Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/e53313-d587-492c-ad18-47637eb1ec49/1/GPijrw2MDVHeLd0mWtVNq5e95s4.mft
File: GPijrw2MDVHeLd0mWtVNq5e95s4.mft (raw, json)
Hash identifier: iUE4NHhM4fXO5klXdFYMdAIRGNjur+XDpCNLWAyKyck=
Subject key identifier: B8:BF:84:4E:E7:CF:57:CA:07:01:DD:6B:82:13:A4:6D:2C:54:18:9D
Authority key identifier: 18:F8:A3:AF:0D:8C:0D:51:DE:2D:DD:26:5A:D5:4D:AB:97:BD:E6:CE
Certificate issuer: /CN=18f8a3af0d8c0d51de2ddd265ad54dab97bde6ce
Certificate serial: 019CB023E9C6DD1EEFD3F1CC19A29675BE35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GPijrw2MDVHeLd0mWtVNq5e95s4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/e53313-d587-492c-ad18-47637eb1ec49/1/GPijrw2MDVHeLd0mWtVNq5e95s4.mft
Manifest number: F6
Signing time: Mon 02 Mar 2026 20:01:09 +0000
Manifest this update: Mon 02 Mar 2026 20:01:09 +0000
Manifest next update: Tue 03 Mar 2026 20:01:09 +0000
Files and hashes: 1: GPijrw2MDVHeLd0mWtVNq5e95s4.crl (hash: XnNMp3/Bi5/hfM+MtUlLQ58Lnyf/YyW9T9hbG+xUMiM=)
2: q-3PkcuXvbxG2AJOGo6sUKyZOAU.roa (hash: a1DkrhlznASzhUP99TVl/s5bY4rDfTZ4JGlmLv4QaHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/e53313-d587-492c-ad18-47637eb1ec49/1/GPijrw2MDVHeLd0mWtVNq5e95s4.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/e53313-d587-492c-ad18-47637eb1ec49/1/GPijrw2MDVHeLd0mWtVNq5e95s4.mft
rsync://rpki.ripe.net/repository/DEFAULT/GPijrw2MDVHeLd0mWtVNq5e95s4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 20:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b0:23:e9:c6:dd:1e:ef:d3:f1:cc:19:a2:96:75:be:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18f8a3af0d8c0d51de2ddd265ad54dab97bde6ce
Validity
Not Before: Mar 2 20:01:09 2026 GMT
Not After : Mar 3 20:01:09 2026 GMT
Subject: CN=b8bf844ee7cf57ca0701dd6b8213a46d2c54189d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:1e:11:2f:a7:e2:34:99:e1:ea:da:f9:69:d9:
2b:f6:6d:22:95:f3:42:86:d4:40:88:44:2d:40:00:
a7:f8:3b:72:09:60:64:fd:8e:d0:f7:e7:9e:1a:79:
82:b1:2b:65:7c:fc:ec:20:2f:11:6f:44:48:17:20:
96:4b:31:f0:6b:85:86:d7:fa:86:ca:97:ac:3f:5e:
6d:c2:11:79:29:44:71:f9:0d:fc:90:98:a9:77:2e:
1f:c0:d0:e4:89:03:f4:d0:6d:c6:0b:21:c3:25:00:
90:74:53:cc:cc:ea:5c:48:8c:d3:56:e6:14:16:5b:
57:24:65:b2:f1:dc:cf:39:fb:90:76:7d:38:cd:c3:
2d:e4:11:93:9b:61:da:bf:f4:c0:34:d2:d6:05:9f:
c4:cd:94:f0:4b:68:b5:7f:11:45:4c:f1:73:af:cf:
68:96:ce:e6:c9:11:c3:ee:4d:fc:e8:8f:77:4b:2b:
11:b4:7d:bc:1e:ce:56:ca:2d:97:76:17:ab:8b:10:
c0:b5:69:67:c3:4f:28:6f:fb:59:d7:c4:97:22:a4:
02:4c:2e:80:13:ab:92:91:d0:7d:dc:8d:6c:91:cc:
fd:e9:dc:6b:bc:46:0e:b0:f9:08:08:13:f4:91:ed:
fb:60:ac:80:48:e6:a8:0e:33:42:e7:0e:b6:d3:10:
38:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:BF:84:4E:E7:CF:57:CA:07:01:DD:6B:82:13:A4:6D:2C:54:18:9D
X509v3 Authority Key Identifier:
keyid:18:F8:A3:AF:0D:8C:0D:51:DE:2D:DD:26:5A:D5:4D:AB:97:BD:E6:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GPijrw2MDVHeLd0mWtVNq5e95s4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/e53313-d587-492c-ad18-47637eb1ec49/1/GPijrw2MDVHeLd0mWtVNq5e95s4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/e53313-d587-492c-ad18-47637eb1ec49/1/GPijrw2MDVHeLd0mWtVNq5e95s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:cc:a9:df:86:56:3f:11:65:9f:9f:9d:46:10:6d:55:ac:84:
18:cc:5c:d8:ba:18:71:bd:af:68:97:8c:ce:d7:e5:6c:d0:ef:
a9:66:69:3f:d9:af:e1:05:26:e8:01:ad:2f:de:0c:94:fb:2d:
88:4f:1d:aa:e5:d6:25:95:1a:14:b8:8a:8f:5f:ef:c0:a6:d3:
bd:2a:72:a2:a3:6d:7c:60:fc:71:59:06:15:d7:8b:fa:d4:f3:
bc:34:2f:69:bf:06:5a:20:e3:6f:82:d8:b1:82:4a:c5:2b:68:
1d:35:01:ca:78:16:36:d8:28:06:6a:0d:5a:ab:9f:2e:c6:64:
ef:59:7a:19:33:79:9a:34:f2:0c:d6:12:af:e8:ad:a0:fe:25:
6d:96:a9:79:be:11:bc:cd:e3:20:8d:30:02:8d:df:57:a5:84:
ac:18:9e:eb:68:e9:fd:69:4f:0c:77:89:26:07:08:28:19:2a:
e6:61:0c:a8:7c:3d:7c:b0:7d:4d:36:d2:6d:a5:e1:93:85:47:
34:c1:36:fd:8f:e2:6e:10:5f:f4:83:11:ad:91:45:3a:47:ab:
07:98:02:7e:c1:0a:a2:c8:64:c2:34:68:37:0f:4b:16:e9:db:
bf:69:31:c7:23:e5:4c:a3:7d:bf:86:a9:42:96:93:7b:54:b8:
a9:21:0d:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 03:31:20 2026 by rpki-client