Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/4a293b-4c41-428c-9287-bd98b3e90e43/1/G9vEEUREgGUxPvC4LhzPeubqVyA.mft
File: G9vEEUREgGUxPvC4LhzPeubqVyA.mft (raw, json)
Hash identifier: mKUI+aZHMbvCtoEhq6TJ4StLfQoiNWD4v6TrIZeU89U=
Subject key identifier: 48:59:8A:76:A7:BB:CA:D8:9D:21:6F:19:2D:FE:BF:21:ED:9A:91:A2
Authority key identifier: 1B:DB:C4:11:44:44:80:65:31:3E:F0:B8:2E:1C:CF:7A:E6:EA:57:20
Certificate issuer: /CN=1bdbc41144448065313ef0b82e1ccf7ae6ea5720
Certificate serial: 019F9248D552ED16C9A8E9431E39EBF7D721
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G9vEEUREgGUxPvC4LhzPeubqVyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/4a293b-4c41-428c-9287-bd98b3e90e43/1/G9vEEUREgGUxPvC4LhzPeubqVyA.mft
Manifest number: 19C9
Signing time: Fri 24 Jul 2026 04:01:14 +0000
Manifest this update: Fri 24 Jul 2026 04:01:14 +0000
Manifest next update: Sat 25 Jul 2026 04:01:14 +0000
Files and hashes: 1: G9vEEUREgGUxPvC4LhzPeubqVyA.crl (hash: n209U6UVjkH1lhBL8RixoXvK1HX/nixCe1/ZpXxgRMY=)
2: tXwPHcD7KOQpl4ubBwGZXMLcNGc.roa (hash: kHVmMcCLDSaK/L8IsfRUQoLqMYtr8aRP/Gpfi71r/IU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/4a293b-4c41-428c-9287-bd98b3e90e43/1/G9vEEUREgGUxPvC4LhzPeubqVyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/4a293b-4c41-428c-9287-bd98b3e90e43/1/G9vEEUREgGUxPvC4LhzPeubqVyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/G9vEEUREgGUxPvC4LhzPeubqVyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 04:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:48:d5:52:ed:16:c9:a8:e9:43:1e:39:eb:f7:d7:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bdbc41144448065313ef0b82e1ccf7ae6ea5720
Validity
Not Before: Jul 24 04:01:14 2026 GMT
Not After : Jul 25 04:01:14 2026 GMT
Subject: CN=48598a76a7bbcad89d216f192dfebf21ed9a91a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ab:d3:8d:66:fa:f3:a0:db:80:d7:1d:da:12:
7f:57:93:4a:a5:27:0a:a2:4d:9d:42:0a:37:2d:4a:
ed:e1:a3:88:f6:25:fe:16:6c:01:94:2b:b5:ff:b8:
21:69:19:e7:b9:83:4f:35:a0:4a:50:0f:dc:60:6b:
20:90:a0:ab:9b:3a:0a:e9:5a:cb:12:5d:e5:30:22:
d6:34:13:e7:f7:05:fe:58:13:9f:93:79:32:5a:8e:
61:f9:61:07:2d:6a:01:84:cf:0e:1b:7b:0c:cc:3d:
d5:88:1d:d5:c2:f1:b4:9a:1d:db:2d:0e:a6:27:1a:
4b:ad:7c:1e:b9:9f:16:4e:7b:19:b4:28:4e:0d:0d:
3e:ff:19:b9:bb:58:e3:92:1f:6e:67:d6:6c:4d:bc:
e9:74:26:b9:23:11:30:71:a2:a4:f1:a4:22:4e:25:
60:82:82:2c:e6:e8:b2:ae:da:76:9f:c2:77:dd:50:
0a:5e:86:0b:b8:42:34:e6:e0:e2:5b:41:68:fb:00:
fc:a7:62:a5:a9:57:8b:d0:0c:e8:1b:e0:98:33:5a:
db:6d:c1:57:8e:11:ec:7e:91:d8:db:83:57:f2:04:
40:c2:d5:a0:83:b4:c9:44:bb:b4:99:8f:bf:e8:d1:
20:ef:8d:14:fd:83:76:c8:93:71:15:08:e8:28:3f:
3d:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:59:8A:76:A7:BB:CA:D8:9D:21:6F:19:2D:FE:BF:21:ED:9A:91:A2
X509v3 Authority Key Identifier:
keyid:1B:DB:C4:11:44:44:80:65:31:3E:F0:B8:2E:1C:CF:7A:E6:EA:57:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G9vEEUREgGUxPvC4LhzPeubqVyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4a293b-4c41-428c-9287-bd98b3e90e43/1/G9vEEUREgGUxPvC4LhzPeubqVyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4a293b-4c41-428c-9287-bd98b3e90e43/1/G9vEEUREgGUxPvC4LhzPeubqVyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:f5:c8:87:aa:d8:c6:83:92:50:1b:c3:a0:a9:2b:97:cd:5c:
c4:ca:5b:1d:76:49:c6:d7:eb:58:c0:95:15:23:c3:12:a7:70:
01:09:41:22:a0:cf:28:6c:1b:91:b6:62:62:16:13:50:f7:58:
75:3b:07:51:96:f8:8d:a0:e2:3e:b1:29:f5:bc:27:a2:cc:7b:
fa:88:6d:76:22:9e:b5:2d:1a:55:99:3d:64:53:8b:3a:b7:4f:
c1:6f:05:99:01:91:aa:34:93:55:26:39:3e:22:79:d3:ea:59:
7c:b1:87:80:cc:a2:38:c0:5f:61:28:5f:c7:a4:3e:27:dc:93:
49:f7:ed:a8:74:1c:00:44:7a:79:9a:7b:4c:f4:84:a8:0d:ca:
73:39:c2:7f:41:28:0a:f0:8c:1d:f0:b1:bf:69:0a:5b:a8:27:
23:fb:54:3a:c2:fe:8b:51:58:d8:e6:1b:d8:ef:c9:b3:b2:85:
80:96:ab:63:18:ae:82:91:34:a1:d0:c8:f4:fa:d6:2b:53:7c:
dc:7c:4f:bc:57:99:e8:df:0e:be:43:a9:15:5d:b3:14:cc:2a:
43:29:58:37:81:1d:25:6e:62:66:30:61:37:e2:f7:d2:01:64:
37:04:77:36:a6:c6:3f:72:48:20:72:a3:41:57:a4:ce:af:27:
73:23:5d:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:52:35 2026 by rpki-client