Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/3d6107-5bce-4780-ae10-22d371d6cdee/1/G2uUO5o9_2loAVFr6EcbxFiFZug.mft
File: G2uUO5o9_2loAVFr6EcbxFiFZug.mft (raw, json)
Hash identifier: ybwZB+U988tjozgzm+E0MSJCB/St/Z1BtS0FKCe3QwY=
Subject key identifier: 42:7A:7E:D3:A4:85:C3:C1:F6:93:A4:85:35:E2:D8:49:C4:4F:66:90
Authority key identifier: 1B:6B:94:3B:9A:3D:FF:69:68:01:51:6B:E8:47:1B:C4:58:85:66:E8
Certificate issuer: /CN=1b6b943b9a3dff696801516be8471bc4588566e8
Certificate serial: 019CABA25C758032FD94369AA8026F8D487C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G2uUO5o9_2loAVFr6EcbxFiFZug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/3d6107-5bce-4780-ae10-22d371d6cdee/1/G2uUO5o9_2loAVFr6EcbxFiFZug.mft
Manifest number: 14EB
Signing time: Sun 01 Mar 2026 23:01:10 +0000
Manifest this update: Sun 01 Mar 2026 23:01:10 +0000
Manifest next update: Mon 02 Mar 2026 23:01:10 +0000
Files and hashes: 1: CFO4FgEIRtMb5lyEJ7fTGNyKj1Q.roa (hash: 811rgV28E1K97XcQlVBf+c8AkF0NnU7urjPyYJW2uoM=)
2: G2uUO5o9_2loAVFr6EcbxFiFZug.crl (hash: h4RbCB/oyDYldkJzwRufy5/aNjA7V3pMhPZbYWpPsBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/3d6107-5bce-4780-ae10-22d371d6cdee/1/G2uUO5o9_2loAVFr6EcbxFiFZug.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/3d6107-5bce-4780-ae10-22d371d6cdee/1/G2uUO5o9_2loAVFr6EcbxFiFZug.mft
rsync://rpki.ripe.net/repository/DEFAULT/G2uUO5o9_2loAVFr6EcbxFiFZug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:5c:75:80:32:fd:94:36:9a:a8:02:6f:8d:48:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b6b943b9a3dff696801516be8471bc4588566e8
Validity
Not Before: Mar 1 23:01:10 2026 GMT
Not After : Mar 2 23:01:10 2026 GMT
Subject: CN=427a7ed3a485c3c1f693a48535e2d849c44f6690
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:67:c7:3a:2b:5c:28:2d:92:75:fe:6c:cc:e0:
c1:9b:c1:2a:73:6b:95:98:3a:e1:ba:f1:83:f1:30:
39:a2:f6:6f:5d:e7:c6:25:6b:e1:f5:06:5d:3c:ca:
dc:c3:0a:ab:a4:76:66:25:fe:0e:ce:a9:75:ac:14:
4c:40:b4:2d:f4:85:0f:4f:f8:1f:ad:9f:52:39:e0:
81:88:df:e4:f9:b7:0d:1a:a2:eb:97:6e:e5:78:12:
76:c5:c7:6d:fc:8c:00:12:52:28:b9:f5:a7:fe:e5:
5d:94:c6:f4:61:0e:4d:99:1a:7b:a2:ff:81:39:2a:
04:94:7c:bf:ab:a9:ae:72:09:b5:2c:7d:04:8a:a5:
68:a0:95:b6:11:84:17:97:dd:0c:9c:d2:10:b6:ec:
4f:d8:28:37:1e:0d:1e:08:ca:2e:4c:09:fd:c1:4a:
c2:02:45:8a:e2:00:fe:f0:88:1a:ad:1c:5e:e5:b8:
3c:b8:d6:3d:c0:53:a7:ec:8b:82:32:f8:e9:69:85:
2d:a8:23:6a:42:c1:62:57:41:e2:3e:9b:ee:f3:90:
52:00:fc:23:cd:f4:c4:97:bf:70:7d:1c:07:0d:3b:
98:48:7b:8a:f6:2a:ad:35:7a:b0:a6:cc:2b:71:98:
57:ac:5c:4d:8d:24:56:37:24:26:05:c4:e8:69:49:
c5:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:7A:7E:D3:A4:85:C3:C1:F6:93:A4:85:35:E2:D8:49:C4:4F:66:90
X509v3 Authority Key Identifier:
keyid:1B:6B:94:3B:9A:3D:FF:69:68:01:51:6B:E8:47:1B:C4:58:85:66:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2uUO5o9_2loAVFr6EcbxFiFZug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3d6107-5bce-4780-ae10-22d371d6cdee/1/G2uUO5o9_2loAVFr6EcbxFiFZug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3d6107-5bce-4780-ae10-22d371d6cdee/1/G2uUO5o9_2loAVFr6EcbxFiFZug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:53:40:10:53:09:8f:5c:08:86:4c:11:f9:31:b9:a6:dc:fa:
82:61:b8:37:f6:61:06:97:2a:4a:86:ce:45:32:0c:93:a1:d7:
d6:01:2b:4c:cf:09:5d:1d:2b:62:eb:bd:a4:14:cf:fa:65:b1:
b1:e2:67:51:3a:9f:b4:eb:f8:d6:0b:10:a6:d9:5e:ae:58:bb:
0c:4e:d7:e0:90:95:ac:36:5c:3f:74:a6:05:7e:cc:be:10:ec:
69:1c:0a:30:3e:24:c1:ae:bc:b4:84:98:87:eb:ad:f6:95:ee:
af:ea:3d:ab:7a:7a:32:ab:d7:12:08:5d:c8:a3:ae:8c:70:ac:
30:50:84:18:66:24:6d:8a:5e:3b:4e:89:2b:1d:0f:c2:20:80:
91:a7:6b:85:5b:30:5c:b8:6c:6f:c2:b3:fd:e5:0d:05:ea:af:
53:71:ee:dd:7f:31:47:f8:72:e4:b9:8a:a0:ca:b5:30:de:05:
90:c3:01:fe:10:04:c2:e4:0b:b8:49:4d:53:15:a6:05:08:61:
3a:bc:db:eb:82:e6:87:53:75:f7:c9:2d:48:4d:e9:91:42:85:
98:90:25:81:a1:6f:1e:fe:37:52:c1:c3:9a:0e:44:9c:d3:21:
b4:ee:d4:e7:d7:8c:a3:0b:14:e6:34:5e:4a:4e:b0:03:06:64:
0b:8e:cb:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:58:50 2026 by rpki-client