Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/6a2946-f0a4-4e85-930e-d4edf16e0978/1/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.mft
File: G9ugE2Vbm7DKooXXXBQsHuMPiFQ.mft (raw, json)
Hash identifier: TkokrhVl18vCjd0lkQKJuXGf21FYxHXtdzLKenAAYqU=
Subject key identifier: 13:B2:B7:65:30:E2:F5:FB:A6:1F:C9:C4:57:A9:F3:E7:42:6E:7C:B6
Authority key identifier: 1B:DB:A0:13:65:5B:9B:B0:CA:A2:85:D7:5C:14:2C:1E:E3:0F:88:54
Certificate issuer: /CN=1bdba013655b9bb0caa285d75c142c1ee30f8854
Certificate serial: 019DA4F9598F73C9B9127C8248ED521C09C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/6a2946-f0a4-4e85-930e-d4edf16e0978/1/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.mft
Manifest number: 17A1
Signing time: Sun 19 Apr 2026 09:01:37 +0000
Manifest this update: Sun 19 Apr 2026 09:01:37 +0000
Manifest next update: Mon 20 Apr 2026 09:01:37 +0000
Files and hashes: 1: G9ugE2Vbm7DKooXXXBQsHuMPiFQ.crl (hash: 2CafDUpejwgb6jN87foVEQV9UDpAqQ40D6LJyNy2SXI=)
2: GUn5C0R9BrAYfoyxCLwgJiIfUm4.roa (hash: TE3GqYvgyMZRi3G5/sygxcPRG4YEuD9ufDzYPZfPI5U=)
3: esdDEmlA_vp-DUa3L78lRMSFDrg.roa (hash: 89EU1646sjMts7fuWu8bk/NpsMoyPAALSAlqPCHzEdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/6a2946-f0a4-4e85-930e-d4edf16e0978/1/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/6a2946-f0a4-4e85-930e-d4edf16e0978/1/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:f9:59:8f:73:c9:b9:12:7c:82:48:ed:52:1c:09:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bdba013655b9bb0caa285d75c142c1ee30f8854
Validity
Not Before: Apr 19 09:01:37 2026 GMT
Not After : Apr 20 09:01:37 2026 GMT
Subject: CN=13b2b76530e2f5fba61fc9c457a9f3e7426e7cb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:30:d1:ad:38:ce:c3:2a:e6:31:ea:29:d2:8b:
b3:fa:5d:d6:e4:ee:f8:24:90:80:5a:f5:a8:e1:d3:
11:65:52:6d:c5:82:e6:54:e7:5b:5a:51:14:d9:44:
f4:7f:83:a3:bc:25:8b:80:9b:76:be:54:dd:c3:1f:
f7:6f:d6:a2:2c:a4:f4:a0:e7:2b:0a:1e:e8:47:56:
ba:d0:18:9c:92:cc:d0:9d:b6:c0:4e:be:cb:dc:25:
45:82:90:dd:a4:d4:16:ae:2a:38:02:7e:51:40:80:
1f:af:7d:82:8d:58:ee:35:68:be:c6:e1:d3:72:91:
42:27:d0:18:b1:6e:c5:ab:4c:81:cb:b9:af:9f:68:
19:9d:ef:94:86:52:96:62:27:2a:72:2a:92:57:1f:
39:22:5d:ca:5f:ce:2a:c9:89:60:00:2f:99:c7:88:
74:3d:ff:49:31:e6:68:88:91:d3:98:c1:43:eb:41:
df:2d:b0:c2:78:c2:60:dd:ea:18:34:12:19:0b:f2:
89:45:98:59:ac:8d:a3:4f:0c:2f:c0:ba:5f:1d:3a:
cf:3b:a1:b7:0f:2f:db:6d:a2:c7:f9:de:0a:d0:e7:
9d:a2:5f:00:35:7c:75:e4:ff:b0:bb:17:1a:c2:7c:
f3:5d:d4:8f:5b:b7:a1:b0:e3:51:0d:f7:10:08:6b:
2d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:B2:B7:65:30:E2:F5:FB:A6:1F:C9:C4:57:A9:F3:E7:42:6E:7C:B6
X509v3 Authority Key Identifier:
keyid:1B:DB:A0:13:65:5B:9B:B0:CA:A2:85:D7:5C:14:2C:1E:E3:0F:88:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/6a2946-f0a4-4e85-930e-d4edf16e0978/1/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/6a2946-f0a4-4e85-930e-d4edf16e0978/1/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:3e:35:a1:ad:ed:6d:a0:2a:e1:79:39:4f:9e:21:70:ce:a4:
64:c2:31:af:0a:35:0e:47:18:f0:0e:b8:80:c3:58:9f:09:ed:
22:84:ab:39:12:f7:10:b7:04:f3:0c:d1:15:2a:cd:26:95:05:
c3:fa:a3:6d:15:46:11:d6:2d:ad:f7:2d:5a:8f:fb:9b:d7:98:
05:c6:f1:d7:58:19:57:97:73:5f:b7:39:5d:b6:5d:26:4d:2e:
cb:41:52:6e:15:67:67:17:2d:13:1f:2b:80:0b:e3:86:2e:55:
59:19:79:8e:c1:1d:2f:1a:d3:61:71:a7:93:cb:ec:1b:e5:b1:
e6:ca:3d:b3:01:3a:6b:ed:57:c3:cd:2c:ec:0a:22:97:91:d9:
ed:ad:bb:cb:18:f5:89:f2:70:12:42:16:6e:ce:3c:50:b2:0c:
ce:ce:94:f6:99:a8:15:ca:b5:b5:09:9b:03:01:ac:9d:a9:ad:
e7:62:bd:ae:05:d9:9a:a8:86:ae:d7:fb:33:64:67:6d:62:22:
d1:60:ef:ff:bd:f7:8f:f8:0a:b2:fe:2e:9f:88:53:b5:4a:3b:
70:79:79:66:78:0f:b0:6b:d9:d2:e8:db:f3:05:fe:17:c3:91:
40:d4:58:fe:27:36:0f:4a:98:82:1d:75:63:88:8d:82:af:e5:
ba:97:34:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:36:57 2026 by rpki-client