Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/5d6167-f02b-44db-b565-0e4382310ca5/1/G-9aoU0xQMfHxJiPGdqUMesaQPE.mft
File: G-9aoU0xQMfHxJiPGdqUMesaQPE.mft (raw, json)
Hash identifier: ronxIQrI70A352XWFLpMG4H+n33MOicKs/9E9VQk/5c=
Subject key identifier: D5:66:2C:10:7E:F3:55:C1:CE:99:46:CF:BF:D5:16:EF:83:0F:3B:F5
Authority key identifier: 1B:EF:5A:A1:4D:31:40:C7:C7:C4:98:8F:19:DA:94:31:EB:1A:40:F1
Certificate issuer: /CN=1bef5aa14d3140c7c7c4988f19da9431eb1a40f1
Certificate serial: 019F94369969655606116F847F3C5102C3FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-9aoU0xQMfHxJiPGdqUMesaQPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/5d6167-f02b-44db-b565-0e4382310ca5/1/G-9aoU0xQMfHxJiPGdqUMesaQPE.mft
Manifest number: 19C9
Signing time: Fri 24 Jul 2026 13:00:33 +0000
Manifest this update: Fri 24 Jul 2026 13:00:33 +0000
Manifest next update: Sat 25 Jul 2026 13:00:33 +0000
Files and hashes: 1: BFSdsbEkPuA-YZXMwRkjbFSBL_4.roa (hash: 7mDFMoZc4IARD+ubLVsfgMsnY5+CrMhB4pwA/xSdkv8=)
2: G-9aoU0xQMfHxJiPGdqUMesaQPE.crl (hash: IFhw6qb2hpwHabPOXIvlCfswAliSsvCzTdJkuDDU59M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/5d6167-f02b-44db-b565-0e4382310ca5/1/G-9aoU0xQMfHxJiPGdqUMesaQPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/5d6167-f02b-44db-b565-0e4382310ca5/1/G-9aoU0xQMfHxJiPGdqUMesaQPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/G-9aoU0xQMfHxJiPGdqUMesaQPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:36:99:69:65:56:06:11:6f:84:7f:3c:51:02:c3:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bef5aa14d3140c7c7c4988f19da9431eb1a40f1
Validity
Not Before: Jul 24 13:00:33 2026 GMT
Not After : Jul 25 13:00:33 2026 GMT
Subject: CN=d5662c107ef355c1ce9946cfbfd516ef830f3bf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f1:4a:6b:f9:c1:d6:8b:0e:8e:f5:39:0d:b1:
75:11:60:3e:b7:27:3d:8f:10:43:2c:27:00:9a:43:
99:ee:63:bf:a1:0a:6f:78:14:25:a2:f1:5a:02:35:
71:68:1d:37:02:de:ea:6f:87:7f:46:c5:63:a9:42:
56:e5:ed:bb:8b:0c:2c:30:d0:28:21:d9:82:d1:92:
cc:e9:34:72:ce:54:b8:6a:4d:6e:6d:dc:d2:55:96:
df:20:0d:79:ad:19:9d:e3:a1:21:86:4b:1d:de:11:
69:e3:08:23:fb:ce:fb:45:aa:71:a9:14:77:a8:df:
e1:91:90:90:6b:c4:ff:e3:89:f4:22:32:86:f5:42:
fe:f4:8f:7a:98:de:27:3e:72:12:27:ca:c9:92:56:
f2:d9:1c:33:90:e2:f2:8e:82:b3:fc:de:ed:99:66:
18:99:c1:30:ef:55:1e:e1:55:26:15:93:f7:12:9d:
c6:d9:d8:0a:6e:da:b3:53:34:6c:e5:90:f0:6e:f0:
64:1b:5b:0d:10:6d:e9:50:71:cd:a2:c0:eb:c4:72:
c2:7a:2b:34:e8:51:74:17:11:06:eb:ee:f2:0f:da:
17:f7:5b:c9:24:60:58:c4:36:f1:11:1d:65:bc:db:
c0:55:3a:91:d5:dc:b2:69:f9:ce:47:73:7f:4d:02:
76:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:66:2C:10:7E:F3:55:C1:CE:99:46:CF:BF:D5:16:EF:83:0F:3B:F5
X509v3 Authority Key Identifier:
keyid:1B:EF:5A:A1:4D:31:40:C7:C7:C4:98:8F:19:DA:94:31:EB:1A:40:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-9aoU0xQMfHxJiPGdqUMesaQPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5d6167-f02b-44db-b565-0e4382310ca5/1/G-9aoU0xQMfHxJiPGdqUMesaQPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5d6167-f02b-44db-b565-0e4382310ca5/1/G-9aoU0xQMfHxJiPGdqUMesaQPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:d2:db:d6:bb:aa:ea:b1:85:96:88:4a:c9:6e:60:d9:8b:dd:
00:50:f2:64:00:d8:f5:1a:17:3d:52:3e:26:f0:c1:bc:f6:cf:
dc:df:9f:d8:a5:0e:f2:f3:11:d8:84:9a:71:b5:46:d8:51:f5:
63:ed:54:f5:48:2c:4b:d9:f3:04:97:53:82:3d:e4:79:9a:bd:
de:be:38:a6:77:c6:eb:3a:03:2c:ba:50:3b:79:fc:44:55:d6:
47:12:6b:86:48:cb:25:1e:7b:8c:f9:1a:81:4b:d3:43:9b:37:
7a:9e:1b:b0:c7:a0:be:76:ca:39:9e:cf:d4:27:36:7f:1f:c1:
06:4f:b1:68:bd:bb:93:41:e9:13:bc:84:7b:9f:21:fb:e5:72:
eb:34:7b:72:8a:41:fa:57:93:54:db:85:4a:8d:02:23:6e:38:
0f:07:d8:72:bf:f8:41:eb:e1:55:1a:e7:61:0d:eb:f2:96:60:
be:49:14:7e:1c:1a:84:d4:3e:39:2b:a9:11:24:f4:41:d4:2e:
b3:62:dc:29:d0:ce:4d:d6:ee:ed:92:cb:a8:59:d3:34:83:c5:
f9:24:1b:6d:99:a5:b0:21:9e:17:4b:a8:42:67:06:57:c0:df:
22:f2:ef:5a:16:76:c1:47:54:88:3a:08:5a:70:f1:67:a0:33:
17:2a:a4:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:32:45 2026 by rpki-client