
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.mft
File: G2RtQs6J1Ak-Ssknp_I283pRq-I.mft (raw, json)
Hash identifier: PP5x5TBw4xsCrObpTXK2B+iWwR1o26+/slXBmp4csPo=
Subject key identifier: 8F:CB:5C:5F:B8:FD:60:1E:63:3E:57:0B:FC:4D:52:A2:B0:86:4C:6C
Authority key identifier: 1B:64:6D:42:CE:89:D4:09:3E:4A:C9:27:A7:F2:36:F3:7A:51:AB:E2
Certificate issuer: /CN=1b646d42ce89d4093e4ac927a7f236f37a51abe2
Certificate serial: 01A0CEFF5250FDAD0535BB4FE219D33C5C47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G2RtQs6J1Ak-Ssknp_I283pRq-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.mft
Manifest number: 1292
Signing time: Wed 23 Sep 2026 16:00:34 +0000
Manifest this update: Wed 23 Sep 2026 16:00:34 +0000
Manifest next update: Thu 24 Sep 2026 16:00:34 +0000
Files and hashes: 1: G2RtQs6J1Ak-Ssknp_I283pRq-I.crl (hash: 9f+RatnbxKs38qZwokDBsIFxNLgEQVqtfCC8oN+CxZc=)
2: buasPl807dGAfqgw1urBhY4Km5w.roa (hash: PQav8NXXwoaYuBOPi54S+Cjky9Sn3BtCmVplgakM7xk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/G2RtQs6J1Ak-Ssknp_I283pRq-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:ff:52:50:fd:ad:05:35:bb:4f:e2:19:d3:3c:5c:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b646d42ce89d4093e4ac927a7f236f37a51abe2
Validity
Not Before: Sep 23 16:00:34 2026 GMT
Not After : Sep 24 16:00:34 2026 GMT
Subject: CN=8fcb5c5fb8fd601e633e570bfc4d52a2b0864c6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c4:5d:b3:78:6a:5a:8c:61:4d:c2:9e:9a:c1:
c0:58:39:31:8c:cc:c1:ff:f2:1a:c1:64:1a:e5:62:
ae:88:7c:37:7c:e4:48:0b:50:d1:5e:71:b2:8d:9e:
f3:64:ef:85:c8:db:3d:ff:09:10:d3:50:57:5e:2c:
a0:6c:41:e1:e6:ef:33:62:d9:58:ca:80:a5:09:9b:
b7:e1:6b:43:14:41:9d:fc:93:3a:20:69:b6:6c:0b:
f6:02:8c:f5:12:76:63:cf:b3:3b:1e:d2:46:f7:e2:
76:4d:e2:5d:0d:1f:18:4c:b5:c3:2f:9f:11:f1:b5:
91:a3:bf:01:0f:6f:70:e4:7b:64:3c:5e:2f:ac:91:
9b:ac:a1:c2:ae:27:f5:b1:dc:00:94:d4:2c:53:89:
14:27:2e:82:3e:f8:2c:ae:4a:cc:af:b9:14:d2:fe:
8e:f4:e0:d7:a6:58:8c:e2:2e:bb:c6:56:06:ef:a7:
91:f8:8b:b5:f1:3d:ef:8a:e7:0a:8a:6f:cc:13:31:
59:54:52:db:16:e9:73:2e:ab:f5:d7:a4:4f:71:3c:
7f:10:05:12:01:9b:74:fd:44:8a:98:c7:a9:27:ff:
b9:80:71:6a:e4:5c:20:1e:c8:e8:82:be:fd:5f:1f:
4f:40:0c:d8:05:4c:90:b8:38:ad:71:b5:39:2e:87:
ed:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:CB:5C:5F:B8:FD:60:1E:63:3E:57:0B:FC:4D:52:A2:B0:86:4C:6C
X509v3 Authority Key Identifier:
keyid:1B:64:6D:42:CE:89:D4:09:3E:4A:C9:27:A7:F2:36:F3:7A:51:AB:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2RtQs6J1Ak-Ssknp_I283pRq-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:b8:4e:64:a3:5b:18:56:62:1c:b7:cd:8b:c0:21:47:04:38:
76:93:ee:aa:48:c0:b7:73:48:a7:a3:81:8e:82:2c:bc:5c:17:
7a:51:8d:2f:93:c1:85:1a:26:0a:d3:5c:eb:78:72:fe:53:20:
59:49:c3:aa:cc:bc:2e:ef:67:db:ea:ba:85:fa:06:9c:67:38:
de:bf:38:88:a0:c1:c9:5b:cf:5f:09:3e:b3:16:64:96:7f:a5:
60:54:a6:86:5d:14:4c:fe:01:e5:a2:eb:36:60:98:63:d1:08:
a4:e3:38:57:8b:da:7f:e6:ee:ca:62:a3:e1:4c:5f:14:01:eb:
1b:01:37:ca:93:15:8c:7d:3e:70:b4:9e:e8:09:c0:23:1b:bf:
2c:a1:a0:24:8e:de:ca:ad:30:57:19:18:f8:10:10:71:b5:b6:
bb:2d:c5:af:fd:a1:24:39:04:f2:05:02:ed:5d:cb:84:67:0a:
4c:f5:59:44:0f:66:67:a6:e0:18:7a:fd:ff:f1:37:e3:65:6b:
ba:08:0b:6b:f6:83:52:01:44:da:94:54:d5:4c:de:63:34:2f:
a8:77:ff:4c:45:b8:36:a7:95:f2:47:3a:2e:26:ed:43:cf:20:
7c:17:f3:a5:68:76:2a:2a:8a:13:71:ec:5d:2d:8f:06:0b:70:
3c:19:38:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 20:56:23 2026 by rpki-client