Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.mft
File: G2hlYSYZg3PQeIa_Srj7BrkAZ4A.mft (raw, json)
Hash identifier: JUaTfHOzQodKWyCggnT37yhk5ntwiMaQz9scD0v+UIc=
Subject key identifier: 2E:3E:77:3A:00:DA:D3:9A:AA:8E:DF:A8:5F:73:F0:DA:44:70:38:E6
Authority key identifier: 1B:68:65:61:26:19:83:73:D0:78:86:BF:4A:B8:FB:06:B9:00:67:80
Certificate issuer: /CN=1b68656126198373d07886bf4ab8fb06b9006780
Certificate serial: 019E9B84FDE09FD9E7C9F8EF1CB86B383270
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.mft
Manifest number: 1949
Signing time: Sat 06 Jun 2026 06:00:44 +0000
Manifest this update: Sat 06 Jun 2026 06:00:44 +0000
Manifest next update: Sun 07 Jun 2026 06:00:44 +0000
Files and hashes: 1: AdqGNGTNFT1rSz03F0HVwK9B37I.roa (hash: cI5ji7V4dg8v9ui9zXXCNsMNEyJTysTdpdklDgc65jE=)
2: G2hlYSYZg3PQeIa_Srj7BrkAZ4A.crl (hash: cSGlSHcl0/FPk8My1O2GWusriKXhEL7v4aBzS2rd1qE=)
3: SiR8FHHKdbXqmwMkjZZOq7HZtxo.roa (hash: mkRGoCYQs5pO/fqORGXARxwk0SLVCsNlvRMucJrxHow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.mft
rsync://rpki.ripe.net/repository/DEFAULT/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 04:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9b:84:fd:e0:9f:d9:e7:c9:f8:ef:1c:b8:6b:38:32:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b68656126198373d07886bf4ab8fb06b9006780
Validity
Not Before: Jun 6 06:00:44 2026 GMT
Not After : Jun 7 06:00:44 2026 GMT
Subject: CN=2e3e773a00dad39aaa8edfa85f73f0da447038e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:04:1d:a1:04:42:03:8d:94:3d:b7:b5:1f:32:
02:8c:a9:38:e4:c6:32:67:b9:27:36:43:36:65:e2:
97:71:d0:b1:87:ea:13:5e:38:37:21:26:89:af:b1:
a7:25:77:84:2d:92:8f:b0:04:73:c0:37:4a:f6:bb:
5f:d9:a9:9b:71:04:c7:0b:6d:65:20:38:63:14:12:
8e:e8:05:0f:e3:0e:71:ba:3b:ad:24:42:63:a5:61:
81:16:bc:82:cb:5f:d3:ea:d3:de:26:14:3f:7e:6b:
d1:50:76:9c:40:a0:f2:69:08:55:16:eb:cd:8e:fe:
5c:d5:08:24:39:8a:20:15:a5:98:69:bc:ae:63:d6:
89:b2:0e:17:be:7e:13:a0:8e:10:e0:0c:71:71:15:
09:c3:c4:97:99:b2:2f:57:4a:30:1d:b5:12:a2:a7:
07:53:33:8f:d5:22:a9:82:87:94:30:98:98:e4:6d:
ab:3c:f4:a0:9e:c0:70:e5:d3:93:67:bb:41:cb:bb:
fd:66:01:c9:78:c5:79:20:56:93:9d:20:53:ca:18:
79:73:c7:a4:9d:6d:5f:51:86:d5:b1:ab:26:10:25:
cf:2e:0f:15:fe:df:df:18:ae:50:d0:69:71:fa:93:
5b:58:58:f7:34:d4:60:7d:6c:ef:d1:34:84:fc:2f:
05:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:3E:77:3A:00:DA:D3:9A:AA:8E:DF:A8:5F:73:F0:DA:44:70:38:E6
X509v3 Authority Key Identifier:
keyid:1B:68:65:61:26:19:83:73:D0:78:86:BF:4A:B8:FB:06:B9:00:67:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:1b:4d:8e:0a:3e:f6:43:9a:4e:b1:26:b3:3b:a4:88:87:d1:
84:ac:9f:45:2f:92:23:54:36:89:4e:a0:30:8a:6e:df:a0:4f:
16:1a:31:be:5d:ce:c8:8e:69:ff:c9:65:db:a2:ce:bb:4e:e2:
6a:f4:f4:c1:21:22:dc:73:26:4c:f5:d8:bb:f1:45:6c:77:a7:
e4:eb:12:e8:f7:93:e1:dd:4d:2b:78:e4:0f:d8:dc:69:80:de:
5e:46:de:a8:0b:a3:3a:f0:bb:ca:94:83:92:0e:81:90:e6:e3:
04:5e:eb:59:a9:ff:02:4e:05:46:57:9b:0a:5d:19:f6:34:e8:
99:f3:a4:14:d2:54:5a:c3:2a:69:67:ca:f7:51:ac:4a:12:bb:
8f:46:25:4a:bd:2a:ca:fd:4a:6a:14:73:91:51:cb:13:46:8f:
cd:51:d2:3d:17:b2:ca:d4:01:c7:ba:8d:1e:9f:37:a3:b0:4a:
dd:22:3a:f4:f4:22:f4:e4:8e:aa:ef:86:cc:db:71:f1:83:f5:
b9:16:96:a6:bf:9f:e5:d4:d3:97:ee:6c:ea:fe:c4:90:ca:13:
22:ee:7a:10:92:dc:5b:89:c4:52:62:11:a5:e1:20:ee:b3:39:
e9:7e:fc:47:0f:42:cf:fc:fc:85:ae:a0:0e:e4:ee:0f:48:24:
4f:54:23:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 12:28:35 2026 by rpki-client