Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/f8be9b-58f0-4544-b23f-6354ef0771c9/1/g2elJH2fTpT3vVcc8T01q0iwHSQ.mft
File: g2elJH2fTpT3vVcc8T01q0iwHSQ.mft (raw, json)
Hash identifier: YrGuX5jCHgQdCOHZmYmuuQSsOkypbNXxykEMvbuPYX4=
Subject key identifier: 7D:D7:C1:81:F8:A7:32:8D:AD:40:68:47:0C:E6:2A:F7:B6:0C:DC:1B
Authority key identifier: 83:67:A5:24:7D:9F:4E:94:F7:BD:57:1C:F1:3D:35:AB:48:B0:1D:24
Certificate issuer: /CN=8367a5247d9f4e94f7bd571cf13d35ab48b01d24
Certificate serial: 019EFC842D044179D2EF590CF1C49838005F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g2elJH2fTpT3vVcc8T01q0iwHSQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/f8be9b-58f0-4544-b23f-6354ef0771c9/1/g2elJH2fTpT3vVcc8T01q0iwHSQ.mft
Manifest number: 090A
Signing time: Thu 25 Jun 2026 02:03:01 +0000
Manifest this update: Thu 25 Jun 2026 02:03:01 +0000
Manifest next update: Fri 26 Jun 2026 02:03:01 +0000
Files and hashes: 1: LoYQyBr4YJ5ITZr2_fcC3dmO_KA.asa (hash: zpgidiPNOSMW/wwxutmy+pYEFABRXk9mKUJiu/1ReKw=)
2: g2elJH2fTpT3vVcc8T01q0iwHSQ.crl (hash: 3gp7UWRDmiMhntdQ3ZLuUqORqZrGA+TsjjshlBW9JSY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/f8be9b-58f0-4544-b23f-6354ef0771c9/1/g2elJH2fTpT3vVcc8T01q0iwHSQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/f8be9b-58f0-4544-b23f-6354ef0771c9/1/g2elJH2fTpT3vVcc8T01q0iwHSQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/g2elJH2fTpT3vVcc8T01q0iwHSQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fc:84:2d:04:41:79:d2:ef:59:0c:f1:c4:98:38:00:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8367a5247d9f4e94f7bd571cf13d35ab48b01d24
Validity
Not Before: Jun 25 02:03:01 2026 GMT
Not After : Jun 26 02:03:01 2026 GMT
Subject: CN=7dd7c181f8a7328dad4068470ce62af7b60cdc1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:36:5e:ac:36:c3:63:26:34:e9:e8:49:63:6d:
0c:b6:c8:a5:f9:4e:61:a3:b7:09:25:bf:d1:d7:4a:
7d:4f:7f:0e:f5:76:ce:41:b2:9d:b3:f7:41:b5:f4:
c4:80:1d:03:81:da:28:36:51:fd:64:d3:4e:fa:c5:
34:3e:f9:3c:26:3f:94:22:a0:14:00:d4:fd:33:50:
5b:6a:9e:b5:13:92:dc:13:a2:4d:5a:8a:e7:19:5e:
45:ac:b4:10:0b:51:f0:75:6a:3a:be:b5:9c:8c:67:
35:6c:74:b0:2e:a6:99:b0:b0:53:eb:2c:6e:4f:2a:
36:99:90:e9:bf:27:89:aa:23:5e:1e:46:33:c5:c7:
23:c7:ee:c1:29:21:9c:63:3e:ab:4f:f9:8c:75:22:
c4:ea:2c:62:70:9d:65:4b:ea:57:76:7c:34:a7:46:
f5:30:ed:89:f5:61:0c:f6:dd:16:43:bf:e2:55:17:
c0:7b:3c:83:d6:dd:00:5f:89:f8:fd:87:48:a4:83:
7f:d7:24:55:05:c4:3c:33:4b:1b:82:d4:26:93:99:
10:ac:5b:39:17:70:28:40:a3:a9:bf:b4:d8:2a:9e:
5a:27:55:45:ae:55:9a:73:09:a1:1f:db:bc:47:3e:
98:8f:a7:5c:e3:26:95:37:e3:6f:22:14:14:59:39:
41:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:D7:C1:81:F8:A7:32:8D:AD:40:68:47:0C:E6:2A:F7:B6:0C:DC:1B
X509v3 Authority Key Identifier:
keyid:83:67:A5:24:7D:9F:4E:94:F7:BD:57:1C:F1:3D:35:AB:48:B0:1D:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2elJH2fTpT3vVcc8T01q0iwHSQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f8be9b-58f0-4544-b23f-6354ef0771c9/1/g2elJH2fTpT3vVcc8T01q0iwHSQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f8be9b-58f0-4544-b23f-6354ef0771c9/1/g2elJH2fTpT3vVcc8T01q0iwHSQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:24:41:cc:96:de:74:71:3c:4b:ea:be:b5:e6:b3:a6:4e:64:
03:29:b5:85:3a:9a:d9:bf:22:9f:1a:7a:b0:ad:19:00:10:cc:
bc:15:34:76:45:67:09:79:ed:89:21:91:a2:f7:0c:1b:4e:5b:
31:0f:3b:b2:7d:4b:3a:60:31:10:36:05:f8:e9:4a:99:55:44:
51:a9:f9:c5:c3:19:cf:bc:0f:18:52:4d:d4:05:6d:0b:8d:4f:
82:64:ce:97:0d:27:d3:54:1e:c0:d5:77:c6:90:e7:e8:b6:8a:
ba:f0:0c:53:0d:50:c5:19:bc:88:ca:11:e7:4f:fd:f1:57:20:
b8:7e:f3:6e:4c:62:a4:b1:b7:d6:0e:51:84:3f:28:ff:fd:f1:
c4:2d:c0:be:55:88:3b:ad:40:4d:63:a5:28:2c:4c:a6:c4:a4:
13:21:d3:ee:ed:ff:6c:a9:aa:84:6e:b3:2e:a5:d1:23:59:ac:
ad:fd:0e:04:88:fd:80:0c:dc:89:6e:f6:38:8b:11:1f:b6:95:
5e:89:94:ce:b3:29:05:5e:23:58:a0:99:a7:c9:8d:a7:0b:4d:
6e:b4:70:44:42:b6:b5:2f:c0:03:d4:ad:8c:b6:24:e3:da:eb:
ce:4a:2b:4c:fd:62:53:cf:b4:d6:ad:99:86:84:82:81:85:0c:
fe:b9:63:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ78hC0EQXnS71kM8cSYOABfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzNjdhNTI0N2Q5ZjRlOTRmN2JkNTcxY2YxM2QzNWFiNDhi
MDFkMjQwHhcNMjYwNjI1MDIwMzAxWhcNMjYwNjI2MDIwMzAxWjAzMTEwLwYDVQQD
Eyg3ZGQ3YzE4MWY4YTczMjhkYWQ0MDY4NDcwY2U2MmFmN2I2MGNkYzFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgTZerDbDYyY06ehJY20Mtsil+U5h
o7cJJb/R10p9T38O9XbOQbKds/dBtfTEgB0DgdooNlH9ZNNO+sU0Pvk8Jj+UIqAU
ANT9M1Bbap61E5LcE6JNWornGV5FrLQQC1HwdWo6vrWcjGc1bHSwLqaZsLBT6yxu
Tyo2mZDpvyeJqiNeHkYzxccjx+7BKSGcYz6rT/mMdSLE6ixicJ1lS+pXdnw0p0b1
MO2J9WEM9t0WQ7/iVRfAezyD1t0AX4n4/YdIpIN/1yRVBcQ8M0sbgtQmk5kQrFs5
F3AoQKOpv7TYKp5aJ1VFrlWacwmhH9u8Rz6Yj6dc4yaVN+NvIhQUWTlB1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH3XwYH4pzKNrUBoRwzmKve2DNwbMB8GA1UdIwQY
MBaAFINnpSR9n06U971XHPE9NatIsB0kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzJlbEpIMmZUcFQzdlZjYzhUMDFxMGl3SFNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9mOGJlOWItNThmMC00NTQ0LWIyM2Yt
NjM1NGVmMDc3MWM5LzEvZzJlbEpIMmZUcFQzdlZjYzhUMDFxMGl3SFNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC9mOGJlOWItNThmMC00NTQ0LWIyM2YtNjM1NGVmMDc3MWM5
LzEvZzJlbEpIMmZUcFQzdlZjYzhUMDFxMGl3SFNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuSRBzJbe
dHE8S+q+teazpk5kAym1hTqa2b8inxp6sK0ZABDMvBU0dkVnCXntiSGRovcMG05b
MQ87sn1LOmAxEDYF+OlKmVVEUan5xcMZz7wPGFJN1AVtC41PgmTOlw0n01QewNV3
xpDn6LaKuvAMUw1QxRm8iMoR50/98VcguH7zbkxipLG31g5RhD8o//3xxC3AvlWI
O61ATWOlKCxMpsSkEyHT7u3/bKmqhG6zLqXRI1msrf0OBIj9gAzciW72OIsRH7aV
XomUzrMpBV4jWKCZp8mNpwtNbrRwREK2tS/AA9StjLYk49rrzkorTP1iU8+01q2Z
hoSCgYUM/rlj4g==
-----END CERTIFICATE-----
Generated at Thu Jun 25 09:38:27 2026 by rpki-client