
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.mft
File: G2I9umK4V8pz2KgKEZkPceBOfbY.mft (raw, json)
Hash identifier: zWhUtghfG2hRl3lojpS2kqWt1Af7+EQPGo0N3fR+Q+s=
Subject key identifier: 6C:F4:9E:C9:01:09:21:B5:CD:B5:9F:CF:22:14:1A:0E:DD:89:7B:59
Authority key identifier: 1B:62:3D:BA:62:B8:57:CA:73:D8:A8:0A:11:99:0F:71:E0:4E:7D:B6
Certificate issuer: /CN=1b623dba62b857ca73d8a80a11990f71e04e7db6
Certificate serial: 01A0B5098AA81144BB93D12B8B5A3E4E00FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G2I9umK4V8pz2KgKEZkPceBOfbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.mft
Manifest number: 11E2
Signing time: Fri 18 Sep 2026 15:01:36 +0000
Manifest this update: Fri 18 Sep 2026 15:01:36 +0000
Manifest next update: Sat 19 Sep 2026 15:01:36 +0000
Files and hashes: 1: G2I9umK4V8pz2KgKEZkPceBOfbY.crl (hash: 1amvx0YgUG2u90NpL4dsKqMqD6ZvZmgOQ9XoL3KNkqM=)
2: _TZJcz_b9cq-8luNUL6eEZRU19o.roa (hash: XV8xsUjzIwVTNMvOzhZSqDe2iSUDHqLPyeEkThsb7Tw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/G2I9umK4V8pz2KgKEZkPceBOfbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 15:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b5:09:8a:a8:11:44:bb:93:d1:2b:8b:5a:3e:4e:00:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b623dba62b857ca73d8a80a11990f71e04e7db6
Validity
Not Before: Sep 18 15:01:36 2026 GMT
Not After : Sep 19 15:01:36 2026 GMT
Subject: CN=6cf49ec9010921b5cdb59fcf22141a0edd897b59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:0a:0f:ca:51:a4:06:ca:2b:fc:28:dd:99:6c:
0c:2e:f3:a9:d6:1f:4b:f4:b7:0d:d6:32:1c:93:61:
c1:d8:8c:6c:d7:2c:5d:2b:62:63:d1:98:2a:07:9c:
6f:c8:7b:f8:48:2a:e4:f8:9d:62:fc:21:25:78:83:
02:77:08:4b:57:dd:be:a8:33:73:6e:60:9e:c0:ee:
13:21:f3:4b:07:75:a9:d8:6f:97:b3:b3:05:69:55:
cd:95:1b:ed:ff:5c:b2:4b:bc:df:0a:6f:52:56:91:
17:15:df:78:a1:87:6e:2d:2b:e2:34:6a:77:cf:c7:
8d:e5:43:fc:8d:b4:c0:fb:d3:fb:01:ed:00:78:10:
7b:ac:02:f0:7f:d9:55:1b:9e:fb:b2:01:6a:fc:3a:
b7:85:b9:6c:37:05:7a:e2:53:45:35:7f:86:df:94:
ff:08:93:d9:e6:22:07:53:93:d4:59:68:ca:aa:dd:
49:75:69:5b:87:7a:1d:9b:52:b0:67:23:62:4b:f8:
50:bd:f5:a4:91:93:c4:23:c2:8f:9f:01:f3:cc:9a:
3e:a9:99:15:d8:4f:5d:f7:8b:3d:ad:59:d4:24:81:
80:e8:f6:8d:a4:b1:9a:b0:f4:e3:3d:9e:7a:ff:79:
ff:39:7c:2a:90:4f:2b:4a:8d:ca:9c:13:17:5b:94:
42:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:F4:9E:C9:01:09:21:B5:CD:B5:9F:CF:22:14:1A:0E:DD:89:7B:59
X509v3 Authority Key Identifier:
keyid:1B:62:3D:BA:62:B8:57:CA:73:D8:A8:0A:11:99:0F:71:E0:4E:7D:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2I9umK4V8pz2KgKEZkPceBOfbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:d4:0e:5d:aa:97:ee:ac:1a:3c:17:a8:82:28:1e:a7:58:2c:
6c:35:6d:af:bd:c2:28:c4:e8:85:67:f7:78:1a:fa:ce:c2:49:
cb:84:8e:2d:55:11:b9:4e:96:99:99:5f:7a:e1:33:da:f4:4f:
cb:71:3b:e3:87:9b:a2:2a:1d:cb:1f:c8:0e:71:08:fc:ae:0f:
59:c5:88:79:e2:22:e0:14:7d:4d:08:01:93:6a:42:1e:54:2e:
22:90:5f:46:4e:47:89:d4:4a:fa:73:04:a6:d0:f2:8c:c4:39:
cd:b8:24:fb:f7:32:4b:68:48:8f:b2:3b:ee:a0:d1:10:b3:43:
fe:15:da:de:ee:af:03:91:33:09:5b:15:b1:fa:94:40:de:9d:
44:f8:b7:3e:10:b6:e1:a6:e5:da:0e:68:0c:f1:d0:a1:7f:47:
6a:22:a9:62:a2:69:d2:e3:02:75:0e:45:88:5b:94:c8:45:13:
db:5b:f7:31:4a:c4:eb:32:50:b2:5f:3e:db:2f:b4:c4:b0:ed:
19:f4:2c:fc:ad:80:ee:6e:90:06:9f:ca:a2:54:45:82:01:e6:
dc:d1:df:95:66:ad:4b:a8:47:11:28:06:83:57:cf:7a:fb:e0:
35:32:ff:31:a8:21:b8:08:87:18:15:b3:cf:59:4b:ad:a7:da:
53:ea:88:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 22:58:53 2026 by rpki-client