Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3b/6a2946-f0a4-4e85-930e-d4edf16e0978/1/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.mft
File: G9ugE2Vbm7DKooXXXBQsHuMPiFQ.mft (raw, json)
Hash identifier: E9Yym5JgeuPaMv/GAqrumAE7Yk9ZCaH22okF1/0PiEU=
Subject key identifier: A6:A2:8F:B6:A5:28:F4:12:20:7C:F7:D2:F1:A0:2A:5F:0F:64:48:50
Authority key identifier: 1B:DB:A0:13:65:5B:9B:B0:CA:A2:85:D7:5C:14:2C:1E:E3:0F:88:54
Certificate issuer: /CN=1bdba013655b9bb0caa285d75c142c1ee30f8854
Certificate serial: 01A0D3F0C1D2A03861359DDD653D39F3EE13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/6a2946-f0a4-4e85-930e-d4edf16e0978/1/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.mft
Manifest number: 1947
Signing time: Thu 24 Sep 2026 15:02:45 +0000
Manifest this update: Thu 24 Sep 2026 15:02:45 +0000
Manifest next update: Fri 25 Sep 2026 15:02:45 +0000
Files and hashes: 1: G9ugE2Vbm7DKooXXXBQsHuMPiFQ.crl (hash: J2ZBmzURc6fT/qUs9JzzZ0HJyH6VcGFuS5F68upwAAM=)
2: GUn5C0R9BrAYfoyxCLwgJiIfUm4.roa (hash: TE3GqYvgyMZRi3G5/sygxcPRG4YEuD9ufDzYPZfPI5U=)
3: esdDEmlA_vp-DUa3L78lRMSFDrg.roa (hash: 89EU1646sjMts7fuWu8bk/NpsMoyPAALSAlqPCHzEdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/6a2946-f0a4-4e85-930e-d4edf16e0978/1/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/6a2946-f0a4-4e85-930e-d4edf16e0978/1/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:f0:c1:d2:a0:38:61:35:9d:dd:65:3d:39:f3:ee:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bdba013655b9bb0caa285d75c142c1ee30f8854
Validity
Not Before: Sep 24 15:02:45 2026 GMT
Not After : Sep 25 15:02:45 2026 GMT
Subject: CN=a6a28fb6a528f412207cf7d2f1a02a5f0f644850
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:51:98:dd:9d:50:1d:0a:95:10:5e:64:c2:07:
3c:2a:dd:0e:c0:e3:8d:b6:8e:d2:0d:15:4d:b3:41:
a1:60:e5:d9:5c:43:84:86:50:f0:0e:4e:b0:91:65:
5a:82:52:03:a9:ac:6b:f4:1d:81:84:ff:1b:a3:83:
7e:6a:0f:49:91:a1:0e:c1:5c:d8:25:6f:70:fa:3c:
7a:27:1d:bd:cc:bc:6f:78:3a:43:62:19:79:be:03:
06:13:5d:9a:3f:21:b4:a8:26:76:82:63:b3:69:53:
92:23:87:85:3e:20:1d:13:7f:53:e0:b0:5a:d5:0d:
be:61:a1:c9:df:af:44:e9:0a:bc:32:05:ad:44:ed:
5b:22:f6:42:0b:16:80:fa:ee:29:c3:7a:6f:6f:b2:
6a:1d:0a:67:d2:c8:7e:54:86:65:6d:2b:44:85:0b:
03:7b:d9:a6:28:01:77:22:d0:d1:5e:aa:6d:29:4e:
36:1f:10:9e:d0:5d:5d:70:df:af:0c:d5:62:c0:db:
2b:b7:b6:25:b2:f9:41:22:a3:aa:ac:3a:aa:63:b4:
e5:19:fe:fb:32:7b:f1:70:8c:e2:7a:c3:cc:94:a8:
57:63:21:3b:b7:7d:8d:63:d7:72:7c:51:9b:2a:68:
e3:e4:60:a3:bf:19:db:8e:00:3d:cb:cb:56:2a:94:
a9:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:A2:8F:B6:A5:28:F4:12:20:7C:F7:D2:F1:A0:2A:5F:0F:64:48:50
X509v3 Authority Key Identifier:
keyid:1B:DB:A0:13:65:5B:9B:B0:CA:A2:85:D7:5C:14:2C:1E:E3:0F:88:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/6a2946-f0a4-4e85-930e-d4edf16e0978/1/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/6a2946-f0a4-4e85-930e-d4edf16e0978/1/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:90:28:a8:3f:13:7c:05:b7:45:99:0f:37:10:7b:d1:99:46:
11:1c:64:e3:4f:90:9f:40:49:f6:0d:e4:bc:8f:4c:11:41:6b:
1d:1d:ac:75:8d:30:24:4f:93:ab:c4:3b:7b:01:e7:39:0c:0e:
95:9d:7b:c4:f9:fe:b2:e3:51:52:bf:b5:3c:64:ca:aa:44:42:
a6:eb:77:d8:60:13:36:23:51:bc:9e:9b:9f:bd:ce:39:47:be:
0d:ef:bf:1a:56:74:43:a2:fc:5b:08:e5:a4:67:3c:9e:ae:3a:
e6:01:cf:79:d1:e9:22:0c:06:93:20:7e:d8:87:fc:25:4e:a9:
80:c1:be:9c:e3:5e:27:6c:29:80:b0:e2:fb:dc:82:e4:2c:13:
83:b9:e3:1c:9a:ff:80:7e:73:5d:68:08:18:30:8b:13:1a:1c:
e3:ea:61:62:e9:c4:b5:4d:d0:14:16:4f:46:2f:05:d1:7c:eb:
6c:ea:f0:6b:43:8a:27:7a:23:ac:53:f3:f9:f1:83:86:b8:cd:
06:a8:84:f6:85:db:7e:98:0a:58:61:39:22:ae:b0:8b:01:bb:
2f:cd:b3:04:b5:bf:cf:38:9b:bd:f3:b7:26:0b:57:cc:4e:72:
07:1b:64:a2:99:2c:dd:a5:20:30:59:cb:60:ac:cf:09:5d:9f:
a6:02:a6:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:26:17 2026 by rpki-client