
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/c903f3-8246-4c4b-aa4f-ae6469ab3f40/1/giSLXgiFiWS6K1RzFSAV_VmR_fg.mft
File: giSLXgiFiWS6K1RzFSAV_VmR_fg.mft (raw, json)
Hash identifier: 5YKuBw+eqGez20xZYBu8gXKxW4v/FcN+DieL8bz1LFY=
Subject key identifier: 70:22:35:D4:67:AC:C4:87:E9:6C:DE:DD:E3:9E:35:8E:7A:14:89:0B
Authority key identifier: 82:24:8B:5E:08:85:89:64:BA:2B:54:73:15:20:15:FD:59:91:FD:F8
Certificate issuer: /CN=82248b5e08858964ba2b5473152015fd5991fdf8
Certificate serial: 019CADC7A2AF9BB50B5FD92649B4485E72A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/giSLXgiFiWS6K1RzFSAV_VmR_fg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/c903f3-8246-4c4b-aa4f-ae6469ab3f40/1/giSLXgiFiWS6K1RzFSAV_VmR_fg.mft
Manifest number: 17D8
Signing time: Mon 02 Mar 2026 09:01:07 +0000
Manifest this update: Mon 02 Mar 2026 09:01:07 +0000
Manifest next update: Tue 03 Mar 2026 09:01:07 +0000
Files and hashes: 1: giSLXgiFiWS6K1RzFSAV_VmR_fg.crl (hash: 7a1bDwdCamaXcBcW+Gl+G+sW94jxHayCqWb50cypHDg=)
2: zYEDrEOZNFZoMdlO3DAnxS5eqJc.roa (hash: LZDUp9nuJRfFK7K/b0GgwAZrAzR3hWtlaKiCODrTlMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/c903f3-8246-4c4b-aa4f-ae6469ab3f40/1/giSLXgiFiWS6K1RzFSAV_VmR_fg.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/c903f3-8246-4c4b-aa4f-ae6469ab3f40/1/giSLXgiFiWS6K1RzFSAV_VmR_fg.mft
rsync://rpki.ripe.net/repository/DEFAULT/giSLXgiFiWS6K1RzFSAV_VmR_fg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c7:a2:af:9b:b5:0b:5f:d9:26:49:b4:48:5e:72:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82248b5e08858964ba2b5473152015fd5991fdf8
Validity
Not Before: Mar 2 09:01:07 2026 GMT
Not After : Mar 3 09:01:07 2026 GMT
Subject: CN=702235d467acc487e96cdedde39e358e7a14890b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:25:09:34:53:bb:00:78:77:cd:59:f4:57:e8:
65:85:9f:1c:6e:91:20:8d:32:23:59:8f:55:a4:11:
da:7f:e7:e3:c3:fa:33:f2:ad:96:06:44:aa:92:97:
1a:78:bd:e5:25:2f:66:89:4b:01:2c:f1:69:4f:03:
79:60:47:04:0f:6e:ac:42:e2:3e:6c:13:35:6a:3f:
f0:14:24:0e:05:be:0d:02:5b:9a:33:45:c9:7a:3f:
c3:35:c8:64:35:d7:d0:b4:6f:da:17:b4:07:8c:39:
44:26:8a:11:ae:8e:dc:5b:0a:72:c7:e2:9f:3f:c0:
f2:ea:b3:77:6d:bc:75:2b:d3:66:e1:60:83:08:8b:
58:63:f7:59:a2:db:03:d2:d9:31:45:45:4e:a4:57:
25:8e:2d:a7:9b:d7:c1:1e:9a:db:c1:75:56:e0:21:
b9:b5:46:b1:53:cf:e0:08:c2:4e:c7:67:f1:f3:38:
13:fc:e4:6e:f8:dd:ca:cd:6b:af:61:6d:c6:bd:e7:
3b:ca:d5:a4:48:10:e3:12:3e:87:b4:d9:be:b5:ab:
78:7a:c3:14:d6:a8:75:c9:b8:f7:d5:67:94:21:99:
6e:d3:40:90:e4:39:74:22:1c:5b:16:b3:20:07:c7:
14:ca:16:f1:c2:3a:61:ba:ee:07:5c:08:37:68:59:
96:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:22:35:D4:67:AC:C4:87:E9:6C:DE:DD:E3:9E:35:8E:7A:14:89:0B
X509v3 Authority Key Identifier:
keyid:82:24:8B:5E:08:85:89:64:BA:2B:54:73:15:20:15:FD:59:91:FD:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/giSLXgiFiWS6K1RzFSAV_VmR_fg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/c903f3-8246-4c4b-aa4f-ae6469ab3f40/1/giSLXgiFiWS6K1RzFSAV_VmR_fg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/c903f3-8246-4c4b-aa4f-ae6469ab3f40/1/giSLXgiFiWS6K1RzFSAV_VmR_fg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:47:76:36:90:cb:a5:dd:0d:a0:d8:3b:1d:98:d5:14:ff:21:
e5:9b:01:62:9e:23:a5:03:f2:26:39:88:06:68:92:84:1d:d4:
0f:ba:b5:cb:53:75:e5:df:00:57:e3:a0:1a:56:ef:e8:5e:28:
93:0d:f0:05:83:c4:d6:ce:91:86:21:61:c9:f9:9a:56:cb:a0:
e2:3a:ac:79:e8:d9:27:d4:b6:1e:a6:e4:54:de:f3:36:2e:bf:
11:a7:81:97:b3:97:f5:b9:74:4b:f0:10:60:f5:38:c7:93:42:
47:f6:87:26:5d:5d:32:01:e2:f8:d4:5a:5c:37:44:05:26:b5:
34:e0:31:e1:19:e1:a8:11:66:57:e2:d7:df:29:ad:79:94:5b:
cd:6b:d8:55:39:73:0b:42:8c:6d:39:71:14:0a:97:d9:fe:65:
99:fd:9e:04:23:29:ce:82:8a:80:ac:a6:fb:08:f2:a9:a0:86:
a7:b8:36:9d:73:ae:f3:74:7a:bd:b9:a9:1b:67:90:32:29:8c:
3d:33:13:55:be:ba:ae:61:63:cd:7c:f7:5a:21:72:a5:fd:e0:
7e:52:0a:9c:61:a4:bf:fa:a1:b2:bf:d8:83:00:f5:7a:bc:82:
cb:bb:9f:aa:09:4f:e5:7f:bd:48:7e:cd:4c:b3:f7:7d:31:0a:
7f:7e:8e:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:35:35 2026 by rpki-client