Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.mft
File: CGQ46YiTiYKfpfUbaiEHMQgurCI.mft (raw, json)
Hash identifier: qY+vx16jt10M+H8C/pcafyg/MBShgc7TuGetpdgEMJY=
Subject key identifier: 0F:1E:AF:7B:E0:B8:72:88:1A:CB:86:96:55:EA:F2:F5:3E:F3:9C:10
Authority key identifier: 08:64:38:E9:88:93:89:82:9F:A5:F5:1B:6A:21:07:31:08:2E:AC:22
Certificate issuer: /CN=086438e9889389829fa5f51b6a210731082eac22
Certificate serial: 01A0C47C767E6221C75D4F9F0417953BFB4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CGQ46YiTiYKfpfUbaiEHMQgurCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.mft
Manifest number: 0A05
Signing time: Mon 21 Sep 2026 15:01:26 +0000
Manifest this update: Mon 21 Sep 2026 15:01:26 +0000
Manifest next update: Tue 22 Sep 2026 15:01:26 +0000
Files and hashes: 1: 1-qgEtfD7o34ZK5y_c1RY5TzHJL8.roa (hash: X2khWZbYiIgXPJldeRx2uDRFmMi59ge/KSoidBbk1W0=)
2: CGQ46YiTiYKfpfUbaiEHMQgurCI.crl (hash: 7pkq4l4XJf+nRAXrXbc9BJyxbzLZGnDSchidwRazmXU=)
3: KS3gSsDRatqoleacB_dktcBbY2M.roa (hash: WbFmHVs4aB8N9NQu1Q9tJalzkeMamudIYW/ZZUkdB1k=)
4: Moxn3iWlB5DXKcsT3Hpix-jum0w.roa (hash: 3VaeGFqKYdLPf7mP0u+ieEaG1+gde8oE5cPWlEgSrKI=)
5: Zw5WYMZLpFX4Ksnc0ifaTvkcsXY.roa (hash: C18fBB7Cy74JOp9p1wDCXKCvqBCj8z0bWarhgimOnzk=)
6: _ussT5RkZH-7W87cA2uGw42C8U0.roa (hash: 3dSzoFgNBeGblUUioE5+ZT8IgwplKW5Jsk723lgi4Ks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.mft
rsync://rpki.ripe.net/repository/DEFAULT/CGQ46YiTiYKfpfUbaiEHMQgurCI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:7c:76:7e:62:21:c7:5d:4f:9f:04:17:95:3b:fb:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=086438e9889389829fa5f51b6a210731082eac22
Validity
Not Before: Sep 21 15:01:26 2026 GMT
Not After : Sep 22 15:01:26 2026 GMT
Subject: CN=0f1eaf7be0b872881acb869655eaf2f53ef39c10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ac:cd:f1:0d:8f:0a:00:54:fb:be:93:0f:45:
85:b6:bd:2a:ab:84:64:62:ef:ea:2c:79:59:a3:31:
4e:d1:12:1e:77:51:04:68:c9:c4:e2:1a:94:6b:c2:
9c:a3:ac:5b:f3:30:f6:f8:2a:5c:7a:c6:bf:9b:99:
4f:1b:2b:f2:a9:c4:0b:dd:49:4f:0e:d5:4a:e4:f1:
fb:45:3d:fc:ad:b0:81:3f:41:ea:dd:5c:d1:6f:54:
55:be:7f:e0:83:0b:46:9a:13:e2:3c:64:62:54:67:
07:c9:58:fe:88:d8:a2:8c:82:fe:50:fb:12:43:ea:
a2:89:8b:5e:bb:73:c1:c5:03:df:f9:3c:86:08:c7:
17:f4:ee:af:a6:82:8d:f3:8e:d0:bf:4c:ee:e5:15:
c9:28:cb:2c:47:f6:54:6e:6c:e5:52:de:7c:89:4a:
47:9c:92:16:10:39:92:c3:be:e8:9f:66:ed:96:02:
e6:3e:11:77:fb:4a:7e:cf:f1:e9:64:f2:dc:14:f4:
e6:9f:6d:bd:9d:e4:3d:f9:c2:5b:2e:c2:19:9b:91:
a0:ef:20:8f:41:6d:18:1c:b6:6c:2e:24:e6:68:cb:
2e:9a:90:17:d5:cf:f1:cc:1b:8f:4f:35:05:81:32:
3e:69:0d:4e:05:a5:2e:dc:c4:45:f2:9b:54:aa:eb:
17:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:1E:AF:7B:E0:B8:72:88:1A:CB:86:96:55:EA:F2:F5:3E:F3:9C:10
X509v3 Authority Key Identifier:
keyid:08:64:38:E9:88:93:89:82:9F:A5:F5:1B:6A:21:07:31:08:2E:AC:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CGQ46YiTiYKfpfUbaiEHMQgurCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:c2:90:6d:41:07:c8:6b:9e:4b:de:81:43:e2:7c:41:d7:cd:
80:89:66:d3:41:cb:b2:97:7f:17:e1:0b:b5:5a:84:87:29:50:
e3:c7:68:b1:e9:34:b7:09:34:c0:7b:70:51:31:8b:a8:65:62:
a0:16:b3:ec:e2:ae:1f:58:dc:f3:1b:5a:ed:b1:7d:bb:49:ee:
6a:73:b4:75:04:59:f0:c5:cd:77:3a:68:00:fc:d1:e0:8d:bd:
01:64:e8:c7:bf:84:6f:00:1f:3e:b5:9c:22:fb:64:82:92:bd:
55:7e:94:03:a3:a0:c8:e2:b7:95:52:5c:6e:ce:1b:e9:51:ef:
96:b2:cb:41:cf:ec:ae:2e:22:8d:5c:bc:b2:ad:54:25:3b:29:
cb:e1:3d:f6:23:b3:fc:61:48:39:68:bc:5a:0d:4b:66:a2:35:
fe:87:25:a1:24:f0:ab:89:19:21:22:7c:8d:34:4d:86:c6:50:
96:9e:3e:72:98:86:a2:66:43:21:90:c4:b9:37:59:8a:fa:2c:
25:6b:50:98:67:4c:ef:02:eb:61:12:ed:48:89:a2:c0:f6:0b:
f4:20:8c:7c:5c:35:e0:42:09:42:35:bd:8e:aa:0e:86:91:c5:
44:a4:c4:64:25:25:ba:6a:7e:fe:f0:c9:86:c6:a9:8c:fb:e6:
ce:16:ae:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 21:55:28 2026 by rpki-client