Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/a56723-d37c-417b-a8a1-6e22bf436304/1/G_5rmg5omKei6dhNPb9jJ7RT5mI.mft
File: G_5rmg5omKei6dhNPb9jJ7RT5mI.mft (raw, json)
Hash identifier: jT730RJHE6aW43qdY02y66AILjuRxXZeVXE9ihhV1JE=
Subject key identifier: 5D:46:54:EC:7B:BC:78:D1:E9:8D:BC:FD:0B:2E:A9:27:E1:8B:27:B8
Authority key identifier: 1B:FE:6B:9A:0E:68:98:A7:A2:E9:D8:4D:3D:BF:63:27:B4:53:E6:62
Certificate issuer: /CN=1bfe6b9a0e6898a7a2e9d84d3dbf6327b453e662
Certificate serial: 019CAA8FD0DABE905320C04F8679681B58A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G_5rmg5omKei6dhNPb9jJ7RT5mI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/a56723-d37c-417b-a8a1-6e22bf436304/1/G_5rmg5omKei6dhNPb9jJ7RT5mI.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 18:01:17 +0000
Manifest this update: Sun 01 Mar 2026 18:01:17 +0000
Manifest next update: Mon 02 Mar 2026 18:01:17 +0000
Files and hashes: 1: G_5rmg5omKei6dhNPb9jJ7RT5mI.crl (hash: QrM1X/bHviK8/tP+g7qDqUcD4wdroqipjRvPU+dq/7U=)
2: POtSiaRU3J6NN-3FcEzbyyc3iz4.roa (hash: xQmKcGL1aOnWYp2nu+qGyN+OtS+NUIMwhRaeCUEKn08=)
3: TKnfOm4ncEvg1o32_XggY8G_M1w.roa (hash: 0iZMIhG/WHr4eSkp/IKOXtdgHPLNekvLpZ/qpsVoNRs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/a56723-d37c-417b-a8a1-6e22bf436304/1/G_5rmg5omKei6dhNPb9jJ7RT5mI.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/a56723-d37c-417b-a8a1-6e22bf436304/1/G_5rmg5omKei6dhNPb9jJ7RT5mI.mft
rsync://rpki.ripe.net/repository/DEFAULT/G_5rmg5omKei6dhNPb9jJ7RT5mI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:d0:da:be:90:53:20:c0:4f:86:79:68:1b:58:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bfe6b9a0e6898a7a2e9d84d3dbf6327b453e662
Validity
Not Before: Mar 1 18:01:17 2026 GMT
Not After : Mar 2 18:01:17 2026 GMT
Subject: CN=5d4654ec7bbc78d1e98dbcfd0b2ea927e18b27b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:80:5b:76:38:40:e3:8d:cb:59:96:91:9a:02:
48:f8:50:72:c6:8c:9f:64:65:6a:74:50:e7:18:4a:
45:ce:6f:5d:a6:c2:d8:f5:89:ff:e7:02:6a:81:fb:
84:85:bc:04:07:91:13:ca:7c:95:17:c3:99:bc:4c:
1c:0d:cb:87:4e:12:7e:d8:a4:e6:a5:2d:0f:df:6b:
e5:0d:7d:c6:b8:aa:eb:1c:d7:92:ce:09:b5:88:18:
dd:3f:31:61:0d:c9:e5:48:8d:11:ee:ea:ce:4a:ef:
2e:7a:4d:b8:b8:a9:67:c8:c0:bd:1d:af:bd:be:7f:
ff:b9:3a:73:04:50:29:35:a4:51:06:e8:56:a6:9a:
32:76:f7:5f:1e:a1:0e:3f:67:6c:d2:97:05:20:74:
45:f0:b8:7c:67:bc:d2:c4:ee:f8:d2:d4:c8:b7:88:
d2:15:43:c7:ce:e4:32:6c:b7:d9:c7:3e:a2:d6:b1:
3d:4f:f0:90:2d:88:96:68:10:2a:13:38:98:b1:18:
18:91:cb:b6:f4:5b:70:68:e9:85:15:0f:aa:7f:41:
5b:d7:17:85:77:df:f6:ed:a5:ca:78:a5:76:ac:af:
f3:25:e8:c4:1e:4a:b6:89:0d:a6:5b:e4:51:a1:c0:
62:75:fb:e2:b6:be:70:4a:29:81:53:d6:74:77:1a:
fe:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:46:54:EC:7B:BC:78:D1:E9:8D:BC:FD:0B:2E:A9:27:E1:8B:27:B8
X509v3 Authority Key Identifier:
keyid:1B:FE:6B:9A:0E:68:98:A7:A2:E9:D8:4D:3D:BF:63:27:B4:53:E6:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G_5rmg5omKei6dhNPb9jJ7RT5mI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/a56723-d37c-417b-a8a1-6e22bf436304/1/G_5rmg5omKei6dhNPb9jJ7RT5mI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/a56723-d37c-417b-a8a1-6e22bf436304/1/G_5rmg5omKei6dhNPb9jJ7RT5mI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:b9:3d:1e:8e:79:c3:4f:93:6b:08:c4:b3:4c:7e:e8:d3:6e:
25:e4:13:54:64:51:3e:55:84:d4:c3:29:26:c8:4e:87:df:51:
7a:1c:a6:db:dc:d3:32:1d:80:7c:1c:56:e7:90:d1:ef:00:0f:
a4:81:91:c7:32:33:15:28:25:0d:80:97:75:e7:16:c9:7f:a9:
0f:c2:72:55:8f:64:7b:e6:44:50:8f:8d:24:fb:c6:f6:26:d0:
7e:74:a3:85:57:bc:90:3e:49:f0:f0:a6:01:34:75:be:7b:ec:
67:3d:3a:50:f0:f2:27:f5:66:bc:a4:25:10:00:99:87:3b:b1:
9e:5b:66:b1:26:a0:e7:20:c0:8a:62:4f:19:8b:fb:a3:3f:0c:
7c:2b:34:1e:37:40:55:e0:6f:59:c2:a7:05:d0:da:18:61:78:
32:39:ce:f0:5c:1b:5d:fa:c8:08:48:f2:be:1e:85:55:24:71:
aa:67:b9:d2:17:38:96:ef:58:04:aa:f1:fa:d8:9f:5a:3e:2b:
3b:ad:23:ae:30:42:10:ba:d3:e9:a2:c6:36:5d:58:35:be:43:
6d:7d:de:9d:c3:bb:4e:3e:28:85:6b:99:9c:18:6a:a5:0f:e9:
bb:d9:3f:d1:eb:13:c9:80:f9:97:fd:41:1c:53:8e:b8:39:0f:
57:e4:e5:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:07:07 2026 by rpki-client