Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.mft
File: G2I9umK4V8pz2KgKEZkPceBOfbY.mft (raw, json)
Hash identifier: Qwrw5Yx5M4SfIVM6Nv6n1Ug3Iltwjue1QG97BzYvKgQ=
Subject key identifier: FC:9C:0D:0D:C9:BF:89:CB:1E:0E:16:B5:04:FA:1D:64:E0:A4:23:C1
Authority key identifier: 1B:62:3D:BA:62:B8:57:CA:73:D8:A8:0A:11:99:0F:71:E0:4E:7D:B6
Certificate issuer: /CN=1b623dba62b857ca73d8a80a11990f71e04e7db6
Certificate serial: 019DDCFAEEAFAE47941124EDE5ADDCB731D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G2I9umK4V8pz2KgKEZkPceBOfbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.mft
Manifest number: 1069
Signing time: Thu 30 Apr 2026 06:02:05 +0000
Manifest this update: Thu 30 Apr 2026 06:02:05 +0000
Manifest next update: Fri 01 May 2026 06:02:05 +0000
Files and hashes: 1: G2I9umK4V8pz2KgKEZkPceBOfbY.crl (hash: ejjUk4I/AAL7O58S6IeFLr/RBU1rnJ2B9AM34eFTUTg=)
2: _TZJcz_b9cq-8luNUL6eEZRU19o.roa (hash: XV8xsUjzIwVTNMvOzhZSqDe2iSUDHqLPyeEkThsb7Tw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/G2I9umK4V8pz2KgKEZkPceBOfbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 06:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:dc:fa:ee:af:ae:47:94:11:24:ed:e5:ad:dc:b7:31:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b623dba62b857ca73d8a80a11990f71e04e7db6
Validity
Not Before: Apr 30 06:02:05 2026 GMT
Not After : May 1 06:02:05 2026 GMT
Subject: CN=fc9c0d0dc9bf89cb1e0e16b504fa1d64e0a423c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:b7:08:65:59:fe:af:c4:aa:16:ad:66:70:e8:
c9:36:de:70:98:34:bc:63:dc:9f:b3:47:28:f4:41:
85:d7:f5:4d:dc:c1:c0:e8:ca:f5:42:66:7a:cc:2a:
c1:36:15:a1:21:f0:35:56:47:df:6b:62:08:57:19:
f0:46:0f:10:fb:86:9c:b9:d1:ab:da:06:11:a5:f8:
fe:7d:eb:e3:1e:4d:75:43:c6:38:54:a4:3c:9d:91:
a6:06:3f:45:c7:4a:93:83:89:38:d5:b0:0d:80:b1:
07:a3:bc:e6:a8:52:94:45:d2:b1:73:c7:c5:58:b6:
f3:1f:f5:dd:e3:bd:0d:b4:3c:09:72:7e:6e:17:cc:
14:1e:a2:f9:30:62:73:70:52:c9:a8:de:fa:fb:b6:
84:08:3d:47:4c:bd:3d:4e:94:17:6a:e8:1f:22:f0:
d8:38:4b:91:3c:c8:67:5e:a4:f9:31:10:87:db:f4:
ad:21:f2:37:ab:c9:56:98:27:08:2b:03:c3:53:29:
7b:0e:72:b3:06:cf:74:4d:c1:ef:59:9b:c6:d3:71:
da:99:0c:ec:96:cc:f7:3f:59:b3:5c:f9:99:9e:7e:
b2:08:48:d5:24:96:4d:1c:45:68:14:72:d3:7b:3a:
88:25:3a:0c:4d:8e:83:a1:d2:15:b9:17:70:c1:d2:
56:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:9C:0D:0D:C9:BF:89:CB:1E:0E:16:B5:04:FA:1D:64:E0:A4:23:C1
X509v3 Authority Key Identifier:
keyid:1B:62:3D:BA:62:B8:57:CA:73:D8:A8:0A:11:99:0F:71:E0:4E:7D:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2I9umK4V8pz2KgKEZkPceBOfbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:a8:5f:90:b6:13:a2:21:f7:41:16:7a:b4:33:dd:62:64:4e:
bf:fa:2d:f0:a3:11:9a:25:44:c0:99:f2:13:cb:9e:f7:c5:d1:
13:eb:56:82:df:3f:ac:44:51:23:c2:05:c4:d4:05:a0:0f:b7:
46:3b:ec:b7:c7:79:7f:65:d5:f8:b8:d3:1f:62:d7:df:d9:75:
10:95:25:4a:6b:12:87:24:8a:e7:cb:b3:2a:b5:22:c5:56:f2:
a2:60:29:69:5d:a0:9b:a0:80:d2:83:cd:fc:9d:1c:02:43:37:
60:ab:78:11:b2:da:e7:f7:9d:8a:0f:f6:e5:d1:a5:d8:2e:b8:
77:59:9a:d6:fd:dd:c2:9e:37:c3:21:bf:5d:be:35:84:ec:bd:
d1:37:bb:f0:ff:9c:be:04:0f:c7:c2:22:b0:9a:fc:2e:de:21:
cd:f7:44:bb:4e:5c:70:1f:5b:80:80:3c:2e:d2:c2:1f:33:3d:
da:d5:c4:df:91:24:7d:7a:48:47:a5:67:df:91:f9:4e:94:d0:
ec:af:10:b3:70:07:62:3a:66:f2:47:bf:05:e7:44:6f:d5:8b:
07:79:56:fe:5a:37:1d:fc:f2:1f:e8:91:e1:0c:46:0b:9e:c6:
22:2c:68:b3:7d:e3:c1:42:06:85:fb:71:d9:a3:da:bb:1f:d7:
dc:1c:01:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 13:45:55 2026 by rpki-client