Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/60447d-d305-4dea-9daa-26837038c688/1/G7yEG3eaK7LCio2u4rLRDVp8NNU.mft
File: G7yEG3eaK7LCio2u4rLRDVp8NNU.mft (raw, json)
Hash identifier: /CV5BWW5TL45DW58k4p0idxqy/ZlqDoYazMgJOQIJiQ=
Subject key identifier: 4A:C9:F5:AB:B9:5F:CC:5B:B2:76:A4:1C:8B:84:15:D7:FD:8B:87:48
Authority key identifier: 1B:BC:84:1B:77:9A:2B:B2:C2:8A:8D:AE:E2:B2:D1:0D:5A:7C:34:D5
Certificate issuer: /CN=1bbc841b779a2bb2c28a8daee2b2d10d5a7c34d5
Certificate serial: 019CAB340373B9710DA0981B0A7F336C360C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G7yEG3eaK7LCio2u4rLRDVp8NNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/60447d-d305-4dea-9daa-26837038c688/1/G7yEG3eaK7LCio2u4rLRDVp8NNU.mft
Manifest number: 1848
Signing time: Sun 01 Mar 2026 21:00:38 +0000
Manifest this update: Sun 01 Mar 2026 21:00:38 +0000
Manifest next update: Mon 02 Mar 2026 21:00:38 +0000
Files and hashes: 1: G7yEG3eaK7LCio2u4rLRDVp8NNU.crl (hash: O85NfPeW9xLB7kqGhQE0CRtBMA2fbKRJLCyREcMVExU=)
2: deE75SevBPoLBBV-kYApKEjzkBY.roa (hash: iHy3btB3fLg5S2KEubTWq3Yf0aElaQLO6vxuJIQCC3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/60447d-d305-4dea-9daa-26837038c688/1/G7yEG3eaK7LCio2u4rLRDVp8NNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/60447d-d305-4dea-9daa-26837038c688/1/G7yEG3eaK7LCio2u4rLRDVp8NNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/G7yEG3eaK7LCio2u4rLRDVp8NNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:03:73:b9:71:0d:a0:98:1b:0a:7f:33:6c:36:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bbc841b779a2bb2c28a8daee2b2d10d5a7c34d5
Validity
Not Before: Mar 1 21:00:38 2026 GMT
Not After : Mar 2 21:00:38 2026 GMT
Subject: CN=4ac9f5abb95fcc5bb276a41c8b8415d7fd8b8748
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f6:a4:09:90:e9:82:29:cc:c6:09:04:70:34:
f1:71:4f:91:ae:3e:90:4b:19:b8:ae:25:c1:5a:a2:
14:49:e9:54:3c:64:75:8e:fb:0d:ed:7d:5d:ec:c3:
2a:50:2f:3a:b9:b2:90:8c:01:5e:f2:82:c8:ba:65:
bf:e7:9b:a3:49:98:c7:da:85:fb:d4:89:2f:30:98:
2e:6a:2d:ba:97:ae:21:81:e0:19:f5:6b:f1:97:8b:
76:82:08:1a:7a:02:e8:ab:6a:85:6b:bd:0f:9a:d9:
c0:bb:97:4b:45:d5:64:2e:3b:ec:9c:14:c0:75:a6:
7c:d5:89:a0:16:e3:27:43:59:5a:6f:e2:9f:ad:d5:
5e:1d:a6:8b:98:fd:4d:c9:dc:03:1a:94:93:aa:c9:
81:97:38:74:85:e7:72:f7:75:91:2f:40:7a:6b:53:
a1:c5:e0:60:16:c9:ad:fd:b9:d7:02:3f:a6:43:25:
48:72:76:ab:a0:a0:19:1c:61:49:63:07:1c:5f:b0:
f2:20:2c:71:2f:52:a0:4a:61:75:fb:52:d9:ed:3a:
03:28:61:e3:38:80:86:df:13:33:53:59:5f:74:39:
6f:3e:23:fd:a4:2b:5d:c7:5d:5c:5d:1f:85:d6:fb:
5b:bc:1e:e9:72:3c:d8:dd:81:f0:ca:3b:8a:90:70:
49:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:C9:F5:AB:B9:5F:CC:5B:B2:76:A4:1C:8B:84:15:D7:FD:8B:87:48
X509v3 Authority Key Identifier:
keyid:1B:BC:84:1B:77:9A:2B:B2:C2:8A:8D:AE:E2:B2:D1:0D:5A:7C:34:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G7yEG3eaK7LCio2u4rLRDVp8NNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/60447d-d305-4dea-9daa-26837038c688/1/G7yEG3eaK7LCio2u4rLRDVp8NNU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/60447d-d305-4dea-9daa-26837038c688/1/G7yEG3eaK7LCio2u4rLRDVp8NNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:09:96:14:4b:68:4a:cd:bf:19:e9:73:ba:ad:a2:1f:36:e2:
c0:d4:55:14:f3:f1:5a:2c:ea:26:17:bb:5d:40:14:f2:d2:c7:
ae:3c:63:d7:02:aa:2a:72:aa:cf:9c:73:20:e1:b4:07:8c:fc:
71:ce:ad:29:39:cb:0f:d1:0a:f7:41:ba:bc:51:a4:77:90:74:
6e:ca:7a:2b:3e:b4:55:79:f7:49:0c:55:bc:41:9c:c4:08:88:
14:2d:16:fa:47:a8:e1:4d:71:ab:bb:c5:9f:77:90:b4:75:1f:
9d:14:51:c2:2d:5e:b4:6d:44:62:bb:ab:27:8e:cf:86:d0:a8:
d0:c9:96:c0:2d:80:d2:c1:ea:cd:63:63:ca:bb:ae:55:a5:19:
9b:99:bb:de:f0:c8:9e:2c:9d:70:05:20:f8:2a:f8:e6:37:a7:
63:ed:c1:53:95:e0:2a:41:17:a7:65:32:73:a3:9a:d5:86:c1:
7e:32:8b:b0:16:ff:be:a9:94:e0:57:04:68:93:ad:18:91:cf:
c8:58:a5:ef:39:38:5b:01:81:e3:29:60:d4:c2:5f:30:bb:0f:
b4:ae:79:b4:cf:8a:d8:00:91:74:16:74:2d:bd:aa:27:5d:a6:
da:37:29:eb:ce:5f:bb:c0:be:6c:30:0e:50:1d:20:22:d7:ad:
9e:17:d3:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:27:24 2026 by rpki-client