Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.mft
File: G2I9umK4V8pz2KgKEZkPceBOfbY.mft (raw, json)
Hash identifier: Q6wrgtTY4Zz9UzrRdyw+YdR+NI6GO6W1PfU90DENPkI=
Subject key identifier: 17:A8:6F:B7:A1:14:E1:38:2D:29:B9:25:DA:32:5E:B6:4D:A1:AE:E8
Authority key identifier: 1B:62:3D:BA:62:B8:57:CA:73:D8:A8:0A:11:99:0F:71:E0:4E:7D:B6
Certificate issuer: /CN=1b623dba62b857ca73d8a80a11990f71e04e7db6
Certificate serial: 019CABD96FAF5C8940327D302966997DB3A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G2I9umK4V8pz2KgKEZkPceBOfbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.mft
Manifest number: 0FCB
Signing time: Mon 02 Mar 2026 00:01:19 +0000
Manifest this update: Mon 02 Mar 2026 00:01:19 +0000
Manifest next update: Tue 03 Mar 2026 00:01:19 +0000
Files and hashes: 1: G2I9umK4V8pz2KgKEZkPceBOfbY.crl (hash: KfL3a4cysVCZ6NyDpCedb6MuqDYDDqwzydAPj/qxLJk=)
2: _TZJcz_b9cq-8luNUL6eEZRU19o.roa (hash: XV8xsUjzIwVTNMvOzhZSqDe2iSUDHqLPyeEkThsb7Tw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/G2I9umK4V8pz2KgKEZkPceBOfbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:6f:af:5c:89:40:32:7d:30:29:66:99:7d:b3:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b623dba62b857ca73d8a80a11990f71e04e7db6
Validity
Not Before: Mar 2 00:01:19 2026 GMT
Not After : Mar 3 00:01:19 2026 GMT
Subject: CN=17a86fb7a114e1382d29b925da325eb64da1aee8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:fb:75:6a:53:fa:c2:67:3a:b5:8c:66:7a:af:
0f:4a:d4:43:c7:6f:98:63:d6:98:55:fe:0f:1b:5e:
97:f6:37:70:10:5e:8c:e6:99:d8:89:1a:38:f4:b5:
7e:1e:ae:80:1c:4b:6f:89:28:f2:5e:6e:68:64:db:
5f:a8:bd:8a:b4:e4:cd:bc:a8:e0:0f:12:47:36:db:
bd:60:85:0e:7d:95:2f:c7:a6:a2:d9:ab:d3:d7:ab:
76:cc:49:79:4a:13:e8:c9:3d:51:6b:13:04:56:7c:
fd:24:02:53:bb:33:ee:f2:2e:1d:90:d4:57:14:67:
ba:d6:58:8c:6a:ae:06:3f:ee:b2:9a:0e:60:1b:b0:
20:4d:38:de:a3:c3:04:eb:42:00:30:83:ab:21:0b:
50:5d:fd:32:0a:4d:df:36:53:0b:03:4b:63:ea:e4:
64:20:39:0d:d4:73:12:76:14:00:b8:c7:47:24:75:
30:87:ea:90:e4:66:cb:12:d0:93:ad:8d:72:b6:61:
27:d0:57:30:f1:40:6f:fa:ce:12:3e:ca:d6:da:d6:
d5:9e:b1:1f:e3:ec:e0:0f:8f:e8:2b:c8:3e:9e:8d:
09:30:ec:0e:c8:03:ff:57:8a:87:ec:02:25:e6:61:
a9:d6:90:a7:9c:0a:35:51:0a:86:b5:08:f3:eb:d3:
6c:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:A8:6F:B7:A1:14:E1:38:2D:29:B9:25:DA:32:5E:B6:4D:A1:AE:E8
X509v3 Authority Key Identifier:
keyid:1B:62:3D:BA:62:B8:57:CA:73:D8:A8:0A:11:99:0F:71:E0:4E:7D:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2I9umK4V8pz2KgKEZkPceBOfbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:87:69:f2:44:43:42:f5:b3:e2:9f:b0:c7:ba:a5:da:3f:81:
b6:40:74:6d:5f:7b:ff:99:79:a9:6c:0c:ea:51:97:32:70:94:
98:bc:1a:8f:cb:73:40:d2:f0:66:d3:71:c8:fb:d6:89:a1:3b:
c5:07:bf:02:73:c5:7d:8a:8d:33:8c:6a:73:d4:05:c2:b0:6e:
04:3e:79:33:3d:70:48:c9:95:a6:90:aa:2c:6a:d7:ea:65:ee:
f0:00:5c:00:e3:96:bc:34:11:94:37:99:d2:af:d5:20:c9:5e:
fa:1d:be:c8:6a:46:9a:65:c7:cf:1c:f3:60:d6:fd:fe:9f:df:
d4:5c:b3:d5:26:6e:bb:5c:a2:60:0a:4b:50:2b:2c:bb:87:e1:
d7:5a:28:db:44:bb:8d:6c:33:99:fa:5e:6d:3e:29:7f:32:e0:
d9:88:c2:25:ec:b0:b3:99:d7:28:7b:24:5a:ca:b3:ed:ea:f5:
b8:88:c6:4e:2e:9c:b8:b1:60:8f:04:20:64:cd:89:e7:c6:f3:
1b:1d:d0:20:b9:a8:fb:fb:5f:4c:12:f3:6a:71:0d:21:89:7c:
21:50:45:47:6c:dd:e4:2e:97:ee:fd:85:fc:29:fa:19:16:fd:
64:da:89:48:e0:fe:b3:cc:aa:24:bc:1c:9c:26:66:33:6b:8a:
20:c5:b7:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:38:41 2026 by rpki-client