Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/453542-08b2-4399-bc5c-c756ae01fa8a/1/g2CIUSAjKNzl_AG_ndKSUgUw2f4.mft
File: g2CIUSAjKNzl_AG_ndKSUgUw2f4.mft (raw, json)
Hash identifier: fAeOCZm8D+yxoAgve+BVF235nA4uVJjF0ljoEmDTIHk=
Subject key identifier: 36:3E:57:1B:43:06:66:8B:9B:E7:74:E0:DF:DA:5C:F3:52:35:C6:1E
Authority key identifier: 83:60:88:51:20:23:28:DC:E5:FC:01:BF:9D:D2:92:52:05:30:D9:FE
Certificate issuer: /CN=83608851202328dce5fc01bf9dd292520530d9fe
Certificate serial: 019CAA5877352BE0C5D33451A53E14178C32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g2CIUSAjKNzl_AG_ndKSUgUw2f4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/453542-08b2-4399-bc5c-c756ae01fa8a/1/g2CIUSAjKNzl_AG_ndKSUgUw2f4.mft
Manifest number: 07F1
Signing time: Sun 01 Mar 2026 17:00:50 +0000
Manifest this update: Sun 01 Mar 2026 17:00:50 +0000
Manifest next update: Mon 02 Mar 2026 17:00:50 +0000
Files and hashes: 1: Ya4-DOHb6IMAOxmkcETIsWTPCOg.roa (hash: u4TLCuqpTYyL9fIrK/kr+oWhEP1P1uyD8bPrTE+F3k0=)
2: g2CIUSAjKNzl_AG_ndKSUgUw2f4.crl (hash: c+OkBD2p/fh7LdrCqqtlznLG9DLYVTcPjB//PfrNwC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/453542-08b2-4399-bc5c-c756ae01fa8a/1/g2CIUSAjKNzl_AG_ndKSUgUw2f4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/453542-08b2-4399-bc5c-c756ae01fa8a/1/g2CIUSAjKNzl_AG_ndKSUgUw2f4.mft
rsync://rpki.ripe.net/repository/DEFAULT/g2CIUSAjKNzl_AG_ndKSUgUw2f4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:77:35:2b:e0:c5:d3:34:51:a5:3e:14:17:8c:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83608851202328dce5fc01bf9dd292520530d9fe
Validity
Not Before: Mar 1 17:00:50 2026 GMT
Not After : Mar 2 17:00:50 2026 GMT
Subject: CN=363e571b4306668b9be774e0dfda5cf35235c61e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:7a:45:1b:b5:1b:94:aa:ee:17:42:3d:19:4b:
5e:c5:a4:a7:2b:95:19:1e:51:ec:17:6b:eb:09:3b:
7d:09:9b:53:56:6e:e5:50:a5:28:66:78:44:c7:6e:
73:fb:9a:06:b8:0b:36:ad:47:26:75:20:a0:24:5f:
eb:25:9c:99:a7:a6:79:57:a9:28:e4:44:1a:94:81:
11:d2:11:44:7a:28:7a:57:99:fe:3b:ed:56:fa:7f:
6b:c4:43:cf:27:77:c4:cb:f7:36:c2:6b:68:ef:d6:
a2:84:80:fd:5e:1f:da:5f:42:c4:88:f8:c5:c5:3a:
91:e0:05:8f:6c:7e:a1:9e:07:8b:00:01:b6:1f:33:
3f:fb:40:f3:c9:75:f6:c4:f8:45:c9:84:78:84:22:
31:91:41:81:65:98:4c:f5:b8:fe:a9:34:e2:1f:0f:
f6:04:9e:57:2c:3b:f5:6b:36:fc:b7:4b:e7:f2:e9:
55:7a:86:e9:f6:1c:7b:92:6a:7e:42:97:0d:98:5e:
49:83:23:37:07:a3:7e:ec:ee:22:0b:b5:44:54:8c:
4f:f8:45:14:b1:4a:4b:09:ad:d4:ac:ed:5f:1c:86:
79:03:91:3f:3c:a0:41:35:f3:b1:c4:a9:df:75:55:
ef:50:c0:28:18:5d:3e:4a:da:bb:83:c1:0d:80:95:
7c:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:3E:57:1B:43:06:66:8B:9B:E7:74:E0:DF:DA:5C:F3:52:35:C6:1E
X509v3 Authority Key Identifier:
keyid:83:60:88:51:20:23:28:DC:E5:FC:01:BF:9D:D2:92:52:05:30:D9:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2CIUSAjKNzl_AG_ndKSUgUw2f4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/453542-08b2-4399-bc5c-c756ae01fa8a/1/g2CIUSAjKNzl_AG_ndKSUgUw2f4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/453542-08b2-4399-bc5c-c756ae01fa8a/1/g2CIUSAjKNzl_AG_ndKSUgUw2f4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:56:47:4d:52:83:7c:cf:c6:19:8e:5b:9d:a4:df:75:01:0e:
4c:93:f1:b9:47:93:35:79:ba:8d:16:c5:fc:16:7b:db:93:8f:
25:99:fa:1c:27:0c:6f:24:70:79:39:cd:68:c7:ff:2a:cb:f2:
fa:30:36:ed:96:56:6c:f7:8b:1f:3f:51:a5:7d:49:78:b4:c4:
2c:e0:68:c2:e1:54:48:bb:09:83:19:46:62:09:fd:2d:85:5f:
60:97:b1:c8:22:65:cd:44:e5:a6:e9:c7:7d:ec:fd:a5:78:b1:
a8:1c:11:a0:d0:a3:47:69:37:f0:36:30:57:c8:02:30:5e:d3:
c8:57:af:00:cc:b5:1e:67:7b:fd:0d:39:e8:2b:69:36:c0:4c:
18:0f:fb:13:13:a3:45:e2:2b:bb:4f:f5:19:ad:30:8d:aa:02:
e4:34:8c:97:80:05:f8:70:de:90:16:e8:90:82:e2:ec:bb:44:
f6:27:2a:90:cf:09:54:d3:43:22:9d:84:0d:7d:c8:13:0f:59:
a5:8c:8d:22:63:93:a2:72:9a:4f:3f:22:34:cf:dd:6c:ae:00:
b3:1e:33:e1:1d:59:78:5e:a5:60:03:f6:7d:b7:b4:c5:c3:33:
e6:a8:96:2d:b2:ca:42:15:2f:34:a9:1b:13:ef:e2:a1:09:26:
94:fe:ec:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:58:42 2026 by rpki-client