Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/1e7b02-889b-4a53-a509-8ab5eb558473/1/G-vTPUzUVGXvpQ-qgk-4EsQXOic.mft
File: G-vTPUzUVGXvpQ-qgk-4EsQXOic.mft (raw, json)
Hash identifier: TRdNbEDfkZHdJgcgyaiMk5GD05bEZNFFnGpuOeyKYkI=
Subject key identifier: 6C:70:A5:B4:17:DC:6F:0B:CB:EB:72:7D:34:34:14:1C:C1:08:11:2F
Authority key identifier: 1B:EB:D3:3D:4C:D4:54:65:EF:A5:0F:AA:82:4F:B8:12:C4:17:3A:27
Certificate issuer: /CN=1bebd33d4cd45465efa50faa824fb812c4173a27
Certificate serial: 019CAD905C0D32EAB53E84701063EC8D19D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-vTPUzUVGXvpQ-qgk-4EsQXOic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/1e7b02-889b-4a53-a509-8ab5eb558473/1/G-vTPUzUVGXvpQ-qgk-4EsQXOic.mft
Manifest number: 17DA
Signing time: Mon 02 Mar 2026 08:00:44 +0000
Manifest this update: Mon 02 Mar 2026 08:00:44 +0000
Manifest next update: Tue 03 Mar 2026 08:00:44 +0000
Files and hashes: 1: G-vTPUzUVGXvpQ-qgk-4EsQXOic.crl (hash: XBfrhQf44HGfPYLY5dHrJKLF9KYOCCNHGnBGKqKrfrQ=)
2: eIPNgPUYQZlq-n_9mt6Q4q91rPk.roa (hash: DizOEdr2TMu6P8YAoF1vtJ1S55eopXRESZDog/i+PLg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/1e7b02-889b-4a53-a509-8ab5eb558473/1/G-vTPUzUVGXvpQ-qgk-4EsQXOic.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/1e7b02-889b-4a53-a509-8ab5eb558473/1/G-vTPUzUVGXvpQ-qgk-4EsQXOic.mft
rsync://rpki.ripe.net/repository/DEFAULT/G-vTPUzUVGXvpQ-qgk-4EsQXOic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 08:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:5c:0d:32:ea:b5:3e:84:70:10:63:ec:8d:19:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bebd33d4cd45465efa50faa824fb812c4173a27
Validity
Not Before: Mar 2 08:00:44 2026 GMT
Not After : Mar 3 08:00:44 2026 GMT
Subject: CN=6c70a5b417dc6f0bcbeb727d3434141cc108112f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:24:14:1c:26:25:26:18:0d:5b:f6:b0:68:6a:
06:65:aa:c7:dd:aa:29:00:4b:a2:48:34:b9:09:96:
24:94:39:a2:d7:bf:02:8a:28:e8:62:0c:5c:40:ea:
59:91:1e:1b:f2:e9:10:db:7f:ea:95:2b:b7:eb:3a:
e9:f6:21:08:72:4a:f4:37:26:e4:42:b0:e6:d4:3b:
5d:1b:c4:e6:f6:5f:95:c1:0e:d7:22:b9:e6:4d:cf:
39:97:a9:2e:b7:7b:e0:95:14:53:d0:ce:d7:09:4e:
ff:eb:d0:18:ae:cb:dd:e6:75:33:23:7a:ec:c6:63:
bc:35:fd:84:a8:ce:1b:5b:b5:70:f8:3e:17:c4:25:
5c:68:06:7c:b1:63:26:8e:e4:9b:25:83:13:28:71:
be:51:30:f6:b4:6f:76:37:18:01:87:46:7e:f6:d7:
5f:5d:00:bb:9e:3f:b1:d2:55:bd:fb:c5:c7:fa:b1:
20:a0:ef:eb:9f:1a:d1:83:9d:e1:41:cf:b1:2d:a6:
d2:28:47:b7:1c:d3:65:dc:2c:17:35:93:2a:6b:7a:
18:26:58:c7:47:4c:38:de:20:b2:3c:f7:ca:c5:f8:
1c:da:1e:59:bc:19:60:bf:77:2f:10:79:9f:d3:8f:
87:5a:6c:c7:cb:c4:5c:55:e9:c7:06:58:79:f1:75:
bf:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:70:A5:B4:17:DC:6F:0B:CB:EB:72:7D:34:34:14:1C:C1:08:11:2F
X509v3 Authority Key Identifier:
keyid:1B:EB:D3:3D:4C:D4:54:65:EF:A5:0F:AA:82:4F:B8:12:C4:17:3A:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-vTPUzUVGXvpQ-qgk-4EsQXOic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/1e7b02-889b-4a53-a509-8ab5eb558473/1/G-vTPUzUVGXvpQ-qgk-4EsQXOic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/1e7b02-889b-4a53-a509-8ab5eb558473/1/G-vTPUzUVGXvpQ-qgk-4EsQXOic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:50:65:60:1f:81:15:47:25:52:c3:31:8a:5e:83:04:3f:48:
e2:f1:a0:9c:f7:27:2d:1c:bd:48:09:3a:ea:61:86:37:e7:cf:
2a:94:cd:0f:8a:fd:87:4a:13:17:dd:f9:17:8f:77:c2:f8:b2:
22:3c:20:b5:2e:c3:c2:7f:bf:6d:a3:df:71:96:b5:ce:a9:ec:
88:07:c6:17:62:e8:bb:51:24:e2:49:8f:58:bb:67:6c:82:66:
2f:c2:0a:9f:bd:aa:bd:16:b1:5e:ae:8c:9c:b1:64:0e:7d:1d:
08:12:93:1f:77:1b:55:3e:44:d5:9f:e0:fd:6a:e5:e6:7c:47:
5c:58:1d:3e:c8:e5:3c:cd:b8:e2:ed:1e:15:e2:2a:ab:cc:4d:
c2:56:ec:26:21:0a:ef:fd:4e:e9:83:e6:91:c4:5d:ce:8e:cd:
27:6e:8d:41:c8:ac:5f:70:df:c1:fe:2a:fd:c5:25:95:44:fc:
dc:a8:2c:b1:61:c0:00:b8:c3:98:8b:c9:c6:97:57:fb:3b:fc:
d0:48:e3:5f:13:9c:1f:c4:5f:7d:26:a5:ad:4c:54:7f:e2:67:
d1:24:49:80:f0:ae:05:5c:da:86:66:76:f0:ab:07:0e:4e:34:
f2:35:93:4a:78:1f:23:50:ee:9c:17:6e:4c:59:a2:00:14:d1:
b1:3e:69:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:37:53 2026 by rpki-client