Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/839fd8-c28c-4112-979a-7ec402ecfb5c/1/G-u7vrbpIjF2ylod8UmJhgF-jig.mft
File: G-u7vrbpIjF2ylod8UmJhgF-jig.mft (raw, json)
Hash identifier: VXg05d71wBkpIuq1DgASFF8BzzMRci4FO7cINdl0d0E=
Subject key identifier: 0B:CB:8E:92:2E:F4:17:44:56:E5:29:7A:AC:D5:CE:C7:2D:FE:36:62
Authority key identifier: 1B:EB:BB:BE:B6:E9:22:31:76:CA:5A:1D:F1:49:89:86:01:7E:8E:28
Certificate issuer: /CN=1bebbbbeb6e9223176ca5a1df1498986017e8e28
Certificate serial: 019CA97C770A9DE8C287E3FE99393EAC31F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-u7vrbpIjF2ylod8UmJhgF-jig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/839fd8-c28c-4112-979a-7ec402ecfb5c/1/G-u7vrbpIjF2ylod8UmJhgF-jig.mft
Manifest number: 1725
Signing time: Sun 01 Mar 2026 13:00:32 +0000
Manifest this update: Sun 01 Mar 2026 13:00:32 +0000
Manifest next update: Mon 02 Mar 2026 13:00:32 +0000
Files and hashes: 1: G-u7vrbpIjF2ylod8UmJhgF-jig.crl (hash: uLm7efkW0EyoWdz6LvqAeaRkNFWOdUzJJWiPVhG7NiI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/839fd8-c28c-4112-979a-7ec402ecfb5c/1/G-u7vrbpIjF2ylod8UmJhgF-jig.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/839fd8-c28c-4112-979a-7ec402ecfb5c/1/G-u7vrbpIjF2ylod8UmJhgF-jig.mft
rsync://rpki.ripe.net/repository/DEFAULT/G-u7vrbpIjF2ylod8UmJhgF-jig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 13:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:7c:77:0a:9d:e8:c2:87:e3:fe:99:39:3e:ac:31:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bebbbbeb6e9223176ca5a1df1498986017e8e28
Validity
Not Before: Mar 1 13:00:32 2026 GMT
Not After : Mar 2 13:00:32 2026 GMT
Subject: CN=0bcb8e922ef4174456e5297aacd5cec72dfe3662
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:7a:06:be:e6:b5:de:57:77:b5:67:1c:ed:51:
98:bc:b3:31:5b:83:e8:1f:36:fd:60:7f:f8:90:f5:
c8:0a:12:1c:fd:76:cf:1b:b1:93:23:be:ff:9a:02:
a1:19:c2:7e:27:ef:82:1f:71:ed:d0:58:45:d1:b7:
99:e1:ee:2f:d9:c0:4f:a7:c1:c1:bb:47:50:94:fd:
23:48:de:c4:9c:b7:1c:63:cc:9a:bf:3d:46:f9:13:
11:98:7f:ac:88:9f:12:92:78:9c:9f:02:ee:b5:ee:
00:be:01:4c:53:78:ba:58:75:34:88:8f:2e:4d:c1:
da:01:1b:9f:b9:54:1b:84:3d:da:29:bc:25:13:12:
75:53:b4:59:3c:99:98:46:46:6b:77:d7:70:0e:ea:
f0:47:20:d5:7e:e0:06:c2:4b:74:b8:78:02:52:fa:
31:d5:82:34:ab:5e:02:06:7b:95:11:7f:7a:2b:b9:
19:88:cc:dd:23:69:2c:8c:2d:78:20:a0:08:e1:15:
f9:44:a5:37:5c:04:aa:b3:bb:9e:6d:de:e7:ca:2f:
65:36:96:50:f2:45:33:10:1a:b2:41:2d:21:f4:5b:
2b:a0:4e:40:40:f0:06:5c:88:88:bf:b9:85:3b:d4:
03:53:2c:48:1b:6a:cd:f0:42:4b:fd:e5:6e:90:84:
2c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:CB:8E:92:2E:F4:17:44:56:E5:29:7A:AC:D5:CE:C7:2D:FE:36:62
X509v3 Authority Key Identifier:
keyid:1B:EB:BB:BE:B6:E9:22:31:76:CA:5A:1D:F1:49:89:86:01:7E:8E:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-u7vrbpIjF2ylod8UmJhgF-jig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/839fd8-c28c-4112-979a-7ec402ecfb5c/1/G-u7vrbpIjF2ylod8UmJhgF-jig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/839fd8-c28c-4112-979a-7ec402ecfb5c/1/G-u7vrbpIjF2ylod8UmJhgF-jig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:14:f5:f5:e4:e4:30:64:22:0c:bf:d7:46:84:f7:cc:4c:c5:
4a:ac:95:67:88:6b:96:6f:07:4e:94:c4:10:19:15:24:f2:d6:
28:71:d6:4a:e2:39:27:03:6f:40:da:ee:04:e2:4d:1a:eb:ce:
ee:31:3c:f9:57:63:83:ee:d5:15:a5:c6:0c:f5:b4:8a:0a:4d:
f7:0c:01:48:62:6c:fc:0f:79:05:8f:fa:c4:8b:e8:29:e7:cb:
80:68:0b:74:90:1c:72:dc:40:2b:c4:bd:e1:82:73:e2:9a:9a:
7e:b7:73:66:b2:61:87:64:1a:dd:96:33:93:79:d4:6b:38:9f:
3f:75:41:4d:15:dd:cb:1f:74:5f:85:a2:95:b2:b6:ae:f3:ac:
68:9f:7b:4e:e8:f6:84:d9:0a:67:70:42:cc:0e:d5:f3:b8:00:
85:5c:6d:a9:08:0d:92:f9:ef:b5:3b:00:7b:b5:f0:62:33:d7:
7c:55:ef:35:69:ad:23:06:74:9b:c0:79:47:fe:6c:91:02:05:
5e:1e:c4:e0:70:82:db:8a:35:e5:43:aa:e9:c7:d6:bf:a8:9e:
25:be:31:aa:82:c1:a9:d1:44:26:40:62:c6:04:d4:aa:9e:da:
4c:be:2a:b1:5d:af:8a:58:0b:38:2a:f6:1c:f2:68:08:79:9c:
34:5a:cd:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:27 2026 by rpki-client