Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/c77160-4a85-478d-a540-55ac2026653b/1/G6IBGTlu61biTNCpsu4l-i2kteY.mft
File: G6IBGTlu61biTNCpsu4l-i2kteY.mft (raw, json)
Hash identifier: wKXuQAwKbVFjeWELc/RP92i2CSCHuSC3s9APTym1LaE=
Subject key identifier: F3:46:78:00:A2:52:E8:A5:66:79:77:0F:97:C0:16:74:A1:A0:3D:C7
Authority key identifier: 1B:A2:01:19:39:6E:EB:56:E2:4C:D0:A9:B2:EE:25:FA:2D:A4:B5:E6
Certificate issuer: /CN=1ba20119396eeb56e24cd0a9b2ee25fa2da4b5e6
Certificate serial: 019CAB6ACEBFC3DB688826086FFD038F73A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G6IBGTlu61biTNCpsu4l-i2kteY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/c77160-4a85-478d-a540-55ac2026653b/1/G6IBGTlu61biTNCpsu4l-i2kteY.mft
Manifest number: 0BAD
Signing time: Sun 01 Mar 2026 22:00:29 +0000
Manifest this update: Sun 01 Mar 2026 22:00:29 +0000
Manifest next update: Mon 02 Mar 2026 22:00:29 +0000
Files and hashes: 1: G6IBGTlu61biTNCpsu4l-i2kteY.crl (hash: 9Ic8CFMaIgCoOkgQZWlLBPL61Fnn27cgqZNpe6sU1Rs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/c77160-4a85-478d-a540-55ac2026653b/1/G6IBGTlu61biTNCpsu4l-i2kteY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/c77160-4a85-478d-a540-55ac2026653b/1/G6IBGTlu61biTNCpsu4l-i2kteY.mft
rsync://rpki.ripe.net/repository/DEFAULT/G6IBGTlu61biTNCpsu4l-i2kteY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6a:ce:bf:c3:db:68:88:26:08:6f:fd:03:8f:73:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ba20119396eeb56e24cd0a9b2ee25fa2da4b5e6
Validity
Not Before: Mar 1 22:00:29 2026 GMT
Not After : Mar 2 22:00:29 2026 GMT
Subject: CN=f3467800a252e8a56679770f97c01674a1a03dc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:20:dc:49:17:96:f0:47:d5:d2:e7:a3:41:39:
e7:00:bc:43:2d:bd:8f:62:e2:8b:5a:e4:ff:8d:22:
20:c7:71:4c:30:ff:d1:cb:14:b9:a5:77:cd:f0:24:
1b:b1:b4:b1:44:e3:7a:87:92:65:ff:0f:d0:32:0d:
52:a4:f5:b1:6d:33:72:f7:b9:3e:3c:be:a8:3e:93:
cf:34:9a:6c:b1:9f:ab:30:9c:c0:ba:c7:06:f8:fc:
67:97:23:78:2f:ee:06:10:2a:ad:ad:bb:0a:17:fc:
0a:6d:09:3a:74:ef:68:90:95:eb:a2:40:63:77:fc:
cb:26:be:60:4d:6b:1a:60:a5:04:34:cd:a4:59:e6:
98:96:f3:7d:a0:5e:ba:3c:8e:bc:37:40:cf:d6:45:
26:b2:5a:ce:f6:5e:b3:f4:55:e6:31:93:b9:10:20:
6d:22:48:09:d5:c6:5e:7b:f0:ce:cd:32:86:f2:ab:
8b:37:40:07:73:0b:4b:65:b8:df:39:7f:7b:d9:5c:
71:04:9a:ee:b5:b3:87:a4:7d:cc:ab:fb:3d:5e:3b:
2f:82:e7:db:de:0c:5e:52:e2:89:fd:9e:73:96:01:
2d:d7:cc:d3:f6:99:7f:b8:9a:1b:39:ba:d4:2c:5a:
f2:21:ec:95:da:9d:31:f1:b7:92:db:a5:43:dc:82:
c1:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:46:78:00:A2:52:E8:A5:66:79:77:0F:97:C0:16:74:A1:A0:3D:C7
X509v3 Authority Key Identifier:
keyid:1B:A2:01:19:39:6E:EB:56:E2:4C:D0:A9:B2:EE:25:FA:2D:A4:B5:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G6IBGTlu61biTNCpsu4l-i2kteY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c77160-4a85-478d-a540-55ac2026653b/1/G6IBGTlu61biTNCpsu4l-i2kteY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c77160-4a85-478d-a540-55ac2026653b/1/G6IBGTlu61biTNCpsu4l-i2kteY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:5b:d7:3b:a3:fd:3d:b0:75:5b:92:c7:cf:2d:7e:27:49:eb:
9b:46:9e:20:e0:03:90:36:ae:5e:c0:73:69:a0:ac:53:01:54:
34:10:7b:78:66:60:d3:eb:99:c4:91:10:fc:20:de:d0:22:66:
6f:89:a4:38:b2:b2:66:f8:70:5d:2a:f9:0a:d1:78:06:b8:44:
30:37:1c:d5:12:1b:a1:df:49:2b:e4:7d:a8:82:7c:55:ba:c7:
36:65:99:c3:6d:b3:5f:9c:5e:90:9f:81:d6:17:83:f8:98:3d:
2e:c7:63:4b:14:46:f5:20:4d:ee:32:2a:f6:9a:2b:09:0f:f1:
d6:e7:01:39:3f:4d:9e:05:11:25:bf:7a:38:66:14:1b:3d:5c:
7c:16:07:b8:49:c8:a3:89:07:ba:40:14:d1:25:dd:e1:78:21:
09:bf:a0:b3:2d:b2:68:83:56:c3:79:e9:6d:35:fc:a5:a6:6a:
17:ed:71:96:8c:5e:67:d0:bc:1f:f8:86:3e:5c:ae:5d:fe:62:
84:d9:3c:82:41:03:1e:d2:5c:fc:80:ce:c8:b1:8b:06:0e:8b:
9e:d1:a5:b9:56:c8:70:81:20:b9:5b:92:f0:d6:39:8d:7c:19:
87:e3:2e:b7:c5:a0:4b:5e:19:af:0e:aa:3b:5f:80:9c:cf:8a:
5c:ec:1d:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:41:55 2026 by rpki-client