Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/ed1609-1086-47b4-a49d-f10d26e3c3df/1/G57Ppx7--bsb_nsuQCFc2lsjHl0.mft
File: G57Ppx7--bsb_nsuQCFc2lsjHl0.mft (raw, json)
Hash identifier: bIkjxBuPjogBeQ5fGmR748PEJ1I+bLMN6cKID7LQUnA=
Subject key identifier: 58:9A:A8:63:B7:6D:B6:7F:A6:03:04:61:E0:8F:83:52:10:41:92:F0
Authority key identifier: 1B:9E:CF:A7:1E:FE:F9:BB:1B:FE:7B:2E:40:21:5C:DA:5B:23:1E:5D
Certificate issuer: /CN=1b9ecfa71efef9bb1bfe7b2e40215cda5b231e5d
Certificate serial: 019E20C8289389A234727BDB267CCC4F6922
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G57Ppx7--bsb_nsuQCFc2lsjHl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/ed1609-1086-47b4-a49d-f10d26e3c3df/1/G57Ppx7--bsb_nsuQCFc2lsjHl0.mft
Manifest number: 1909
Signing time: Wed 13 May 2026 10:00:48 +0000
Manifest this update: Wed 13 May 2026 10:00:48 +0000
Manifest next update: Thu 14 May 2026 10:00:48 +0000
Files and hashes: 1: G57Ppx7--bsb_nsuQCFc2lsjHl0.crl (hash: XbWfAU0mXpnQufX/5SJv1NOgka2nQFN14Uw8FBy6h4A=)
2: Qlwx02bVgQI182YdOV5q9bl7nUU.roa (hash: IuhFZVGxERjaK21zfd0QTArpWqNI5veVEdc1bKjlJVk=)
3: vZ9biZ3U2tRv6wz5Y-SkkAFolzo.roa (hash: 21jHChNoDK3qxfeLr4qOaAbRTR/to9DRO343vs5y4QE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/ed1609-1086-47b4-a49d-f10d26e3c3df/1/G57Ppx7--bsb_nsuQCFc2lsjHl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/ed1609-1086-47b4-a49d-f10d26e3c3df/1/G57Ppx7--bsb_nsuQCFc2lsjHl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/G57Ppx7--bsb_nsuQCFc2lsjHl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:c8:28:93:89:a2:34:72:7b:db:26:7c:cc:4f:69:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b9ecfa71efef9bb1bfe7b2e40215cda5b231e5d
Validity
Not Before: May 13 10:00:48 2026 GMT
Not After : May 14 10:00:48 2026 GMT
Subject: CN=589aa863b76db67fa6030461e08f8352104192f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:16:70:58:ec:0a:6d:99:6a:5d:74:74:a8:bc:
07:28:ca:08:39:52:ac:51:8d:23:d9:17:da:81:56:
cc:a6:f3:ba:8a:8d:b0:72:85:47:d7:7b:58:7c:3d:
bb:5d:4b:02:a7:95:bf:4e:10:04:c9:82:b5:c1:30:
a8:18:5d:71:bc:0d:ac:13:ce:af:a2:b5:e2:02:3c:
4a:7a:5a:e2:8c:ff:e9:07:d7:e8:7a:67:4b:de:92:
fb:de:81:dc:53:7d:34:26:9c:33:4d:cf:f3:81:c8:
1b:f3:b2:6e:37:23:c7:cd:6c:1c:ee:1b:e5:56:7d:
62:3d:bc:31:c0:d1:43:2e:23:62:99:91:81:74:76:
61:22:41:ba:6f:3d:1d:a1:34:47:92:c9:57:90:fd:
b8:2c:4a:57:3c:12:c9:eb:80:7d:67:3d:6f:1e:24:
35:a5:4d:0b:60:2f:ff:08:cb:fa:2e:12:af:a7:24:
9e:cf:4b:06:ae:cb:33:0d:b1:21:bf:87:06:ff:f9:
c3:a0:81:dc:d3:06:92:3f:2d:71:77:d9:99:39:3f:
24:b8:96:6f:1e:b2:40:4a:96:40:04:9d:4d:17:58:
0e:26:42:89:54:d5:94:2c:c5:68:a8:60:21:55:a1:
53:7e:d4:b4:a0:9a:20:b3:09:2d:2a:53:e8:84:af:
58:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:9A:A8:63:B7:6D:B6:7F:A6:03:04:61:E0:8F:83:52:10:41:92:F0
X509v3 Authority Key Identifier:
keyid:1B:9E:CF:A7:1E:FE:F9:BB:1B:FE:7B:2E:40:21:5C:DA:5B:23:1E:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G57Ppx7--bsb_nsuQCFc2lsjHl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/ed1609-1086-47b4-a49d-f10d26e3c3df/1/G57Ppx7--bsb_nsuQCFc2lsjHl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/ed1609-1086-47b4-a49d-f10d26e3c3df/1/G57Ppx7--bsb_nsuQCFc2lsjHl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:34:d2:ff:f9:fc:88:99:a0:08:59:5a:6b:4e:b6:da:c1:55:
ce:29:49:24:54:5c:7b:08:82:ed:37:30:e9:93:11:52:20:dc:
b2:b1:f9:16:97:2b:14:09:ec:98:0b:8a:6a:a2:14:07:2a:6d:
2b:d6:9e:83:c6:de:17:da:e0:bf:24:40:d3:7d:8a:48:d3:ab:
a9:21:ae:01:31:4a:3c:24:38:ad:cb:f0:10:cd:64:96:b3:38:
a1:8c:10:4a:9b:ca:08:32:48:ef:d5:6a:67:b9:76:70:06:ee:
e0:43:2b:bf:a2:a5:64:bf:ac:3b:e3:f9:71:c5:63:c8:66:be:
fc:2f:2c:38:98:f5:35:9d:ad:34:d0:3a:98:dd:a2:e8:a3:68:
a1:97:ac:ad:89:5d:14:8c:ae:03:ca:56:7f:0b:af:11:a3:21:
12:26:a2:ed:03:43:20:2f:11:66:dd:54:59:64:a8:9c:8c:2f:
7e:82:76:8c:a2:cb:b3:09:9f:3e:b3:17:24:7e:c3:e9:75:ae:
f1:b8:7c:39:4b:85:9d:39:4f:70:04:fb:1b:18:22:c4:1a:b5:
d5:7c:d2:a7:4a:0d:8c:73:10:ca:84:c9:8a:90:05:65:d5:7d:
00:75:f9:be:4b:8c:07:40:e1:63:d2:f3:3b:b0:b7:23:be:30:
b2:9c:5a:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:11:40 2026 by rpki-client