Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.mft
File: G2I9umK4V8pz2KgKEZkPceBOfbY.mft (raw, json)
Hash identifier: BWnjx6MULj/23LZf6y4rXzlvVLXJn1Jy95AqfJvLRSU=
Subject key identifier: 9E:F3:8A:41:ED:10:87:08:8C:3C:A6:74:74:CC:F5:9B:95:58:80:C0
Authority key identifier: 1B:62:3D:BA:62:B8:57:CA:73:D8:A8:0A:11:99:0F:71:E0:4E:7D:B6
Certificate issuer: /CN=1b623dba62b857ca73d8a80a11990f71e04e7db6
Certificate serial: 019EBEEC8B8839A9C8BB01E563918E8F64F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G2I9umK4V8pz2KgKEZkPceBOfbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.mft
Manifest number: 10DE
Signing time: Sat 13 Jun 2026 03:00:33 +0000
Manifest this update: Sat 13 Jun 2026 03:00:33 +0000
Manifest next update: Sun 14 Jun 2026 03:00:33 +0000
Files and hashes: 1: G2I9umK4V8pz2KgKEZkPceBOfbY.crl (hash: 5WUH9MZC5SgnUapXfiUK+DSEL2m9wGNj6s0UVfE3M48=)
2: _TZJcz_b9cq-8luNUL6eEZRU19o.roa (hash: XV8xsUjzIwVTNMvOzhZSqDe2iSUDHqLPyeEkThsb7Tw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/G2I9umK4V8pz2KgKEZkPceBOfbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 03:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:ec:8b:88:39:a9:c8:bb:01:e5:63:91:8e:8f:64:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b623dba62b857ca73d8a80a11990f71e04e7db6
Validity
Not Before: Jun 13 03:00:33 2026 GMT
Not After : Jun 14 03:00:33 2026 GMT
Subject: CN=9ef38a41ed1087088c3ca67474ccf59b955880c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:48:f7:fb:bb:24:84:12:c9:a8:81:63:6d:5d:
af:1b:b0:4b:b0:e4:f1:97:d6:07:7e:dd:ff:8f:01:
19:96:2d:e0:eb:02:98:2d:c2:df:a6:93:64:00:b0:
6c:92:83:4e:f5:27:11:a5:15:a3:dd:ba:15:55:87:
21:d1:c6:c5:c8:ba:69:d3:ae:12:10:27:6c:6b:18:
72:83:a7:d9:cb:aa:31:38:72:85:95:fc:05:61:cb:
62:e2:6e:41:ce:64:19:b5:49:f6:c7:48:3c:4f:c3:
ad:84:b9:97:bc:4d:0e:09:72:43:4e:9b:c4:4c:70:
8f:21:7a:c8:87:09:45:00:38:85:08:86:f1:bf:de:
64:02:fd:e1:11:f6:6e:1e:52:bc:80:88:66:2a:6b:
93:7b:ad:b7:39:7d:6f:27:f8:12:61:12:11:82:c2:
cb:56:c6:3e:03:05:fc:13:3f:6b:e9:48:55:f2:48:
60:d9:84:5d:13:fd:72:6b:6d:6b:ee:29:bb:e7:d9:
86:6c:a5:c7:cf:14:48:e6:c8:f0:0b:dc:d1:af:d8:
22:f6:07:2b:2a:ca:7c:61:1e:fc:73:40:44:a1:17:
1e:d8:83:d5:04:29:b4:99:3d:29:b5:4a:79:ce:fd:
37:da:12:13:54:ad:f7:b7:70:bd:7a:39:de:01:b5:
44:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:F3:8A:41:ED:10:87:08:8C:3C:A6:74:74:CC:F5:9B:95:58:80:C0
X509v3 Authority Key Identifier:
keyid:1B:62:3D:BA:62:B8:57:CA:73:D8:A8:0A:11:99:0F:71:E0:4E:7D:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2I9umK4V8pz2KgKEZkPceBOfbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:95:07:06:d3:2f:dc:27:1a:36:4a:dc:1d:94:96:25:4f:cb:
10:d6:14:41:6f:21:b7:ae:8b:c6:58:d7:e5:20:1b:02:5c:79:
d2:d4:4b:4c:1b:b4:28:45:81:9f:68:25:3f:0d:2e:86:08:11:
5c:32:80:a8:01:f7:9d:91:e9:67:84:b0:b4:31:ff:e1:42:13:
ea:48:1d:4d:65:c4:6c:14:5b:cd:ef:3e:95:fc:98:c5:79:9d:
25:97:a9:86:ed:ba:46:2b:5f:0e:2c:67:f3:c7:01:8f:df:c9:
a2:34:8f:e8:3e:84:17:76:7a:c3:55:50:28:8a:53:39:24:45:
96:7b:e6:a2:e3:fd:9a:79:01:b6:ab:d7:04:98:b8:7e:1d:7a:
ef:db:ad:f5:92:0f:72:1b:19:81:ac:10:19:1d:a2:11:75:3f:
cd:47:95:37:e3:5c:2b:7b:1e:3f:fd:ce:3a:87:7a:35:90:0c:
0e:5e:52:1b:f4:29:76:29:4a:a0:0b:55:33:8b:56:86:26:2c:
9e:98:20:f0:9f:8e:08:5a:35:98:8e:8e:4c:7b:f3:13:de:3d:
f9:12:4b:fd:d0:1b:8f:b3:01:92:d8:ee:28:1d:e3:db:08:ae:
26:b5:0e:b1:19:16:2a:62:e4:2e:4e:fd:d8:12:7f:23:a3:12:
fb:71:7a:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:03:20 2026 by rpki-client