Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/0143cd-a814-4d48-a87c-d7c0e9393ea0/1/GNwjUhF2AjItdBxRNoyouN0aPqo.mft
File: GNwjUhF2AjItdBxRNoyouN0aPqo.mft (raw, json)
Hash identifier: NJPyoO9KyNmNqSoy5l5n/GYouAMBAizBskzzYN0SCU4=
Subject key identifier: 82:01:00:49:39:AE:D1:AB:7B:E1:2F:3D:D9:0D:79:96:D9:EA:31:2E
Authority key identifier: 18:DC:23:52:11:76:02:32:2D:74:1C:51:36:8C:A8:B8:DD:1A:3E:AA
Certificate issuer: /CN=18dc2352117602322d741c51368ca8b8dd1a3eaa
Certificate serial: 019CA9B38885078A86B2D55916D947DC59F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GNwjUhF2AjItdBxRNoyouN0aPqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/0143cd-a814-4d48-a87c-d7c0e9393ea0/1/GNwjUhF2AjItdBxRNoyouN0aPqo.mft
Manifest number: 09EC
Signing time: Sun 01 Mar 2026 14:00:41 +0000
Manifest this update: Sun 01 Mar 2026 14:00:41 +0000
Manifest next update: Mon 02 Mar 2026 14:00:41 +0000
Files and hashes: 1: GNwjUhF2AjItdBxRNoyouN0aPqo.crl (hash: yYmSYEQU827YU+YOB6loOxOEzvszcmQJ2kYbQ1fR428=)
2: nTSOIsFCXPktLiPKU0rpSqAxP9c.roa (hash: p4pPo4o8ji9IxG+yykgVyf22JPwriVlViBGbSDBIE2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/0143cd-a814-4d48-a87c-d7c0e9393ea0/1/GNwjUhF2AjItdBxRNoyouN0aPqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/0143cd-a814-4d48-a87c-d7c0e9393ea0/1/GNwjUhF2AjItdBxRNoyouN0aPqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/GNwjUhF2AjItdBxRNoyouN0aPqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 14:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:b3:88:85:07:8a:86:b2:d5:59:16:d9:47:dc:59:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18dc2352117602322d741c51368ca8b8dd1a3eaa
Validity
Not Before: Mar 1 14:00:41 2026 GMT
Not After : Mar 2 14:00:41 2026 GMT
Subject: CN=8201004939aed1ab7be12f3dd90d7996d9ea312e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:91:d5:8c:20:ed:ee:68:e0:26:ad:64:07:c1:
0d:b3:b0:36:0d:98:f9:c2:7e:66:a7:9c:3b:27:b4:
2b:4d:13:b2:17:7c:23:a4:dd:55:68:29:a9:28:d2:
41:1b:42:b1:9c:87:8d:f9:84:0d:05:12:9a:87:f0:
74:01:4f:ba:2b:f2:4a:4a:0b:9f:fb:9c:c9:5e:ca:
58:b1:3b:55:cd:e8:de:49:e4:88:96:34:4c:c1:b0:
95:ae:02:f3:da:76:dd:77:86:f8:9b:07:4c:5d:d4:
c6:a5:e9:50:12:f7:67:d4:e4:ff:06:46:df:ea:fc:
16:6d:b3:bc:50:85:12:60:11:d1:02:f4:72:80:db:
bd:70:11:93:01:63:3f:57:76:dc:97:95:ff:c9:72:
17:92:dd:2e:06:7e:6d:09:94:3a:6f:fe:a6:a9:21:
78:92:2e:9c:6a:3f:f9:14:da:a1:c7:ca:5d:eb:5e:
10:37:27:fa:4e:a4:69:35:95:06:9e:df:ab:84:0f:
e2:76:c7:22:8c:26:a6:1d:f9:81:32:66:db:9b:f8:
38:e0:88:85:3f:0b:d3:92:04:e5:c1:b8:c9:17:7a:
20:be:ce:a4:8f:dd:f6:8f:35:5c:4c:80:d9:af:6f:
93:7b:9a:fe:9b:1d:45:85:e2:41:f2:4a:c0:5a:08:
5f:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:01:00:49:39:AE:D1:AB:7B:E1:2F:3D:D9:0D:79:96:D9:EA:31:2E
X509v3 Authority Key Identifier:
keyid:18:DC:23:52:11:76:02:32:2D:74:1C:51:36:8C:A8:B8:DD:1A:3E:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GNwjUhF2AjItdBxRNoyouN0aPqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/0143cd-a814-4d48-a87c-d7c0e9393ea0/1/GNwjUhF2AjItdBxRNoyouN0aPqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/0143cd-a814-4d48-a87c-d7c0e9393ea0/1/GNwjUhF2AjItdBxRNoyouN0aPqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:5f:fd:c2:9d:83:70:a1:4f:43:39:db:8c:76:6e:c6:d9:ab:
f0:d0:67:24:ee:44:d2:19:85:eb:6c:0e:56:80:c1:01:16:f3:
e7:43:35:98:4a:7e:54:56:fa:17:5b:0c:36:75:36:3b:2e:32:
5f:6b:49:5b:c1:98:5e:c9:47:f8:c8:15:41:24:34:68:90:e6:
71:90:cf:d4:79:f3:f8:a6:54:7c:96:4d:7e:ae:e7:53:5d:08:
c7:4d:65:c1:70:96:1f:f9:7e:c2:d8:1e:3e:bf:5c:7c:46:80:
97:d2:8f:f1:cc:b8:a4:e9:52:1e:79:c8:df:d8:14:e5:8c:3b:
41:56:25:b7:a5:ff:1f:92:f5:ad:e0:4e:2e:0e:31:de:35:a3:
8c:8b:57:18:dd:93:61:26:f2:fb:ba:5c:a9:20:b5:9a:e2:a8:
9c:21:d8:6d:e3:0e:71:e1:e6:21:60:1e:3f:7d:5b:12:db:48:
26:3c:51:34:6e:42:cc:d3:a3:6a:58:0a:3c:a5:c8:f8:6a:ce:
38:a9:50:74:4a:55:3e:ff:ca:09:36:58:8b:a7:82:f6:bb:7d:
14:b1:8d:9a:20:12:4c:92:38:cb:4c:ae:81:02:40:36:8c:a8:
35:3c:e8:cb:ac:92:bf:a1:ba:49:5f:d5:43:91:6b:0a:36:d7:
61:13:c9:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:43:29 2026 by rpki-client