Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/b88532-9974-4612-94c4-5e0777b04049/1/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.mft
File: GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.mft (raw, json)
Hash identifier: 2SR5Lt/Zub39rLtkCGCWnF9YQ9jB6Oe2Gi6ywcr9GQY=
Subject key identifier: 1A:C8:25:E1:74:C2:F4:C6:FE:99:FE:0A:60:33:DC:B7:EE:ED:8A:48
Authority key identifier: 18:8E:D4:88:4F:11:19:39:CA:6C:7F:0F:34:B2:79:2B:39:B9:34:23
Certificate issuer: /CN=188ed4884f111939ca6c7f0f34b2792b39b93423
Certificate serial: 019CAC7E691111DD1BFD9CBFDDCD1409775E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/b88532-9974-4612-94c4-5e0777b04049/1/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.mft
Manifest number: 17D9
Signing time: Mon 02 Mar 2026 03:01:31 +0000
Manifest this update: Mon 02 Mar 2026 03:01:31 +0000
Manifest next update: Tue 03 Mar 2026 03:01:31 +0000
Files and hashes: 1: 6LC4FnmLLsng6HVU2xR3jbERaDc.roa (hash: LpXh0JZ4HonUdcN7azN27CT2g+jjECs6HIXpWyOrLLQ=)
2: GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.crl (hash: Ie45pgqovmI04Kfai++UJnidkmH4/w55qIsy/CkvOlU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/b88532-9974-4612-94c4-5e0777b04049/1/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/b88532-9974-4612-94c4-5e0777b04049/1/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.mft
rsync://rpki.ripe.net/repository/DEFAULT/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:69:11:11:dd:1b:fd:9c:bf:dd:cd:14:09:77:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=188ed4884f111939ca6c7f0f34b2792b39b93423
Validity
Not Before: Mar 2 03:01:31 2026 GMT
Not After : Mar 3 03:01:31 2026 GMT
Subject: CN=1ac825e174c2f4c6fe99fe0a6033dcb7eeed8a48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:28:6d:e3:50:1d:58:6e:e5:df:81:ea:5f:b2:
f2:f2:a4:9e:84:c1:44:36:85:9c:d7:c3:9e:c2:c2:
fe:dc:37:66:9d:8d:88:f6:61:ca:e8:d9:4d:d1:18:
95:14:66:24:60:3f:12:57:48:a6:fb:55:ec:3a:bb:
d7:6b:13:d7:c4:f3:3c:24:bc:e2:c7:af:2f:2f:04:
94:b6:13:f1:75:03:4e:5e:a6:82:92:4a:fc:99:47:
79:65:e1:3c:e3:c9:7d:ee:d6:08:97:f8:37:e8:ff:
3b:c4:78:2c:61:d8:ef:c6:b6:9f:ab:f3:88:bd:24:
4c:a9:4b:a8:93:bf:b0:82:9b:77:50:5b:0c:0f:13:
e0:51:77:65:6b:dd:30:81:f5:ff:58:f4:71:3d:c9:
02:56:01:a2:ff:75:1f:dd:a0:f5:ec:a1:5b:fa:08:
c9:ff:b5:4d:7c:63:da:ec:cd:57:2c:09:c1:fc:a0:
b6:e3:5f:9b:5d:25:e5:2c:e8:51:d1:e5:f2:05:b2:
25:24:b1:f5:b8:f7:a8:29:13:77:ec:f2:53:ed:33:
83:05:54:b3:51:eb:9a:1f:1a:a9:31:35:94:e9:4b:
b0:c3:a6:46:3a:51:ff:ab:00:f9:ea:27:4f:49:01:
14:44:d2:ea:a2:c1:5e:da:0f:28:4c:03:68:0a:c6:
b2:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:C8:25:E1:74:C2:F4:C6:FE:99:FE:0A:60:33:DC:B7:EE:ED:8A:48
X509v3 Authority Key Identifier:
keyid:18:8E:D4:88:4F:11:19:39:CA:6C:7F:0F:34:B2:79:2B:39:B9:34:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b88532-9974-4612-94c4-5e0777b04049/1/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b88532-9974-4612-94c4-5e0777b04049/1/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:28:7a:64:9f:72:82:96:96:68:29:26:7b:70:cd:25:76:39:
2b:90:51:66:84:a9:32:fb:cd:9e:49:2d:13:7f:c7:54:4f:06:
81:2f:46:05:82:67:4f:66:61:50:a6:85:d2:e7:8d:05:e3:fe:
25:b9:b9:39:8c:75:f5:d7:0b:19:27:cf:cc:5e:dd:a3:78:b4:
0e:42:38:08:62:3b:8f:58:3d:2c:ef:c5:70:87:3a:bb:69:ec:
8d:b0:65:38:68:05:c9:cb:23:0b:4f:ba:56:a6:11:fb:61:a9:
d4:ae:ca:b4:f4:14:8c:5e:55:cf:42:56:c6:90:f4:2f:26:3f:
54:6e:53:2d:bf:7a:c2:2d:ec:2f:a4:c7:92:40:32:9e:de:28:
14:dc:a4:28:33:e2:d6:49:e4:bc:c8:bd:e6:63:3d:c9:88:1a:
41:b4:b5:f9:1f:a5:03:3a:7d:83:a8:97:2f:47:33:dc:ca:70:
bc:22:fc:90:3b:7d:0f:3e:87:d1:a2:5f:a3:2d:c7:f0:3c:f9:
fc:81:87:56:fa:90:9a:71:70:98:d6:51:7e:e0:4c:0a:cb:ef:
70:dd:1f:fd:f8:a5:2d:d2:2d:13:76:24:83:e1:e4:65:db:3e:
9e:d6:00:91:5c:a7:a5:14:58:a7:1c:7b:a6:2e:c8:57:f8:d1:
48:2f:c4:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:44:07 2026 by rpki-client