Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/8c6e96-d778-49dd-9e5e-3cf2b8002031/1/G9JpBH0C_otaKsnrjV_sB7GH7aE.mft
File: G9JpBH0C_otaKsnrjV_sB7GH7aE.mft (raw, json)
Hash identifier: fZ0dary31vWOOUFP5fHfRfa5kBV7tzDnnBjR3WhF1Jw=
Subject key identifier: A3:D4:8C:33:A2:26:79:D3:48:DA:D0:8A:8A:3A:8C:A2:18:01:4C:A9
Authority key identifier: 1B:D2:69:04:7D:02:FE:8B:5A:2A:C9:EB:8D:5F:EC:07:B1:87:ED:A1
Certificate issuer: /CN=1bd269047d02fe8b5a2ac9eb8d5fec07b187eda1
Certificate serial: 019DA3789068819CA40E38FC08802F3D12CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G9JpBH0C_otaKsnrjV_sB7GH7aE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/8c6e96-d778-49dd-9e5e-3cf2b8002031/1/G9JpBH0C_otaKsnrjV_sB7GH7aE.mft
Manifest number: 05F6
Signing time: Sun 19 Apr 2026 02:01:20 +0000
Manifest this update: Sun 19 Apr 2026 02:01:20 +0000
Manifest next update: Mon 20 Apr 2026 02:01:20 +0000
Files and hashes: 1: G9JpBH0C_otaKsnrjV_sB7GH7aE.crl (hash: 1d3VcqqaxrKo256/EkaElgckHMKE+1FxLewDfZ5Psus=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/8c6e96-d778-49dd-9e5e-3cf2b8002031/1/G9JpBH0C_otaKsnrjV_sB7GH7aE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/8c6e96-d778-49dd-9e5e-3cf2b8002031/1/G9JpBH0C_otaKsnrjV_sB7GH7aE.mft
rsync://rpki.ripe.net/repository/DEFAULT/G9JpBH0C_otaKsnrjV_sB7GH7aE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:78:90:68:81:9c:a4:0e:38:fc:08:80:2f:3d:12:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bd269047d02fe8b5a2ac9eb8d5fec07b187eda1
Validity
Not Before: Apr 19 02:01:20 2026 GMT
Not After : Apr 20 02:01:20 2026 GMT
Subject: CN=a3d48c33a22679d348dad08a8a3a8ca218014ca9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:83:be:fd:02:ab:ba:60:2a:ca:0a:1b:69:db:
26:6c:d5:76:1b:b3:e8:ba:cf:79:17:fb:1a:91:96:
db:ec:36:17:e0:6d:f8:41:09:cd:34:88:a0:92:1f:
99:b8:11:5c:0f:6d:6c:97:95:51:86:fe:aa:45:83:
86:00:0c:75:2e:4b:fc:61:7e:f3:f8:3c:e5:77:8d:
6b:14:d4:e3:2a:49:12:b9:e0:dc:32:d0:8d:3d:eb:
81:8f:4a:d9:60:5e:f0:2d:01:8d:0a:18:e4:eb:34:
c3:e7:53:23:19:b2:7e:de:49:e2:b7:a7:57:b3:d7:
5c:8c:95:89:ae:b6:25:a2:3f:89:f1:6f:ab:81:c9:
a1:12:e1:ed:db:cd:d4:c0:f7:62:37:c0:a9:cd:ee:
7b:03:6e:12:6d:73:f6:01:b5:7a:bf:ec:62:dc:32:
bf:d4:58:1a:ed:91:85:9b:ff:27:2a:68:33:a4:ca:
79:d2:0a:5a:91:3a:4f:f7:f4:e0:d3:50:00:96:7f:
25:e4:f1:32:c0:5e:48:cb:80:f1:83:ee:89:f3:b4:
bc:f7:58:7e:4f:cb:a7:a0:c3:0e:ba:25:8a:67:12:
5e:d0:38:b7:de:16:0d:4c:22:25:19:34:0d:d4:b3:
b1:e1:3e:e0:22:d3:e6:4b:b3:a9:05:fe:41:d6:e0:
d9:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:D4:8C:33:A2:26:79:D3:48:DA:D0:8A:8A:3A:8C:A2:18:01:4C:A9
X509v3 Authority Key Identifier:
keyid:1B:D2:69:04:7D:02:FE:8B:5A:2A:C9:EB:8D:5F:EC:07:B1:87:ED:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G9JpBH0C_otaKsnrjV_sB7GH7aE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/8c6e96-d778-49dd-9e5e-3cf2b8002031/1/G9JpBH0C_otaKsnrjV_sB7GH7aE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/8c6e96-d778-49dd-9e5e-3cf2b8002031/1/G9JpBH0C_otaKsnrjV_sB7GH7aE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:be:5b:fa:e1:0d:e5:34:83:61:a4:5c:a4:ef:b3:8a:5a:54:
82:fd:9f:3a:d6:0e:4c:53:bd:7c:2c:ac:15:f5:bc:d2:b7:a8:
d0:06:24:9e:41:b2:d6:9d:99:ed:0c:51:c7:62:34:d8:01:77:
04:18:41:71:a7:5d:7b:22:92:02:1d:75:a7:cc:35:b8:af:27:
00:58:2a:ff:bc:33:a6:eb:6c:48:b9:c1:45:ac:96:f3:f1:dd:
0d:a0:e7:c5:d7:a6:51:68:51:8a:72:51:83:44:04:82:15:26:
97:0b:bf:ca:b3:2b:ad:3d:e3:8a:e0:06:0c:0a:5a:6f:db:e9:
32:6d:69:08:56:11:6c:a8:45:b1:16:56:c1:8c:10:eb:77:80:
44:42:90:24:38:d3:78:94:7c:6b:3b:3e:ec:c5:e7:33:5b:ea:
07:48:73:e7:22:e0:d9:f2:f0:f3:2c:69:45:dd:32:61:0f:1a:
7b:9c:9e:c4:ee:81:0f:82:99:b5:ba:b6:c9:55:f6:2c:26:0a:
ec:a1:7d:67:73:7b:60:21:65:76:51:01:30:93:5e:52:6a:80:
70:e6:13:e2:7b:ef:69:20:5e:b9:32:bd:60:e3:67:72:fb:53:
ad:64:44:f5:bf:dc:24:13:8e:64:45:46:8c:56:fa:47:1d:43:
e2:75:d5:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:46:00 2026 by rpki-client