Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.mft
File: G2I9umK4V8pz2KgKEZkPceBOfbY.mft (raw, json)
Hash identifier: +L+HvPnzSBzwIEMb5zgpWklZ2oAnnwNsxg7YGWa7rE8=
Subject key identifier: F7:22:E6:88:2D:0D:CE:9D:AD:22:46:8E:94:D6:7D:44:4E:18:92:56
Authority key identifier: 1B:62:3D:BA:62:B8:57:CA:73:D8:A8:0A:11:99:0F:71:E0:4E:7D:B6
Certificate issuer: /CN=1b623dba62b857ca73d8a80a11990f71e04e7db6
Certificate serial: 01A0C66A86483869B121E6832569168FF8E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G2I9umK4V8pz2KgKEZkPceBOfbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.mft
Manifest number: 11EB
Signing time: Tue 22 Sep 2026 00:01:04 +0000
Manifest this update: Tue 22 Sep 2026 00:01:04 +0000
Manifest next update: Wed 23 Sep 2026 00:01:04 +0000
Files and hashes: 1: G2I9umK4V8pz2KgKEZkPceBOfbY.crl (hash: b2faOfm77BoAZ6jEm/WwXu3dRZJN9HT735CXHDVRX8s=)
2: _TZJcz_b9cq-8luNUL6eEZRU19o.roa (hash: XV8xsUjzIwVTNMvOzhZSqDe2iSUDHqLPyeEkThsb7Tw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/G2I9umK4V8pz2KgKEZkPceBOfbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:6a:86:48:38:69:b1:21:e6:83:25:69:16:8f:f8:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b623dba62b857ca73d8a80a11990f71e04e7db6
Validity
Not Before: Sep 22 00:01:04 2026 GMT
Not After : Sep 23 00:01:04 2026 GMT
Subject: CN=f722e6882d0dce9dad22468e94d67d444e189256
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c7:85:71:68:ba:d3:d6:d4:2d:2b:b1:1a:d7:
c0:b1:e8:b8:78:db:33:30:d2:8d:6a:21:98:4d:9c:
c4:79:b2:7b:99:67:ef:73:ce:cb:d4:ce:60:c5:37:
24:3d:6a:59:fb:20:68:64:8d:c0:ba:f3:98:87:e0:
02:f0:fc:98:f8:f1:6a:5e:80:28:18:8b:47:bb:cf:
de:52:e5:2f:0e:ef:ae:b5:01:98:52:98:fa:59:cf:
8c:f7:f8:1f:82:59:ea:a0:cb:6c:dc:dc:3b:05:27:
fe:73:73:e4:f1:9f:34:f4:e9:d4:f1:99:f0:3b:cb:
9e:c0:39:1e:19:4b:1f:f7:6d:20:f3:38:44:8b:04:
86:5f:b3:e5:20:54:60:4c:7b:9f:ed:6a:55:6e:64:
7d:51:5d:27:3e:55:c4:46:65:cb:53:96:57:34:1b:
79:d8:ce:3c:e4:75:07:52:b1:25:aa:76:64:a8:a1:
4d:37:64:4d:97:00:f8:b8:55:ad:03:61:c7:b0:31:
b0:99:59:4f:52:73:51:30:82:61:df:92:9a:66:34:
9a:de:c0:c8:d4:81:9c:13:a2:f4:17:58:bf:dd:c0:
69:df:9e:0c:c3:07:52:e8:3a:5a:e6:8d:66:dd:af:
e8:9a:d8:4a:a3:30:c1:6e:b6:1f:df:68:c4:64:50:
e1:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:22:E6:88:2D:0D:CE:9D:AD:22:46:8E:94:D6:7D:44:4E:18:92:56
X509v3 Authority Key Identifier:
keyid:1B:62:3D:BA:62:B8:57:CA:73:D8:A8:0A:11:99:0F:71:E0:4E:7D:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2I9umK4V8pz2KgKEZkPceBOfbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:fc:21:43:1a:ed:5b:c1:c3:26:8d:b0:62:d8:8b:c5:79:eb:
7f:c9:3c:eb:36:0e:1a:b3:ef:15:e7:d8:b6:7c:75:9a:be:f2:
3b:cf:43:c5:99:fe:2a:1a:b8:b7:8e:f5:74:11:03:b7:5f:31:
b4:1b:e7:8b:ba:23:a1:b9:e0:2c:29:9f:01:c1:ca:fb:32:ef:
88:75:f6:19:5b:fe:38:e3:e0:8d:d3:8b:4d:77:98:7b:68:14:
13:7e:f3:91:08:5e:82:09:37:b0:fc:76:60:ae:be:4f:bd:12:
90:d9:9d:6b:28:e8:52:c6:64:7e:9d:3b:4d:b1:4a:f9:08:e4:
24:55:33:d2:d1:43:8c:a9:e5:74:a3:82:cb:0e:56:1f:d8:85:
49:2b:ad:dd:a2:84:dd:85:5d:f3:ae:07:d3:87:26:1f:bb:a5:
dc:bb:f3:94:27:91:cd:d6:51:c2:b4:9e:53:01:bb:1c:e1:44:
9d:96:fd:d1:f0:8a:e6:c0:7d:99:44:3a:99:2d:c0:00:83:26:
60:f0:57:d6:f5:63:38:b8:29:af:07:e0:30:a0:5e:58:e2:03:
ba:fc:02:36:5c:66:50:73:3d:fb:5c:4e:a9:ce:32:f3:12:c2:
b7:e5:0f:f6:d0:a2:04:88:a1:02:91:f6:f1:80:48:b8:50:ec:
7c:11:22:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:37:46 2026 by rpki-client