Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/6a2946-f0a4-4e85-930e-d4edf16e0978/1/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.mft
File: G9ugE2Vbm7DKooXXXBQsHuMPiFQ.mft (raw, json)
Hash identifier: dVVakX1tDy5AIWlo+zUkAxT/3mIQuJPauPlwKJBhTZI=
Subject key identifier: 0C:A2:E1:37:BB:3B:E5:3C:BC:B1:E5:D9:6C:94:1F:2E:E2:25:11:40
Authority key identifier: 1B:DB:A0:13:65:5B:9B:B0:CA:A2:85:D7:5C:14:2C:1E:E3:0F:88:54
Certificate issuer: /CN=1bdba013655b9bb0caa285d75c142c1ee30f8854
Certificate serial: 019F935B098B0D6EB37C5F92A98FD64A01E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/6a2946-f0a4-4e85-930e-d4edf16e0978/1/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.mft
Manifest number: 18A1
Signing time: Fri 24 Jul 2026 09:00:44 +0000
Manifest this update: Fri 24 Jul 2026 09:00:44 +0000
Manifest next update: Sat 25 Jul 2026 09:00:44 +0000
Files and hashes: 1: G9ugE2Vbm7DKooXXXBQsHuMPiFQ.crl (hash: Lh5hePTL4nbfyMjuw2CcPhu6iWN+DN3XSRxDcfB3vtc=)
2: GUn5C0R9BrAYfoyxCLwgJiIfUm4.roa (hash: TE3GqYvgyMZRi3G5/sygxcPRG4YEuD9ufDzYPZfPI5U=)
3: esdDEmlA_vp-DUa3L78lRMSFDrg.roa (hash: 89EU1646sjMts7fuWu8bk/NpsMoyPAALSAlqPCHzEdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/6a2946-f0a4-4e85-930e-d4edf16e0978/1/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/6a2946-f0a4-4e85-930e-d4edf16e0978/1/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5b:09:8b:0d:6e:b3:7c:5f:92:a9:8f:d6:4a:01:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bdba013655b9bb0caa285d75c142c1ee30f8854
Validity
Not Before: Jul 24 09:00:44 2026 GMT
Not After : Jul 25 09:00:44 2026 GMT
Subject: CN=0ca2e137bb3be53cbcb1e5d96c941f2ee2251140
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ce:35:5e:fa:cd:9b:3e:ae:d5:e6:c1:35:de:
3b:47:f5:46:a4:fc:0c:67:31:48:3e:e2:7b:7a:94:
23:bb:39:4e:94:2e:36:8d:73:99:2f:a3:17:a2:9d:
23:7b:79:a3:71:e6:a1:15:74:d0:2c:d9:83:80:e5:
64:c4:74:c2:09:ff:6b:b0:6d:17:db:ca:bd:48:7f:
a7:11:d2:75:51:07:37:37:60:29:37:b4:d5:20:37:
8f:b9:bf:40:04:96:99:a2:92:ac:6a:72:19:b5:22:
1a:d4:6f:6c:fe:c4:b4:4c:79:99:b2:16:7f:09:eb:
0f:f8:e0:ab:74:b3:48:2f:bf:8d:d7:eb:4a:59:69:
29:44:21:35:3b:43:58:a0:a1:95:18:7b:b0:8c:4f:
3d:ff:5c:a7:71:2b:98:c9:0f:9f:c7:f9:9e:79:48:
c7:9c:b0:f6:c9:9d:72:74:cd:31:09:8e:4e:5c:49:
0d:6b:4d:4d:48:63:fe:35:67:11:4d:d0:7f:70:e5:
60:f1:2d:6e:7a:65:b4:a9:91:94:65:15:4b:c2:fd:
65:a1:ff:aa:06:67:f5:33:64:f2:a8:6d:58:d3:c2:
48:94:83:49:ce:e3:1a:bd:23:4f:35:66:93:32:02:
20:b4:57:dc:ad:a0:ce:2e:45:1a:b7:42:15:0b:35:
2d:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:A2:E1:37:BB:3B:E5:3C:BC:B1:E5:D9:6C:94:1F:2E:E2:25:11:40
X509v3 Authority Key Identifier:
keyid:1B:DB:A0:13:65:5B:9B:B0:CA:A2:85:D7:5C:14:2C:1E:E3:0F:88:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/6a2946-f0a4-4e85-930e-d4edf16e0978/1/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/6a2946-f0a4-4e85-930e-d4edf16e0978/1/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:3f:92:0d:f3:e4:48:9a:37:2b:df:6b:c1:c6:d8:4c:ea:e0:
1b:3a:83:56:96:99:3c:16:2d:81:a8:7c:2d:4a:8d:cb:fe:de:
85:60:8b:ee:bf:1c:91:3a:42:39:98:7e:df:1c:cf:96:69:a2:
d2:69:ac:01:94:0f:03:8e:da:31:f0:f6:03:d5:c3:a0:c6:47:
52:dd:60:8e:47:30:24:a1:12:24:48:1e:4b:50:9e:ac:01:b7:
1c:80:5b:dc:f0:a1:19:9f:3a:59:5a:ac:a6:29:3f:9f:9e:27:
b4:f9:c5:64:ef:63:f3:f9:b0:2e:5d:a3:b6:63:d3:3c:53:e1:
c5:45:f9:c8:de:85:9c:0d:b7:ee:3b:97:82:27:25:3a:75:25:
cd:bb:b4:97:d8:d4:d1:cf:13:4d:05:a1:d8:f6:a4:17:88:5e:
f8:d7:d1:83:0c:31:e7:71:0e:04:c8:8d:6e:70:8f:d1:4d:20:
c1:5a:41:08:11:d8:fa:1d:f4:9d:6c:d1:d0:c5:89:bc:ca:31:
ef:e8:70:11:0d:97:04:4c:10:74:89:73:b8:f6:94:07:68:2d:
d9:41:61:64:ff:fa:f7:c5:43:36:f6:0f:f0:04:9e:6b:ea:e3:
da:d5:a1:d8:39:5d:ee:4c:3e:0d:42:b4:44:54:4c:ce:f5:95:
3a:77:f4:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:17:40 2026 by rpki-client