Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/83cf01-6cca-48d1-9cbf-5ac6fdfdc0cc/1/G23wvAk_KYsENSLr1O3hl5MIGik.mft
File: G23wvAk_KYsENSLr1O3hl5MIGik.mft (raw, json)
Hash identifier: puM2msHchpAWI5wdGmfALG7qtIsNKhT5inSe9KVP3rc=
Subject key identifier: 40:43:D5:83:78:CC:A2:44:04:84:6C:99:F0:CD:A5:97:D4:7B:72:63
Authority key identifier: 1B:6D:F0:BC:09:3F:29:8B:04:35:22:EB:D4:ED:E1:97:93:08:1A:29
Certificate issuer: /CN=1b6df0bc093f298b043522ebd4ede19793081a29
Certificate serial: 019CAB3420A6BBD2AE4996F47E6DF719F0BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G23wvAk_KYsENSLr1O3hl5MIGik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/83cf01-6cca-48d1-9cbf-5ac6fdfdc0cc/1/G23wvAk_KYsENSLr1O3hl5MIGik.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 21:00:45 +0000
Manifest this update: Sun 01 Mar 2026 21:00:45 +0000
Manifest next update: Mon 02 Mar 2026 21:00:45 +0000
Files and hashes: 1: G-ycgm7YOR-sZa0cDT0Ey0HKpRQ.roa (hash: Rd+BM6THTi6+A/aDOIt4oFEHGR29dEm5uWS1GE/mueU=)
2: G23wvAk_KYsENSLr1O3hl5MIGik.crl (hash: qKmLvJauTUcrDcptv09Hp/qeIQuSd0bcgrxTifc5+F4=)
3: QfmRg80ICP0Wk2irMKs9YP6N-6U.roa (hash: wg6LRoWXAbVsyyU2ZxflvOEDF09pfNJqXiMahee/sYk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/83cf01-6cca-48d1-9cbf-5ac6fdfdc0cc/1/G23wvAk_KYsENSLr1O3hl5MIGik.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/83cf01-6cca-48d1-9cbf-5ac6fdfdc0cc/1/G23wvAk_KYsENSLr1O3hl5MIGik.mft
rsync://rpki.ripe.net/repository/DEFAULT/G23wvAk_KYsENSLr1O3hl5MIGik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:20:a6:bb:d2:ae:49:96:f4:7e:6d:f7:19:f0:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b6df0bc093f298b043522ebd4ede19793081a29
Validity
Not Before: Mar 1 21:00:45 2026 GMT
Not After : Mar 2 21:00:45 2026 GMT
Subject: CN=4043d58378cca24404846c99f0cda597d47b7263
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a1:9d:d1:07:a0:ea:cc:a8:a3:d0:e8:e3:61:
77:c0:b4:8a:b3:09:77:08:95:54:38:32:fe:88:fa:
9c:c9:5b:ee:ad:05:45:bb:6e:ee:f5:f9:aa:b7:42:
df:d1:fa:92:84:56:f1:7a:67:26:38:30:73:2c:a6:
6b:f7:09:22:7c:2d:fa:7c:69:d7:b0:a3:7f:0a:53:
92:49:15:d1:bc:9b:36:68:7f:66:af:8d:89:a9:70:
37:cb:76:b5:da:b3:9b:91:14:1b:e4:a3:e3:33:0e:
f7:de:37:85:43:8e:4b:16:17:60:a7:4f:0c:18:8a:
0b:09:51:91:04:f2:2f:f6:ec:44:25:55:30:cb:3f:
2f:9b:59:eb:9f:6b:63:92:90:3f:19:03:2e:40:c8:
7c:98:58:e5:98:a4:80:cc:21:3b:c0:78:e0:e3:58:
6a:ea:5d:30:0c:f9:a7:a9:e0:e0:36:33:65:dc:0a:
5c:2c:79:37:14:8e:9d:2f:dc:a6:fc:fe:c1:d8:3b:
53:e3:cb:0c:21:ae:50:50:76:55:76:22:e1:e7:9f:
81:14:91:fe:2d:c2:71:0a:6c:c0:d4:71:db:3f:45:
55:3d:c2:44:4f:16:ef:bf:e1:c6:4f:7c:5c:21:5d:
68:bc:c8:64:9c:22:08:5d:41:87:f1:fe:8d:77:86:
10:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:43:D5:83:78:CC:A2:44:04:84:6C:99:F0:CD:A5:97:D4:7B:72:63
X509v3 Authority Key Identifier:
keyid:1B:6D:F0:BC:09:3F:29:8B:04:35:22:EB:D4:ED:E1:97:93:08:1A:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G23wvAk_KYsENSLr1O3hl5MIGik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/83cf01-6cca-48d1-9cbf-5ac6fdfdc0cc/1/G23wvAk_KYsENSLr1O3hl5MIGik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/83cf01-6cca-48d1-9cbf-5ac6fdfdc0cc/1/G23wvAk_KYsENSLr1O3hl5MIGik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:a4:d8:f2:ad:98:13:cb:37:8c:be:a5:8a:98:67:38:a3:41:
63:0a:1e:fb:a4:0a:7d:b6:87:6f:58:2a:b0:72:64:e3:c9:17:
28:c3:d5:f3:df:18:cb:e9:3b:c9:3f:78:3f:79:6c:30:04:d0:
79:24:50:df:20:e8:cb:71:67:40:38:dd:d6:99:21:0c:04:ce:
42:be:51:86:8a:51:3e:92:51:d7:f7:12:09:7a:73:1d:31:45:
37:ad:bb:92:25:c9:d3:96:e5:89:e4:ed:02:61:6f:c5:fe:77:
8f:90:e5:e2:bd:bc:49:ec:df:0f:16:26:0a:05:3e:69:ae:17:
f5:c3:00:06:32:90:b6:48:6e:14:13:c6:3b:e7:08:d7:50:9e:
dc:7c:38:18:f2:a6:a3:ce:01:da:9d:b8:f4:44:6a:6d:31:7f:
47:68:b3:d6:aa:7b:a0:ec:9b:8d:f4:aa:90:e6:94:b5:1e:1f:
7e:7e:d9:c7:83:54:08:f9:ed:e2:3b:f2:e7:cf:48:48:5d:b8:
27:78:e3:5a:36:ef:f5:c3:59:f4:85:50:48:44:52:46:9d:b8:
36:40:30:55:b8:1c:16:1a:ff:3d:6e:50:aa:c8:7f:5a:47:fb:
00:0a:6e:7a:7c:58:bf:f2:d3:58:4a:b1:51:5d:b3:af:7f:97:
a5:a9:4d:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:32:38 2026 by rpki-client