Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/148eca-c39f-4673-886f-ecf82302f726/1/G95wrxU0lDVJRmSKzWQRY-KvGx0.mft
File: G95wrxU0lDVJRmSKzWQRY-KvGx0.mft (raw, json)
Hash identifier: +1zCxN4NsaCqP8lZ/d4STanya8pCI2V3cWHIJh44P2E=
Subject key identifier: 6D:C4:2B:4F:8A:A0:C5:92:91:9C:77:B9:62:67:F2:4C:8D:61:A3:E9
Authority key identifier: 1B:DE:70:AF:15:34:94:35:49:46:64:8A:CD:64:11:63:E2:AF:1B:1D
Certificate issuer: /CN=1bde70af153494354946648acd641163e2af1b1d
Certificate serial: 019D9DE420B14B63555E79AFC4868E18F92B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G95wrxU0lDVJRmSKzWQRY-KvGx0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/148eca-c39f-4673-886f-ecf82302f726/1/G95wrxU0lDVJRmSKzWQRY-KvGx0.mft
Manifest number: 0DCF
Signing time: Sat 18 Apr 2026 00:01:06 +0000
Manifest this update: Sat 18 Apr 2026 00:01:06 +0000
Manifest next update: Sun 19 Apr 2026 00:01:06 +0000
Files and hashes: 1: 1-G_9qaTlg9_9ZXzg69NS2bmEGWE.roa (hash: +lDVdHNQmmTIYvQZgxKxtZPdzwOYciN1IB8yFnfGP4A=)
2: G95wrxU0lDVJRmSKzWQRY-KvGx0.crl (hash: itjP8h+B7wZtsvDoEHaJR9a4ohvWScvHybinSebHLXE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/148eca-c39f-4673-886f-ecf82302f726/1/G95wrxU0lDVJRmSKzWQRY-KvGx0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/148eca-c39f-4673-886f-ecf82302f726/1/G95wrxU0lDVJRmSKzWQRY-KvGx0.mft
rsync://rpki.ripe.net/repository/DEFAULT/G95wrxU0lDVJRmSKzWQRY-KvGx0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:e4:20:b1:4b:63:55:5e:79:af:c4:86:8e:18:f9:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bde70af153494354946648acd641163e2af1b1d
Validity
Not Before: Apr 18 00:01:06 2026 GMT
Not After : Apr 19 00:01:06 2026 GMT
Subject: CN=6dc42b4f8aa0c592919c77b96267f24c8d61a3e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ed:9b:9a:70:5b:93:ef:40:32:55:26:f0:59:
ae:b9:a2:da:ae:c9:8a:ae:89:78:5c:7a:6c:84:01:
8d:20:f1:85:67:1a:53:55:61:f5:50:0e:58:1c:a7:
95:af:b8:b5:61:80:6f:1d:f7:76:d5:d5:b3:6c:c5:
c8:39:18:ba:a4:e2:1a:94:60:ce:7f:0f:00:39:01:
20:5c:24:62:2b:13:bb:12:a8:2a:e2:ee:1f:90:62:
11:de:06:9c:02:31:d3:ea:fe:ed:00:3b:c5:d2:ba:
a4:ec:6e:26:f3:df:11:57:dc:a0:b4:a8:fe:e2:4f:
c1:62:de:8b:13:f9:93:cb:dc:69:75:27:4a:7f:ba:
14:59:9e:bd:a4:a4:74:cd:fd:a7:25:44:0e:ea:0c:
a3:4f:6c:8c:4b:7a:99:22:04:11:96:4c:0b:89:64:
37:b3:44:c5:0b:bd:0e:62:4e:dc:2c:ec:a3:42:e6:
6a:4b:ae:ba:58:c0:dd:ac:1e:95:fe:6d:82:18:c4:
7d:93:a4:fe:fb:46:57:e2:25:23:a9:64:33:c2:f6:
4b:bc:7e:5a:c5:54:0c:a7:26:33:f4:59:5e:ee:2b:
38:24:b1:bc:71:89:74:6e:4d:1e:21:60:b8:a6:85:
a6:41:51:1a:ce:28:f9:76:fe:e0:40:5f:bf:c4:37:
59:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:C4:2B:4F:8A:A0:C5:92:91:9C:77:B9:62:67:F2:4C:8D:61:A3:E9
X509v3 Authority Key Identifier:
keyid:1B:DE:70:AF:15:34:94:35:49:46:64:8A:CD:64:11:63:E2:AF:1B:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G95wrxU0lDVJRmSKzWQRY-KvGx0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/148eca-c39f-4673-886f-ecf82302f726/1/G95wrxU0lDVJRmSKzWQRY-KvGx0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/148eca-c39f-4673-886f-ecf82302f726/1/G95wrxU0lDVJRmSKzWQRY-KvGx0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:5a:38:7f:a9:68:72:89:34:00:00:dc:d4:96:57:73:c4:cf:
e1:e4:0a:c4:76:5d:51:2e:02:78:93:b8:78:2c:fe:d2:6d:e2:
57:50:28:76:69:63:85:ed:5c:33:03:a1:e7:c5:62:44:4c:c5:
11:4e:58:ad:e9:fe:be:72:40:0e:96:03:15:20:5b:78:73:05:
cf:fd:d3:9c:e6:c8:8f:70:54:44:39:d9:ef:f0:ad:0b:ae:da:
58:8c:75:bb:0b:d1:43:84:e8:8e:a7:89:d3:c0:f9:51:15:47:
d3:2c:2f:84:d7:53:b5:92:e4:4e:a0:a7:51:22:95:ee:58:5f:
41:e3:3c:a7:55:58:6c:69:6d:96:2f:d2:59:4f:96:50:12:a1:
bc:8a:d5:83:75:b6:3b:f3:f5:b4:4e:c7:54:4f:7a:e0:51:79:
38:87:be:75:43:24:10:93:39:ed:b9:e3:7e:29:9e:01:cd:45:
5a:11:53:f7:0c:2f:51:38:8a:56:66:73:9a:5d:b4:66:80:40:
6e:8e:60:bd:c2:8b:81:69:5f:93:22:29:34:7e:fb:a2:6f:bc:
50:ec:52:80:38:94:63:42:2c:60:17:e4:5e:d4:5c:8f:af:88:
9d:89:ac:5d:80:50:58:3e:b7:ed:84:87:79:58:bb:63:9d:11:
00:a8:d2:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:51:37 2026 by rpki-client