Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/d60752-ca7e-4acf-8cd1-ee5988e873e1/1/G_A9uL9mABk75I-xDm4xa4tfiOM.mft
File: G_A9uL9mABk75I-xDm4xa4tfiOM.mft (raw, json)
Hash identifier: h1yf7Q1NdSNpNZws3S2CYw+x0NAT+K5iVJdkd1sxR74=
Subject key identifier: 0F:E9:7C:38:73:F7:5A:8B:0E:EE:15:20:77:B8:45:97:66:DE:7B:14
Authority key identifier: 1B:F0:3D:B8:BF:66:00:19:3B:E4:8F:B1:0E:6E:31:6B:8B:5F:88:E3
Certificate issuer: /CN=1bf03db8bf6600193be48fb10e6e316b8b5f88e3
Certificate serial: 019D9850B2F417F09901BBD9BE1BDBCE78ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G_A9uL9mABk75I-xDm4xa4tfiOM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/d60752-ca7e-4acf-8cd1-ee5988e873e1/1/G_A9uL9mABk75I-xDm4xa4tfiOM.mft
Manifest number: 0808
Signing time: Thu 16 Apr 2026 22:01:58 +0000
Manifest this update: Thu 16 Apr 2026 22:01:58 +0000
Manifest next update: Fri 17 Apr 2026 22:01:58 +0000
Files and hashes: 1: G_A9uL9mABk75I-xDm4xa4tfiOM.crl (hash: Je8NxaRV+v8t5Qs4S6SqTYShBpmjdXt69Ruv1QxZj8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/d60752-ca7e-4acf-8cd1-ee5988e873e1/1/G_A9uL9mABk75I-xDm4xa4tfiOM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/d60752-ca7e-4acf-8cd1-ee5988e873e1/1/G_A9uL9mABk75I-xDm4xa4tfiOM.mft
rsync://rpki.ripe.net/repository/DEFAULT/G_A9uL9mABk75I-xDm4xa4tfiOM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:b2:f4:17:f0:99:01:bb:d9:be:1b:db:ce:78:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bf03db8bf6600193be48fb10e6e316b8b5f88e3
Validity
Not Before: Apr 16 22:01:58 2026 GMT
Not After : Apr 17 22:01:58 2026 GMT
Subject: CN=0fe97c3873f75a8b0eee152077b8459766de7b14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:76:fd:7e:f3:3d:74:1e:a5:5f:1c:a6:44:d6:
e0:c3:f0:f7:49:f7:7a:bd:f6:ec:34:54:62:26:72:
bd:86:fe:4e:ed:08:10:4e:a3:4c:c8:83:63:4e:e5:
a1:4c:55:28:97:26:be:96:1e:79:e9:b5:22:04:86:
44:0f:b8:74:00:af:4b:e3:f9:a0:37:16:51:96:cd:
7b:30:ba:8e:ce:c6:f5:ff:49:ba:72:14:ce:02:1b:
f4:d6:85:d4:9e:ff:db:fe:22:6e:1d:d2:2b:6e:1b:
c3:0d:27:94:6d:d8:8f:b8:97:e1:8b:ca:9d:b9:97:
82:fa:19:df:3f:94:74:40:2e:75:b8:59:70:bd:78:
ea:3d:9a:a6:3c:fb:b0:aa:72:4f:43:5e:9a:2f:c2:
db:52:51:40:b9:d1:ec:89:2f:c6:c9:a1:00:a0:6d:
d1:78:78:5f:eb:b6:24:b8:65:b3:c5:11:8f:d8:5f:
83:fd:cf:8d:f1:00:6d:eb:3b:dd:c1:ec:79:3a:41:
f9:ff:7a:c9:3a:86:90:08:0d:34:fd:a7:63:a0:36:
14:f3:ed:53:51:1c:af:fc:7f:53:52:1a:6b:e7:22:
9c:f6:15:f9:75:48:b4:3c:be:b1:7d:66:87:4f:e5:
92:0f:3d:62:fd:ce:99:47:89:da:7e:01:3c:13:1e:
4e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:E9:7C:38:73:F7:5A:8B:0E:EE:15:20:77:B8:45:97:66:DE:7B:14
X509v3 Authority Key Identifier:
keyid:1B:F0:3D:B8:BF:66:00:19:3B:E4:8F:B1:0E:6E:31:6B:8B:5F:88:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G_A9uL9mABk75I-xDm4xa4tfiOM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d60752-ca7e-4acf-8cd1-ee5988e873e1/1/G_A9uL9mABk75I-xDm4xa4tfiOM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d60752-ca7e-4acf-8cd1-ee5988e873e1/1/G_A9uL9mABk75I-xDm4xa4tfiOM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
da:92:a9:94:3a:ed:69:b0:dc:05:17:b3:3a:7e:02:b7:b0:cf:
2b:da:3d:a0:b7:81:1a:9e:97:99:14:26:1b:96:80:a0:15:c6:
e5:30:cb:b9:e6:4f:50:a0:38:c2:83:d1:9b:2c:41:e0:0c:38:
3b:76:d5:ee:4b:73:62:fa:4b:3b:57:22:ee:05:98:7d:05:55:
49:d4:21:d0:f5:b2:9b:28:07:fd:46:22:cd:92:d8:94:ee:33:
cc:52:a2:f2:0f:02:0e:33:af:b6:ff:56:38:8b:f3:3b:0b:ce:
3a:76:03:5a:ba:31:7d:ff:d3:80:fd:4d:90:ca:fa:4c:8d:6b:
d0:30:90:24:11:c7:c9:5f:f7:81:aa:fb:71:f3:1c:5a:03:9a:
9c:cb:8f:62:50:0e:33:3c:cb:9c:cd:6b:eb:8a:cd:95:06:32:
d7:55:41:e6:7d:24:43:e8:3c:bf:14:4e:81:c6:8a:ff:de:92:
13:f8:2a:66:8e:da:ad:6b:22:22:47:b8:4d:58:9b:3a:e5:fe:
c5:8b:06:a3:e4:ac:0f:79:15:b9:06:9d:42:74:1f:fe:54:17:
40:98:57:52:47:06:13:1b:43:86:2c:83:d9:3e:a0:b0:d2:07:
50:05:91:95:fd:06:ad:0c:19:4f:83:c3:99:db:3e:8c:d5:32:
36:ea:84:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:21:12 2026 by rpki-client