Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/c0b283-88b9-43cd-b08f-a8ea43253ed5/1/G6jqOiKIpq-PZKg4MALHQIVXmgc.mft
File: G6jqOiKIpq-PZKg4MALHQIVXmgc.mft (raw, json)
Hash identifier: FAjBcswb+h4bNRg5wsBjcGZQDYsPFdvppgu9ayp6pb0=
Subject key identifier: C2:FF:88:09:06:A9:42:D8:2B:96:48:FC:9F:7B:82:92:38:D9:7B:4E
Authority key identifier: 1B:A8:EA:3A:22:88:A6:AF:8F:64:A8:38:30:02:C7:40:85:57:9A:07
Certificate issuer: /CN=1ba8ea3a2288a6af8f64a8383002c74085579a07
Certificate serial: 019CACB524F46349DBD9496A7DB2198E375E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G6jqOiKIpq-PZKg4MALHQIVXmgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/c0b283-88b9-43cd-b08f-a8ea43253ed5/1/G6jqOiKIpq-PZKg4MALHQIVXmgc.mft
Manifest number: 16E2
Signing time: Mon 02 Mar 2026 04:01:18 +0000
Manifest this update: Mon 02 Mar 2026 04:01:18 +0000
Manifest next update: Tue 03 Mar 2026 04:01:18 +0000
Files and hashes: 1: 1-DM1gd0DhDPlBxIiN43VyzDdiBc.roa (hash: OQEFPc3xHZLNWfUSpSuD4aqC+ajoqGZTHNMTBwY2RZs=)
2: G6jqOiKIpq-PZKg4MALHQIVXmgc.crl (hash: 4aBnkqzLEOQposUKasSjgf1nKnGTue3F5sqYKeU1wmQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/c0b283-88b9-43cd-b08f-a8ea43253ed5/1/G6jqOiKIpq-PZKg4MALHQIVXmgc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/c0b283-88b9-43cd-b08f-a8ea43253ed5/1/G6jqOiKIpq-PZKg4MALHQIVXmgc.mft
rsync://rpki.ripe.net/repository/DEFAULT/G6jqOiKIpq-PZKg4MALHQIVXmgc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b5:24:f4:63:49:db:d9:49:6a:7d:b2:19:8e:37:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ba8ea3a2288a6af8f64a8383002c74085579a07
Validity
Not Before: Mar 2 04:01:18 2026 GMT
Not After : Mar 3 04:01:18 2026 GMT
Subject: CN=c2ff880906a942d82b9648fc9f7b829238d97b4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3b:1b:4a:31:19:a3:46:85:d2:95:30:d7:42:
38:80:6e:67:56:71:45:0c:22:2b:b4:40:a4:e1:27:
63:32:f5:f2:2b:d6:7c:85:d9:f5:f9:06:79:3a:4d:
41:d2:b8:21:3e:be:b8:45:0a:aa:c4:66:58:b3:16:
9b:fa:26:ac:a3:26:38:32:d0:15:8b:eb:d9:8d:d1:
4d:b1:cf:6b:9f:28:3d:19:30:6b:c7:de:fb:11:34:
8c:95:67:c4:f8:54:96:5c:8e:e3:db:a8:bd:21:e0:
41:ef:f8:cf:d3:32:2a:ef:1b:c9:46:dd:d0:df:3f:
30:2b:1f:01:93:d1:45:6c:73:1f:2f:ef:8d:79:f2:
55:ff:f6:a0:79:d4:20:37:b5:a9:1a:f3:ce:a8:42:
15:66:41:59:56:e2:4c:0c:f5:a0:ac:ba:f0:74:02:
50:96:b3:a0:9b:05:7b:77:38:d5:60:e6:c0:99:b1:
65:f0:af:63:5f:7b:57:c5:df:56:bc:f7:0a:ef:e8:
3e:f6:d3:96:fd:e6:5c:97:38:be:51:39:e6:c5:f2:
84:8d:f3:17:1b:4a:76:2d:65:45:79:3b:c7:8f:72:
51:e7:0a:b0:c8:fc:ee:b4:bb:e9:ee:15:cb:64:49:
63:89:8b:e9:f5:3f:d4:07:5b:7c:19:f6:86:e3:07:
19:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:FF:88:09:06:A9:42:D8:2B:96:48:FC:9F:7B:82:92:38:D9:7B:4E
X509v3 Authority Key Identifier:
keyid:1B:A8:EA:3A:22:88:A6:AF:8F:64:A8:38:30:02:C7:40:85:57:9A:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G6jqOiKIpq-PZKg4MALHQIVXmgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/c0b283-88b9-43cd-b08f-a8ea43253ed5/1/G6jqOiKIpq-PZKg4MALHQIVXmgc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/c0b283-88b9-43cd-b08f-a8ea43253ed5/1/G6jqOiKIpq-PZKg4MALHQIVXmgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:37:ce:c1:e7:c2:78:e8:33:75:be:96:87:f7:e0:3e:34:55:
fc:e4:a2:e8:59:3b:49:05:6f:23:7b:84:f4:3f:22:97:f3:39:
23:58:d3:46:9c:dd:0b:bb:3a:4f:93:c5:61:6f:b7:59:9f:a6:
c1:6f:ed:a7:61:6c:61:84:d0:7a:c3:de:41:a2:45:99:d1:7e:
33:5c:4a:d3:60:66:cc:61:ac:4c:a7:82:ca:e2:d1:b3:7d:60:
89:3e:80:a4:84:f2:9d:92:72:97:d8:d6:21:05:7f:77:fb:b2:
35:36:6a:c2:a6:9e:bb:90:ae:5d:9d:64:81:60:a4:5c:af:ff:
5f:83:38:02:33:05:29:da:e6:d2:04:78:e7:f7:d9:5c:d7:ea:
e1:b6:7a:b9:ed:00:8e:15:05:fb:d0:b7:73:52:95:a5:26:b5:
73:11:72:7e:8d:ce:9e:79:ce:e2:15:aa:f7:da:a5:0e:32:9f:
42:97:37:3a:07:88:93:96:5e:1a:73:f4:55:35:b8:cb:26:cc:
bb:f1:3b:2b:88:d4:04:fe:1a:e6:a5:aa:f5:57:34:44:c6:e8:
27:72:d0:b4:2d:1e:e2:43:f2:94:4b:fb:de:58:ca:1d:70:60:
e3:ed:75:21:ea:12:b1:a3:52:e5:18:22:2c:dd:ce:b5:b9:44:
1c:d8:19:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:46:53 2026 by rpki-client