Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/f8be9b-58f0-4544-b23f-6354ef0771c9/1/g2elJH2fTpT3vVcc8T01q0iwHSQ.mft
File: g2elJH2fTpT3vVcc8T01q0iwHSQ.mft (raw, json)
Hash identifier: nk5zaDuu6dSAgRHAFra329JbHKr5RHzRbZlubVruk1Y=
Subject key identifier: 0F:07:88:C1:F1:4E:87:3B:18:74:1E:E2:CC:C4:34:97:13:55:4E:89
Authority key identifier: 83:67:A5:24:7D:9F:4E:94:F7:BD:57:1C:F1:3D:35:AB:48:B0:1D:24
Certificate issuer: /CN=8367a5247d9f4e94f7bd571cf13d35ab48b01d24
Certificate serial: 01A0D3B8F828DB72FFBCB8F9C802C99F25FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g2elJH2fTpT3vVcc8T01q0iwHSQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/f8be9b-58f0-4544-b23f-6354ef0771c9/1/g2elJH2fTpT3vVcc8T01q0iwHSQ.mft
Manifest number: 09FE
Signing time: Thu 24 Sep 2026 14:01:49 +0000
Manifest this update: Thu 24 Sep 2026 14:01:49 +0000
Manifest next update: Fri 25 Sep 2026 14:01:49 +0000
Files and hashes: 1: LoYQyBr4YJ5ITZr2_fcC3dmO_KA.asa (hash: zpgidiPNOSMW/wwxutmy+pYEFABRXk9mKUJiu/1ReKw=)
2: g2elJH2fTpT3vVcc8T01q0iwHSQ.crl (hash: Ng8JVXeCjS4bqEIgjMEV2og8Kwa6HRJVtMwJQXdMqXE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/f8be9b-58f0-4544-b23f-6354ef0771c9/1/g2elJH2fTpT3vVcc8T01q0iwHSQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/f8be9b-58f0-4544-b23f-6354ef0771c9/1/g2elJH2fTpT3vVcc8T01q0iwHSQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/g2elJH2fTpT3vVcc8T01q0iwHSQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:b8:f8:28:db:72:ff:bc:b8:f9:c8:02:c9:9f:25:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8367a5247d9f4e94f7bd571cf13d35ab48b01d24
Validity
Not Before: Sep 24 14:01:49 2026 GMT
Not After : Sep 25 14:01:49 2026 GMT
Subject: CN=0f0788c1f14e873b18741ee2ccc4349713554e89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:fd:84:e5:0d:7b:c0:20:22:5a:89:a0:5b:9e:
46:27:06:99:f6:6c:eb:d6:e6:d0:f0:0d:48:d4:9a:
db:70:d8:25:69:e0:1c:43:98:dc:7a:46:3b:47:43:
d8:fb:b4:99:ca:b4:eb:ea:63:5d:0f:7e:bd:b1:99:
eb:05:cf:c0:af:bb:b6:62:b6:e8:49:6c:3a:23:43:
1d:a8:cc:e4:b7:aa:f9:b9:94:6f:d8:1e:33:7b:57:
95:b1:4b:73:67:db:b7:b9:63:46:fd:fd:97:7c:7c:
d5:73:01:72:a6:94:24:b3:37:b6:64:4a:e2:68:81:
eb:c4:bd:6b:99:4c:01:0c:cf:8a:fb:76:2a:7f:85:
b8:89:2e:07:98:fb:18:16:07:93:85:4b:fb:0d:5d:
1e:9c:07:ca:b9:bc:43:a2:1b:e7:81:47:0c:3d:6e:
5c:85:2a:69:46:23:2a:e9:95:f5:39:68:c7:6a:7d:
d5:f4:49:d1:bc:b4:63:fe:5b:6a:b1:13:16:e1:23:
c7:00:a8:df:9b:e7:98:a9:15:32:ce:93:64:68:50:
55:c2:44:ba:5f:d2:f5:fa:fb:d9:f3:6e:c3:92:2f:
df:fd:82:92:a1:f5:bb:eb:72:b3:6d:83:05:ca:4b:
c3:26:8a:6e:65:0b:f4:ea:5e:b9:5c:67:87:0a:cd:
10:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:07:88:C1:F1:4E:87:3B:18:74:1E:E2:CC:C4:34:97:13:55:4E:89
X509v3 Authority Key Identifier:
keyid:83:67:A5:24:7D:9F:4E:94:F7:BD:57:1C:F1:3D:35:AB:48:B0:1D:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2elJH2fTpT3vVcc8T01q0iwHSQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f8be9b-58f0-4544-b23f-6354ef0771c9/1/g2elJH2fTpT3vVcc8T01q0iwHSQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f8be9b-58f0-4544-b23f-6354ef0771c9/1/g2elJH2fTpT3vVcc8T01q0iwHSQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:1a:8f:01:38:b0:f3:99:e3:d2:b6:da:77:36:da:f5:9a:92:
30:38:f3:e2:60:e1:1f:93:6e:7b:ed:07:1d:56:18:89:31:9b:
a3:fb:05:6a:55:4f:a8:81:3a:0d:d9:48:60:d7:ef:b7:bf:d6:
de:a6:f4:0d:5b:b1:04:78:76:99:ab:d2:10:cb:f4:0c:ff:63:
87:27:a3:55:0f:ab:43:0f:48:73:23:67:4d:4a:8a:91:27:fe:
2e:0c:c5:f3:d2:ea:c7:3a:34:bc:86:92:47:54:d2:be:ca:8a:
7d:e9:29:16:7a:2c:0e:75:c9:83:b1:6d:3b:2d:16:76:92:c8:
d6:ad:76:c7:dd:25:56:00:00:79:e6:56:ac:4b:f0:f6:f3:1c:
d2:db:6d:c7:f9:a1:d0:a7:22:0d:90:55:9a:71:fc:9a:ca:64:
87:fc:9f:64:2f:04:6f:f4:a1:c7:a7:d2:38:4a:b6:5d:8f:4d:
4c:fe:a7:b2:99:fa:21:70:62:12:22:15:e3:26:d9:24:f6:9a:
cc:83:e6:f5:39:e5:ed:db:ad:7e:1f:e4:5f:ea:c8:93:28:8e:
16:35:ba:9e:f6:d7:bd:d1:26:40:31:9b:81:c5:37:41:3a:40:
30:bb:49:bb:7a:67:cf:bb:c7:ac:26:4f:d2:77:8b:0d:e9:67:
65:9c:f2:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 20:58:16 2026 by rpki-client