Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.mft
File: G2hlYSYZg3PQeIa_Srj7BrkAZ4A.mft (raw, json)
Hash identifier: uP1wAF1uz8mbmNPECMrMWcawiKiRUCXR8nk/aM6o+qo=
Subject key identifier: F4:A8:E3:02:8D:AF:D6:BE:C3:76:44:A7:C8:7E:C9:B2:17:D7:D3:73
Authority key identifier: 1B:68:65:61:26:19:83:73:D0:78:86:BF:4A:B8:FB:06:B9:00:67:80
Certificate issuer: /CN=1b68656126198373d07886bf4ab8fb06b9006780
Certificate serial: 019F85321763EDA42902C456FFFF243D3A58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.mft
Manifest number: 19C2
Signing time: Tue 21 Jul 2026 15:01:20 +0000
Manifest this update: Tue 21 Jul 2026 15:01:20 +0000
Manifest next update: Wed 22 Jul 2026 15:01:20 +0000
Files and hashes: 1: AdqGNGTNFT1rSz03F0HVwK9B37I.roa (hash: cI5ji7V4dg8v9ui9zXXCNsMNEyJTysTdpdklDgc65jE=)
2: G2hlYSYZg3PQeIa_Srj7BrkAZ4A.crl (hash: aaCqcfWNb5vIcPMfNSajna4Kq3C9rzOc+KXsn1Az4Tc=)
3: SiR8FHHKdbXqmwMkjZZOq7HZtxo.roa (hash: mkRGoCYQs5pO/fqORGXARxwk0SLVCsNlvRMucJrxHow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.mft
rsync://rpki.ripe.net/repository/DEFAULT/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:32:17:63:ed:a4:29:02:c4:56:ff:ff:24:3d:3a:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b68656126198373d07886bf4ab8fb06b9006780
Validity
Not Before: Jul 21 15:01:20 2026 GMT
Not After : Jul 22 15:01:20 2026 GMT
Subject: CN=f4a8e3028dafd6bec37644a7c87ec9b217d7d373
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:9f:5f:79:81:52:d8:44:6b:fa:f1:bf:0d:4f:
51:fb:39:40:ea:c9:34:21:d2:91:d7:b1:3f:f6:bf:
31:ea:fd:27:db:5d:bc:4f:e2:f2:9d:32:34:54:6b:
79:34:01:83:93:c5:79:f4:72:d9:99:bc:19:4c:14:
97:2c:4d:40:e0:e3:86:00:9d:d8:3f:48:ca:36:49:
9a:b9:92:5d:51:ff:0d:86:20:8e:60:91:58:57:53:
27:80:30:41:c9:8f:ea:15:e2:99:d8:6f:1f:50:c8:
38:87:32:94:8d:06:57:e1:48:98:fd:5e:0f:ef:bc:
5a:2d:40:84:ff:6e:26:31:a9:96:ea:56:0c:f4:54:
cd:a7:6e:5a:ca:7a:89:d2:50:d6:15:e7:e6:5b:f8:
48:a6:24:fd:03:20:4e:3e:56:48:98:cb:8e:5c:c0:
d0:14:37:67:15:6a:6f:ba:ad:b0:b6:24:c3:11:60:
54:6f:57:6d:fe:34:0e:62:37:d4:36:8e:c5:ad:d7:
b0:f6:2f:f4:c0:8a:e9:85:a7:a5:c8:19:d0:e1:c6:
25:81:27:06:ca:46:2a:98:8c:7c:40:5a:1b:5e:27:
53:0d:92:31:d1:51:74:ff:f6:dc:a8:c4:e6:fc:ff:
50:cc:53:32:05:ca:c1:84:6e:88:eb:0b:98:07:5d:
86:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:A8:E3:02:8D:AF:D6:BE:C3:76:44:A7:C8:7E:C9:B2:17:D7:D3:73
X509v3 Authority Key Identifier:
keyid:1B:68:65:61:26:19:83:73:D0:78:86:BF:4A:B8:FB:06:B9:00:67:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:a9:84:39:4f:c9:1d:78:6f:32:63:31:9d:a6:35:78:c4:d9:
ad:16:62:e6:08:79:5a:ab:78:93:28:30:28:08:49:2d:52:b4:
4b:9e:de:0a:23:2a:da:21:5f:d3:6d:03:fe:25:55:c5:ab:f8:
5c:ec:38:7c:85:c0:08:47:87:d7:7c:24:6f:5e:20:88:8e:58:
b6:b3:f8:ad:20:c7:d3:02:d7:bd:de:c8:96:6d:53:89:ae:ef:
d0:9c:93:ab:f2:b5:09:03:bc:a8:7c:ed:a1:3a:b4:9a:ca:24:
01:8a:07:f7:80:f6:a7:15:5e:50:69:e6:a3:fb:0a:84:45:c2:
b0:18:2a:0c:25:9d:06:d4:1c:3c:97:3f:9b:33:b8:d9:6f:f5:
af:07:f2:5d:ed:03:bf:01:e7:92:9c:29:cd:dc:7c:57:27:3f:
39:85:c1:10:1a:36:87:f2:30:96:22:b5:3a:84:a8:66:9f:53:
ba:29:fe:a9:aa:f6:40:97:33:49:e2:ce:cf:b3:91:07:d6:3f:
dc:84:71:dc:cc:8b:a5:bd:7b:81:6a:d1:20:fb:f0:ee:df:d3:
a0:d4:f3:d1:64:cc:6f:15:76:ad:23:f3:7c:1a:df:66:84:e4:
d1:d2:09:50:42:b0:c9:7b:e6:02:0c:19:a7:7b:39:b8:60:0c:
22:1e:5a:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:42:11 2026 by rpki-client