Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1d/453542-08b2-4399-bc5c-c756ae01fa8a/1/g2CIUSAjKNzl_AG_ndKSUgUw2f4.mft
File: g2CIUSAjKNzl_AG_ndKSUgUw2f4.mft (raw, json)
Hash identifier: 2FACKqJZy30Btw54uiwwAjb+flljLdV/79pUutU8+ZU=
Subject key identifier: F4:91:74:72:32:10:D0:6F:FE:3F:A3:9A:C0:D6:6B:0F:42:0E:E1:27
Authority key identifier: 83:60:88:51:20:23:28:DC:E5:FC:01:BF:9D:D2:92:52:05:30:D9:FE
Certificate issuer: /CN=83608851202328dce5fc01bf9dd292520530d9fe
Certificate serial: 01A0CCA2C359F35CD7826CCB3C3FBD9E7122
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g2CIUSAjKNzl_AG_ndKSUgUw2f4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/453542-08b2-4399-bc5c-c756ae01fa8a/1/g2CIUSAjKNzl_AG_ndKSUgUw2f4.mft
Manifest number: 0A15
Signing time: Wed 23 Sep 2026 05:00:13 +0000
Manifest this update: Wed 23 Sep 2026 05:00:13 +0000
Manifest next update: Thu 24 Sep 2026 05:00:13 +0000
Files and hashes: 1: Ya4-DOHb6IMAOxmkcETIsWTPCOg.roa (hash: u4TLCuqpTYyL9fIrK/kr+oWhEP1P1uyD8bPrTE+F3k0=)
2: g2CIUSAjKNzl_AG_ndKSUgUw2f4.crl (hash: Y00q9szKFgUP6gouZJh6mZ7R7f2AKGSsoFomjT1eYVQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/453542-08b2-4399-bc5c-c756ae01fa8a/1/g2CIUSAjKNzl_AG_ndKSUgUw2f4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/453542-08b2-4399-bc5c-c756ae01fa8a/1/g2CIUSAjKNzl_AG_ndKSUgUw2f4.mft
rsync://rpki.ripe.net/repository/DEFAULT/g2CIUSAjKNzl_AG_ndKSUgUw2f4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 05:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:a2:c3:59:f3:5c:d7:82:6c:cb:3c:3f:bd:9e:71:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83608851202328dce5fc01bf9dd292520530d9fe
Validity
Not Before: Sep 23 05:00:13 2026 GMT
Not After : Sep 24 05:00:13 2026 GMT
Subject: CN=f49174723210d06ffe3fa39ac0d66b0f420ee127
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:54:22:0c:06:e0:67:21:4f:d5:03:08:1b:6e:
31:17:4f:0d:1a:ad:44:14:be:0d:5a:61:99:f0:bc:
c0:d3:0b:0e:a0:82:48:c6:24:14:84:16:20:32:a4:
df:1b:b7:46:c0:97:9a:65:0c:a3:2d:a4:ec:e7:35:
c0:b3:da:89:49:6d:ab:2d:f7:e1:5c:85:50:28:5b:
8e:9f:0d:0b:33:63:de:35:b6:a9:cc:75:09:be:b7:
b3:cc:1c:83:bb:54:09:1c:7f:e1:c0:77:f6:1f:87:
55:09:2f:b4:1e:bf:b8:82:aa:60:1b:80:e3:ee:93:
a5:88:a7:ce:57:72:7a:a3:9f:eb:f0:40:45:7d:cd:
93:cb:e7:af:42:45:08:fc:4a:4d:4a:b4:5a:cb:33:
71:82:64:f6:69:5f:b9:12:27:57:83:27:6c:f4:2e:
02:d2:e6:3a:c9:66:96:71:98:fc:d6:0c:29:e5:5f:
80:e9:19:ca:f9:bb:4f:13:49:19:8b:87:9e:10:0c:
bf:53:cc:f0:74:d7:43:67:3d:97:06:3b:c1:1b:02:
68:51:51:b7:d6:f2:d7:22:1e:fc:85:db:5d:e6:92:
15:3e:ac:c9:92:64:73:e8:7c:17:2c:9f:f4:df:dc:
aa:f3:85:90:2f:9a:58:08:77:16:03:83:01:8f:e1:
b2:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:91:74:72:32:10:D0:6F:FE:3F:A3:9A:C0:D6:6B:0F:42:0E:E1:27
X509v3 Authority Key Identifier:
keyid:83:60:88:51:20:23:28:DC:E5:FC:01:BF:9D:D2:92:52:05:30:D9:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2CIUSAjKNzl_AG_ndKSUgUw2f4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/453542-08b2-4399-bc5c-c756ae01fa8a/1/g2CIUSAjKNzl_AG_ndKSUgUw2f4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/453542-08b2-4399-bc5c-c756ae01fa8a/1/g2CIUSAjKNzl_AG_ndKSUgUw2f4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:55:d4:b0:0e:d6:dd:2c:ae:dc:f4:b5:3f:2d:8a:8f:b4:42:
a1:8c:24:f0:b0:a1:cc:ca:f5:23:33:1d:e8:d9:bd:0b:d9:02:
e6:4c:8a:77:6c:fd:e6:da:09:42:73:73:a8:ae:5f:4a:09:5c:
4a:0c:66:68:37:3e:83:ef:b8:c4:55:eb:f8:51:aa:dd:7d:96:
49:2b:83:9f:12:ad:ad:28:81:1a:19:f1:07:16:c7:7c:8a:66:
cf:6c:39:65:1c:7e:88:ab:0a:75:ba:77:51:b4:cc:64:2f:62:
8e:a9:ad:71:00:40:71:88:55:3f:bc:b6:4b:ba:8f:f6:4d:61:
69:72:b7:ec:0e:82:2e:e7:98:cb:ce:33:1b:a5:ff:f6:29:db:
f4:71:57:b0:d0:0a:44:bd:3b:02:69:4f:fc:71:c6:ac:18:0b:
fa:87:d2:df:7a:31:c1:9f:db:a8:ea:9a:e9:63:ed:56:4d:d4:
ee:01:dc:ea:42:2d:77:a5:3f:4f:b6:39:69:37:1b:a2:8d:04:
76:86:8e:92:d0:15:91:d6:a6:bc:10:5e:a8:79:4c:45:7f:69:
6e:19:a8:d2:df:65:0a:28:33:e6:97:e8:49:fb:12:c6:62:39:
da:d9:c3:e6:74:44:85:d7:cf:6e:55:14:af:4c:34:af:5e:df:
a0:c5:07:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 14:02:02 2026 by rpki-client