
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/d60752-ca7e-4acf-8cd1-ee5988e873e1/1/G_A9uL9mABk75I-xDm4xa4tfiOM.mft
File: G_A9uL9mABk75I-xDm4xa4tfiOM.mft (raw, json)
Hash identifier: sj8i/Z/1Z0Ak+PBBqwmsPyy75CBD6ETtgwePjzAWUiE=
Subject key identifier: C7:B4:72:85:43:7D:FE:7C:C5:39:68:79:58:DC:E7:0B:B9:A7:EB:85
Authority key identifier: 1B:F0:3D:B8:BF:66:00:19:3B:E4:8F:B1:0E:6E:31:6B:8B:5F:88:E3
Certificate issuer: /CN=1bf03db8bf6600193be48fb10e6e316b8b5f88e3
Certificate serial: 019CAAC641B6FD8B0807407375466A52E3D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G_A9uL9mABk75I-xDm4xa4tfiOM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/d60752-ca7e-4acf-8cd1-ee5988e873e1/1/G_A9uL9mABk75I-xDm4xa4tfiOM.mft
Manifest number: 078D
Signing time: Sun 01 Mar 2026 19:00:45 +0000
Manifest this update: Sun 01 Mar 2026 19:00:45 +0000
Manifest next update: Mon 02 Mar 2026 19:00:45 +0000
Files and hashes: 1: G_A9uL9mABk75I-xDm4xa4tfiOM.crl (hash: vZxv7eGLgypVcbK8RsrALHAqHVDRhGXb4H0VNYvqA18=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/d60752-ca7e-4acf-8cd1-ee5988e873e1/1/G_A9uL9mABk75I-xDm4xa4tfiOM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/d60752-ca7e-4acf-8cd1-ee5988e873e1/1/G_A9uL9mABk75I-xDm4xa4tfiOM.mft
rsync://rpki.ripe.net/repository/DEFAULT/G_A9uL9mABk75I-xDm4xa4tfiOM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 19:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:41:b6:fd:8b:08:07:40:73:75:46:6a:52:e3:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bf03db8bf6600193be48fb10e6e316b8b5f88e3
Validity
Not Before: Mar 1 19:00:45 2026 GMT
Not After : Mar 2 19:00:45 2026 GMT
Subject: CN=c7b47285437dfe7cc539687958dce70bb9a7eb85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e1:14:7c:ee:0f:b3:1a:0a:eb:97:08:ee:fc:
78:a5:24:88:a0:56:47:7e:c9:47:a1:fc:04:92:28:
8e:6d:45:e4:93:95:41:f6:21:c6:02:49:c6:25:48:
fd:39:56:d3:17:a6:b6:0d:d0:21:38:50:b6:5f:24:
4d:83:28:eb:e5:13:d7:62:07:e4:e0:bd:93:78:6e:
9c:dc:10:3b:a5:20:d3:93:b1:a0:5f:63:6f:94:bd:
24:3b:c8:b5:a3:d7:b4:21:72:95:4e:c3:1e:52:7a:
1e:db:17:9d:db:0a:9f:7d:09:4f:c4:1c:1e:e4:bc:
f0:67:c7:8d:f8:ff:4b:65:d8:73:01:4b:7e:16:88:
56:38:cc:5c:fa:3c:ee:29:07:18:06:34:24:9d:2c:
49:8b:3e:ae:39:38:b9:fc:10:98:4c:87:f2:2a:1b:
07:80:34:bc:49:7d:db:ea:6b:70:5a:cc:12:b3:dc:
32:d1:12:01:3e:e1:d2:2e:6b:92:5c:78:72:37:6f:
e9:bc:95:fe:cb:39:8a:3a:79:99:5e:b6:55:f2:5d:
a3:b0:3f:97:58:8b:72:c4:d4:50:a7:f6:90:0f:cc:
c2:f3:b2:b3:a5:7d:41:67:94:d4:41:52:2c:5b:85:
37:4d:27:e0:66:ed:2d:80:cb:57:90:32:9f:c5:e9:
10:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:B4:72:85:43:7D:FE:7C:C5:39:68:79:58:DC:E7:0B:B9:A7:EB:85
X509v3 Authority Key Identifier:
keyid:1B:F0:3D:B8:BF:66:00:19:3B:E4:8F:B1:0E:6E:31:6B:8B:5F:88:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G_A9uL9mABk75I-xDm4xa4tfiOM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d60752-ca7e-4acf-8cd1-ee5988e873e1/1/G_A9uL9mABk75I-xDm4xa4tfiOM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d60752-ca7e-4acf-8cd1-ee5988e873e1/1/G_A9uL9mABk75I-xDm4xa4tfiOM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:1e:ec:c0:59:72:f1:e4:8c:0a:a9:f5:e0:eb:9d:cf:0e:c9:
5a:3e:b1:33:a2:02:c7:ac:89:4a:69:3a:0e:c4:45:96:12:e2:
3a:5b:59:8b:bb:78:d3:98:1a:7e:aa:9d:7e:a0:48:b9:8c:75:
15:f9:b2:f8:d4:fa:f4:f6:cb:d3:9b:ba:b5:0a:51:7c:bf:1c:
39:7d:c5:c3:a9:0c:e0:20:2c:58:18:a6:59:a7:0e:77:58:04:
fd:45:a7:22:8b:c1:f0:a8:97:62:4d:e0:c6:71:99:46:f2:e6:
27:eb:14:db:6a:dc:2a:56:da:43:33:71:45:91:7e:60:27:d2:
65:eb:5c:1f:1f:a9:c2:8f:f6:d6:f2:8d:50:4a:bc:03:97:51:
7b:45:2f:8e:b7:6f:5c:0b:ef:ee:b8:b2:ba:49:ad:8a:8b:c8:
d6:ff:ae:e0:31:df:41:91:4e:3c:5d:2f:8d:1f:d1:54:ed:3f:
8f:06:85:40:78:e9:b3:be:cc:13:48:49:4c:62:03:da:7c:3a:
9e:6d:ac:5a:ef:69:ab:5c:23:47:36:c0:6d:a1:16:0a:9f:1d:
0e:4a:ff:47:d8:9e:ad:e2:d4:7f:2a:f0:68:94:57:3f:ab:c6:
c7:a0:5a:b8:3f:a1:76:d7:22:79:ab:e2:25:20:aa:91:8a:31:
58:96:74:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:38:45 2026 by rpki-client