Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.mft
File: G2hlYSYZg3PQeIa_Srj7BrkAZ4A.mft (raw, json)
Hash identifier: AQA/4oJA/FPIBTn/8QY5QIWTONqAMEHGMZDDX3xX/K8=
Subject key identifier: 97:24:56:05:BD:D5:7E:E4:A0:F5:54:8E:AD:19:04:6C:D5:CD:43:A2
Authority key identifier: 1B:68:65:61:26:19:83:73:D0:78:86:BF:4A:B8:FB:06:B9:00:67:80
Certificate issuer: /CN=1b68656126198373d07886bf4ab8fb06b9006780
Certificate serial: 01A10F27F1EC1C5520C1352EBCC6BFE1EF24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.mft
Manifest number: 1A8E
Signing time: Tue 06 Oct 2026 03:00:38 +0000
Manifest this update: Tue 06 Oct 2026 03:00:38 +0000
Manifest next update: Wed 07 Oct 2026 03:00:38 +0000
Files and hashes: 1: AdqGNGTNFT1rSz03F0HVwK9B37I.roa (hash: cI5ji7V4dg8v9ui9zXXCNsMNEyJTysTdpdklDgc65jE=)
2: G2hlYSYZg3PQeIa_Srj7BrkAZ4A.crl (hash: BacMaGGSgpjAvzz5aSuAstPxLEyVSaxc3Xkn17idQDU=)
3: SiR8FHHKdbXqmwMkjZZOq7HZtxo.roa (hash: mkRGoCYQs5pO/fqORGXARxwk0SLVCsNlvRMucJrxHow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.mft
rsync://rpki.ripe.net/repository/DEFAULT/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 03:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0f:27:f1:ec:1c:55:20:c1:35:2e:bc:c6:bf:e1:ef:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b68656126198373d07886bf4ab8fb06b9006780
Validity
Not Before: Oct 6 03:00:38 2026 GMT
Not After : Oct 7 03:00:38 2026 GMT
Subject: CN=97245605bdd57ee4a0f5548ead19046cd5cd43a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d8:07:89:c5:b0:ae:86:6a:b7:3d:89:64:81:
f5:fa:27:6b:76:75:ed:eb:76:27:b3:54:e7:9d:f9:
b4:da:b1:8d:d8:0f:e2:38:72:71:a3:e2:4e:59:12:
ca:ce:b9:b5:d9:a1:e9:4f:6e:cf:5f:4d:20:cb:23:
3f:db:13:b9:67:dd:b2:32:41:7b:fa:91:28:2b:80:
32:30:52:4d:5e:3e:45:da:94:da:7d:7e:84:fe:76:
a6:1c:2b:29:2e:39:d5:51:b7:f9:41:50:df:59:80:
21:d2:d5:71:8f:eb:ac:ef:e5:9d:1a:3c:8a:54:69:
95:02:33:54:d9:bc:6f:de:49:7a:38:cb:2d:95:72:
2b:33:9b:40:14:11:a0:22:16:e1:a7:21:4a:34:4d:
36:1a:70:8c:24:b8:23:06:18:e6:2e:e8:81:0c:11:
37:81:07:5d:b6:a5:15:ba:ff:c8:21:d8:3f:b4:ef:
8b:55:8c:25:9e:86:37:8f:6a:01:46:8f:45:4d:a8:
eb:31:d1:f9:bb:85:50:bf:a7:c1:dc:2c:9b:20:c5:
ba:3f:f3:a8:8b:ef:71:3f:98:d6:a1:54:e3:3d:69:
42:8f:a1:8a:69:27:e7:77:b7:d3:ba:54:4e:ac:f7:
bc:7a:d9:7c:bf:54:49:17:92:78:2f:48:7b:27:c6:
26:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:24:56:05:BD:D5:7E:E4:A0:F5:54:8E:AD:19:04:6C:D5:CD:43:A2
X509v3 Authority Key Identifier:
keyid:1B:68:65:61:26:19:83:73:D0:78:86:BF:4A:B8:FB:06:B9:00:67:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:2f:2e:76:94:a5:ba:22:4c:71:ff:e3:48:28:3a:dc:46:fb:
21:83:d5:1e:c9:d4:c6:da:0e:8c:0e:e3:c1:47:94:a9:05:60:
0b:9f:2d:96:40:65:4f:e2:3b:26:ea:1c:bd:3b:a8:3b:e9:bd:
5f:27:3d:81:86:d5:65:08:9e:11:ea:ce:ab:30:90:09:bd:b0:
11:24:e0:3d:8d:08:9d:7f:05:3b:ac:76:db:cc:ef:86:37:f1:
5f:97:bc:64:d6:96:d8:ae:2c:e1:65:89:ab:f8:a3:fe:c9:9d:
cb:40:46:8a:22:c1:6d:4c:53:b2:5b:57:33:c0:1f:e9:88:34:
7e:a7:b4:65:0a:cb:c7:ae:dc:ea:3e:d1:13:b6:98:c6:5e:95:
f3:df:96:10:ab:62:ff:10:73:f2:90:1c:5d:12:ec:1c:be:2f:
a3:e8:12:e3:0d:2a:66:46:bd:fe:cb:b0:f9:60:22:52:11:e0:
f7:a6:55:99:53:0a:a3:87:c0:5d:fc:c8:b6:3e:f7:c0:8e:38:
7f:14:a5:2d:45:28:b4:48:96:f7:04:6a:27:56:b4:7a:c1:50:
a6:20:b9:48:c9:ca:6b:bc:00:99:c1:4b:4b:71:0a:67:d1:2a:
1f:e1:6e:99:7a:31:e2:d2:67:1a:e4:5a:85:62:0f:cb:83:47:
93:18:23:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 11:42:51 2026 by rpki-client