Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/459396-de90-4cc8-a542-3e6e7cdef73e/1/G7Qd9-pn1O3-D60S99XOzYPhjZo.mft
File: G7Qd9-pn1O3-D60S99XOzYPhjZo.mft (raw, json)
Hash identifier: K/CjuMBSTnCYJ4Aq6fI1bUGShqwdxV7jvlb3PnvQ6bQ=
Subject key identifier: 2B:B0:09:57:E0:D1:5A:21:07:09:9A:9B:F9:FD:9D:A3:63:DE:2C:85
Authority key identifier: 1B:B4:1D:F7:EA:67:D4:ED:FE:0F:AD:12:F7:D5:CE:CD:83:E1:8D:9A
Certificate issuer: /CN=1bb41df7ea67d4edfe0fad12f7d5cecd83e18d9a
Certificate serial: 019CABA1E7926B0B5406A26C7C0288BF5F13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G7Qd9-pn1O3-D60S99XOzYPhjZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/459396-de90-4cc8-a542-3e6e7cdef73e/1/G7Qd9-pn1O3-D60S99XOzYPhjZo.mft
Manifest number: 0623
Signing time: Sun 01 Mar 2026 23:00:40 +0000
Manifest this update: Sun 01 Mar 2026 23:00:40 +0000
Manifest next update: Mon 02 Mar 2026 23:00:40 +0000
Files and hashes: 1: G7Qd9-pn1O3-D60S99XOzYPhjZo.crl (hash: FFowSW5+VGeebqaWOy77QlDhDmT3Lu7lU7RHIYaGFt4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/459396-de90-4cc8-a542-3e6e7cdef73e/1/G7Qd9-pn1O3-D60S99XOzYPhjZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/459396-de90-4cc8-a542-3e6e7cdef73e/1/G7Qd9-pn1O3-D60S99XOzYPhjZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/G7Qd9-pn1O3-D60S99XOzYPhjZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a1:e7:92:6b:0b:54:06:a2:6c:7c:02:88:bf:5f:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bb41df7ea67d4edfe0fad12f7d5cecd83e18d9a
Validity
Not Before: Mar 1 23:00:40 2026 GMT
Not After : Mar 2 23:00:40 2026 GMT
Subject: CN=2bb00957e0d15a2107099a9bf9fd9da363de2c85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a9:0b:d4:ea:5b:c3:30:0a:26:fa:b0:db:05:
79:c3:b6:b9:de:5a:a4:50:0e:30:3b:d3:3a:2c:e8:
f2:3c:f3:f7:bc:52:f5:5b:85:3a:b9:97:67:41:6b:
71:61:25:f2:03:f6:1c:de:f9:6c:c3:bc:9b:06:0b:
95:8c:ef:8f:b2:a7:35:61:63:5f:6d:9c:81:58:0e:
4f:b5:b0:92:ce:ec:9e:57:16:e1:95:a0:3b:d9:8b:
e6:f6:8b:99:e6:69:69:7a:bb:5e:70:e9:6d:1c:d1:
a0:81:0a:83:ba:0c:8c:c5:8e:bd:64:66:2c:0c:d7:
80:d6:b2:63:5c:24:da:43:a8:ca:70:4f:78:c2:dc:
76:e7:a5:ab:ea:9d:1a:5d:c2:10:12:fa:8a:c3:8e:
be:93:e5:70:f8:0a:7c:61:af:84:36:6e:d8:d7:27:
3d:76:75:f5:51:d6:5f:27:bb:86:b5:23:0e:c1:3d:
6d:82:a4:59:8b:cf:df:b4:a8:52:99:79:8a:e2:19:
91:26:54:72:2d:77:30:83:73:ab:89:92:e1:67:69:
3a:66:f4:de:5a:fb:e2:3b:c5:0c:c2:1c:26:a9:52:
d6:af:c4:5d:77:e7:41:1a:d5:05:42:4b:43:bd:7d:
e0:08:3e:3a:66:5d:7c:bd:bc:67:e8:92:10:02:33:
e1:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:B0:09:57:E0:D1:5A:21:07:09:9A:9B:F9:FD:9D:A3:63:DE:2C:85
X509v3 Authority Key Identifier:
keyid:1B:B4:1D:F7:EA:67:D4:ED:FE:0F:AD:12:F7:D5:CE:CD:83:E1:8D:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G7Qd9-pn1O3-D60S99XOzYPhjZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/459396-de90-4cc8-a542-3e6e7cdef73e/1/G7Qd9-pn1O3-D60S99XOzYPhjZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/459396-de90-4cc8-a542-3e6e7cdef73e/1/G7Qd9-pn1O3-D60S99XOzYPhjZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:0e:df:ae:98:54:07:c1:43:74:18:a3:6d:0c:df:7b:de:94:
5b:dc:96:ae:1b:83:28:30:32:14:2f:2c:0d:af:7d:b5:53:cf:
0e:13:6f:c9:c0:5c:dc:f5:23:0d:22:a6:e2:11:79:36:a6:d6:
c9:2f:be:e6:be:54:4e:05:5b:e1:63:19:80:25:fb:42:88:8f:
51:0d:c3:51:cd:85:eb:a6:2c:c2:dd:58:e7:7f:9f:bd:05:c7:
63:3d:97:a6:e0:5b:56:3d:a0:1f:49:77:27:b3:c0:23:ce:2a:
d1:48:4d:65:e1:b2:5b:9c:b0:ac:ee:fc:08:58:78:81:b3:25:
68:9f:c0:49:f4:03:a3:96:2f:5c:e3:43:e0:a5:92:29:98:f2:
18:7f:9f:a5:47:37:b0:5a:35:30:a4:c0:39:90:fd:cf:54:0f:
14:e6:bc:80:96:a0:1d:ab:45:6e:94:18:c0:ec:db:f1:ae:88:
3a:62:d8:84:17:c8:b4:e8:50:80:ca:24:7f:d2:51:6b:57:b2:
d1:f5:ef:94:15:fd:83:0c:c0:19:76:60:ff:5b:77:cb:e7:ee:
38:bc:91:75:4c:4d:67:62:3d:6b:dc:31:56:8f:39:0a:36:9f:
40:66:4d:a7:e6:94:46:79:60:5f:76:11:73:e3:8e:94:bd:91:
53:da:76:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:13:41 2026 by rpki-client