Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/8c6e96-d778-49dd-9e5e-3cf2b8002031/1/G9JpBH0C_otaKsnrjV_sB7GH7aE.mft
File: G9JpBH0C_otaKsnrjV_sB7GH7aE.mft (raw, json)
Hash identifier: K34SfS23p5yjWuGoWmweNZ094zt2lsVIInNqya6YfiY=
Subject key identifier: A1:CE:65:CD:07:2F:06:4A:22:80:CD:D9:49:EA:92:AB:57:65:B5:CA
Authority key identifier: 1B:D2:69:04:7D:02:FE:8B:5A:2A:C9:EB:8D:5F:EC:07:B1:87:ED:A1
Certificate issuer: /CN=1bd269047d02fe8b5a2ac9eb8d5fec07b187eda1
Certificate serial: 019CAC46B9762C5959D28AA16BE6450AE813
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G9JpBH0C_otaKsnrjV_sB7GH7aE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/8c6e96-d778-49dd-9e5e-3cf2b8002031/1/G9JpBH0C_otaKsnrjV_sB7GH7aE.mft
Manifest number: 0576
Signing time: Mon 02 Mar 2026 02:00:42 +0000
Manifest this update: Mon 02 Mar 2026 02:00:42 +0000
Manifest next update: Tue 03 Mar 2026 02:00:42 +0000
Files and hashes: 1: G9JpBH0C_otaKsnrjV_sB7GH7aE.crl (hash: ijFGUPLRB3aj8RXxYdVRaLyWl7kxuphkXvTZaoidflg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/8c6e96-d778-49dd-9e5e-3cf2b8002031/1/G9JpBH0C_otaKsnrjV_sB7GH7aE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/8c6e96-d778-49dd-9e5e-3cf2b8002031/1/G9JpBH0C_otaKsnrjV_sB7GH7aE.mft
rsync://rpki.ripe.net/repository/DEFAULT/G9JpBH0C_otaKsnrjV_sB7GH7aE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:b9:76:2c:59:59:d2:8a:a1:6b:e6:45:0a:e8:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bd269047d02fe8b5a2ac9eb8d5fec07b187eda1
Validity
Not Before: Mar 2 02:00:42 2026 GMT
Not After : Mar 3 02:00:42 2026 GMT
Subject: CN=a1ce65cd072f064a2280cdd949ea92ab5765b5ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:aa:ef:4d:98:91:9f:f2:7e:a1:40:fb:61:47:
43:f0:d9:35:fe:fd:c0:d7:00:87:c3:1d:3a:1b:02:
c0:cb:f2:ba:40:44:63:43:ec:0a:ba:96:d1:e7:73:
16:0b:ae:5c:91:a4:f7:a2:cd:39:4a:27:82:a1:bf:
80:01:e0:fe:f7:2a:e1:b5:88:93:0c:c7:b2:56:de:
70:92:5c:64:c9:37:4d:47:4c:89:8b:99:2c:6b:30:
18:83:9f:a5:a8:17:c5:a5:60:9e:98:9c:ac:dc:3b:
0a:89:8b:76:a5:dc:03:1c:0b:f4:6c:42:1a:96:31:
99:de:04:85:68:af:6a:e1:13:db:d5:89:13:96:af:
ac:e6:9a:91:ac:c1:3c:9c:ab:70:55:69:2f:2f:25:
95:62:25:91:7e:8c:8a:51:aa:a4:a5:43:74:39:aa:
66:1a:20:5f:4a:f4:dc:2e:72:ab:e5:ad:42:72:09:
f0:60:51:b5:7c:07:11:f7:05:eb:0b:a3:a8:0e:f6:
e1:ac:89:50:6e:fb:55:99:be:8f:14:26:d5:e7:45:
27:f7:80:01:cc:82:3e:e8:9e:be:1d:e7:78:87:19:
ae:02:bd:10:57:ea:6b:f6:de:08:c8:f1:ce:9b:b1:
1a:6b:58:29:c7:69:c2:3f:f9:9f:1c:4e:2a:46:44:
77:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:CE:65:CD:07:2F:06:4A:22:80:CD:D9:49:EA:92:AB:57:65:B5:CA
X509v3 Authority Key Identifier:
keyid:1B:D2:69:04:7D:02:FE:8B:5A:2A:C9:EB:8D:5F:EC:07:B1:87:ED:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G9JpBH0C_otaKsnrjV_sB7GH7aE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/8c6e96-d778-49dd-9e5e-3cf2b8002031/1/G9JpBH0C_otaKsnrjV_sB7GH7aE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/8c6e96-d778-49dd-9e5e-3cf2b8002031/1/G9JpBH0C_otaKsnrjV_sB7GH7aE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:7e:b1:5f:f6:ca:42:a6:9a:52:32:d7:0f:6a:05:eb:05:d9:
74:de:af:1e:f8:c5:96:0d:c6:b3:13:6f:c0:50:d5:e6:f0:76:
84:56:72:e1:b2:26:0b:bb:14:05:86:87:06:62:31:f2:51:c9:
0b:ea:03:c9:df:04:c1:12:ce:6c:1f:0d:72:81:a7:46:15:0a:
b3:7b:ed:48:a0:25:d1:f6:52:d9:f1:9c:46:a9:0b:38:df:c1:
5e:1b:43:30:2a:fb:5f:18:96:16:96:ee:a2:9c:c1:71:1a:9e:
69:e9:b6:8f:60:1c:97:5e:7f:37:3e:c0:6c:d8:46:17:9e:0b:
b6:17:87:18:24:d5:d1:f5:28:44:1b:b2:9b:8c:3f:5b:93:e0:
a9:82:c6:56:2d:2f:05:d0:07:b9:99:b6:78:ee:9c:b5:b5:ac:
7d:ed:da:8c:c2:81:6c:3b:0a:de:54:72:e0:50:09:0c:f8:8e:
36:df:75:7f:65:4a:71:88:2f:77:bd:0d:18:4b:47:c6:3f:54:
e4:bb:4e:99:1e:ac:9c:23:d8:a6:bf:6c:de:0f:c5:4a:8a:93:
59:0e:a6:7d:3e:d8:d3:92:6e:bf:b6:01:08:8d:08:be:03:ec:
e1:72:40:de:b7:3f:3d:cd:77:33:51:49:8e:d3:c3:1e:a6:a8:
d8:0a:c0:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:17:00 2026 by rpki-client