Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/6a2946-f0a4-4e85-930e-d4edf16e0978/1/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.mft
File: G9ugE2Vbm7DKooXXXBQsHuMPiFQ.mft (raw, json)
Hash identifier: xFxcPeexnkfIqg4U6Ng8Rpe0XKGd8xSMpJqUEls3qVE=
Subject key identifier: 3F:64:53:BA:C3:82:03:4F:3C:0F:AF:AF:1F:A3:18:27:4A:45:21:FD
Authority key identifier: 1B:DB:A0:13:65:5B:9B:B0:CA:A2:85:D7:5C:14:2C:1E:E3:0F:88:54
Certificate issuer: /CN=1bdba013655b9bb0caa285d75c142c1ee30f8854
Certificate serial: 019D38D32503D357AF43B10CC8C25DE20F74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/6a2946-f0a4-4e85-930e-d4edf16e0978/1/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.mft
Manifest number: 1769
Signing time: Sun 29 Mar 2026 09:00:54 +0000
Manifest this update: Sun 29 Mar 2026 09:00:54 +0000
Manifest next update: Mon 30 Mar 2026 09:00:54 +0000
Files and hashes: 1: G9ugE2Vbm7DKooXXXBQsHuMPiFQ.crl (hash: DyRb9PCsA9VkTM0A2RMjJKhk1E5sOIFkRzCqQfsY/Ms=)
2: GUn5C0R9BrAYfoyxCLwgJiIfUm4.roa (hash: TE3GqYvgyMZRi3G5/sygxcPRG4YEuD9ufDzYPZfPI5U=)
3: esdDEmlA_vp-DUa3L78lRMSFDrg.roa (hash: 89EU1646sjMts7fuWu8bk/NpsMoyPAALSAlqPCHzEdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/6a2946-f0a4-4e85-930e-d4edf16e0978/1/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/6a2946-f0a4-4e85-930e-d4edf16e0978/1/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:25:03:d3:57:af:43:b1:0c:c8:c2:5d:e2:0f:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bdba013655b9bb0caa285d75c142c1ee30f8854
Validity
Not Before: Mar 29 09:00:54 2026 GMT
Not After : Mar 30 09:00:54 2026 GMT
Subject: CN=3f6453bac382034f3c0fafaf1fa318274a4521fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d2:a0:be:4f:84:65:9d:05:a1:ce:96:11:bc:
2f:d1:26:95:b4:4d:ed:a1:8a:5b:89:6a:98:e5:de:
ba:5a:9e:47:6c:23:c8:9d:d4:b3:76:b3:dd:ef:8f:
43:6e:8f:56:a1:55:b5:0f:7b:70:81:1f:0d:1c:53:
94:fa:40:fc:0a:ec:fb:83:29:ea:76:ca:56:21:1c:
1b:28:f7:55:89:0d:eb:4a:5e:77:06:e8:f9:7a:9b:
6e:16:dc:ba:ac:cc:51:32:8f:a2:c4:6b:e4:96:99:
d1:72:46:b6:14:5e:74:60:f4:6f:cf:06:e5:eb:9f:
f2:2f:cb:1d:03:80:ff:e6:bf:e2:ad:55:c0:17:5b:
1b:6d:75:e9:68:08:1f:33:82:06:10:3e:39:f4:76:
14:0d:7d:f8:3d:8a:05:88:e9:0e:6a:55:ab:a6:9a:
38:aa:88:9d:10:ff:85:a7:0d:f4:b0:3d:2e:bc:8e:
63:e2:25:fb:fb:07:e7:ae:dd:d5:84:55:ec:6c:73:
37:22:03:ee:a3:b1:3a:f8:74:88:96:40:c6:e1:a5:
ad:3a:5d:42:de:9b:e3:8e:b5:d3:e0:f9:c1:6f:86:
81:78:c6:81:de:64:df:6e:3b:c7:db:a0:e4:a8:15:
29:cd:eb:d9:87:d4:be:ce:50:7e:68:2e:03:4e:d7:
44:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:64:53:BA:C3:82:03:4F:3C:0F:AF:AF:1F:A3:18:27:4A:45:21:FD
X509v3 Authority Key Identifier:
keyid:1B:DB:A0:13:65:5B:9B:B0:CA:A2:85:D7:5C:14:2C:1E:E3:0F:88:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/6a2946-f0a4-4e85-930e-d4edf16e0978/1/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/6a2946-f0a4-4e85-930e-d4edf16e0978/1/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:7a:cb:43:bc:df:71:ac:d1:9e:c3:f6:76:2a:e5:3e:c6:5d:
8a:fe:dd:73:9a:e1:80:ab:02:cb:a7:ee:04:8f:19:b4:c9:9c:
52:25:73:fe:50:bb:22:c4:0c:ab:a2:6e:c3:39:2f:d9:3b:15:
be:2f:85:ce:b5:38:6a:45:b5:10:d8:26:8a:e9:31:74:2d:74:
2f:6b:1f:ab:7f:b9:79:9f:e2:65:9f:ae:69:74:56:d0:ad:6d:
a0:99:7a:f6:2a:de:51:68:7b:06:fa:19:62:2d:e8:c1:0a:b7:
b2:7a:19:ce:19:62:8a:93:55:6e:e2:86:b0:89:f3:88:b1:30:
d5:7d:40:70:66:0a:36:a1:7f:09:cd:60:62:cb:87:2d:d3:b8:
c4:ca:a7:0d:f1:0e:53:d0:c0:d4:b9:d8:96:43:79:d0:f2:7f:
61:8c:27:5a:d7:1f:36:ae:de:43:2d:17:97:d1:91:82:9b:8d:
26:09:b9:a0:97:00:ea:01:91:cd:5a:3f:73:b7:00:58:fc:1a:
06:44:eb:2d:53:50:d0:f9:3c:15:cf:a2:a4:ac:88:4e:cc:f2:
e9:70:6a:57:3e:58:38:f2:c1:2f:74:0e:fb:13:22:79:d1:2d:
ff:33:39:26:b9:f7:af:8f:04:d9:5d:18:63:43:cc:74:03:df:
c0:79:00:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:06:21 2026 by rpki-client