Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.mft
File: G2RtQs6J1Ak-Ssknp_I283pRq-I.mft (raw, json)
Hash identifier: b6buK931vZ6WhvdOQzp2uV3XDDioraR+UogpMnBQiDM=
Subject key identifier: 53:32:BD:82:E6:1A:83:BC:A6:F9:0F:B1:11:4C:3A:A5:94:00:CF:4A
Authority key identifier: 1B:64:6D:42:CE:89:D4:09:3E:4A:C9:27:A7:F2:36:F3:7A:51:AB:E2
Certificate issuer: /CN=1b646d42ce89d4093e4ac927a7f236f37a51abe2
Certificate serial: 019FA974E1AC8C2863D1E16F2DDB0447D321
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G2RtQs6J1Ak-Ssknp_I283pRq-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.mft
Manifest number: 11FA
Signing time: Tue 28 Jul 2026 16:00:37 +0000
Manifest this update: Tue 28 Jul 2026 16:00:37 +0000
Manifest next update: Wed 29 Jul 2026 16:00:37 +0000
Files and hashes: 1: G2RtQs6J1Ak-Ssknp_I283pRq-I.crl (hash: fdDAM0l9MEV3bscsRi/bMnUt9aGVQdM3gQ7mFuGauPY=)
2: buasPl807dGAfqgw1urBhY4Km5w.roa (hash: PQav8NXXwoaYuBOPi54S+Cjky9Sn3BtCmVplgakM7xk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/G2RtQs6J1Ak-Ssknp_I283pRq-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 16:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:74:e1:ac:8c:28:63:d1:e1:6f:2d:db:04:47:d3:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b646d42ce89d4093e4ac927a7f236f37a51abe2
Validity
Not Before: Jul 28 16:00:37 2026 GMT
Not After : Jul 29 16:00:37 2026 GMT
Subject: CN=5332bd82e61a83bca6f90fb1114c3aa59400cf4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c1:8a:50:c8:42:33:37:2f:dd:d7:a8:7f:b6:
7c:74:1d:16:70:60:26:15:49:b4:4d:0b:7b:1e:1e:
c5:b5:42:a5:30:83:ec:55:52:d6:11:13:f4:01:0b:
2b:40:61:21:2e:15:17:7a:3c:bd:77:b4:04:62:25:
e2:23:56:3b:e2:39:46:d0:54:33:cc:2e:f5:e8:83:
c0:50:ca:25:41:5a:ea:2d:ba:88:63:56:3e:f8:cc:
d1:28:2f:0c:de:74:7a:7d:7a:e1:ce:3d:4f:b2:2c:
e1:8a:fb:8f:8d:e3:98:5f:c0:84:18:91:cc:07:2a:
e5:9a:9e:b0:1b:37:bd:b2:87:c6:d6:15:09:71:04:
ae:66:6c:25:d7:9e:62:28:48:c7:dd:a6:02:98:c9:
e5:5d:7d:1a:a2:cb:1d:28:96:cc:93:f2:b9:cc:b4:
43:84:63:1e:25:06:c5:ae:82:26:9c:9a:9f:9f:ad:
2b:6e:5b:a7:97:6a:db:18:a0:a9:75:ef:96:4f:91:
a1:5a:c4:7f:91:26:54:1b:71:7b:47:01:57:87:1b:
ee:ba:f6:a6:2a:c6:00:38:b1:74:2f:4e:d0:c3:cb:
83:53:30:86:0e:b7:7f:ca:5b:0b:df:98:89:b4:d8:
ab:75:d6:6b:b8:8c:1e:8d:c5:73:bf:68:cf:dd:8e:
e9:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:32:BD:82:E6:1A:83:BC:A6:F9:0F:B1:11:4C:3A:A5:94:00:CF:4A
X509v3 Authority Key Identifier:
keyid:1B:64:6D:42:CE:89:D4:09:3E:4A:C9:27:A7:F2:36:F3:7A:51:AB:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2RtQs6J1Ak-Ssknp_I283pRq-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:4f:1e:d6:ee:5c:59:66:90:56:c6:ed:fd:18:90:49:f0:7e:
32:a2:42:11:b4:4e:ea:c4:48:58:77:2e:4e:62:78:6b:15:63:
b4:09:b9:cb:1a:d3:e8:50:57:ba:58:c8:8f:a8:b2:ff:50:45:
cc:c9:93:7f:d6:f7:68:4e:c0:42:d8:2a:33:cd:41:25:a5:c8:
cd:5b:2c:ab:37:59:73:f9:cf:01:4d:58:a8:c2:11:65:96:30:
47:5e:79:42:54:8e:21:19:ab:94:de:21:bb:34:fb:b4:52:3d:
41:0b:8c:33:e9:36:c0:9d:e5:5e:62:3c:22:66:82:9b:a6:c8:
f7:f7:92:67:2e:14:48:5f:3c:6f:35:39:68:f2:5c:42:29:e8:
1a:65:0d:e2:ad:40:30:25:bd:cd:7c:d9:57:0f:74:28:a2:f7:
63:9a:d9:70:dd:e7:6d:6f:2a:d2:95:05:07:0f:74:9f:65:0c:
e7:47:27:fe:0e:b5:42:33:3d:c9:79:ec:9b:71:e2:36:10:46:
5e:b3:08:ae:67:28:cb:a0:c4:3a:0d:c1:b7:22:68:77:01:eb:
cc:76:90:55:52:4e:cd:3e:10:4f:5b:e1:3d:5a:30:35:f0:c8:
02:b5:8a:e7:69:00:9f:1a:00:45:8a:c2:bf:5c:70:58:1e:fb:
d1:ec:7b:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:14:01 2026 by rpki-client