Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.mft
File: G2I9umK4V8pz2KgKEZkPceBOfbY.mft (raw, json)
Hash identifier: SgGGPBinPa0Qd089f2ZMqxbgzfjJkmaDSoC8qxV9Xqw=
Subject key identifier: 98:DB:FD:28:E3:D5:44:EB:3A:F6:7F:4E:87:3D:FB:40:E4:7D:84:A9
Authority key identifier: 1B:62:3D:BA:62:B8:57:CA:73:D8:A8:0A:11:99:0F:71:E0:4E:7D:B6
Certificate issuer: /CN=1b623dba62b857ca73d8a80a11990f71e04e7db6
Certificate serial: 019EDBE59D66596544A4EB0D1B85FB108A9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G2I9umK4V8pz2KgKEZkPceBOfbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.mft
Manifest number: 10ED
Signing time: Thu 18 Jun 2026 18:01:58 +0000
Manifest this update: Thu 18 Jun 2026 18:01:58 +0000
Manifest next update: Fri 19 Jun 2026 18:01:58 +0000
Files and hashes: 1: G2I9umK4V8pz2KgKEZkPceBOfbY.crl (hash: yFZm7w3O3xzYSMSj+Py6jVQ3rm0bYLiNSaY367Gqfdg=)
2: _TZJcz_b9cq-8luNUL6eEZRU19o.roa (hash: XV8xsUjzIwVTNMvOzhZSqDe2iSUDHqLPyeEkThsb7Tw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/G2I9umK4V8pz2KgKEZkPceBOfbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Jun 2026 18:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:db:e5:9d:66:59:65:44:a4:eb:0d:1b:85:fb:10:8a:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b623dba62b857ca73d8a80a11990f71e04e7db6
Validity
Not Before: Jun 18 18:01:58 2026 GMT
Not After : Jun 19 18:01:58 2026 GMT
Subject: CN=98dbfd28e3d544eb3af67f4e873dfb40e47d84a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ce:ca:3b:ce:1c:9e:cf:b5:53:d2:b6:b9:bb:
20:79:66:ae:9c:78:97:ba:f6:90:89:fa:1c:b2:f7:
03:92:29:34:f1:a7:ea:fe:93:b1:1d:e9:19:51:10:
9d:b8:d0:28:7a:8e:ab:98:09:d3:3a:be:60:72:93:
8e:b5:dd:eb:86:75:b2:eb:d0:27:7e:00:4b:13:44:
80:81:3b:98:93:ea:66:0e:f1:2d:40:28:99:6d:10:
c1:a2:06:49:10:79:6d:e0:b1:1a:ab:66:8e:9a:77:
48:cd:f6:b0:b4:18:a4:3f:0f:c5:09:e0:a2:a6:72:
64:f0:ca:63:5c:6d:7e:0c:bf:7b:01:48:15:53:11:
f2:be:4f:55:a2:6e:77:a0:e5:76:88:cd:e1:8f:af:
40:bb:65:1b:46:5e:20:f3:27:73:28:7d:b4:f1:3b:
49:a1:31:23:df:ec:23:82:fe:8a:81:fa:0b:41:20:
54:92:47:8e:b3:07:4e:e5:ad:16:aa:49:71:01:da:
b3:37:df:ae:6b:e3:fb:cb:ae:fc:59:bc:be:d3:17:
47:c3:3e:84:6c:ec:0c:e7:2f:0b:fe:82:9e:ab:e0:
0e:aa:3c:dd:e6:23:3a:ea:66:c1:8e:49:b2:7c:32:
c9:72:a6:27:ec:c8:92:a4:fa:6c:50:66:11:02:ff:
15:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:DB:FD:28:E3:D5:44:EB:3A:F6:7F:4E:87:3D:FB:40:E4:7D:84:A9
X509v3 Authority Key Identifier:
keyid:1B:62:3D:BA:62:B8:57:CA:73:D8:A8:0A:11:99:0F:71:E0:4E:7D:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2I9umK4V8pz2KgKEZkPceBOfbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:1f:44:87:a4:4f:52:60:9d:de:df:b3:56:a5:b4:6e:33:02:
20:f0:69:15:7c:90:4b:51:91:a3:06:e3:15:a0:9c:19:3f:14:
02:68:fa:be:83:f4:06:3b:1c:7b:f5:10:28:c6:de:f7:59:94:
23:a9:1e:7f:32:b4:8f:10:84:ef:bc:4c:21:3a:a1:25:4d:cc:
66:72:33:05:c5:f2:9e:51:48:30:04:02:e0:e4:cd:0b:a6:f3:
25:89:cf:36:33:31:97:8f:c3:f7:77:56:62:9e:e4:ce:ed:df:
15:c5:01:bc:61:e3:b6:0e:5a:9e:a8:92:79:47:24:6c:64:62:
12:42:8b:d7:48:83:f6:c8:5b:45:d8:dc:12:e6:60:86:d7:f4:
a8:27:51:19:79:7d:7a:8f:98:b3:e7:ac:c9:51:c6:59:e7:6a:
3d:52:90:6a:43:98:6d:a7:5a:1e:d4:09:bc:04:a6:4c:1b:1f:
51:85:e6:80:04:65:cf:9d:de:86:23:31:12:b4:78:f2:29:97:
03:dc:c6:ce:22:18:db:f3:82:64:44:1e:fe:8c:4a:8b:91:22:
5c:00:05:a0:ac:b5:26:db:ee:ab:55:b4:13:e5:11:21:ed:58:
b6:c3:42:b0:ed:be:22:31:52:f2:41:07:9e:b8:22:c8:ab:bd:
b1:5c:de:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 19 03:34:19 2026 by rpki-client