Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/c77160-4a85-478d-a540-55ac2026653b/1/G6IBGTlu61biTNCpsu4l-i2kteY.mft
File: G6IBGTlu61biTNCpsu4l-i2kteY.mft (raw, json)
Hash identifier: 2ecuavHrZu6I68zJimCbS+5/+mE0sd4aqPBvG4NNl3A=
Subject key identifier: 2E:45:8A:24:0E:83:DB:8A:DC:90:49:D0:37:25:EA:DB:E9:91:F2:6E
Authority key identifier: 1B:A2:01:19:39:6E:EB:56:E2:4C:D0:A9:B2:EE:25:FA:2D:A4:B5:E6
Certificate issuer: /CN=1ba20119396eeb56e24cd0a9b2ee25fa2da4b5e6
Certificate serial: 019D98F423F0AB017358259F7BBDB55E0AEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G6IBGTlu61biTNCpsu4l-i2kteY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/c77160-4a85-478d-a540-55ac2026653b/1/G6IBGTlu61biTNCpsu4l-i2kteY.mft
Manifest number: 0C28
Signing time: Fri 17 Apr 2026 01:00:29 +0000
Manifest this update: Fri 17 Apr 2026 01:00:29 +0000
Manifest next update: Sat 18 Apr 2026 01:00:29 +0000
Files and hashes: 1: G6IBGTlu61biTNCpsu4l-i2kteY.crl (hash: 45d0/OGJzBF2CHTHnQpZj1SSS8t9pqRLjHwmftlSZZg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/c77160-4a85-478d-a540-55ac2026653b/1/G6IBGTlu61biTNCpsu4l-i2kteY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/c77160-4a85-478d-a540-55ac2026653b/1/G6IBGTlu61biTNCpsu4l-i2kteY.mft
rsync://rpki.ripe.net/repository/DEFAULT/G6IBGTlu61biTNCpsu4l-i2kteY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:23:f0:ab:01:73:58:25:9f:7b:bd:b5:5e:0a:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ba20119396eeb56e24cd0a9b2ee25fa2da4b5e6
Validity
Not Before: Apr 17 01:00:29 2026 GMT
Not After : Apr 18 01:00:29 2026 GMT
Subject: CN=2e458a240e83db8adc9049d03725eadbe991f26e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:df:00:3d:84:9c:69:c6:3c:d8:a6:35:88:04:
d7:10:25:fe:a7:20:b2:ac:4c:b6:d3:c6:64:58:90:
6d:7d:4b:a8:be:d8:c7:6d:e3:24:08:57:08:48:fe:
1c:42:c3:c1:2b:b5:34:39:40:8e:ff:de:69:de:ab:
96:a4:cc:80:05:fd:73:74:61:49:58:69:51:56:b5:
69:7d:a0:19:9f:df:2f:e5:8d:d0:8d:af:aa:d0:db:
c2:97:36:03:79:fc:a5:59:1b:9c:6f:b0:8f:80:56:
31:f1:c8:83:38:47:ab:ba:b8:dd:60:1c:2f:74:a9:
f6:1b:bf:7c:56:6d:a0:8a:0a:fc:59:71:77:93:52:
41:f4:2f:d5:59:7e:09:1f:b1:0c:53:8e:d6:79:cd:
cb:18:3d:0e:cd:5b:46:36:b5:83:cd:13:03:68:43:
4d:76:6e:9f:d0:49:2e:f1:e2:42:1c:5d:54:b1:5a:
c9:38:11:10:80:b3:af:f2:de:fd:d9:13:22:54:bb:
f5:ed:e7:4d:b5:e3:f1:9f:d2:23:4c:b6:fe:50:f3:
90:1b:8c:1d:07:9a:4e:4d:55:46:12:7d:99:ed:6c:
89:2e:e5:eb:8d:6d:91:47:83:df:1c:bd:1a:be:25:
75:4b:30:0c:ed:04:c2:38:5e:54:f1:b8:64:8c:fd:
9a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:45:8A:24:0E:83:DB:8A:DC:90:49:D0:37:25:EA:DB:E9:91:F2:6E
X509v3 Authority Key Identifier:
keyid:1B:A2:01:19:39:6E:EB:56:E2:4C:D0:A9:B2:EE:25:FA:2D:A4:B5:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G6IBGTlu61biTNCpsu4l-i2kteY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c77160-4a85-478d-a540-55ac2026653b/1/G6IBGTlu61biTNCpsu4l-i2kteY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c77160-4a85-478d-a540-55ac2026653b/1/G6IBGTlu61biTNCpsu4l-i2kteY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:59:6f:9d:91:c2:dc:e9:64:22:ae:7d:e7:b8:71:45:4f:84:
5a:53:70:20:00:cb:c8:c0:b9:9e:bf:6b:92:f6:19:67:f8:e5:
62:ea:98:ee:e5:49:a2:e4:2a:7e:d0:7f:00:bc:d4:2c:c7:be:
ab:de:0b:40:61:a9:45:62:12:7d:de:53:00:e6:e8:9b:e6:b1:
2f:8d:1a:f5:63:43:0b:54:eb:aa:b0:40:44:dc:b0:63:cf:1f:
fa:53:9b:45:ff:d0:63:e4:9f:5d:65:77:0a:99:cd:68:a5:e0:
cd:9c:7d:1f:b7:b0:53:83:e9:3d:2e:e2:80:a6:2d:35:10:8e:
fe:7b:f4:55:a8:de:e9:82:66:85:85:9d:17:34:2a:24:83:22:
85:0c:c3:2c:05:a5:dc:9b:ca:a1:b6:bd:90:92:c6:dc:eb:a5:
28:a1:9b:87:a5:ab:28:14:f9:9a:63:ec:a4:82:6a:d3:a1:91:
6a:50:1b:31:b6:e5:ee:27:e6:d6:5e:ab:b6:06:e8:14:60:75:
f3:f2:82:b1:c4:4a:3b:1d:2a:4e:f7:a4:be:89:4d:1d:e0:13:
2e:13:09:29:5e:3c:47:5a:ae:4a:4a:dd:47:f5:55:76:e1:df:
02:ed:0a:62:93:0e:c3:e6:f5:02:60:ba:cb:84:1e:54:d8:9c:
cd:37:ed:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:47:13 2026 by rpki-client