Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/655006-6275-4d24-b3db-02c47b9ea49d/1/G28HR08S96M-XCG8L_uwdaF70T8.mft
File: G28HR08S96M-XCG8L_uwdaF70T8.mft (raw, json)
Hash identifier: J+BY88HyYpHz42ywwshqu/iQlIs8HOqkMWE1vCZxsKY=
Subject key identifier: D9:E9:9C:BB:FC:FD:72:32:EB:B4:1E:77:81:FD:E5:99:7B:C4:BC:92
Authority key identifier: 1B:6F:07:47:4F:12:F7:A3:3E:5C:21:BC:2F:FB:B0:75:A1:7B:D1:3F
Certificate issuer: /CN=1b6f07474f12f7a33e5c21bc2ffbb075a17bd13f
Certificate serial: 019CAE357D3FBA47C1C52CDAC45EBC820DBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G28HR08S96M-XCG8L_uwdaF70T8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/655006-6275-4d24-b3db-02c47b9ea49d/1/G28HR08S96M-XCG8L_uwdaF70T8.mft
Manifest number: 14CC
Signing time: Mon 02 Mar 2026 11:01:06 +0000
Manifest this update: Mon 02 Mar 2026 11:01:06 +0000
Manifest next update: Tue 03 Mar 2026 11:01:06 +0000
Files and hashes: 1: 0jmv6E6nQfihp67UOSMcz_xDPcw.roa (hash: LsnhLL47q0cgL81shTzaL8RIZARhHeGkiQjpcXf/BNY=)
2: G28HR08S96M-XCG8L_uwdaF70T8.crl (hash: KiHXwxtl0jiADc0yw+aTWkjTm0agZvW3wYr7J37tnm8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/655006-6275-4d24-b3db-02c47b9ea49d/1/G28HR08S96M-XCG8L_uwdaF70T8.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/655006-6275-4d24-b3db-02c47b9ea49d/1/G28HR08S96M-XCG8L_uwdaF70T8.mft
rsync://rpki.ripe.net/repository/DEFAULT/G28HR08S96M-XCG8L_uwdaF70T8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 11:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:35:7d:3f:ba:47:c1:c5:2c:da:c4:5e:bc:82:0d:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b6f07474f12f7a33e5c21bc2ffbb075a17bd13f
Validity
Not Before: Mar 2 11:01:06 2026 GMT
Not After : Mar 3 11:01:06 2026 GMT
Subject: CN=d9e99cbbfcfd7232ebb41e7781fde5997bc4bc92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:37:ce:ed:4f:a6:8a:33:62:7c:48:0c:c9:62:
1f:ef:14:87:c7:2a:d1:a3:be:06:c1:db:c8:a0:1d:
14:82:bb:1b:17:bb:ad:75:21:e8:cd:95:bc:10:00:
de:9e:f9:60:5b:ef:47:73:2d:0a:86:ea:ab:44:62:
f5:07:f6:e1:dc:b0:68:02:11:44:35:06:0d:52:e5:
66:1e:60:b7:83:5b:6a:40:f4:08:a2:2d:ac:f5:25:
92:7b:a4:75:62:b3:3a:81:42:9c:0c:8c:e9:8f:54:
dc:af:27:49:d5:16:c5:ae:8d:f2:7e:50:6d:8c:d7:
4a:93:f2:83:d9:5d:b8:3e:5d:e8:aa:ae:3f:86:97:
54:27:b4:40:ce:a2:ef:f0:af:41:b5:ea:29:99:a8:
c2:16:87:e7:84:a4:d6:33:6d:57:1d:99:d7:50:f2:
57:8d:85:9c:8a:21:2c:f3:25:50:c7:8e:41:c7:2d:
b3:bc:12:f1:d1:77:81:68:a6:6e:0a:df:46:14:91:
03:5b:8a:ae:39:d9:0b:88:c6:03:02:81:d7:0f:4e:
fd:fe:ff:b6:73:e3:18:09:e4:51:f8:b0:3b:8f:0a:
65:36:9b:05:6e:0d:1f:f3:1b:6e:94:b8:c8:b0:a7:
9b:cb:38:e7:df:c6:db:12:43:94:d0:6e:50:8d:78:
bf:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:E9:9C:BB:FC:FD:72:32:EB:B4:1E:77:81:FD:E5:99:7B:C4:BC:92
X509v3 Authority Key Identifier:
keyid:1B:6F:07:47:4F:12:F7:A3:3E:5C:21:BC:2F:FB:B0:75:A1:7B:D1:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G28HR08S96M-XCG8L_uwdaF70T8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/655006-6275-4d24-b3db-02c47b9ea49d/1/G28HR08S96M-XCG8L_uwdaF70T8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/655006-6275-4d24-b3db-02c47b9ea49d/1/G28HR08S96M-XCG8L_uwdaF70T8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:f1:3d:ff:8d:69:a4:21:76:2e:aa:01:ae:fc:5f:4a:08:59:
1c:b6:99:73:f8:71:e9:09:03:c6:59:56:42:d4:bc:54:00:ea:
74:a3:91:9a:40:f0:5e:23:d6:d7:9d:11:c8:d6:76:0f:9b:9b:
1c:08:8a:f9:c5:6f:f6:bb:d5:ce:42:5c:3c:25:26:82:d2:06:
a0:39:c7:ee:da:31:ae:31:97:42:bf:c6:c4:08:bc:83:0f:f8:
b6:2f:da:40:52:d6:92:eb:38:4b:d3:d0:d3:36:ff:b0:3d:a2:
f3:46:ed:3f:5e:2b:db:04:a8:fc:34:c7:a0:35:d7:ad:bd:8d:
1a:c0:8f:bc:26:f0:92:26:47:2a:ae:34:25:d1:99:74:a7:d0:
d4:9c:f1:5e:fc:e3:7b:00:b8:dc:48:5e:83:28:85:e1:7b:15:
f4:c4:d2:fe:54:00:f8:f9:e1:d3:37:11:61:91:c8:4f:a2:27:
3e:71:96:3e:d5:73:71:f7:d5:2e:41:3a:fa:9e:a2:d6:49:28:
c7:68:43:2e:ba:f8:35:e7:a6:0f:a9:06:b0:35:6d:f1:4c:05:
e0:97:9d:a9:d7:13:14:60:cf:0c:1c:69:ed:75:9e:43:d4:47:
d0:0c:20:96:12:3a:6b:2a:05:2a:b8:6a:4d:e6:71:62:b4:6c:
ce:63:b3:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:25:03 2026 by rpki-client