Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.mft
File: G2hlYSYZg3PQeIa_Srj7BrkAZ4A.mft (raw, json)
Hash identifier: ouczhu91CUeNfQ7TRJV7RwnGS5F4gDAS3O7IXm1hSOA=
Subject key identifier: F4:CC:89:11:E0:0E:5C:85:E5:BE:F6:1C:ED:9F:14:9E:84:49:35:8B
Authority key identifier: 1B:68:65:61:26:19:83:73:D0:78:86:BF:4A:B8:FB:06:B9:00:67:80
Certificate issuer: /CN=1b68656126198373d07886bf4ab8fb06b9006780
Certificate serial: 019F92B5ED57F38F352A3268B94DCCBD7067
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.mft
Manifest number: 19C9
Signing time: Fri 24 Jul 2026 06:00:24 +0000
Manifest this update: Fri 24 Jul 2026 06:00:24 +0000
Manifest next update: Sat 25 Jul 2026 06:00:24 +0000
Files and hashes: 1: AdqGNGTNFT1rSz03F0HVwK9B37I.roa (hash: cI5ji7V4dg8v9ui9zXXCNsMNEyJTysTdpdklDgc65jE=)
2: G2hlYSYZg3PQeIa_Srj7BrkAZ4A.crl (hash: kM74Ic18lZDKl5jlMyo9O7PX5NQ3Ata/gur6BLMrhe4=)
3: SiR8FHHKdbXqmwMkjZZOq7HZtxo.roa (hash: mkRGoCYQs5pO/fqORGXARxwk0SLVCsNlvRMucJrxHow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.mft
rsync://rpki.ripe.net/repository/DEFAULT/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 06:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:b5:ed:57:f3:8f:35:2a:32:68:b9:4d:cc:bd:70:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b68656126198373d07886bf4ab8fb06b9006780
Validity
Not Before: Jul 24 06:00:24 2026 GMT
Not After : Jul 25 06:00:24 2026 GMT
Subject: CN=f4cc8911e00e5c85e5bef61ced9f149e8449358b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:a2:0a:1d:45:78:b3:03:17:35:f1:a6:b9:82:
da:7e:40:a2:0e:a9:68:aa:69:89:5d:2f:b6:6d:3b:
5d:d5:cb:0c:90:fe:f9:fe:a1:51:e0:77:c4:b1:b6:
c8:d1:2f:4d:aa:a5:b8:ec:ac:15:8c:ce:8f:5e:54:
28:76:51:d8:5a:6f:20:d5:ac:1c:ed:84:12:1b:3f:
cc:a8:43:08:b1:3a:44:54:fe:ca:35:c6:a9:5d:13:
e5:24:b1:10:6a:9b:95:18:98:de:47:f2:5b:83:57:
56:85:33:a4:34:74:78:96:a1:dd:dc:cc:93:85:5a:
b4:26:85:9c:bc:5b:05:66:cb:ac:16:83:15:7b:ff:
c2:98:85:50:86:0c:84:cd:97:7c:ce:6b:8f:bc:a5:
c1:64:f7:2a:85:f5:e1:09:c9:4d:a5:5d:9e:9d:60:
3d:80:79:66:9b:37:14:92:b8:8a:c3:e2:a3:97:b3:
27:5c:99:9a:2c:c1:d0:7d:66:0a:98:7d:6e:d5:59:
e5:70:aa:22:11:27:ca:8c:07:e8:dc:ab:b4:b9:33:
23:3a:e7:77:ba:c5:52:b7:de:a1:e8:3c:b7:02:26:
59:18:2a:72:ad:0f:db:ca:2d:36:f4:85:a0:ef:43:
5f:f2:d0:77:88:a6:69:1b:8c:5d:ca:74:8f:1e:20:
75:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:CC:89:11:E0:0E:5C:85:E5:BE:F6:1C:ED:9F:14:9E:84:49:35:8B
X509v3 Authority Key Identifier:
keyid:1B:68:65:61:26:19:83:73:D0:78:86:BF:4A:B8:FB:06:B9:00:67:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:fa:9d:d6:b0:4a:b5:0f:49:af:df:c8:8f:43:77:5f:a2:f3:
23:3b:8b:36:97:29:7e:e8:5e:15:cc:c3:73:99:48:8e:6c:97:
1c:15:b4:01:6b:ea:57:92:40:40:bd:95:d8:93:b9:2f:e5:25:
30:79:48:8c:60:2a:00:6f:6d:04:50:e7:18:55:bb:e8:04:b8:
16:35:4d:fb:50:37:f5:32:74:e5:22:0b:b1:da:13:7c:56:4c:
4f:61:0f:9f:c8:5d:bf:20:99:a5:38:79:ac:61:42:0d:8b:e7:
24:4a:87:9d:cd:95:f5:00:ce:5c:b6:cd:74:1e:65:a3:91:b7:
16:31:af:a9:58:8d:c2:f5:6a:09:20:cb:34:71:63:60:55:26:
46:52:c4:a0:40:e8:eb:3f:0d:af:41:55:af:3e:6d:45:53:b9:
86:b4:d1:d2:ca:ab:a0:a2:fe:50:85:24:a0:f4:3b:ee:b4:3b:
8d:c0:fb:0d:74:cb:63:62:63:44:70:54:7d:04:ff:c6:84:cd:
41:a1:0b:7f:02:6a:a0:da:cf:81:68:3b:e6:0a:e3:dc:0a:9f:
ad:f9:2f:9c:c1:4e:23:df:ed:c6:94:cc:69:4b:68:ab:4d:5c:
7b:08:18:51:9e:61:df:e2:22:28:60:fd:89:d5:ea:90:f3:1a:
04:41:53:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:12:25 2026 by rpki-client