Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/4a293b-4c41-428c-9287-bd98b3e90e43/1/G9vEEUREgGUxPvC4LhzPeubqVyA.mft
File: G9vEEUREgGUxPvC4LhzPeubqVyA.mft (raw, json)
Hash identifier: ql+1d0vRrmSviXVvQ+NyvW27xDjmWXnxhspRJO47Pto=
Subject key identifier: FE:58:0E:32:E6:85:22:CA:90:F7:27:5A:85:D6:95:77:9B:FE:D4:13
Authority key identifier: 1B:DB:C4:11:44:44:80:65:31:3E:F0:B8:2E:1C:CF:7A:E6:EA:57:20
Certificate issuer: /CN=1bdbc41144448065313ef0b82e1ccf7ae6ea5720
Certificate serial: 01A0DA967229980B7B50AA1F2DFACBE29565
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G9vEEUREgGUxPvC4LhzPeubqVyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/4a293b-4c41-428c-9287-bd98b3e90e43/1/G9vEEUREgGUxPvC4LhzPeubqVyA.mft
Manifest number: 1A73
Signing time: Fri 25 Sep 2026 22:01:27 +0000
Manifest this update: Fri 25 Sep 2026 22:01:27 +0000
Manifest next update: Sat 26 Sep 2026 22:01:27 +0000
Files and hashes: 1: G9vEEUREgGUxPvC4LhzPeubqVyA.crl (hash: akB2l5o/Tu37upjAP7f2w6feKWrApMGHdwq3FBeue6E=)
2: tXwPHcD7KOQpl4ubBwGZXMLcNGc.roa (hash: kHVmMcCLDSaK/L8IsfRUQoLqMYtr8aRP/Gpfi71r/IU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/4a293b-4c41-428c-9287-bd98b3e90e43/1/G9vEEUREgGUxPvC4LhzPeubqVyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/4a293b-4c41-428c-9287-bd98b3e90e43/1/G9vEEUREgGUxPvC4LhzPeubqVyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/G9vEEUREgGUxPvC4LhzPeubqVyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:96:72:29:98:0b:7b:50:aa:1f:2d:fa:cb:e2:95:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bdbc41144448065313ef0b82e1ccf7ae6ea5720
Validity
Not Before: Sep 25 22:01:27 2026 GMT
Not After : Sep 26 22:01:27 2026 GMT
Subject: CN=fe580e32e68522ca90f7275a85d695779bfed413
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:bb:02:c1:ef:bd:64:4d:94:d2:6c:64:fd:fb:
50:98:fe:9c:ab:4e:a0:e8:11:f4:41:d4:ed:b3:8f:
52:e7:33:15:d0:34:8c:88:42:59:3e:65:c6:8b:16:
59:20:51:e6:3d:f2:21:86:f6:2f:19:bb:d9:f2:71:
9f:7b:fb:8b:75:45:bb:d4:19:a0:78:44:29:f8:82:
a2:fb:27:02:df:c0:af:e1:0f:76:9b:b4:38:67:b3:
d2:ea:48:f6:2e:08:d6:60:1c:3f:85:87:25:c0:55:
5b:69:0c:ac:c2:3d:b9:7e:0d:88:e3:e2:d7:0e:38:
98:70:b2:17:b7:41:8a:fc:bd:34:74:43:8e:72:44:
11:9d:a6:6d:c2:e5:d8:81:e3:f9:c0:b0:02:df:38:
18:8f:72:83:4a:38:3a:37:01:aa:7e:d9:62:26:97:
8a:9b:56:ad:da:8e:10:a7:19:c9:f2:dc:d7:be:8d:
49:40:75:1d:53:92:86:41:a8:63:45:fd:36:79:ae:
88:38:4f:ad:6c:59:87:2c:a9:a4:c9:35:f2:17:a6:
75:65:a7:ae:9f:04:ea:b6:e9:43:d7:9c:da:ab:3a:
9f:3d:54:6c:c8:24:38:bd:a6:e2:85:99:af:a3:67:
61:3f:6e:3f:88:84:da:fb:e1:e3:be:77:2a:68:34:
e4:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:58:0E:32:E6:85:22:CA:90:F7:27:5A:85:D6:95:77:9B:FE:D4:13
X509v3 Authority Key Identifier:
keyid:1B:DB:C4:11:44:44:80:65:31:3E:F0:B8:2E:1C:CF:7A:E6:EA:57:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G9vEEUREgGUxPvC4LhzPeubqVyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4a293b-4c41-428c-9287-bd98b3e90e43/1/G9vEEUREgGUxPvC4LhzPeubqVyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4a293b-4c41-428c-9287-bd98b3e90e43/1/G9vEEUREgGUxPvC4LhzPeubqVyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:cf:ef:91:2d:a4:be:7f:b2:26:59:bb:23:07:bd:c0:3f:da:
8f:ea:b2:fc:9d:36:75:56:d4:ac:90:88:39:55:17:e8:f1:28:
ae:e6:f8:a5:29:a7:bf:f0:b2:ed:01:7c:3b:fe:9b:ea:5e:bd:
12:2a:1f:75:95:66:22:07:cb:8c:5c:63:c0:f5:7d:e8:f3:6a:
4d:cb:fc:87:a7:4b:70:26:aa:82:18:17:2f:f1:28:36:0d:d7:
d6:a2:a6:08:7c:c5:2a:b8:2b:5f:ca:9a:63:12:73:c4:27:13:
81:1a:cf:bd:fc:81:fc:66:7b:fd:1b:cd:76:5a:0f:7f:7b:96:
53:09:92:43:e5:66:02:cc:a3:b9:35:83:65:0c:3a:0e:fa:54:
bf:80:e0:f0:f4:c2:0c:f0:b3:09:0f:72:5d:8b:c3:12:b0:c3:
4e:fa:de:14:06:bb:76:18:fa:84:a4:44:74:91:80:c5:ba:47:
83:7b:7e:49:7a:d2:a8:bd:ed:8a:82:76:8a:9c:d2:59:27:a6:
66:3f:11:43:c9:7c:37:3a:f6:99:6a:9c:67:ed:a6:f5:18:60:
2b:d6:0d:f7:f3:9a:2c:4a:d3:87:76:80:bb:bb:b0:d4:29:1c:
d9:f9:c4:ec:a0:15:db:12:d9:c1:02:12:9b:55:bf:c7:4d:c6:
d1:d1:f8:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 03:07:41 2026 by rpki-client