Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.mft
File: G2I9umK4V8pz2KgKEZkPceBOfbY.mft (raw, json)
Hash identifier: oDU1Ar7DGXbh4W4iAkvauK96bpUfjfG4MlGC2KrhV6k=
Subject key identifier: 17:07:CC:23:14:EA:00:7F:1A:B5:08:59:B6:69:CE:C7:96:02:8D:96
Authority key identifier: 1B:62:3D:BA:62:B8:57:CA:73:D8:A8:0A:11:99:0F:71:E0:4E:7D:B6
Certificate issuer: /CN=1b623dba62b857ca73d8a80a11990f71e04e7db6
Certificate serial: 01A0D5DE83781BF8D7E4FD567DBE0366C3A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G2I9umK4V8pz2KgKEZkPceBOfbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.mft
Manifest number: 11F3
Signing time: Fri 25 Sep 2026 00:02:04 +0000
Manifest this update: Fri 25 Sep 2026 00:02:04 +0000
Manifest next update: Sat 26 Sep 2026 00:02:04 +0000
Files and hashes: 1: G2I9umK4V8pz2KgKEZkPceBOfbY.crl (hash: Ak6t7N8l3GDTEr4PYkRxTtSP5dSe9/Umca8TJ63c1pI=)
2: _TZJcz_b9cq-8luNUL6eEZRU19o.roa (hash: XV8xsUjzIwVTNMvOzhZSqDe2iSUDHqLPyeEkThsb7Tw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/G2I9umK4V8pz2KgKEZkPceBOfbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:de:83:78:1b:f8:d7:e4:fd:56:7d:be:03:66:c3:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b623dba62b857ca73d8a80a11990f71e04e7db6
Validity
Not Before: Sep 25 00:02:04 2026 GMT
Not After : Sep 26 00:02:04 2026 GMT
Subject: CN=1707cc2314ea007f1ab50859b669cec796028d96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:62:50:ac:26:46:61:08:36:c5:33:a7:49:6b:
a8:65:d2:e7:79:d4:f3:bd:f3:28:40:0a:a0:5a:a5:
dd:1b:f5:40:da:04:2e:eb:a5:4f:ee:9f:fb:aa:63:
61:f4:f7:d2:dd:59:a1:67:14:49:2c:36:80:40:2a:
f9:e4:8f:10:e8:d3:15:11:b6:a1:00:b3:1b:9e:a4:
4d:3b:fe:87:7d:84:64:bb:f0:b5:1c:fe:b5:9f:a4:
98:c9:2e:06:cf:f2:cb:0a:e2:b9:3b:ce:ab:ed:ea:
5c:2a:4b:cd:53:09:49:b2:84:51:c1:f3:82:c4:1a:
37:16:48:6d:6a:13:c0:ca:75:5e:19:ca:ce:ab:44:
1e:9d:8c:e2:1a:01:d3:5a:88:74:92:a1:be:ca:ca:
01:7c:0e:5a:d7:9e:f2:c1:5b:b3:92:c5:a8:65:d7:
10:92:3a:fc:57:f6:32:61:18:b5:67:ac:5c:af:cd:
ed:5a:a3:75:78:09:75:31:b1:a0:29:a3:21:a9:61:
1e:39:7e:ce:3c:2b:4b:38:ea:97:11:56:b6:dd:28:
a9:3c:b3:dc:e1:81:92:20:8c:3a:ae:f4:22:a4:6f:
c2:8c:09:d4:64:20:fb:2f:ad:09:7e:94:7f:3e:20:
5c:e2:bf:1b:2a:f6:05:39:69:20:bf:66:ae:3f:d7:
34:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:07:CC:23:14:EA:00:7F:1A:B5:08:59:B6:69:CE:C7:96:02:8D:96
X509v3 Authority Key Identifier:
keyid:1B:62:3D:BA:62:B8:57:CA:73:D8:A8:0A:11:99:0F:71:E0:4E:7D:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2I9umK4V8pz2KgKEZkPceBOfbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:1a:bc:58:80:41:3c:1f:df:41:51:86:1a:89:35:6b:15:53:
4d:9c:e7:0f:5d:28:67:c3:e6:59:8e:e4:91:14:eb:e6:ea:fe:
82:65:ba:c2:d5:64:7a:3a:2c:01:85:6f:9d:5e:68:29:7a:41:
ec:8e:88:eb:dc:c9:1c:fd:68:ef:5b:48:da:ed:78:9c:50:23:
c5:1b:63:2b:4d:22:4b:47:5a:e7:ec:fa:b6:38:10:98:54:9f:
06:58:c1:08:62:4c:57:cb:3e:02:58:24:41:49:74:eb:1a:86:
42:8b:42:f4:d0:20:fe:d9:10:7b:46:22:29:f4:e3:c4:47:6f:
12:3a:bc:b0:63:65:2e:ce:12:3e:c7:fa:09:fc:e2:7b:36:45:
40:96:21:4e:b7:30:ad:b9:95:ef:8e:e3:0b:c4:05:21:1e:61:
4c:47:78:d3:91:e5:cd:28:4f:7e:af:91:03:5f:3d:74:51:fb:
82:77:32:1c:76:7a:09:35:e1:23:27:ed:cd:ab:51:e4:90:0a:
e5:c8:8f:71:64:75:34:52:69:55:ce:5c:71:59:9c:61:44:9d:
65:af:f4:47:a6:a5:26:44:ef:28:40:07:c9:62:7e:c8:08:f9:
ab:cb:12:5b:13:a3:56:22:d9:b1:d3:ca:03:6b:0f:18:28:91:
64:d3:04:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 08:47:38 2026 by rpki-client