Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1d/453542-08b2-4399-bc5c-c756ae01fa8a/1/g2CIUSAjKNzl_AG_ndKSUgUw2f4.mft
File: g2CIUSAjKNzl_AG_ndKSUgUw2f4.mft (raw, json)
Hash identifier: 4OcrRaapJGmvqqhVVf+srQ+rq/aCJaWr92zdhKvDCEE=
Subject key identifier: 27:05:F1:F1:42:08:9C:6D:F4:8B:90:E8:0E:8C:E6:90:CA:CF:3F:EC
Authority key identifier: 83:60:88:51:20:23:28:DC:E5:FC:01:BF:9D:D2:92:52:05:30:D9:FE
Certificate issuer: /CN=83608851202328dce5fc01bf9dd292520530d9fe
Certificate serial: 01A0DA286B65ED45FC915C0BCE3F6E1ED1BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g2CIUSAjKNzl_AG_ndKSUgUw2f4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/453542-08b2-4399-bc5c-c756ae01fa8a/1/g2CIUSAjKNzl_AG_ndKSUgUw2f4.mft
Manifest number: 0A1C
Signing time: Fri 25 Sep 2026 20:01:16 +0000
Manifest this update: Fri 25 Sep 2026 20:01:16 +0000
Manifest next update: Sat 26 Sep 2026 20:01:16 +0000
Files and hashes: 1: Ya4-DOHb6IMAOxmkcETIsWTPCOg.roa (hash: u4TLCuqpTYyL9fIrK/kr+oWhEP1P1uyD8bPrTE+F3k0=)
2: g2CIUSAjKNzl_AG_ndKSUgUw2f4.crl (hash: AqV4+ILpOwx5AQTtiBzO3RR/ufSIWMZXsdwlxXiiGV0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/453542-08b2-4399-bc5c-c756ae01fa8a/1/g2CIUSAjKNzl_AG_ndKSUgUw2f4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/453542-08b2-4399-bc5c-c756ae01fa8a/1/g2CIUSAjKNzl_AG_ndKSUgUw2f4.mft
rsync://rpki.ripe.net/repository/DEFAULT/g2CIUSAjKNzl_AG_ndKSUgUw2f4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:28:6b:65:ed:45:fc:91:5c:0b:ce:3f:6e:1e:d1:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83608851202328dce5fc01bf9dd292520530d9fe
Validity
Not Before: Sep 25 20:01:16 2026 GMT
Not After : Sep 26 20:01:16 2026 GMT
Subject: CN=2705f1f142089c6df48b90e80e8ce690cacf3fec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:7f:e0:2b:d1:6a:2c:76:b6:3a:66:f8:46:c9:
2f:cb:23:c5:34:80:03:5e:41:23:cb:9d:f5:40:ee:
75:17:12:4c:40:cb:80:a7:e8:0f:4d:48:b6:90:85:
2b:3c:be:18:b0:e5:ae:f8:8b:7a:5a:84:1d:2e:fc:
28:c3:35:95:de:57:1f:7d:90:10:2e:f5:a9:45:e4:
49:85:1e:ef:00:52:7e:11:85:02:13:9f:0f:d5:e0:
38:64:1a:43:b6:97:44:42:a1:13:51:09:a3:b8:7a:
98:37:8c:38:73:61:c9:e5:b7:b3:7e:31:5c:80:65:
83:61:b7:0f:59:fb:72:24:c2:f9:29:c6:ea:d0:cc:
9c:89:1c:b2:f2:c0:51:c0:fa:8f:38:3a:5b:a9:ec:
d9:80:0d:42:26:b5:50:4a:c2:f8:20:0f:3c:9f:ec:
b2:9b:38:32:7a:d3:ac:4d:17:e5:80:10:17:68:97:
65:90:6b:3c:51:9f:56:d8:12:66:b3:79:86:a3:b6:
70:9c:04:2a:33:89:c9:15:2a:a0:8a:4c:eb:00:d1:
70:7c:30:d8:b5:5a:fd:af:5d:d9:f4:13:7c:11:9a:
1b:90:f7:d0:a8:c8:81:fa:a5:5e:dc:e9:22:c5:be:
c9:2a:52:dd:e9:e6:4c:1f:02:09:b2:d3:10:e3:23:
70:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:05:F1:F1:42:08:9C:6D:F4:8B:90:E8:0E:8C:E6:90:CA:CF:3F:EC
X509v3 Authority Key Identifier:
keyid:83:60:88:51:20:23:28:DC:E5:FC:01:BF:9D:D2:92:52:05:30:D9:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2CIUSAjKNzl_AG_ndKSUgUw2f4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/453542-08b2-4399-bc5c-c756ae01fa8a/1/g2CIUSAjKNzl_AG_ndKSUgUw2f4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/453542-08b2-4399-bc5c-c756ae01fa8a/1/g2CIUSAjKNzl_AG_ndKSUgUw2f4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:2c:7e:95:a0:61:36:a9:e0:9c:fd:92:10:78:08:f6:6e:65:
e9:1a:92:6c:3d:a9:f2:86:fc:a6:70:7f:2c:48:69:59:10:a7:
3b:51:82:97:aa:cd:02:77:7c:17:63:3f:62:d3:ec:4c:36:66:
39:35:d0:73:f7:99:f3:56:dd:da:01:82:2e:3e:e9:3d:7c:77:
17:85:33:e8:d0:9a:13:da:82:bd:8c:0c:86:bd:6e:a7:bf:da:
6f:4d:59:1e:4f:d3:0f:93:6c:a4:c3:f5:43:cc:43:e3:dc:5d:
b3:15:05:47:ed:74:c4:c6:63:c0:92:1c:2a:d0:f2:e7:d0:c2:
ce:77:a2:76:2a:c2:df:8e:8e:43:a9:29:8a:47:9e:8c:35:26:
c4:11:e8:0a:7b:b1:c0:e1:3d:98:d1:ae:f9:c2:e8:dc:9c:56:
7d:7d:34:7e:ca:ca:c5:dc:af:c6:15:de:9a:8e:29:1c:36:eb:
50:8e:75:69:53:8a:84:8e:7c:e0:ec:16:df:ac:fc:e3:79:9f:
96:74:f3:09:cb:ab:d9:c6:d7:28:c5:be:3b:74:cd:0e:d3:57:
1e:5c:29:5e:b3:d9:e7:88:b4:ea:3a:2f:5a:19:ff:ad:26:52:
8d:f2:2e:02:10:94:60:70:91:f7:11:65:b3:6a:54:b9:b8:13:
b9:ae:5e:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 01:57:53 2026 by rpki-client