Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/c0b283-88b9-43cd-b08f-a8ea43253ed5/1/G6jqOiKIpq-PZKg4MALHQIVXmgc.mft
File: G6jqOiKIpq-PZKg4MALHQIVXmgc.mft (raw, json)
Hash identifier: V/L/+qd5AJA5SbmK2dBptOOLp0r9c2wwCFf3lALnwqo=
Subject key identifier: 0F:A8:7E:4E:DA:7B:DC:83:C0:34:85:E4:1F:88:DE:BA:C8:15:11:F1
Authority key identifier: 1B:A8:EA:3A:22:88:A6:AF:8F:64:A8:38:30:02:C7:40:85:57:9A:07
Certificate issuer: /CN=1ba8ea3a2288a6af8f64a8383002c74085579a07
Certificate serial: 019D9A3E85679E54B4C306164F1C2B7F64B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G6jqOiKIpq-PZKg4MALHQIVXmgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/c0b283-88b9-43cd-b08f-a8ea43253ed5/1/G6jqOiKIpq-PZKg4MALHQIVXmgc.mft
Manifest number: 175D
Signing time: Fri 17 Apr 2026 07:01:21 +0000
Manifest this update: Fri 17 Apr 2026 07:01:21 +0000
Manifest next update: Sat 18 Apr 2026 07:01:21 +0000
Files and hashes: 1: 1-DM1gd0DhDPlBxIiN43VyzDdiBc.roa (hash: OQEFPc3xHZLNWfUSpSuD4aqC+ajoqGZTHNMTBwY2RZs=)
2: G6jqOiKIpq-PZKg4MALHQIVXmgc.crl (hash: hnst/seSup5h+i2FcNd9Ak5atccqQW+Kpdm/2TGOtI0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/c0b283-88b9-43cd-b08f-a8ea43253ed5/1/G6jqOiKIpq-PZKg4MALHQIVXmgc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/c0b283-88b9-43cd-b08f-a8ea43253ed5/1/G6jqOiKIpq-PZKg4MALHQIVXmgc.mft
rsync://rpki.ripe.net/repository/DEFAULT/G6jqOiKIpq-PZKg4MALHQIVXmgc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:85:67:9e:54:b4:c3:06:16:4f:1c:2b:7f:64:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ba8ea3a2288a6af8f64a8383002c74085579a07
Validity
Not Before: Apr 17 07:01:21 2026 GMT
Not After : Apr 18 07:01:21 2026 GMT
Subject: CN=0fa87e4eda7bdc83c03485e41f88debac81511f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:9d:f0:3e:94:2b:b4:64:9e:8e:b8:32:5f:d3:
f0:66:16:f9:13:8b:79:5b:90:31:ce:d3:48:e4:cd:
10:13:cb:8e:39:99:09:db:38:ee:12:aa:e3:7c:d1:
1a:ed:c1:34:e5:90:df:af:ad:91:ad:68:67:f3:31:
18:80:6d:ce:c2:e7:d8:08:48:a6:c0:3f:57:5d:f8:
88:90:bc:61:b1:a6:55:5d:96:41:2b:7e:59:97:1c:
3d:55:2e:be:8f:ad:eb:53:08:ae:2d:1e:ee:40:5a:
99:b8:e7:67:9e:55:5d:fa:aa:58:01:78:0a:90:20:
ec:44:16:41:a0:1b:c6:f5:51:4e:cc:53:d9:04:7b:
fe:0c:fe:38:b2:6c:e3:ef:bd:d2:bb:1d:04:16:c6:
5f:d9:20:25:7a:02:24:68:61:16:44:6f:c4:13:72:
c9:86:3c:bb:87:4c:bf:36:f1:74:b2:c5:52:35:8c:
a6:e2:77:4e:49:95:8b:59:47:fe:64:2e:d2:17:78:
6b:76:26:79:ff:10:4e:39:19:06:1a:bf:e7:cc:49:
54:d3:a5:f6:82:c4:a6:a4:1f:5f:7a:51:13:12:25:
23:d4:58:b8:89:7d:08:fa:22:c3:a3:00:f5:03:b9:
f6:aa:b2:9b:3b:bc:a7:42:8e:4b:7b:27:da:e0:cd:
58:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:A8:7E:4E:DA:7B:DC:83:C0:34:85:E4:1F:88:DE:BA:C8:15:11:F1
X509v3 Authority Key Identifier:
keyid:1B:A8:EA:3A:22:88:A6:AF:8F:64:A8:38:30:02:C7:40:85:57:9A:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G6jqOiKIpq-PZKg4MALHQIVXmgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/c0b283-88b9-43cd-b08f-a8ea43253ed5/1/G6jqOiKIpq-PZKg4MALHQIVXmgc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/c0b283-88b9-43cd-b08f-a8ea43253ed5/1/G6jqOiKIpq-PZKg4MALHQIVXmgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:a7:02:57:99:fb:ac:b8:0d:ae:b1:c2:ed:f0:a1:7a:98:df:
96:2b:b9:c1:60:13:a2:28:60:ed:e2:46:f8:a1:d4:75:b7:09:
38:09:af:2a:fd:23:5d:65:29:c8:4d:43:86:c1:52:a2:d2:fe:
49:1f:9e:c9:93:c3:07:d7:2d:a6:20:73:39:0d:b8:5e:38:22:
c1:53:80:57:b8:4f:af:ff:41:8b:62:56:1f:55:c8:f3:07:b5:
4e:f9:06:de:6d:b0:96:9c:c0:4d:91:de:33:97:2c:70:05:02:
43:68:21:ba:88:45:cb:27:99:65:85:d9:03:bf:1f:8d:f4:a4:
39:e3:78:26:1c:29:da:32:26:8a:9f:61:d8:b5:28:c8:3f:ba:
be:fa:e7:d5:b4:75:54:0e:ca:2d:b7:62:e2:4a:9b:f6:30:e9:
7f:b0:fc:dd:f0:5a:f8:ab:1b:ef:15:45:3b:ea:a0:16:db:44:
39:da:1b:2d:51:a7:29:02:77:8e:79:75:ce:aa:ee:39:07:6f:
4e:18:8d:6e:37:ef:f0:77:72:d3:41:c1:24:35:d6:ca:56:ca:
90:36:77:a2:53:cb:58:34:ab:c0:50:a5:3f:47:84:29:36:ed:
87:41:2e:28:da:f4:01:81:d8:fd:10:41:d5:b4:6b:8f:83:9c:
88:da:c5:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:22:48 2026 by rpki-client