Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/a88a77-1e2c-4f04-8b8f-b0d296520d32/1/G2njMjeIqhYaYpcgauPnsZqf_GE.mft
File: G2njMjeIqhYaYpcgauPnsZqf_GE.mft (raw, json)
Hash identifier: CrCUnVZA/fRY14TRxzbnd1763VM+Lvo+2Wz+Lf5dNSY=
Subject key identifier: E8:35:39:5B:C0:84:68:FA:41:4F:74:1B:98:4E:F7:18:A9:2A:E9:0C
Authority key identifier: 1B:69:E3:32:37:88:AA:16:1A:62:97:20:6A:E3:E7:B1:9A:9F:FC:61
Certificate issuer: /CN=1b69e3323788aa161a6297206ae3e7b19a9ffc61
Certificate serial: 019CAAC675BC6C6874D2FE981986D1E6D194
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G2njMjeIqhYaYpcgauPnsZqf_GE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/a88a77-1e2c-4f04-8b8f-b0d296520d32/1/G2njMjeIqhYaYpcgauPnsZqf_GE.mft
Manifest number: 1842
Signing time: Sun 01 Mar 2026 19:00:58 +0000
Manifest this update: Sun 01 Mar 2026 19:00:58 +0000
Manifest next update: Mon 02 Mar 2026 19:00:58 +0000
Files and hashes: 1: G2njMjeIqhYaYpcgauPnsZqf_GE.crl (hash: N+kU9wjEKlTx8YesWjF2Ri0kDnrOquFGn58i8G7apgk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/a88a77-1e2c-4f04-8b8f-b0d296520d32/1/G2njMjeIqhYaYpcgauPnsZqf_GE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/a88a77-1e2c-4f04-8b8f-b0d296520d32/1/G2njMjeIqhYaYpcgauPnsZqf_GE.mft
rsync://rpki.ripe.net/repository/DEFAULT/G2njMjeIqhYaYpcgauPnsZqf_GE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:75:bc:6c:68:74:d2:fe:98:19:86:d1:e6:d1:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b69e3323788aa161a6297206ae3e7b19a9ffc61
Validity
Not Before: Mar 1 19:00:58 2026 GMT
Not After : Mar 2 19:00:58 2026 GMT
Subject: CN=e835395bc08468fa414f741b984ef718a92ae90c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:5b:b5:ef:04:16:3a:c5:ce:b9:e6:65:29:de:
3b:61:4b:8e:24:c6:1e:3b:56:21:43:5d:cf:14:b5:
6c:cf:1f:4d:86:cd:9a:71:84:43:c8:ae:87:ae:28:
f1:bc:de:88:b8:b5:16:6d:4e:10:20:67:b6:2c:09:
29:6c:ec:e6:17:b9:98:2f:5a:de:dd:31:b7:df:ff:
17:e5:29:fb:c5:d1:03:3a:97:05:dc:09:6b:66:f3:
af:4b:11:ea:73:b3:35:54:53:d4:e7:9c:24:8c:35:
fe:ea:53:73:c0:4f:40:8f:83:16:63:91:3f:aa:a2:
1a:d5:72:9c:5d:d3:c2:ae:1b:ec:d0:ed:87:a6:d3:
c8:d2:3f:7b:67:cd:76:57:97:fa:83:d4:b0:6c:06:
03:15:b2:bb:eb:53:4d:91:ce:12:ff:e8:d5:25:8c:
a4:14:6e:5a:7f:47:5e:a2:fc:c0:44:1f:c3:89:d0:
15:31:ba:10:3d:fb:97:71:57:37:1f:ab:f0:6f:15:
7c:63:ef:e5:71:58:28:d8:06:99:0c:76:f0:4f:25:
05:db:94:32:8d:1c:de:1b:2d:48:64:46:72:72:5d:
41:04:56:2e:0c:9c:d9:1f:af:15:11:c5:5a:46:42:
47:62:b1:a1:14:c8:5f:64:a5:19:91:6c:ad:df:89:
3f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:35:39:5B:C0:84:68:FA:41:4F:74:1B:98:4E:F7:18:A9:2A:E9:0C
X509v3 Authority Key Identifier:
keyid:1B:69:E3:32:37:88:AA:16:1A:62:97:20:6A:E3:E7:B1:9A:9F:FC:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2njMjeIqhYaYpcgauPnsZqf_GE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/a88a77-1e2c-4f04-8b8f-b0d296520d32/1/G2njMjeIqhYaYpcgauPnsZqf_GE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/a88a77-1e2c-4f04-8b8f-b0d296520d32/1/G2njMjeIqhYaYpcgauPnsZqf_GE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:73:e4:02:b3:68:ea:aa:b5:c7:31:5f:eb:41:b6:4e:1d:ad:
74:94:19:25:9c:38:12:9c:f9:51:7b:85:be:67:f0:7e:6a:20:
61:db:40:f6:bb:ab:b7:66:d7:5b:30:93:65:4c:70:9f:06:bc:
80:72:6d:86:cd:1b:bc:1e:79:60:70:07:10:9c:d0:96:8a:50:
f3:7e:be:d9:16:8c:b8:fa:a9:7e:1f:37:7a:80:89:9e:0f:96:
42:2d:09:a6:71:ad:ab:7e:57:04:c8:2a:7e:2c:d5:cc:70:b6:
de:bb:6e:d3:11:a0:b7:a9:c1:5e:93:cc:42:30:37:f4:0b:70:
ba:5c:14:d4:43:65:dd:00:ea:83:df:db:02:ee:df:ca:df:4f:
37:d5:11:d9:de:c7:67:57:a2:51:a4:ed:c5:3f:a4:b5:6d:81:
f8:0d:ee:d2:33:66:15:44:5b:21:0b:34:92:63:49:9d:dd:d4:
7e:3b:7b:c5:b5:66:48:66:ba:86:8b:f5:bb:30:3f:b5:b1:9c:
77:7a:43:93:71:0c:8b:d2:ef:88:6c:43:7e:a5:3a:20:10:ef:
c3:95:96:43:ff:d8:f5:1f:45:39:61:78:ef:7a:0b:98:b0:4a:
b1:b3:ce:8f:be:78:46:b7:42:1b:53:49:32:e4:fa:ef:a6:02:
e4:11:7c:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:15:56 2026 by rpki-client