Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.mft
File: G2RtQs6J1Ak-Ssknp_I283pRq-I.mft (raw, json)
Hash identifier: Z3E3jyZ6Y7GeyDzaO9a3NxNU8mbzJ2Ot90tu3cSwNjU=
Subject key identifier: FE:2E:52:C9:A8:83:87:9D:10:3C:8F:44:35:07:BE:78:71:1E:2D:8A
Authority key identifier: 1B:64:6D:42:CE:89:D4:09:3E:4A:C9:27:A7:F2:36:F3:7A:51:AB:E2
Certificate issuer: /CN=1b646d42ce89d4093e4ac927a7f236f37a51abe2
Certificate serial: 019F10E588ACC562F59DBBA4CEA513D02AB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G2RtQs6J1Ak-Ssknp_I283pRq-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.mft
Manifest number: 11AB
Signing time: Mon 29 Jun 2026 01:01:45 +0000
Manifest this update: Mon 29 Jun 2026 01:01:45 +0000
Manifest next update: Tue 30 Jun 2026 01:01:45 +0000
Files and hashes: 1: G2RtQs6J1Ak-Ssknp_I283pRq-I.crl (hash: kfqiRiUYVQIcKgikYVtgPc0Yd3Vd2bBZvNEOp03tJUM=)
2: buasPl807dGAfqgw1urBhY4Km5w.roa (hash: PQav8NXXwoaYuBOPi54S+Cjky9Sn3BtCmVplgakM7xk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/G2RtQs6J1Ak-Ssknp_I283pRq-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 01:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:10:e5:88:ac:c5:62:f5:9d:bb:a4:ce:a5:13:d0:2a:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b646d42ce89d4093e4ac927a7f236f37a51abe2
Validity
Not Before: Jun 29 01:01:45 2026 GMT
Not After : Jun 30 01:01:45 2026 GMT
Subject: CN=fe2e52c9a883879d103c8f443507be78711e2d8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:04:85:5f:c4:41:a3:4c:1e:a6:a9:f8:3e:db:
52:c7:ee:87:45:c3:87:37:d4:22:cb:54:ce:6b:41:
82:44:a7:7c:63:92:ff:23:56:8c:fd:4c:fc:54:e8:
0d:7b:9f:d8:e9:fc:9b:a6:c3:2d:a3:ee:bf:a6:a8:
40:c9:1f:ab:15:05:63:c2:72:98:98:1d:8e:33:36:
67:f4:41:c9:01:a0:43:03:b7:ea:63:55:e6:d4:ea:
ca:8a:34:4a:79:60:e4:6a:89:1f:5e:32:48:d3:cd:
7e:fc:ae:e7:7e:d0:d0:e9:7a:45:32:a2:38:60:e2:
b9:f6:8b:55:06:ba:44:ae:2a:bb:26:97:a0:a7:61:
5b:01:80:03:17:35:03:82:ca:88:73:48:e0:39:cc:
02:bc:51:39:d3:37:60:4c:ae:ce:8c:36:f3:6e:af:
5f:a9:45:81:bb:52:7e:66:8c:87:6f:a1:4b:e9:8c:
73:c4:08:91:df:3a:94:96:e4:81:3f:29:ea:56:a8:
9c:22:85:73:8d:4b:c9:d2:f8:1d:2c:06:c2:52:bc:
7d:2a:75:52:f0:69:b8:46:0b:4f:38:b4:64:fe:6c:
b9:09:ee:dc:9f:4d:cd:ec:44:58:d9:f0:d7:41:17:
b9:04:77:a7:87:a6:a1:0c:1e:c4:67:62:24:f8:d2:
b1:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:2E:52:C9:A8:83:87:9D:10:3C:8F:44:35:07:BE:78:71:1E:2D:8A
X509v3 Authority Key Identifier:
keyid:1B:64:6D:42:CE:89:D4:09:3E:4A:C9:27:A7:F2:36:F3:7A:51:AB:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2RtQs6J1Ak-Ssknp_I283pRq-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:f9:9e:b0:8f:ea:54:e2:a1:01:21:0d:28:11:31:ab:3d:ba:
10:05:f7:4f:34:d2:83:f2:2e:5b:af:17:e8:bc:05:ba:a4:67:
1b:8c:b4:aa:79:14:7f:41:9d:e6:c0:89:27:66:93:f7:bf:7a:
39:a3:df:07:1e:c9:5d:b0:8c:82:7a:9d:1b:d2:07:fd:c4:4e:
91:47:1c:15:ba:90:76:9e:d6:59:57:44:6a:7b:f0:32:21:42:
8e:a7:df:ab:95:e8:88:69:c6:f8:e0:07:6b:a3:f0:ad:20:53:
ea:86:e0:67:45:e7:e5:05:d2:67:8e:21:f4:f0:c5:ad:f6:b0:
bb:be:5a:e8:5b:fc:50:1c:2a:d9:34:c9:e3:31:cd:34:e2:59:
15:d1:00:f3:d3:bc:83:fb:34:6b:1b:6c:fa:15:9b:2a:17:54:
67:a4:12:72:73:40:12:04:80:a4:63:23:e2:3f:1c:8c:1f:33:
01:a6:48:dc:33:e4:c0:b7:e6:93:94:06:38:6c:c2:0c:e9:96:
9a:df:5c:88:f3:c7:c8:25:3a:11:e9:84:49:a3:64:cd:9a:16:
ca:c1:5e:2c:d8:c3:0b:8e:2b:74:be:1c:f3:4e:a1:d0:5a:2c:
3f:4b:58:5d:6a:de:de:0a:04:d4:85:be:0a:16:c6:b8:fb:30:
f0:8a:05:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:38:00 2026 by rpki-client