Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.mft
File: G2RtQs6J1Ak-Ssknp_I283pRq-I.mft (raw, json)
Hash identifier: 7KzfC2ZHwewWFx5X1wS1knjrCS2RZ3mSU5XmXT9MZmo=
Subject key identifier: D9:02:81:C5:78:7F:CD:81:69:95:D0:F1:C9:09:71:D3:32:A8:C5:E6
Authority key identifier: 1B:64:6D:42:CE:89:D4:09:3E:4A:C9:27:A7:F2:36:F3:7A:51:AB:E2
Certificate issuer: /CN=1b646d42ce89d4093e4ac927a7f236f37a51abe2
Certificate serial: 019F9059D3C0BF5C8B05CA842DBFBEDB6D08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G2RtQs6J1Ak-Ssknp_I283pRq-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.mft
Manifest number: 11ED
Signing time: Thu 23 Jul 2026 19:00:33 +0000
Manifest this update: Thu 23 Jul 2026 19:00:33 +0000
Manifest next update: Fri 24 Jul 2026 19:00:33 +0000
Files and hashes: 1: G2RtQs6J1Ak-Ssknp_I283pRq-I.crl (hash: cQ3ntesaE15k6slWzBsA70j9ydc8Lc2TsUpDO7bwepc=)
2: buasPl807dGAfqgw1urBhY4Km5w.roa (hash: PQav8NXXwoaYuBOPi54S+Cjky9Sn3BtCmVplgakM7xk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/G2RtQs6J1Ak-Ssknp_I283pRq-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:59:d3:c0:bf:5c:8b:05:ca:84:2d:bf:be:db:6d:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b646d42ce89d4093e4ac927a7f236f37a51abe2
Validity
Not Before: Jul 23 19:00:33 2026 GMT
Not After : Jul 24 19:00:33 2026 GMT
Subject: CN=d90281c5787fcd816995d0f1c90971d332a8c5e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:08:93:18:e2:88:0e:2f:9c:ac:b3:94:51:c5:
4c:46:c8:fa:97:67:2d:3b:2f:38:4b:b4:b1:87:bc:
b9:ae:ee:2b:b0:19:ee:78:b4:12:12:6a:60:c2:02:
08:f4:aa:cf:fd:32:d4:2a:a2:47:06:83:88:8c:f1:
3b:5e:37:14:e2:d8:39:f5:97:19:cb:15:fe:7a:8e:
ec:9e:3c:59:e8:80:fc:6d:75:e2:83:3f:01:5a:f8:
c7:5d:55:e6:7e:20:b8:62:97:d2:10:6b:83:dd:d0:
4c:b4:d7:2f:7c:6a:49:ee:bb:26:ed:d1:c3:b2:8c:
1e:b7:05:9d:f4:b2:98:74:c0:8d:4c:84:36:6b:01:
bf:6b:e1:9b:dd:77:08:cf:26:6d:35:7f:65:80:ca:
82:a6:a6:47:dc:14:31:dc:82:da:a7:39:89:47:58:
7a:e8:9d:75:2c:e0:01:de:c0:48:b2:67:6e:48:a9:
34:c8:ea:17:88:ec:8c:c6:16:fb:74:8c:1f:d4:ee:
a1:ff:ff:f4:13:ad:15:68:57:d2:df:20:5f:de:15:
41:ae:95:f7:05:32:2b:50:5b:08:99:4a:71:8a:18:
1a:63:8f:04:b0:05:94:bb:da:fb:bc:12:9f:27:2a:
9f:c0:aa:8e:ad:59:88:bf:e6:78:56:42:1c:45:f4:
b3:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:02:81:C5:78:7F:CD:81:69:95:D0:F1:C9:09:71:D3:32:A8:C5:E6
X509v3 Authority Key Identifier:
keyid:1B:64:6D:42:CE:89:D4:09:3E:4A:C9:27:A7:F2:36:F3:7A:51:AB:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2RtQs6J1Ak-Ssknp_I283pRq-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:4f:21:79:8b:1c:7a:10:b9:9e:3f:bf:bb:40:2f:99:ca:bf:
05:42:17:82:1e:b5:b2:ae:cf:25:3c:3c:8a:8a:a2:d7:5c:e2:
da:69:ca:df:af:65:4f:4b:a2:23:f4:75:70:21:0d:3c:b4:d8:
79:96:85:da:cd:90:58:ff:59:42:1a:85:55:ec:d0:76:8b:4f:
c8:b3:ea:62:56:a0:a1:70:c2:9d:a6:7b:c3:2b:cb:d1:80:a7:
93:08:76:9e:be:55:90:76:5a:76:24:9e:8f:98:0d:fe:5c:83:
7c:8b:51:58:f3:b3:e5:cf:a2:b6:82:8f:eb:ae:ef:19:6a:63:
58:39:66:d3:5d:c8:6f:77:0d:07:bb:4c:9a:10:45:00:8a:05:
d8:e0:ee:64:4c:1c:2b:1b:da:cc:6b:99:ba:cd:fe:99:ac:3c:
6f:8b:12:d3:b5:77:b5:82:dc:d6:5f:4d:ca:b1:e7:64:bc:00:
36:22:11:f8:3f:55:08:2b:00:71:bb:bc:f0:e7:09:90:9d:2a:
b1:fd:73:1c:04:9f:1e:7d:93:f8:92:06:5b:d1:d1:19:09:c4:
fc:5d:cc:77:62:cb:27:2c:c4:90:89:8f:36:5c:d6:95:58:a7:
97:54:7f:c3:d8:70:65:c7:49:98:c5:db:48:66:27:69:f8:bb:
2f:82:59:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:41:40 2026 by rpki-client