Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/b2397c-b36d-46a3-a240-1d9a19f1295b/1/g_W9I77F0GOYM6kUGYXMV1OIbhY.mft
File: g_W9I77F0GOYM6kUGYXMV1OIbhY.mft (raw, json)
Hash identifier: 6w0I0BnP0YynBXV7k66zAEJJMtT5nFtO3/YyQhJ0Kuo=
Subject key identifier: 79:F0:14:F8:01:95:6D:CE:AA:43:2B:18:B4:C2:29:06:04:21:A3:59
Authority key identifier: 83:F5:BD:23:BE:C5:D0:63:98:33:A9:14:19:85:CC:57:53:88:6E:16
Certificate issuer: /CN=83f5bd23bec5d0639833a9141985cc5753886e16
Certificate serial: 019CABD96853773E7A6923532C6D4CE27B0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g_W9I77F0GOYM6kUGYXMV1OIbhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/b2397c-b36d-46a3-a240-1d9a19f1295b/1/g_W9I77F0GOYM6kUGYXMV1OIbhY.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 00:01:17 +0000
Manifest this update: Mon 02 Mar 2026 00:01:17 +0000
Manifest next update: Tue 03 Mar 2026 00:01:17 +0000
Files and hashes: 1: g_W9I77F0GOYM6kUGYXMV1OIbhY.crl (hash: 1yPZz7ajcjY7MxzDn3wWn7YSn1MR62UBjmpZUuELmvk=)
2: z2shUf2aqRLmVJq8eVLYTJ_YFbI.roa (hash: Edkz13QcBJuRKSQNfHEA5UGNYVjpEOKlRl0wbxqZyxQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/b2397c-b36d-46a3-a240-1d9a19f1295b/1/g_W9I77F0GOYM6kUGYXMV1OIbhY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/b2397c-b36d-46a3-a240-1d9a19f1295b/1/g_W9I77F0GOYM6kUGYXMV1OIbhY.mft
rsync://rpki.ripe.net/repository/DEFAULT/g_W9I77F0GOYM6kUGYXMV1OIbhY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:68:53:77:3e:7a:69:23:53:2c:6d:4c:e2:7b:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83f5bd23bec5d0639833a9141985cc5753886e16
Validity
Not Before: Mar 2 00:01:17 2026 GMT
Not After : Mar 3 00:01:17 2026 GMT
Subject: CN=79f014f801956dceaa432b18b4c229060421a359
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e1:5b:12:6c:8a:5a:b2:f1:6d:16:e5:fc:f1:
b2:59:6e:a3:e0:47:22:5f:a6:9e:89:79:3c:50:a4:
b6:97:34:92:f0:70:40:29:fa:66:20:55:c8:b1:e4:
9c:61:d7:63:20:c4:cc:9a:ad:09:90:65:62:e9:44:
b1:e1:3a:3b:0e:f8:24:6c:c1:b2:f9:9e:6b:3f:f4:
c4:c2:b2:9f:df:de:d5:5b:30:95:e6:73:ef:5d:8e:
ba:5f:f2:80:b9:a3:ab:65:37:ba:e8:8d:fe:a6:81:
73:5f:d7:8e:4a:67:18:5d:9f:27:93:3c:6b:ac:a2:
db:38:1a:0b:6c:7f:cd:15:30:9d:d1:a3:cd:9a:c8:
09:3c:d8:bd:73:34:b5:44:f5:55:2d:37:d4:31:f3:
5d:2a:d2:03:78:e9:57:24:4a:5c:d1:36:fe:be:54:
46:f7:01:0e:fa:c2:99:f2:1a:6a:4a:80:cd:0c:17:
8a:17:76:6e:27:dc:2a:2b:4b:9a:70:3b:b1:66:7e:
b7:ba:87:57:1f:25:7f:b2:51:61:6b:67:5d:d8:98:
4e:db:0c:3c:61:d0:5c:7b:8b:25:ee:c0:e2:47:29:
d8:42:59:b6:de:d1:d2:46:06:ea:c7:c6:01:b2:7c:
f3:30:a5:03:e0:fc:6a:26:4c:45:cf:ae:62:6d:8f:
96:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:F0:14:F8:01:95:6D:CE:AA:43:2B:18:B4:C2:29:06:04:21:A3:59
X509v3 Authority Key Identifier:
keyid:83:F5:BD:23:BE:C5:D0:63:98:33:A9:14:19:85:CC:57:53:88:6E:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g_W9I77F0GOYM6kUGYXMV1OIbhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/b2397c-b36d-46a3-a240-1d9a19f1295b/1/g_W9I77F0GOYM6kUGYXMV1OIbhY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/b2397c-b36d-46a3-a240-1d9a19f1295b/1/g_W9I77F0GOYM6kUGYXMV1OIbhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:8c:79:40:e4:e4:b2:63:53:10:5c:d5:92:e0:50:90:b5:81:
6d:10:30:8d:7c:fe:87:a8:e2:a4:55:21:a7:ae:c2:02:2a:ae:
20:71:eb:35:ed:37:23:6b:bc:36:b5:7d:04:5c:10:29:f2:a3:
40:25:a2:c8:3a:1c:e5:46:ba:4e:d8:59:35:cf:4c:58:db:00:
25:ac:1f:34:88:2b:74:f4:9e:87:8a:e3:fe:34:ac:b9:0a:31:
4a:93:5a:b6:59:4d:d0:32:72:6c:1a:bc:85:b2:2d:96:b3:38:
2b:e5:95:50:b5:c7:bf:88:3f:a0:53:c4:5d:c3:7b:8e:f9:0d:
e8:b5:5c:a8:65:c7:43:5b:0d:67:6b:9b:5e:b7:aa:68:80:ce:
2f:31:a7:6b:e3:76:ec:99:e4:b7:c2:b7:15:4a:b7:b0:dc:bf:
91:ab:5b:b4:df:e9:28:3a:0e:fd:06:b6:d0:bd:ca:dd:d5:fc:
17:17:00:e8:b2:e5:94:80:94:9e:03:6e:0c:d5:ba:d0:25:c8:
12:0a:18:08:3a:99:0c:7b:a8:ae:3f:fd:4d:3a:53:87:81:d7:
1f:3a:af:8b:18:30:0a:6e:59:a3:4c:ee:db:ed:9b:d7:9c:76:
26:a0:45:9f:9d:35:86:f7:fb:51:10:52:be:6d:36:9a:5a:26:
14:7d:ed:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:11:46 2026 by rpki-client