
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/c8a404-5e76-4ef4-bb07-026c26b5d395/1/G04-M_1PbZy08TyiI3HjCzbPp3Y.mft
File: G04-M_1PbZy08TyiI3HjCzbPp3Y.mft (raw, json)
Hash identifier: L3SSxdNfv2ezmkrqv450XdU6E0K6tYQnqPMcbQW2yyU=
Subject key identifier: B6:C6:21:95:D0:B5:65:19:14:64:40:A2:1A:CC:FB:B4:FA:C2:08:DA
Authority key identifier: 1B:4E:3E:33:FD:4F:6D:9C:B4:F1:3C:A2:23:71:E3:0B:36:CF:A7:76
Certificate issuer: /CN=1b4e3e33fd4f6d9cb4f13ca22371e30b36cfa776
Certificate serial: 019CABD9891F8B3354FBE139CC16B0CC73BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G04-M_1PbZy08TyiI3HjCzbPp3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/c8a404-5e76-4ef4-bb07-026c26b5d395/1/G04-M_1PbZy08TyiI3HjCzbPp3Y.mft
Manifest number: 1842
Signing time: Mon 02 Mar 2026 00:01:26 +0000
Manifest this update: Mon 02 Mar 2026 00:01:26 +0000
Manifest next update: Tue 03 Mar 2026 00:01:26 +0000
Files and hashes: 1: G04-M_1PbZy08TyiI3HjCzbPp3Y.crl (hash: LiO/IMi5m0pxSSJkLiqona83GitLGGK/EQXG8OJNGUc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/c8a404-5e76-4ef4-bb07-026c26b5d395/1/G04-M_1PbZy08TyiI3HjCzbPp3Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/c8a404-5e76-4ef4-bb07-026c26b5d395/1/G04-M_1PbZy08TyiI3HjCzbPp3Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/G04-M_1PbZy08TyiI3HjCzbPp3Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:89:1f:8b:33:54:fb:e1:39:cc:16:b0:cc:73:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b4e3e33fd4f6d9cb4f13ca22371e30b36cfa776
Validity
Not Before: Mar 2 00:01:26 2026 GMT
Not After : Mar 3 00:01:26 2026 GMT
Subject: CN=b6c62195d0b56519146440a21accfbb4fac208da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5f:de:bc:83:7f:2b:db:a6:a6:f6:af:bc:53:
59:fa:ee:8d:4a:12:9c:44:81:d0:7b:33:1f:e1:64:
b0:8b:b8:84:1c:96:55:e7:08:8a:02:7b:cd:29:7d:
44:7a:e4:c5:69:57:b2:13:24:40:57:a0:ee:bb:24:
31:86:7a:24:28:a6:ef:e4:9b:67:24:6f:24:d0:96:
48:18:c4:0c:87:6f:99:28:36:41:8d:76:af:72:7d:
a6:b2:3d:95:ac:fd:11:16:48:cc:7b:d9:b5:1d:06:
61:2a:3b:74:0e:f3:a8:82:45:11:5a:3d:50:1d:39:
a8:82:39:0e:3f:4d:90:26:2e:e4:06:4e:5d:60:a4:
4d:6e:ff:29:ea:af:c7:bd:6d:33:f9:c0:98:a9:48:
83:1c:12:f1:2d:fc:94:08:d9:db:68:40:bc:ff:8b:
bc:f3:3f:89:67:f9:af:0c:9e:5f:1a:30:a6:a0:67:
f7:08:7b:32:98:1a:56:89:47:65:33:34:f8:46:39:
03:b6:82:c2:28:43:d5:9c:5c:78:88:16:53:08:24:
03:9d:2e:ca:5e:80:0a:93:a7:5f:f5:a1:7d:8f:e4:
31:57:f1:d1:be:02:9b:a4:39:9e:7f:35:d6:7c:41:
07:bb:89:6f:23:a5:00:8d:bf:28:66:4b:0d:81:e3:
97:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:C6:21:95:D0:B5:65:19:14:64:40:A2:1A:CC:FB:B4:FA:C2:08:DA
X509v3 Authority Key Identifier:
keyid:1B:4E:3E:33:FD:4F:6D:9C:B4:F1:3C:A2:23:71:E3:0B:36:CF:A7:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G04-M_1PbZy08TyiI3HjCzbPp3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c8a404-5e76-4ef4-bb07-026c26b5d395/1/G04-M_1PbZy08TyiI3HjCzbPp3Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c8a404-5e76-4ef4-bb07-026c26b5d395/1/G04-M_1PbZy08TyiI3HjCzbPp3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:0d:85:45:b9:ee:10:6e:e7:03:9a:48:10:8d:86:ae:62:a4:
a2:6e:b6:ed:a5:40:44:4f:18:e4:da:c2:ef:7a:8a:4a:00:74:
95:ff:e5:fb:4c:71:0c:d6:27:e0:0e:1b:49:85:63:eb:dd:68:
2a:fa:ff:32:5a:42:ba:25:b2:60:80:39:e2:4f:d2:1f:ea:16:
15:23:08:69:17:cc:79:3b:31:66:e7:01:53:9c:45:6e:08:fb:
c4:c4:a7:0d:a2:32:97:ad:f2:45:f8:9a:c0:59:26:21:65:8f:
7c:f6:b5:20:06:22:fe:57:ba:c3:8f:bc:27:3e:b2:7b:6b:01:
1a:99:1e:5d:a7:0a:31:dc:d0:af:f5:7e:a3:9d:f7:4b:fb:4f:
a0:84:ed:93:40:40:5a:60:f8:ac:d2:73:45:cf:da:93:a6:96:
b9:7c:6b:f6:e0:9b:ab:99:76:cd:9c:94:ec:46:74:08:2c:4c:
ff:a9:f5:73:a9:dc:0e:89:7b:ce:3a:7a:2a:1b:fc:0d:e0:29:
8f:fd:b3:41:43:80:47:af:1e:ee:43:b5:35:3b:5c:83:98:ce:
d2:8a:0b:9e:42:c3:f2:52:82:45:32:e6:93:03:5b:f5:33:8a:
01:24:ad:4f:7a:8a:c7:aa:af:aa:05:55:fc:83:43:c7:e4:5c:
4d:b5:ed:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:59:59 2026 by rpki-client