Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.mft
File: G2I9umK4V8pz2KgKEZkPceBOfbY.mft (raw, json)
Hash identifier: OLNir0ErNBC70SgwlA62r26ep4wP3ulktXN69kVwsIs=
Subject key identifier: 09:27:9E:E8:98:FC:6A:72:F4:86:F6:6B:6F:CF:D6:1F:A2:8B:79:3B
Authority key identifier: 1B:62:3D:BA:62:B8:57:CA:73:D8:A8:0A:11:99:0F:71:E0:4E:7D:B6
Certificate issuer: /CN=1b623dba62b857ca73d8a80a11990f71e04e7db6
Certificate serial: 01A0D011C21CD8060C91CA45B8864F769597
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G2I9umK4V8pz2KgKEZkPceBOfbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.mft
Manifest number: 11F0
Signing time: Wed 23 Sep 2026 21:00:19 +0000
Manifest this update: Wed 23 Sep 2026 21:00:19 +0000
Manifest next update: Thu 24 Sep 2026 21:00:19 +0000
Files and hashes: 1: G2I9umK4V8pz2KgKEZkPceBOfbY.crl (hash: W/Fx9C3yVTCLLXf/h4ILIHtxoP3WQbjk6rTZj5KuIT8=)
2: _TZJcz_b9cq-8luNUL6eEZRU19o.roa (hash: XV8xsUjzIwVTNMvOzhZSqDe2iSUDHqLPyeEkThsb7Tw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/G2I9umK4V8pz2KgKEZkPceBOfbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:11:c2:1c:d8:06:0c:91:ca:45:b8:86:4f:76:95:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b623dba62b857ca73d8a80a11990f71e04e7db6
Validity
Not Before: Sep 23 21:00:19 2026 GMT
Not After : Sep 24 21:00:19 2026 GMT
Subject: CN=09279ee898fc6a72f486f66b6fcfd61fa28b793b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:18:78:e9:a2:5a:29:4c:0b:7f:d1:cf:c3:4c:
96:c6:ee:a8:a8:44:9b:93:2b:ed:ce:b1:37:f1:9f:
91:4c:28:32:85:3f:9b:3a:42:ad:05:94:3e:1d:6d:
a5:19:d2:e9:34:23:80:47:ba:4d:80:59:75:f5:cf:
8b:ae:b4:4c:bd:40:48:bf:60:c3:39:a7:e5:11:e8:
86:f9:ac:dc:8d:56:76:fa:ec:33:63:67:79:dc:ba:
33:48:12:de:e4:dc:b8:56:cf:6c:e8:0b:0b:9f:cd:
d9:f0:62:4f:7e:4e:a0:08:c5:94:e9:93:aa:01:45:
43:4e:9e:34:03:12:2b:02:46:66:b8:31:18:8f:37:
33:63:35:ab:fd:e5:01:37:78:60:e9:2c:a7:3b:ac:
9f:f5:2e:e6:79:6a:9d:5e:b1:2a:60:e8:5e:d9:67:
46:18:e5:30:bf:22:0f:b4:b0:54:55:3c:6c:33:1b:
ef:08:45:8e:d7:4b:b1:7c:a9:0e:84:d0:e5:ba:3e:
01:3a:f5:ee:b1:bd:d3:0a:70:f6:13:a4:40:17:63:
00:fa:0f:b3:2e:bf:08:75:1f:2f:cf:e4:0e:69:45:
3f:3f:60:b7:a0:24:7f:ed:e8:aa:ff:bd:f6:46:5a:
9f:eb:96:96:50:97:66:de:a2:0e:31:b8:ed:14:95:
02:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:27:9E:E8:98:FC:6A:72:F4:86:F6:6B:6F:CF:D6:1F:A2:8B:79:3B
X509v3 Authority Key Identifier:
keyid:1B:62:3D:BA:62:B8:57:CA:73:D8:A8:0A:11:99:0F:71:E0:4E:7D:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2I9umK4V8pz2KgKEZkPceBOfbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:23:24:61:09:32:53:1b:04:e3:47:24:d5:31:72:29:94:90:
eb:ec:66:1f:2e:10:9a:30:a9:68:b5:46:f4:6a:b7:6e:53:91:
93:84:af:2b:a1:81:89:c5:c2:19:a7:2a:4c:67:9b:39:b3:b4:
d6:c0:67:9e:03:ea:93:30:ff:c2:a4:2c:ef:38:2c:23:09:69:
e1:5b:49:d8:9d:ba:69:2a:4e:57:6f:72:e1:03:d8:ab:94:27:
73:8d:26:b4:39:3d:01:33:b8:d0:0b:f9:20:ba:9f:79:2e:d6:
7f:f7:f5:d1:cf:bb:de:77:b9:bc:f6:30:e8:2e:d4:57:a9:79:
01:a6:fd:74:8f:72:2f:89:8d:50:63:5f:29:82:3a:7f:6a:25:
61:16:cf:51:0b:bc:31:d7:4f:48:3f:49:23:c5:56:c4:12:e6:
97:87:3d:d0:65:5c:1f:1b:91:37:f5:7e:01:9a:c5:5d:5a:97:
b6:46:77:f9:78:40:0d:6b:2b:80:a3:80:53:cb:cc:f2:b8:9d:
c3:16:6a:2b:e0:18:c1:e0:6f:75:63:f1:d2:d2:f7:c0:1c:87:
59:dc:8b:8d:5f:dc:cc:4c:a5:77:2b:93:e8:f8:55:cd:ee:38:
aa:c4:a7:11:c8:fb:ef:26:d4:d6:60:aa:2e:39:f7:16:11:6b:
a4:8d:ea:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 04:27:32 2026 by rpki-client