Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/2472a9-ff66-4dcf-ac82-30e540d5d3a7/1/G3573I4VumsubQlVJHa7G1WxWcM.mft
File: G3573I4VumsubQlVJHa7G1WxWcM.mft (raw, json)
Hash identifier: yzSJTSVuE20L7V7sGV/dXehKS6SLZx1SQJH5uA94re4=
Subject key identifier: 73:E7:52:22:62:9C:50:E6:2B:AE:80:F2:BB:FF:5E:FA:CB:1B:C7:D5
Authority key identifier: 1B:7E:7B:DC:8E:15:BA:6B:2E:6D:09:55:24:76:BB:1B:55:B1:59:C3
Certificate issuer: /CN=1b7e7bdc8e15ba6b2e6d09552476bb1b55b159c3
Certificate serial: 019DA3780B57C2279F376E0EA085EBEB0465
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G3573I4VumsubQlVJHa7G1WxWcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/2472a9-ff66-4dcf-ac82-30e540d5d3a7/1/G3573I4VumsubQlVJHa7G1WxWcM.mft
Manifest number: 1242
Signing time: Sun 19 Apr 2026 02:00:46 +0000
Manifest this update: Sun 19 Apr 2026 02:00:46 +0000
Manifest next update: Mon 20 Apr 2026 02:00:46 +0000
Files and hashes: 1: G3573I4VumsubQlVJHa7G1WxWcM.crl (hash: Nax0O//hnC+bKjUDuMNwbpZ5gqyRIgEWkmDRfhVmFsg=)
2: GTlzvN8hJSJgM1qwowoO5bn8qLU.roa (hash: 73NFakx+FzAAGVTAVqagiaRLqwrqzSJ1FS4nqNgvaXU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/2472a9-ff66-4dcf-ac82-30e540d5d3a7/1/G3573I4VumsubQlVJHa7G1WxWcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/2472a9-ff66-4dcf-ac82-30e540d5d3a7/1/G3573I4VumsubQlVJHa7G1WxWcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/G3573I4VumsubQlVJHa7G1WxWcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:78:0b:57:c2:27:9f:37:6e:0e:a0:85:eb:eb:04:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b7e7bdc8e15ba6b2e6d09552476bb1b55b159c3
Validity
Not Before: Apr 19 02:00:46 2026 GMT
Not After : Apr 20 02:00:46 2026 GMT
Subject: CN=73e75222629c50e62bae80f2bbff5efacb1bc7d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b1:2f:05:04:4b:5d:2f:91:23:9e:bc:d1:b5:
07:d5:64:4c:03:8c:c7:2d:64:97:d4:0b:4b:b2:96:
d4:81:30:ac:ce:40:92:ac:9b:a8:04:65:a0:d3:e6:
db:3e:d3:5f:ca:53:32:6a:4e:78:bb:6f:d3:2c:ea:
df:e3:3e:f8:41:4f:67:5a:c9:47:18:79:85:a9:19:
76:5f:23:9c:b0:ca:a8:db:91:5e:2e:47:db:60:46:
1a:cb:09:76:38:61:b9:80:81:48:c4:94:4a:a1:43:
bb:8b:a7:0f:72:cd:86:3a:e1:c1:17:e5:85:84:38:
ae:51:3c:eb:77:ab:bf:42:c7:29:05:61:f1:62:77:
cc:61:8a:ec:43:38:8b:37:eb:5e:bb:75:7a:e6:8e:
59:03:26:18:c4:9b:bc:7a:a4:fa:94:f1:be:76:e7:
e1:89:88:0a:1a:88:8d:f7:f7:a6:4a:81:f2:5a:87:
31:4b:65:96:bc:b6:0a:9b:11:9e:44:3f:0e:54:ef:
2c:29:73:c3:84:20:c9:e2:28:a4:1f:ff:0a:af:69:
08:41:3e:dd:d9:85:6a:ba:97:1d:78:de:01:5f:bc:
bc:23:42:f6:3e:af:c1:f0:d8:94:2f:53:92:9e:91:
e3:4a:21:8a:49:b4:dc:16:7f:75:b6:00:1f:74:c4:
74:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:E7:52:22:62:9C:50:E6:2B:AE:80:F2:BB:FF:5E:FA:CB:1B:C7:D5
X509v3 Authority Key Identifier:
keyid:1B:7E:7B:DC:8E:15:BA:6B:2E:6D:09:55:24:76:BB:1B:55:B1:59:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G3573I4VumsubQlVJHa7G1WxWcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2472a9-ff66-4dcf-ac82-30e540d5d3a7/1/G3573I4VumsubQlVJHa7G1WxWcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2472a9-ff66-4dcf-ac82-30e540d5d3a7/1/G3573I4VumsubQlVJHa7G1WxWcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:93:6f:d6:02:19:98:ef:1a:a7:33:3d:dd:9d:6d:3e:03:f3:
98:7e:1e:6c:f6:33:a3:7d:78:71:83:e4:69:a8:43:57:70:e6:
b8:82:a3:fc:6c:cd:3a:6e:a8:c7:fb:64:4d:40:3d:6d:c9:bf:
81:f8:59:94:d1:3f:b7:73:c6:32:3b:92:fa:0f:ce:fd:2f:6d:
db:59:22:f4:6f:14:36:aa:72:89:1c:ba:89:38:ba:cd:35:c4:
f6:87:19:6e:d9:ea:15:3e:14:a9:97:77:e4:26:ce:85:ee:d1:
1f:1b:63:d9:11:60:d9:d2:48:8a:31:f8:b6:75:ab:96:74:a1:
fb:fb:45:3c:d7:e8:37:52:52:48:d9:75:70:40:ca:8f:16:24:
8b:03:f6:c4:46:d9:64:89:c0:58:c8:22:bb:2c:8a:00:56:9c:
f6:a8:a9:81:5b:a8:87:2b:17:fd:dd:eb:17:f8:65:78:52:5e:
44:45:9a:58:06:cd:66:2d:51:2b:6c:2b:21:d4:68:5d:65:b0:
40:16:c3:de:c3:e5:e2:ce:e1:e3:7e:19:e8:7d:9e:20:dc:16:
9e:bc:10:6b:7b:cc:31:26:8e:5c:cb:05:48:ec:08:6a:0d:e9:
93:ea:aa:cf:95:4a:b4:76:58:fa:e3:de:d9:9c:50:3b:d5:a7:
28:10:4c:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:52:47 2026 by rpki-client