Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/G_FOjQs977AwQnATDRFHrg3ZLYs.mft
File: G_FOjQs977AwQnATDRFHrg3ZLYs.mft (raw, json)
Hash identifier: unkt8Nh86jZHXLuSjWh9ttq+jWTUE2Nvg3sBO5S3/oI=
Subject key identifier: E7:2F:55:D8:6A:15:5A:54:D4:C2:08:79:2F:D2:E8:F5:5E:27:C0:EE
Authority key identifier: 1B:F1:4E:8D:0B:3D:EF:B0:30:42:70:13:0D:11:47:AE:0D:D9:2D:8B
Certificate issuer: /CN=1bf14e8d0b3defb0304270130d1147ae0dd92d8b
Certificate serial: 019CABD92A94442EBDA340B8B4741F08AC53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G_FOjQs977AwQnATDRFHrg3ZLYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/G_FOjQs977AwQnATDRFHrg3ZLYs.mft
Manifest number: 0B3E
Signing time: Mon 02 Mar 2026 00:01:01 +0000
Manifest this update: Mon 02 Mar 2026 00:01:01 +0000
Manifest next update: Tue 03 Mar 2026 00:01:01 +0000
Files and hashes: 1: G_FOjQs977AwQnATDRFHrg3ZLYs.crl (hash: bXjrOqJZ1GZMmbWQEkysB3kuh3R+thb9cTvunQlrVlY=)
2: HM3veogcFYi0WJB7lr909iQ8ZfQ.roa (hash: rEWeHfmczSgGJR8/ER5dg8E/KF7D8W9GBFoejJSi06I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/G_FOjQs977AwQnATDRFHrg3ZLYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/G_FOjQs977AwQnATDRFHrg3ZLYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/G_FOjQs977AwQnATDRFHrg3ZLYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:2a:94:44:2e:bd:a3:40:b8:b4:74:1f:08:ac:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bf14e8d0b3defb0304270130d1147ae0dd92d8b
Validity
Not Before: Mar 2 00:01:01 2026 GMT
Not After : Mar 3 00:01:01 2026 GMT
Subject: CN=e72f55d86a155a54d4c208792fd2e8f55e27c0ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:28:a3:0f:97:c2:9a:8a:39:50:43:94:14:0b:
ce:f6:d5:1c:c3:f5:dd:04:aa:5a:7c:b6:8f:a0:ee:
bf:03:ba:3c:d7:2a:f6:c3:16:ee:4c:94:e6:a2:90:
64:b0:82:99:6a:74:78:bf:4c:27:34:8c:86:70:35:
c6:7b:3d:d5:ce:4a:79:8a:4d:5a:8c:91:eb:b6:47:
a1:cf:39:49:3c:14:c1:d6:9a:bf:8c:44:51:6c:df:
ed:c7:63:72:2b:a2:a3:1a:e8:b6:d6:39:f4:32:c4:
07:fc:2b:7f:b9:85:c9:10:81:36:04:c1:c4:3c:ea:
c1:80:5d:54:b2:2a:3b:42:d2:29:e4:cc:09:87:38:
70:4f:ab:ec:a8:50:66:52:df:7c:b4:43:1d:3e:12:
81:9e:cd:2e:ed:ea:24:a4:33:ef:99:69:b2:6f:52:
f0:6c:d7:7e:07:31:fa:f0:67:d7:5d:6b:c7:7b:bb:
e2:f9:fa:a2:16:02:f0:2a:aa:be:19:79:0b:72:ff:
60:7a:09:6c:b1:48:a4:01:9d:16:3b:ae:c2:b2:2e:
0c:91:1d:ea:39:4e:4d:43:cf:fd:c5:28:e4:6b:d5:
1a:50:c1:e0:cd:5a:67:81:66:fd:b6:95:f2:1b:b1:
2d:1d:a8:c4:d9:f9:b2:1d:57:38:a0:33:08:4d:0c:
34:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:2F:55:D8:6A:15:5A:54:D4:C2:08:79:2F:D2:E8:F5:5E:27:C0:EE
X509v3 Authority Key Identifier:
keyid:1B:F1:4E:8D:0B:3D:EF:B0:30:42:70:13:0D:11:47:AE:0D:D9:2D:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G_FOjQs977AwQnATDRFHrg3ZLYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/G_FOjQs977AwQnATDRFHrg3ZLYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/G_FOjQs977AwQnATDRFHrg3ZLYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:b4:7d:85:d7:b2:ea:18:51:de:3b:4a:81:1f:f9:9f:15:32:
b8:0b:ed:ff:8b:a3:cb:89:5c:c7:3f:2d:80:3f:ea:c9:38:29:
53:d3:77:eb:8f:3b:91:34:21:80:1a:f1:a0:53:27:d8:c0:32:
27:43:90:2d:71:6a:48:ed:9d:39:bd:2b:b8:b8:1b:16:10:b5:
01:34:b2:d8:bb:f8:a6:94:c4:24:9a:2f:0b:d6:2b:d2:bb:b7:
7c:92:d0:6d:03:df:54:5c:d8:94:3f:48:22:c1:93:3d:a6:32:
fe:cd:f7:11:de:51:52:8a:9b:2b:53:d7:40:57:3c:64:6d:e4:
37:b8:d9:6d:ee:b5:af:bd:c0:db:15:84:7f:69:44:fb:e7:ed:
82:5c:75:65:bc:93:88:db:aa:62:64:49:b4:07:9e:45:d2:93:
8e:48:06:0a:a3:ee:c1:7e:a0:d6:6e:3d:d7:04:24:a2:e8:16:
5e:0f:40:2e:fc:20:18:78:66:c0:f3:86:23:d2:d0:37:9b:be:
18:fb:cb:b6:b6:f4:bf:c2:80:f1:48:a4:af:08:61:67:ef:2c:
08:19:eb:23:f1:25:f0:c6:68:6a:4a:f4:d0:69:37:80:56:9f:
95:dc:fa:d1:24:59:26:d9:f7:94:97:7b:20:49:a6:fb:54:fa:
09:f7:58:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:56:04 2026 by rpki-client