR3grnlKjYvqIp7G5PmGPi
4qdxCiFqXmyXvva/NW2zml8ZbY1b6h9tMF/7UvBhpBUSoxQLW+e6agpSogXjcrX7
85WtUWTPLN7VVdIxOukB8NCMGGSNxR5VMr41nc4T76oVbHqdq5K8QaofFtW0QNxH
490TfO4ONUFcRZjclY7bf6c1f2Wg3KnMnLtmrJSeY768MrxmqaJF++GczEAAmETc
mYsCgNZir80tdSHzA1sjLk+hB3K0NPrCwBZpWcg+hpsGJ1S9+wP3VggaEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG0Qrrf6HAKGkbQv9CfSrYhs8oNPMB8GA1UdIwQY
MBaAFAhkOOmIk4mCn6X1G2ohBzEILqwiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0dRNDZZaVRpWUtmcGZVYmFpRUhNUWd1ckNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9lNDlhZTctYTUxYS00NzY0LTg1Yzgt
YTc4MTBlM2ExYmViLzEvQ0dRNDZZaVRpWUtmcGZVYmFpRUhNUWd1ckNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9lNDlhZTctYTUxYS00NzY0LTg1YzgtYTc4MTBlM2ExYmVi
LzEvQ0dRNDZZaVRpWUtmcGZVYmFpRUhNUWd1ckNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeFnDHOEg
1WJMQgR9Pq/EuvhEy4Cpgrz1C6zqJoSmiy0tnL4IsHvKCiblEobaP8us6j+h2A3q
aXqKR/TI2epjPCBR5/+GQ9btoRvU89mh+071GiR6KQfcZDM1tap7GoWxIc6dCfNm
pj4kebbkSUJVmdmiN+GLMAtIYk1vYB5bR1LnVK6XJvz17ySEDeuIvev5hKog4kcu
kZwfDru6NIdvJxbPS/wftJPP8KhXTW2AridVVsWef85GgXhDQXZOttDebEUXIIn5
JAQRoBPUNzP+4TM3bx+OVQCIaxLr5hB7RQwwmtGuPl9es/LHjHUd40V51rmGDxm/
XdpmurNIeAzM6w==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:59:10 2026 by rpki-client