Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/6a2946-f0a4-4e85-930e-d4edf16e0978/1/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.mft
File: G9ugE2Vbm7DKooXXXBQsHuMPiFQ.mft (raw, json)
Hash identifier: At39tDNfk8NEgRQy9N7Fi0qqnfFcreNizAepMK0JANM=
Subject key identifier: 0A:38:C6:96:12:F6:6B:EE:67:22:5C:19:65:FA:24:CA:C9:A9:1A:7C
Authority key identifier: 1B:DB:A0:13:65:5B:9B:B0:CA:A2:85:D7:5C:14:2C:1E:E3:0F:88:54
Certificate issuer: /CN=1bdba013655b9bb0caa285d75c142c1ee30f8854
Certificate serial: 019FAA8805A706933300D9E672FB6D2E4D20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/6a2946-f0a4-4e85-930e-d4edf16e0978/1/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.mft
Manifest number: 18AD
Signing time: Tue 28 Jul 2026 21:01:08 +0000
Manifest this update: Tue 28 Jul 2026 21:01:08 +0000
Manifest next update: Wed 29 Jul 2026 21:01:08 +0000
Files and hashes: 1: G9ugE2Vbm7DKooXXXBQsHuMPiFQ.crl (hash: R1xKr85WGZ4B6466hVFkQXjJ7tnmyq3lUpW/Bu0bqls=)
2: GUn5C0R9BrAYfoyxCLwgJiIfUm4.roa (hash: TE3GqYvgyMZRi3G5/sygxcPRG4YEuD9ufDzYPZfPI5U=)
3: esdDEmlA_vp-DUa3L78lRMSFDrg.roa (hash: 89EU1646sjMts7fuWu8bk/NpsMoyPAALSAlqPCHzEdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/6a2946-f0a4-4e85-930e-d4edf16e0978/1/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/6a2946-f0a4-4e85-930e-d4edf16e0978/1/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:88:05:a7:06:93:33:00:d9:e6:72:fb:6d:2e:4d:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bdba013655b9bb0caa285d75c142c1ee30f8854
Validity
Not Before: Jul 28 21:01:08 2026 GMT
Not After : Jul 29 21:01:08 2026 GMT
Subject: CN=0a38c69612f66bee67225c1965fa24cac9a91a7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:e9:9a:f2:d4:c3:bf:4a:d6:e5:20:6e:9b:de:
bb:79:88:42:52:f0:e2:3b:3e:a2:ff:c8:98:e2:67:
9b:fc:54:6a:57:75:9d:84:42:8c:d6:bb:36:11:ee:
1d:1b:a9:eb:30:9e:1e:2b:9f:bb:64:d9:b0:cd:ec:
32:f6:16:66:90:d4:aa:95:79:1f:79:0b:d2:4c:56:
75:b5:90:d2:05:d2:92:f6:0a:46:34:76:0f:ca:f7:
92:25:3a:56:0f:22:51:81:e2:59:bd:45:1b:70:a6:
08:d9:3b:1a:c7:79:98:e2:6b:ea:0f:33:18:d9:45:
54:ba:89:32:9b:54:95:e1:a9:0a:51:ea:94:7c:78:
ad:60:37:ab:32:77:e8:05:f8:b3:8f:30:e3:1f:60:
dd:53:2f:13:28:25:b9:1b:60:93:86:40:b8:8d:d9:
9e:8d:0b:58:16:1c:bb:46:4b:04:19:09:6b:3c:02:
63:c3:10:ed:1e:49:95:6b:c1:6c:0e:2c:93:ef:2c:
c3:c0:2d:7f:2c:e9:68:7c:22:7c:76:67:4d:1a:bc:
4c:6d:02:e3:27:b3:06:25:74:f7:ff:20:1a:a5:ff:
28:ef:c8:1a:e1:7c:c9:20:a5:c3:82:04:96:66:6f:
4b:ab:f3:a4:0a:64:25:ec:d1:18:a3:71:27:ea:20:
c2:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:38:C6:96:12:F6:6B:EE:67:22:5C:19:65:FA:24:CA:C9:A9:1A:7C
X509v3 Authority Key Identifier:
keyid:1B:DB:A0:13:65:5B:9B:B0:CA:A2:85:D7:5C:14:2C:1E:E3:0F:88:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/6a2946-f0a4-4e85-930e-d4edf16e0978/1/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/6a2946-f0a4-4e85-930e-d4edf16e0978/1/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:b5:71:33:e5:c3:e8:c6:cd:6e:fc:28:63:56:e6:6b:0e:73:
85:fb:58:9a:6c:bb:c8:ba:15:74:5e:6b:72:ae:ec:83:99:46:
12:3f:c7:e9:99:c4:08:df:ef:ca:7e:8c:9a:83:73:27:7f:74:
14:cf:0e:d4:61:7d:88:76:58:d2:28:fb:91:44:c0:82:a7:7c:
a5:1b:0c:74:bd:dc:c6:5c:74:e9:e4:6b:10:b3:b8:3d:f5:2e:
8d:72:7b:fb:c1:5d:ba:b6:8a:71:d8:a0:d8:17:ac:e2:3c:be:
92:1e:8f:31:f5:d8:da:9b:db:f1:a6:48:a5:b0:9c:27:42:8f:
68:93:22:dc:e5:a5:e1:94:b8:40:41:d1:19:a7:24:f9:47:e1:
6f:72:30:65:b6:a3:d1:f2:4b:0f:e4:87:8b:a3:a1:f8:bf:18:
3f:12:bf:f0:8f:ec:6b:f6:e2:37:01:52:b9:53:93:f4:c9:f6:
85:be:d9:57:1d:81:ec:3b:b4:58:82:76:67:b1:73:69:e9:e8:
ce:2d:6a:d9:c9:08:52:6d:d7:ce:49:2f:a1:2b:e9:51:a6:1e:
06:ca:8a:b2:56:b8:02:69:af:6e:1a:d1:78:87:d6:54:95:ae:
63:d1:a9:df:ff:46:e7:52:94:ee:f3:14:11:56:d9:71:8b:3f:
88:1b:c0:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:28:35 2026 by rpki-client