Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/b88532-9974-4612-94c4-5e0777b04049/1/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.mft
File: GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.mft (raw, json)
Hash identifier: ccyyyIN46O9Dg37Yck3Z944tsy/7JzmNoT8UlEJJfrY=
Subject key identifier: 1E:F5:D7:B0:FB:D7:B7:D2:2D:42:34:2B:BC:F1:DF:39:9E:30:9E:1E
Authority key identifier: 18:8E:D4:88:4F:11:19:39:CA:6C:7F:0F:34:B2:79:2B:39:B9:34:23
Certificate issuer: /CN=188ed4884f111939ca6c7f0f34b2792b39b93423
Certificate serial: 019CAE6C8CC79C952657665E8375559410F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/b88532-9974-4612-94c4-5e0777b04049/1/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.mft
Manifest number: 17DA
Signing time: Mon 02 Mar 2026 12:01:15 +0000
Manifest this update: Mon 02 Mar 2026 12:01:15 +0000
Manifest next update: Tue 03 Mar 2026 12:01:15 +0000
Files and hashes: 1: 6LC4FnmLLsng6HVU2xR3jbERaDc.roa (hash: LpXh0JZ4HonUdcN7azN27CT2g+jjECs6HIXpWyOrLLQ=)
2: GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.crl (hash: uGH5AjCHoddAU755fiKRA7lgwBQ6ICTiMCf4z/+r8m4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/b88532-9974-4612-94c4-5e0777b04049/1/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/b88532-9974-4612-94c4-5e0777b04049/1/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.mft
rsync://rpki.ripe.net/repository/DEFAULT/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 12:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:6c:8c:c7:9c:95:26:57:66:5e:83:75:55:94:10:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=188ed4884f111939ca6c7f0f34b2792b39b93423
Validity
Not Before: Mar 2 12:01:15 2026 GMT
Not After : Mar 3 12:01:15 2026 GMT
Subject: CN=1ef5d7b0fbd7b7d22d42342bbcf1df399e309e1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b1:b4:d7:9f:16:28:63:f7:39:62:7b:c0:38:
88:5a:d7:06:17:f4:be:a8:2b:e6:2c:23:5f:3f:51:
87:78:63:09:54:55:8a:17:91:8e:e8:71:34:f0:82:
77:15:21:0f:68:17:24:76:30:a8:81:d1:cb:e8:02:
74:5c:ca:c6:5c:51:e8:a5:fa:77:29:21:ea:bd:08:
68:fe:f7:9c:05:57:65:21:03:1f:b2:77:ea:ee:58:
e7:1d:15:e9:35:36:2b:4a:40:84:ef:e2:07:d3:e3:
84:09:c2:dc:05:e9:c7:8d:ed:ad:67:30:3f:8d:53:
3c:26:72:a2:72:78:e0:d5:70:35:c0:cf:24:d4:52:
ae:37:89:12:41:88:d2:40:96:85:80:e6:24:47:4a:
3a:8d:27:59:44:06:e4:a2:22:ef:a9:d6:97:e5:1a:
05:e8:65:14:6c:ce:76:17:02:63:60:e1:af:c9:78:
bb:f3:72:f3:df:2a:96:77:3f:c1:c8:37:58:ae:fd:
a9:6e:50:6d:d9:4e:7c:6e:85:86:45:2b:b3:d2:c2:
be:ae:f1:c2:94:07:4c:f5:bd:9d:86:fb:b6:f7:55:
7f:0e:57:fd:92:f2:e6:a2:84:83:23:5a:99:5b:b9:
6a:cc:c5:06:2d:c2:49:7d:d5:59:ad:ce:f3:63:c0:
7c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:F5:D7:B0:FB:D7:B7:D2:2D:42:34:2B:BC:F1:DF:39:9E:30:9E:1E
X509v3 Authority Key Identifier:
keyid:18:8E:D4:88:4F:11:19:39:CA:6C:7F:0F:34:B2:79:2B:39:B9:34:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b88532-9974-4612-94c4-5e0777b04049/1/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b88532-9974-4612-94c4-5e0777b04049/1/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:64:c2:21:dd:1f:91:4c:a5:9e:e6:8e:e6:6f:b5:a4:dc:54:
9c:95:78:a2:f5:54:6e:28:42:9c:07:30:60:11:6c:c7:dc:5b:
5e:61:0b:b8:65:d7:b3:dd:03:e3:44:46:e9:6a:ab:fb:f9:5b:
7d:de:df:fd:9e:23:b4:bf:26:f7:9a:ad:3c:4f:99:ae:d3:59:
c7:ca:4c:68:e9:f9:9b:50:10:45:a1:c9:77:31:f5:0d:ed:ed:
8b:24:8c:98:4d:71:47:4b:bc:ef:10:ea:5c:1f:98:28:5e:5b:
8f:e6:37:ba:36:15:45:a9:7c:a4:86:ac:ab:9a:50:9d:64:15:
e6:0b:ab:0f:d2:d6:57:6a:43:e7:27:af:1f:38:a6:2a:a4:28:
90:ab:ae:7d:51:58:45:70:c0:41:8d:cc:dc:7e:5e:9f:7d:f8:
d2:7b:95:fb:e1:f2:b7:dc:37:54:85:8e:a4:8d:52:ac:dd:cc:
ab:a3:fe:8f:db:38:79:85:0c:b1:e2:c8:07:3c:e1:a6:6d:f6:
d3:e9:96:e6:47:5a:fc:40:d9:96:bf:cf:3e:b4:1c:d9:48:d7:
26:c8:21:74:41:e4:58:42:68:8c:29:a3:80:0a:fb:30:f7:85:
65:59:1a:93:0a:d3:7c:dc:7f:40:97:e2:bc:aa:f6:30:a1:df:
59:32:92:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:54:28 2026 by rpki-client