Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/3d6107-5bce-4780-ae10-22d371d6cdee/1/G2uUO5o9_2loAVFr6EcbxFiFZug.mft
File: G2uUO5o9_2loAVFr6EcbxFiFZug.mft (raw, json)
Hash identifier: f81mMkDnvAt/Tub80Un72Pu8Bb/1KmsZufNBR6i08IA=
Subject key identifier: C9:D3:1E:E1:04:4F:BD:76:26:96:A9:A5:BB:CF:84:AD:F5:C6:76:D8
Authority key identifier: 1B:6B:94:3B:9A:3D:FF:69:68:01:51:6B:E8:47:1B:C4:58:85:66:E8
Certificate issuer: /CN=1b6b943b9a3dff696801516be8471bc4588566e8
Certificate serial: 019DA2D374117097C6E10B86E6DBF97B9CCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G2uUO5o9_2loAVFr6EcbxFiFZug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/3d6107-5bce-4780-ae10-22d371d6cdee/1/G2uUO5o9_2loAVFr6EcbxFiFZug.mft
Manifest number: 156B
Signing time: Sat 18 Apr 2026 23:00:59 +0000
Manifest this update: Sat 18 Apr 2026 23:00:59 +0000
Manifest next update: Sun 19 Apr 2026 23:00:59 +0000
Files and hashes: 1: CFO4FgEIRtMb5lyEJ7fTGNyKj1Q.roa (hash: 811rgV28E1K97XcQlVBf+c8AkF0NnU7urjPyYJW2uoM=)
2: G2uUO5o9_2loAVFr6EcbxFiFZug.crl (hash: WGz8CDZnbiQGqlwZYJlbiJTJxZPqLsug6z8taCaC4E0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/3d6107-5bce-4780-ae10-22d371d6cdee/1/G2uUO5o9_2loAVFr6EcbxFiFZug.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/3d6107-5bce-4780-ae10-22d371d6cdee/1/G2uUO5o9_2loAVFr6EcbxFiFZug.mft
rsync://rpki.ripe.net/repository/DEFAULT/G2uUO5o9_2loAVFr6EcbxFiFZug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a2:d3:74:11:70:97:c6:e1:0b:86:e6:db:f9:7b:9c:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b6b943b9a3dff696801516be8471bc4588566e8
Validity
Not Before: Apr 18 23:00:59 2026 GMT
Not After : Apr 19 23:00:59 2026 GMT
Subject: CN=c9d31ee1044fbd762696a9a5bbcf84adf5c676d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e4:35:58:54:ea:20:20:d2:8a:39:c7:16:dc:
1b:92:5d:37:b7:e3:49:e6:d4:e3:a1:7b:1b:03:02:
89:be:59:ce:00:17:31:3a:dc:3f:65:3c:63:4d:6a:
54:e8:fb:d5:77:ae:10:36:c0:42:ca:98:0d:b3:ab:
20:25:04:f2:ae:ec:ee:71:55:9d:60:64:43:1a:e1:
f1:38:42:f2:a1:34:7d:87:d7:92:33:e9:94:79:1d:
ca:8e:28:25:b5:a8:f1:0d:a1:20:bc:b0:f2:27:15:
0a:52:1a:c1:85:ed:25:c5:e3:3c:59:67:35:a3:b7:
a0:e1:7e:91:5f:55:2c:d4:7c:ab:a6:10:ce:4f:f5:
50:ee:12:a4:7b:d6:c0:31:fb:13:03:4a:93:ef:f2:
d8:32:6b:e3:65:6c:1c:c8:6c:77:5d:1a:40:69:d8:
70:bb:e3:1c:55:3e:c5:67:d9:83:30:91:24:65:4f:
44:aa:30:c1:05:19:68:b7:1c:ac:8f:b9:0d:9b:55:
a5:d4:ce:ee:09:aa:b6:15:bf:1a:30:6c:dd:84:81:
22:b0:1f:27:b8:fb:10:5d:be:5a:a0:6d:a5:91:5b:
35:37:38:37:11:51:c7:d0:52:a8:54:c7:d4:80:57:
59:9b:d4:c8:38:ca:79:7c:a5:a9:ad:cc:06:b0:01:
3c:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:D3:1E:E1:04:4F:BD:76:26:96:A9:A5:BB:CF:84:AD:F5:C6:76:D8
X509v3 Authority Key Identifier:
keyid:1B:6B:94:3B:9A:3D:FF:69:68:01:51:6B:E8:47:1B:C4:58:85:66:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2uUO5o9_2loAVFr6EcbxFiFZug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3d6107-5bce-4780-ae10-22d371d6cdee/1/G2uUO5o9_2loAVFr6EcbxFiFZug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3d6107-5bce-4780-ae10-22d371d6cdee/1/G2uUO5o9_2loAVFr6EcbxFiFZug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:1e:be:e7:1a:bc:18:f5:7e:78:b3:42:e6:04:aa:72:ae:b7:
99:bd:f1:82:a7:7e:7d:36:85:09:88:cf:96:c4:a9:8c:93:67:
6c:c1:47:60:f4:a4:3b:f0:32:1a:55:87:4f:a2:86:b1:eb:28:
5e:1d:17:99:f6:29:39:32:0e:cb:a4:3c:af:9b:10:b2:cd:7b:
5f:a2:b4:a8:94:f1:a3:8c:f7:72:f4:15:20:3e:61:0e:fc:cd:
03:14:31:41:c2:9f:37:12:63:d9:96:f0:3d:62:13:8b:ea:bb:
80:f4:8c:5b:64:12:c2:f2:92:da:8d:3f:a7:0e:58:35:57:84:
fc:39:a2:95:ed:9e:bc:4a:e9:2e:15:7a:ea:e2:7f:e2:26:d7:
8d:b2:4c:14:20:2d:7a:4b:62:d9:3f:13:85:60:f3:20:97:c6:
94:33:bc:bf:a0:bd:8d:ac:25:1f:09:0d:ea:1f:2a:a8:89:ad:
36:d1:d3:08:b8:6f:40:15:00:22:67:98:f5:68:fe:c5:50:2f:
77:08:f4:60:79:e4:a7:8f:5d:74:80:2c:df:54:b1:05:52:43:
02:5b:cb:02:16:74:b2:54:6e:f0:05:b1:0f:f8:1b:fe:b3:ed:
a8:31:fd:67:d6:fc:3a:ff:af:3b:82:d1:7b:06:96:51:37:ab:
2a:35:df:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:42:46 2026 by rpki-client