Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e764cb-463d-41ad-a7ec-f581f681a004/1/G1WOmRP2tWzD1WD5T_E38s1vSGI.mft
File: G1WOmRP2tWzD1WD5T_E38s1vSGI.mft (raw, json)
Hash identifier: 9RgHLg91byEUrojWTueJgL6XCCVg5ZIzOO3SSSp9sqs=
Subject key identifier: 7A:E4:C3:1D:D1:23:D4:ED:99:EF:2C:EF:AB:11:AC:3F:3D:2C:29:9F
Authority key identifier: 1B:55:8E:99:13:F6:B5:6C:C3:D5:60:F9:4F:F1:37:F2:CD:6F:48:62
Certificate issuer: /CN=1b558e9913f6b56cc3d560f94ff137f2cd6f4862
Certificate serial: 019CAE6C4B6A9E4D62B46470645346BB544C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G1WOmRP2tWzD1WD5T_E38s1vSGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/e764cb-463d-41ad-a7ec-f581f681a004/1/G1WOmRP2tWzD1WD5T_E38s1vSGI.mft
Manifest number: 085F
Signing time: Mon 02 Mar 2026 12:00:58 +0000
Manifest this update: Mon 02 Mar 2026 12:00:58 +0000
Manifest next update: Tue 03 Mar 2026 12:00:58 +0000
Files and hashes: 1: G1WOmRP2tWzD1WD5T_E38s1vSGI.crl (hash: D1Cm9ndY7L/Z4oaRitlRoV1XsPtUSQyBp8mTj9xwx7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/e764cb-463d-41ad-a7ec-f581f681a004/1/G1WOmRP2tWzD1WD5T_E38s1vSGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/e764cb-463d-41ad-a7ec-f581f681a004/1/G1WOmRP2tWzD1WD5T_E38s1vSGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/G1WOmRP2tWzD1WD5T_E38s1vSGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 12:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:6c:4b:6a:9e:4d:62:b4:64:70:64:53:46:bb:54:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b558e9913f6b56cc3d560f94ff137f2cd6f4862
Validity
Not Before: Mar 2 12:00:58 2026 GMT
Not After : Mar 3 12:00:58 2026 GMT
Subject: CN=7ae4c31dd123d4ed99ef2cefab11ac3f3d2c299f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:06:d5:7a:1b:3d:58:bf:ff:37:26:14:42:d5:
3f:a6:26:78:1a:f8:29:da:82:b9:1a:51:eb:78:94:
e0:84:36:08:45:13:1c:64:82:75:c1:d2:e5:39:7e:
36:b6:0c:c5:20:f8:b3:b9:af:4f:b4:a1:7a:e6:d8:
1c:ea:1d:18:40:d3:2c:04:b1:5b:bd:b0:63:c5:ff:
a2:a9:31:85:30:f9:fc:36:ef:87:4b:e0:2d:6a:b3:
c8:4b:44:a1:1c:db:df:68:76:9b:d1:ac:6d:7c:6a:
6a:0b:5b:57:9a:96:48:89:2f:fb:6e:28:97:50:8a:
82:6d:92:f9:73:7e:e0:19:01:30:c8:50:9d:38:be:
0b:61:a3:c5:11:15:b2:07:7f:01:e3:71:36:28:c6:
35:41:3c:86:07:83:df:cb:dc:4c:29:f4:a3:f7:d1:
51:ac:58:3f:e1:26:5e:c1:aa:4d:80:e9:26:ff:50:
fb:33:9f:4f:6c:e9:fc:39:5a:b5:1b:72:65:58:b4:
ca:d7:84:b1:c0:87:cb:fd:12:35:50:0d:83:e1:ad:
aa:5c:44:d7:64:86:bd:9d:a7:e9:79:b4:f1:6b:cf:
1c:65:43:5d:cb:7c:c3:11:1e:69:fa:8b:c9:b9:99:
2e:36:4c:0e:8b:8b:e9:e9:49:b2:79:c5:52:12:82:
95:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:E4:C3:1D:D1:23:D4:ED:99:EF:2C:EF:AB:11:AC:3F:3D:2C:29:9F
X509v3 Authority Key Identifier:
keyid:1B:55:8E:99:13:F6:B5:6C:C3:D5:60:F9:4F:F1:37:F2:CD:6F:48:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G1WOmRP2tWzD1WD5T_E38s1vSGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e764cb-463d-41ad-a7ec-f581f681a004/1/G1WOmRP2tWzD1WD5T_E38s1vSGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e764cb-463d-41ad-a7ec-f581f681a004/1/G1WOmRP2tWzD1WD5T_E38s1vSGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:4d:e4:70:dd:fa:bd:7b:e6:fe:3e:b9:6f:86:c5:80:0d:60:
44:27:b1:c2:59:87:99:dc:7d:77:08:5d:40:18:96:a6:a3:d2:
23:4a:61:5b:4c:11:ba:21:b4:13:9e:ea:c4:1f:6a:33:25:8d:
eb:a0:48:53:8c:e1:fb:c7:73:1c:ca:58:38:df:36:5c:20:62:
bf:3c:3e:8a:4f:93:18:3d:6e:b2:cf:7a:4b:8a:3c:9d:3a:48:
a2:dd:ec:f8:6d:15:cf:93:e2:29:44:14:08:51:43:dd:75:f2:
8a:e2:86:eb:c1:78:0c:4b:45:8e:bc:63:c4:dd:b3:6d:4b:85:
d6:a1:1e:ce:20:76:70:f7:ea:36:e6:99:36:fc:77:c1:0a:14:
bd:2a:81:e6:e1:64:38:62:73:c0:60:16:56:aa:18:d5:cf:3a:
5b:5e:31:47:67:5c:ff:eb:8d:29:b7:b8:ee:93:62:49:25:54:
1f:f4:8c:c0:bd:e4:99:8d:78:ef:42:3c:fd:27:38:ae:e0:d3:
66:a9:f8:30:0c:af:4f:23:69:bd:75:26:c5:5c:12:ea:0a:cd:
d5:8f:b2:ab:d3:98:d2:0b:ae:42:37:d2:2e:48:0a:25:b3:8f:
bb:d8:be:20:1d:f3:34:f2:7f:99:e9:00:81:57:38:76:02:b7:
51:50:f8:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:48:38 2026 by rpki-client