Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3b/6a2946-f0a4-4e85-930e-d4edf16e0978/1/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.mft
File: G9ugE2Vbm7DKooXXXBQsHuMPiFQ.mft (raw, json)
Hash identifier: adJqyXItisZPbHvdv7aT9NEj5bPiecU/6l2YzCyHRwA=
Subject key identifier: 60:1E:93:40:3C:8B:38:C7:B9:7D:DB:38:8F:90:6B:93:29:37:88:8E
Authority key identifier: 1B:DB:A0:13:65:5B:9B:B0:CA:A2:85:D7:5C:14:2C:1E:E3:0F:88:54
Certificate issuer: /CN=1bdba013655b9bb0caa285d75c142c1ee30f8854
Certificate serial: 01A145E0466CA24017DECE0E7DA9CDFBC601
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/6a2946-f0a4-4e85-930e-d4edf16e0978/1/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.mft
Manifest number: 1982
Signing time: Fri 16 Oct 2026 18:01:28 +0000
Manifest this update: Fri 16 Oct 2026 18:01:28 +0000
Manifest next update: Sat 17 Oct 2026 18:01:28 +0000
Files and hashes: 1: G9ugE2Vbm7DKooXXXBQsHuMPiFQ.crl (hash: zHdEctEsXQ0KAB9V8rMxPAoKyQW+CaaW107+5rqAsVU=)
2: GUn5C0R9BrAYfoyxCLwgJiIfUm4.roa (hash: TE3GqYvgyMZRi3G5/sygxcPRG4YEuD9ufDzYPZfPI5U=)
3: esdDEmlA_vp-DUa3L78lRMSFDrg.roa (hash: 89EU1646sjMts7fuWu8bk/NpsMoyPAALSAlqPCHzEdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/6a2946-f0a4-4e85-930e-d4edf16e0978/1/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/6a2946-f0a4-4e85-930e-d4edf16e0978/1/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 15:24:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:45:e0:46:6c:a2:40:17:de:ce:0e:7d:a9:cd:fb:c6:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bdba013655b9bb0caa285d75c142c1ee30f8854
Validity
Not Before: Oct 16 18:01:28 2026 GMT
Not After : Oct 17 18:01:28 2026 GMT
Subject: CN=601e93403c8b38c7b97ddb388f906b932937888e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:bc:5b:1e:cc:51:06:7e:b4:60:bd:c3:5f:4e:
25:ce:74:9a:12:3a:d7:bc:0c:2b:e6:60:49:f3:6c:
be:ea:5d:13:fc:cc:57:6c:ff:50:5a:cf:6a:04:9b:
b6:62:6e:28:80:37:36:10:72:48:79:53:8a:68:25:
17:49:a3:b6:82:24:5d:9c:29:27:59:d1:44:10:54:
13:c3:51:e2:85:55:00:b2:62:50:73:72:88:61:8a:
25:8d:96:64:b4:db:30:0e:4c:3a:26:5a:f0:4c:45:
94:dc:d5:11:1d:41:25:45:f3:87:66:f0:69:36:b4:
c5:a3:51:bb:81:dd:0a:d7:d2:3d:a5:d5:66:b5:32:
fe:a5:87:16:33:2b:d2:2c:3a:99:f5:9f:35:20:55:
26:cf:70:e4:80:81:5d:bd:98:7c:03:40:8d:f4:b9:
4c:ff:cb:f2:0f:cb:62:f8:47:37:a0:da:45:a3:a4:
db:d1:c2:a9:5c:90:c1:e0:03:18:9e:b9:3b:42:63:
6f:53:1d:c8:28:44:5f:f2:26:38:2f:27:bb:41:c3:
7c:00:1b:5e:1b:d4:53:21:2a:45:27:12:5b:9d:ef:
06:96:c5:f4:57:c6:0e:62:3b:08:fc:23:ab:f6:24:
2d:b2:06:90:72:66:06:0c:30:5f:85:64:db:1d:32:
0a:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:1E:93:40:3C:8B:38:C7:B9:7D:DB:38:8F:90:6B:93:29:37:88:8E
X509v3 Authority Key Identifier:
keyid:1B:DB:A0:13:65:5B:9B:B0:CA:A2:85:D7:5C:14:2C:1E:E3:0F:88:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/6a2946-f0a4-4e85-930e-d4edf16e0978/1/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/6a2946-f0a4-4e85-930e-d4edf16e0978/1/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:93:6b:a0:f0:a6:2e:12:ce:3a:6b:37:15:62:1b:6d:3a:3e:
d5:00:58:98:55:56:ec:e2:47:57:97:99:dc:98:10:68:b5:89:
c4:16:4c:9e:d5:31:d1:a6:40:ea:44:1e:7f:1f:c6:fc:0d:86:
d1:dc:23:84:2f:c9:28:5e:2c:7b:6e:48:d0:52:fa:0e:c8:64:
ba:1b:c0:c4:4e:ab:bb:06:6d:7d:e7:e8:40:70:4c:10:64:e1:
6e:f7:87:af:41:21:af:fc:39:eb:29:bc:36:20:a3:87:1f:fa:
e6:74:1f:79:02:4c:bb:e9:75:58:b1:70:ac:46:68:c4:eb:5f:
52:0e:1b:37:38:24:58:7b:c4:20:f8:6b:a6:a0:bb:bb:53:3c:
a7:49:44:d5:4d:e2:2e:3c:76:f5:88:c0:89:d4:de:de:b5:1b:
ad:dd:e9:0b:99:99:e3:25:68:5d:d5:2d:2a:79:b7:e0:fc:07:
52:e1:f2:75:8b:75:f2:f8:78:6d:57:c5:b8:64:9e:0f:7c:5b:
6c:68:85:cb:2f:52:84:b0:d2:10:60:43:5d:33:6c:75:e9:27:
8c:14:73:79:43:15:72:0b:55:b7:7a:0c:f2:c8:1e:f9:7a:23:
e3:98:d1:66:03:c3:f8:98:7f:2b:55:8c:e2:ee:c6:d1:90:2e:
44:9b:9e:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 23:45:41 2026 by rpki-client