Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/d8b0c3-3f70-43db-85a4-5be1202367e9/1/G2pafunSGn3UW7v_9DGzZN6gta4.mft
File: G2pafunSGn3UW7v_9DGzZN6gta4.mft (raw, json)
Hash identifier: QB7nLA1QZsKJpkdhhTZw3245XlBiGcMvPUjNFnPIKHk=
Subject key identifier: 69:FE:A9:1C:4E:26:80:D8:55:DC:A7:11:C3:DA:B5:42:B9:63:D6:3D
Authority key identifier: 1B:6A:5A:7E:E9:D2:1A:7D:D4:5B:BB:FF:F4:31:B3:64:DE:A0:B5:AE
Certificate issuer: /CN=1b6a5a7ee9d21a7dd45bbbfff431b364dea0b5ae
Certificate serial: 019CAD22BF42BE27ECB0889C48FE00CC492B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G2pafunSGn3UW7v_9DGzZN6gta4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/d8b0c3-3f70-43db-85a4-5be1202367e9/1/G2pafunSGn3UW7v_9DGzZN6gta4.mft
Manifest number: 0A73
Signing time: Mon 02 Mar 2026 06:01:01 +0000
Manifest this update: Mon 02 Mar 2026 06:01:01 +0000
Manifest next update: Tue 03 Mar 2026 06:01:01 +0000
Files and hashes: 1: G2pafunSGn3UW7v_9DGzZN6gta4.crl (hash: VeFZBzQCIlnAMg4EPY726aVk+Uj8sCo/8gsMNDkES5M=)
2: tjiTHEP-kK7YvaF4jOv_5AENFR8.roa (hash: +t1GaH9nJ8B0HL8q2iIaAV18s/F2KC1qzK08FxWPKP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/d8b0c3-3f70-43db-85a4-5be1202367e9/1/G2pafunSGn3UW7v_9DGzZN6gta4.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/d8b0c3-3f70-43db-85a4-5be1202367e9/1/G2pafunSGn3UW7v_9DGzZN6gta4.mft
rsync://rpki.ripe.net/repository/DEFAULT/G2pafunSGn3UW7v_9DGzZN6gta4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:bf:42:be:27:ec:b0:88:9c:48:fe:00:cc:49:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b6a5a7ee9d21a7dd45bbbfff431b364dea0b5ae
Validity
Not Before: Mar 2 06:01:01 2026 GMT
Not After : Mar 3 06:01:01 2026 GMT
Subject: CN=69fea91c4e2680d855dca711c3dab542b963d63d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:73:43:5c:a8:9b:2a:e5:5e:c7:19:a8:e8:25:
1d:a4:ea:2f:92:62:05:f5:1c:d4:9f:f9:e2:c6:2e:
59:5a:3b:8a:4d:ae:4e:72:17:d7:14:a0:71:0f:cc:
f4:2a:ed:bb:e5:0b:82:d4:ef:36:40:c5:e2:5e:11:
8e:eb:cf:5b:28:d5:00:e2:d9:45:e6:ab:a9:13:bd:
e5:ea:00:69:74:c8:15:f8:3c:f4:2d:1e:db:3b:30:
d3:1a:ec:28:ac:18:10:58:cd:61:3e:49:7a:d6:14:
d0:0e:fb:a6:fe:88:ab:ca:1b:30:7f:8a:a6:e8:66:
0b:dd:a8:5d:e0:75:ad:5c:9d:56:7e:3b:8f:87:bf:
7d:7b:94:27:95:c2:53:cb:ac:33:dc:4f:3f:a2:39:
16:a1:1c:43:98:17:32:9f:64:2c:29:00:4d:5a:93:
3e:5a:9f:44:24:39:ba:b9:65:77:c8:61:b4:c6:c8:
9a:ab:87:e5:c4:4f:93:2c:aa:c7:4f:eb:83:b0:c5:
c8:70:11:dc:d0:a7:7e:33:2d:98:cf:61:57:f3:73:
fe:9c:57:97:64:57:07:69:b6:c1:0a:60:e7:c2:73:
63:80:05:82:23:07:09:2f:80:b6:6e:ba:a2:86:32:
be:c6:5d:37:29:2c:ae:eb:12:ad:5d:e2:30:7f:0c:
92:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:FE:A9:1C:4E:26:80:D8:55:DC:A7:11:C3:DA:B5:42:B9:63:D6:3D
X509v3 Authority Key Identifier:
keyid:1B:6A:5A:7E:E9:D2:1A:7D:D4:5B:BB:FF:F4:31:B3:64:DE:A0:B5:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2pafunSGn3UW7v_9DGzZN6gta4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/d8b0c3-3f70-43db-85a4-5be1202367e9/1/G2pafunSGn3UW7v_9DGzZN6gta4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/d8b0c3-3f70-43db-85a4-5be1202367e9/1/G2pafunSGn3UW7v_9DGzZN6gta4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:9a:e2:4b:ed:87:56:fe:5f:76:b3:8f:7c:8e:d3:e1:f7:63:
fa:7f:76:3e:6a:e3:ca:06:c4:f9:f2:92:76:7b:37:7b:fe:5a:
b3:b0:3c:c2:69:cc:75:5f:eb:a5:c8:e2:22:9f:42:a5:f2:7c:
90:2e:d0:25:7e:d7:d5:90:bf:d1:6b:68:c0:2c:64:4b:ae:cc:
92:54:e6:a1:10:c8:04:37:7d:0d:a9:d1:58:9c:aa:ec:46:1d:
c4:8b:0d:04:f1:13:7a:02:30:30:0e:da:f7:ad:dd:38:fb:d0:
4c:cd:b9:e1:4f:fa:69:fd:85:fc:66:67:b5:71:d0:ee:a2:c9:
67:c0:65:0b:c3:51:bf:8c:4a:d4:ab:89:2c:9a:11:2a:ef:d6:
70:3e:9e:1a:a6:bd:a7:ac:d4:08:a8:1f:84:e4:3c:90:e4:b0:
8b:28:cc:aa:69:16:90:ba:40:8d:d4:54:76:d7:38:9e:c3:af:
42:79:bc:9e:b7:64:00:65:d3:27:8f:ed:7c:0b:f7:3b:4d:68:
46:41:3e:55:db:43:eb:c4:e0:6c:54:59:16:b0:26:4e:92:03:
79:a4:32:7c:8e:dc:91:86:11:f0:9b:74:dc:af:6c:b7:85:e9:
01:30:c4:da:98:ed:cc:7f:2c:65:82:ed:77:fa:63:4c:6e:2c:
2a:8b:87:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:49:03 2026 by rpki-client