Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.mft
File: G2hlYSYZg3PQeIa_Srj7BrkAZ4A.mft (raw, json)
Hash identifier: CB2F9TKlSfGS30eLBUraYWzofYOwlRD9uLaWjee9IHc=
Subject key identifier: 92:D7:41:A6:CD:E3:4A:97:15:41:3A:14:E7:C5:A2:60:10:93:08:47
Authority key identifier: 1B:68:65:61:26:19:83:73:D0:78:86:BF:4A:B8:FB:06:B9:00:67:80
Certificate issuer: /CN=1b68656126198373d07886bf4ab8fb06b9006780
Certificate serial: 019E21DB233D7D0F268DCA70FE6F36F936F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.mft
Manifest number: 190A
Signing time: Wed 13 May 2026 15:01:09 +0000
Manifest this update: Wed 13 May 2026 15:01:09 +0000
Manifest next update: Thu 14 May 2026 15:01:09 +0000
Files and hashes: 1: AdqGNGTNFT1rSz03F0HVwK9B37I.roa (hash: cI5ji7V4dg8v9ui9zXXCNsMNEyJTysTdpdklDgc65jE=)
2: G2hlYSYZg3PQeIa_Srj7BrkAZ4A.crl (hash: MY41Ff16RJbD0DOo5CmF6AY3V0+mbm0d8rke/fJ5ixI=)
3: SiR8FHHKdbXqmwMkjZZOq7HZtxo.roa (hash: mkRGoCYQs5pO/fqORGXARxwk0SLVCsNlvRMucJrxHow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.mft
rsync://rpki.ripe.net/repository/DEFAULT/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 14:48:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:21:db:23:3d:7d:0f:26:8d:ca:70:fe:6f:36:f9:36:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b68656126198373d07886bf4ab8fb06b9006780
Validity
Not Before: May 13 15:01:09 2026 GMT
Not After : May 14 15:01:09 2026 GMT
Subject: CN=92d741a6cde34a9715413a14e7c5a26010930847
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:96:ea:57:5e:72:e1:88:54:a3:ab:3c:7e:6c:
b3:d1:a9:35:7c:d6:be:36:d3:ea:ea:52:4b:31:3b:
50:7d:c2:06:b6:00:ed:e3:34:d0:f0:29:0e:d0:4e:
16:4b:ad:33:da:c6:d9:5d:c9:53:0a:d6:fc:5c:7d:
ca:0a:22:f7:40:1d:0b:3a:74:dd:65:25:0a:c8:dd:
13:e3:fc:98:6e:62:38:0a:1d:7e:ac:e9:a4:a0:41:
5e:39:55:c5:6a:8e:d1:4d:5a:22:8d:5c:0f:10:5e:
b4:93:6d:f8:a0:20:37:eb:ad:2d:b0:51:5a:00:9a:
ea:01:78:cb:ee:e6:8e:44:1b:e8:da:55:e3:24:df:
83:16:21:cb:4a:ee:ae:c2:b4:04:4f:26:3d:56:ff:
ff:87:4b:0e:ab:0b:eb:fa:7b:f6:62:60:ef:27:97:
5f:19:6a:96:3f:f0:52:0a:46:0a:a8:c3:00:ee:ca:
57:90:b8:3e:2a:32:1a:8a:b8:52:bf:f4:32:07:ad:
97:7b:ae:06:3f:d7:a3:2d:b1:4b:cd:86:48:54:c7:
5e:d7:cd:99:f4:69:f8:97:2e:45:31:52:a6:9f:63:
93:7d:42:b1:ac:71:d5:f1:75:25:5e:b7:64:81:fb:
71:99:47:f7:f1:77:7d:fd:f3:16:33:00:7c:1b:7a:
4a:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:D7:41:A6:CD:E3:4A:97:15:41:3A:14:E7:C5:A2:60:10:93:08:47
X509v3 Authority Key Identifier:
keyid:1B:68:65:61:26:19:83:73:D0:78:86:BF:4A:B8:FB:06:B9:00:67:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:bc:6e:eb:80:14:31:98:2b:b3:1a:8b:12:ee:d9:a9:47:e9:
64:85:ff:bc:af:7b:2c:10:b8:80:1e:51:65:75:68:a8:27:01:
5f:5b:8b:bc:11:aa:4f:fe:97:16:ed:9d:66:84:1c:d9:1c:56:
ee:73:4b:92:fd:fd:0f:1a:7c:4d:99:a6:44:03:d3:a9:51:09:
5e:37:4d:fe:a6:6f:b2:c4:80:37:07:da:de:2c:f9:f2:6d:a6:
18:80:13:df:9a:29:b6:e4:db:9e:60:4a:02:a1:fd:0f:db:13:
84:d0:db:86:04:cf:34:f4:a7:66:65:ed:67:3a:ee:42:49:9b:
71:f2:5e:00:c9:19:d5:50:0c:46:12:ac:4c:45:64:1d:c6:d6:
20:3c:19:de:21:fe:7c:56:7f:ac:75:05:2c:c0:6a:cf:9b:49:
bb:b5:8c:75:ac:34:a9:f9:73:b4:63:d1:d1:50:e7:49:4e:e6:
c9:6a:f8:b1:84:dd:3d:82:81:96:89:84:88:c0:db:cf:9a:2f:
1f:88:bf:45:78:3e:66:9b:51:31:7c:6c:d7:f0:20:69:28:04:
01:bc:63:89:2f:60:25:01:88:9c:c8:c1:4a:79:91:0a:6c:4e:
35:0f:5a:6f:d2:b7:6f:c7:ee:17:30:1f:51:a8:0d:8a:0e:c9:
82:91:3a:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 18:59:14 2026 by rpki-client