Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/148eca-c39f-4673-886f-ecf82302f726/1/G95wrxU0lDVJRmSKzWQRY-KvGx0.mft
File: G95wrxU0lDVJRmSKzWQRY-KvGx0.mft (raw, json)
Hash identifier: gSCTV8OzBSM9yxbAKltPSYORCEYjuDfPzEjr6r9GOoQ=
Subject key identifier: 31:41:73:4F:7A:6D:9B:AD:F9:66:9F:3E:90:18:A3:73:F0:56:89:4F
Authority key identifier: 1B:DE:70:AF:15:34:94:35:49:46:64:8A:CD:64:11:63:E2:AF:1B:1D
Certificate issuer: /CN=1bde70af153494354946648acd641163e2af1b1d
Certificate serial: 019CAE6C515B8B3A3D137486C170BDECAE15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G95wrxU0lDVJRmSKzWQRY-KvGx0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/148eca-c39f-4673-886f-ecf82302f726/1/G95wrxU0lDVJRmSKzWQRY-KvGx0.mft
Manifest number: 0D53
Signing time: Mon 02 Mar 2026 12:01:00 +0000
Manifest this update: Mon 02 Mar 2026 12:01:00 +0000
Manifest next update: Tue 03 Mar 2026 12:01:00 +0000
Files and hashes: 1: 1-G_9qaTlg9_9ZXzg69NS2bmEGWE.roa (hash: +lDVdHNQmmTIYvQZgxKxtZPdzwOYciN1IB8yFnfGP4A=)
2: G95wrxU0lDVJRmSKzWQRY-KvGx0.crl (hash: DLH4v5H2UKn8lAkl6sVBR2xuAckGdGPb8+2mlNyp4Sg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/148eca-c39f-4673-886f-ecf82302f726/1/G95wrxU0lDVJRmSKzWQRY-KvGx0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/148eca-c39f-4673-886f-ecf82302f726/1/G95wrxU0lDVJRmSKzWQRY-KvGx0.mft
rsync://rpki.ripe.net/repository/DEFAULT/G95wrxU0lDVJRmSKzWQRY-KvGx0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:6c:51:5b:8b:3a:3d:13:74:86:c1:70:bd:ec:ae:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bde70af153494354946648acd641163e2af1b1d
Validity
Not Before: Mar 2 12:01:00 2026 GMT
Not After : Mar 3 12:01:00 2026 GMT
Subject: CN=3141734f7a6d9badf9669f3e9018a373f056894f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:19:16:73:55:1b:9a:dd:a0:7d:78:0e:b1:8f:
cf:ed:7a:72:20:19:e3:48:13:70:4c:f4:ab:96:d2:
70:e0:e1:f3:8a:ed:da:e0:82:14:ae:e6:4a:1e:6f:
cf:a9:ed:47:e9:0d:25:4e:23:01:56:ae:51:e2:44:
56:f1:22:4b:de:a3:5f:eb:a5:8e:c2:13:40:21:30:
51:05:14:42:70:37:42:98:b4:78:4b:1d:78:78:fc:
7e:3c:f3:05:2a:35:53:54:23:d8:a2:cb:a9:36:1f:
e5:83:1a:4f:fa:5f:a2:a6:7d:4f:4a:63:94:07:f0:
d8:23:12:f5:91:7c:ce:da:ca:12:4d:80:af:82:e7:
2d:12:77:7c:7d:cf:f3:5b:95:ac:a1:6e:bb:2f:77:
65:b7:fd:74:3d:cb:ba:d0:5f:24:dc:1b:69:17:35:
c8:3e:3f:61:50:cf:7b:95:07:ed:e5:0a:b5:a5:20:
be:88:88:6e:10:dd:7d:d1:d2:26:1c:bd:8a:7f:29:
98:b3:d7:a0:69:d6:86:93:9b:c9:f0:2f:10:b4:15:
37:bc:66:67:b8:13:0f:76:80:ca:33:f8:dc:c3:35:
19:ca:10:7d:a6:11:84:25:2a:cb:71:74:15:5a:39:
4c:a1:13:a6:8f:01:e9:ab:6d:20:bf:98:45:3f:ef:
98:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:41:73:4F:7A:6D:9B:AD:F9:66:9F:3E:90:18:A3:73:F0:56:89:4F
X509v3 Authority Key Identifier:
keyid:1B:DE:70:AF:15:34:94:35:49:46:64:8A:CD:64:11:63:E2:AF:1B:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G95wrxU0lDVJRmSKzWQRY-KvGx0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/148eca-c39f-4673-886f-ecf82302f726/1/G95wrxU0lDVJRmSKzWQRY-KvGx0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/148eca-c39f-4673-886f-ecf82302f726/1/G95wrxU0lDVJRmSKzWQRY-KvGx0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:5c:76:21:15:c5:f1:fc:e8:5b:33:20:c1:19:ea:fa:4b:71:
7c:6f:0b:4e:89:31:c4:5c:72:7a:83:3c:62:88:fa:60:22:a5:
1a:70:63:32:fa:dd:c3:b1:f7:c2:e5:1d:6c:d3:c2:30:6c:74:
24:05:c0:04:d8:d7:0d:c8:90:56:d4:68:11:70:1f:44:2e:58:
ee:37:1a:b8:8f:b0:f8:9b:de:28:be:9f:62:4b:dd:5c:61:62:
8a:60:e9:5e:65:65:3b:48:b6:7b:f4:8c:8a:0e:50:be:b1:11:
de:d3:26:b3:28:82:07:93:05:a1:1a:17:1f:15:52:f0:ab:b9:
20:e5:f6:86:12:d7:ce:fe:69:67:54:84:d9:31:f1:23:b1:bd:
14:76:34:68:60:fb:8e:73:90:ad:d8:32:81:0b:46:5e:ff:e2:
87:02:4e:6f:c4:0d:c2:d5:79:92:aa:a9:09:5f:9d:f6:35:60:
43:39:14:02:15:1b:3b:9a:f3:f7:eb:f7:bb:71:70:01:98:e4:
a0:ce:81:96:6c:37:d4:91:08:96:cc:c7:60:9a:d3:28:bc:bc:
50:ac:cb:56:cb:30:bc:31:09:cd:f6:0e:ca:56:88:d2:c8:a9:
e9:59:b6:c8:eb:ee:8e:a7:7f:e4:41:66:16:bb:d2:3d:d8:26:
18:b3:07:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:20:33 2026 by rpki-client