Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.mft
File: CGQ46YiTiYKfpfUbaiEHMQgurCI.mft (raw, json)
Hash identifier: /6xu0XDUKv55yumTKNJpHZRTZP5cvCh7aIo1VJFa7yw=
Subject key identifier: 96:08:DB:EA:35:E1:A8:68:0D:3A:9E:56:FD:9B:7C:90:D5:2F:AA:1B
Authority key identifier: 08:64:38:E9:88:93:89:82:9F:A5:F5:1B:6A:21:07:31:08:2E:AC:22
Certificate issuer: /CN=086438e9889389829fa5f51b6a210731082eac22
Certificate serial: 019CAC0FB1BAAD0C01503B97FD331BC8AE01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CGQ46YiTiYKfpfUbaiEHMQgurCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.mft
Manifest number: 07E3
Signing time: Mon 02 Mar 2026 01:00:35 +0000
Manifest this update: Mon 02 Mar 2026 01:00:35 +0000
Manifest next update: Tue 03 Mar 2026 01:00:35 +0000
Files and hashes: 1: CGQ46YiTiYKfpfUbaiEHMQgurCI.crl (hash: 1SD/WYFipllJbWNWEkKhtOhTmroOBHfYk3dpro6J+sA=)
2: UrU5ss9vFQ-l3nVhn8gdysZ1cTk.roa (hash: gGl8YAHcy3GZ1HEr+LWvhANtkJ104eAl3nZP0vFLmzY=)
3: Zw5WYMZLpFX4Ksnc0ifaTvkcsXY.roa (hash: C18fBB7Cy74JOp9p1wDCXKCvqBCj8z0bWarhgimOnzk=)
4: _ussT5RkZH-7W87cA2uGw42C8U0.roa (hash: 3dSzoFgNBeGblUUioE5+ZT8IgwplKW5Jsk723lgi4Ks=)
5: d2hV2NGuzvXofQO61hG5--pH-wk.roa (hash: bbNWrPoG3uFsAF1ZVXOLfUIGyZrdmJbXdSb+jiXQ9zg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.mft
rsync://rpki.ripe.net/repository/DEFAULT/CGQ46YiTiYKfpfUbaiEHMQgurCI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:b1:ba:ad:0c:01:50:3b:97:fd:33:1b:c8:ae:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=086438e9889389829fa5f51b6a210731082eac22
Validity
Not Before: Mar 2 01:00:35 2026 GMT
Not After : Mar 3 01:00:35 2026 GMT
Subject: CN=9608dbea35e1a8680d3a9e56fd9b7c90d52faa1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:90:37:67:aa:f6:b0:7c:ae:b7:5e:73:7c:b6:
81:41:44:eb:34:f4:f0:e0:72:85:9d:5f:d7:2a:2d:
95:4f:09:eb:2e:f3:a1:6c:f0:57:3f:48:35:94:85:
fc:27:7d:27:41:3b:7a:f8:2c:04:1e:27:7c:4d:2e:
a7:2b:91:d7:54:02:f4:64:fc:31:51:aa:5c:08:81:
46:f2:b5:66:39:2f:8d:2e:a1:cf:cb:1b:83:c3:b7:
6d:c9:69:74:de:ee:cd:6b:fa:8f:cf:f3:9c:71:98:
6e:e0:5b:88:76:48:a1:4e:d2:13:04:cc:89:23:3f:
f7:5c:07:23:c2:93:f7:b7:8a:0f:05:7e:7f:4a:7b:
4a:21:84:71:7f:a7:20:16:15:d6:d5:11:77:2b:83:
91:c6:cb:6f:1b:13:00:ad:fc:12:b5:7d:87:c4:41:
97:87:aa:05:b0:15:ff:5c:0e:4e:4f:24:5e:65:34:
01:1c:18:86:15:a8:f8:bf:a3:43:fa:35:fe:df:10:
75:65:7b:4e:93:44:40:8f:6b:2a:59:51:db:d6:90:
c4:dd:b2:b1:4a:5e:ee:d2:26:3d:bf:61:01:4f:3a:
f6:a1:46:c8:30:5f:6c:34:45:0f:43:2d:89:21:1f:
7d:2a:8f:d5:92:00:7a:4f:3a:9e:45:3c:7a:7a:36:
b3:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:08:DB:EA:35:E1:A8:68:0D:3A:9E:56:FD:9B:7C:90:D5:2F:AA:1B
X509v3 Authority Key Identifier:
keyid:08:64:38:E9:88:93:89:82:9F:A5:F5:1B:6A:21:07:31:08:2E:AC:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CGQ46YiTiYKfpfUbaiEHMQgurCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:d8:95:6a:a0:27:4f:8f:54:59:4f:04:8e:cc:e8:04:4d:62:
c7:63:ce:9f:03:18:9d:7e:2b:ce:eb:ae:f5:16:07:41:29:53:
9e:e7:05:d0:aa:6a:9d:65:a7:3a:90:a4:58:f3:83:26:a1:4a:
e3:f2:8e:18:24:42:55:d5:8c:d1:da:0b:53:fd:c6:6d:6c:74:
15:60:be:e5:22:a1:0a:dd:88:4a:00:01:7f:f5:42:d3:00:49:
39:62:a6:67:c3:34:9d:e8:ea:9a:d6:00:8e:d8:62:96:cb:43:
ce:43:19:0d:b2:e3:fa:97:1d:d0:d2:3d:5f:e3:f0:d9:e0:fd:
a3:b6:11:4e:3f:9b:62:1c:49:68:9b:4c:1c:7a:bf:17:5d:42:
10:61:a8:2c:57:1b:d3:31:94:1e:73:a5:cc:0e:2a:27:03:b7:
bc:f8:ea:61:a1:e3:b6:51:74:e5:c2:29:be:45:10:12:c1:1b:
1b:67:17:0b:67:86:f4:25:0d:08:be:aa:ac:50:71:9e:f3:98:
32:87:b5:c2:93:a9:d6:65:a3:ea:ca:84:0c:18:a4:61:f3:d6:
a0:eb:17:e8:5b:da:52:83:60:f1:c7:4d:01:00:b1:9c:0b:91:
a6:ad:73:4a:7e:1d:44:94:77:2e:ca:46:a1:e3:50:06:f5:93:
d3:4a:98:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:49:50 2026 by rpki-client