Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/5d6167-f02b-44db-b565-0e4382310ca5/1/G-9aoU0xQMfHxJiPGdqUMesaQPE.mft
File: G-9aoU0xQMfHxJiPGdqUMesaQPE.mft (raw, json)
Hash identifier: h/Vm2iLfoV4Nl4h8VtsFoVxNC7NqCtRmU7rnv5JpJv8=
Subject key identifier: 13:DB:08:03:FA:76:EA:79:6A:AD:EB:8A:2F:C8:B7:AD:5E:51:C7:6F
Authority key identifier: 1B:EF:5A:A1:4D:31:40:C7:C7:C4:98:8F:19:DA:94:31:EB:1A:40:F1
Certificate issuer: /CN=1bef5aa14d3140c7c7c4988f19da9431eb1a40f1
Certificate serial: 019CAEA3B7661B8810FF288AF51E3EB32512
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-9aoU0xQMfHxJiPGdqUMesaQPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/5d6167-f02b-44db-b565-0e4382310ca5/1/G-9aoU0xQMfHxJiPGdqUMesaQPE.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 13:01:30 +0000
Manifest this update: Mon 02 Mar 2026 13:01:30 +0000
Manifest next update: Tue 03 Mar 2026 13:01:30 +0000
Files and hashes: 1: BFSdsbEkPuA-YZXMwRkjbFSBL_4.roa (hash: 7mDFMoZc4IARD+ubLVsfgMsnY5+CrMhB4pwA/xSdkv8=)
2: G-9aoU0xQMfHxJiPGdqUMesaQPE.crl (hash: 4Z+mh1VvbCH56EEczfUIdhFJIK4l+5JgSorjKZvH5Mw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/5d6167-f02b-44db-b565-0e4382310ca5/1/G-9aoU0xQMfHxJiPGdqUMesaQPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/5d6167-f02b-44db-b565-0e4382310ca5/1/G-9aoU0xQMfHxJiPGdqUMesaQPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/G-9aoU0xQMfHxJiPGdqUMesaQPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:a3:b7:66:1b:88:10:ff:28:8a:f5:1e:3e:b3:25:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bef5aa14d3140c7c7c4988f19da9431eb1a40f1
Validity
Not Before: Mar 2 13:01:30 2026 GMT
Not After : Mar 3 13:01:30 2026 GMT
Subject: CN=13db0803fa76ea796aadeb8a2fc8b7ad5e51c76f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:56:ba:e1:fb:bb:25:d2:14:87:7c:bb:f7:41:
00:ef:dc:97:da:36:56:ac:11:19:47:e4:17:2d:dc:
c0:3e:56:e1:dc:63:66:0f:a5:3a:25:e0:e9:59:9a:
b7:be:b8:90:59:ea:02:7d:75:c1:9c:66:ab:c4:9a:
f5:6f:ea:7e:ad:87:85:35:a8:24:d9:31:46:fd:ae:
0b:a5:28:f8:96:9c:49:c9:a6:8a:05:24:a7:06:d9:
39:54:11:6b:ae:74:09:37:b6:91:23:09:11:d7:65:
ba:06:55:98:61:8d:71:ed:c8:a2:90:fe:55:de:f1:
8b:c7:21:7e:c3:cf:e4:f1:fc:75:74:9b:13:b5:01:
09:96:23:f7:d1:bc:1a:73:9c:b9:be:49:4f:ce:03:
68:e0:f7:b7:56:c7:2a:44:e9:01:75:1e:cd:17:6e:
ca:1d:1a:ed:7a:de:47:45:47:d9:2d:58:23:48:5a:
87:f1:8e:ee:c2:76:ee:3b:9e:93:db:28:50:40:4e:
fb:4f:9e:ac:60:00:7b:d7:cd:0b:ea:a0:ff:95:bc:
be:e3:79:2b:59:ff:24:af:c5:ad:ce:c3:d3:b1:07:
90:a2:7f:ae:d0:6e:b3:82:ca:83:a4:d6:d7:35:93:
43:f5:c3:23:88:e6:b3:d1:c0:0c:22:01:f0:f3:73:
4d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:DB:08:03:FA:76:EA:79:6A:AD:EB:8A:2F:C8:B7:AD:5E:51:C7:6F
X509v3 Authority Key Identifier:
keyid:1B:EF:5A:A1:4D:31:40:C7:C7:C4:98:8F:19:DA:94:31:EB:1A:40:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-9aoU0xQMfHxJiPGdqUMesaQPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5d6167-f02b-44db-b565-0e4382310ca5/1/G-9aoU0xQMfHxJiPGdqUMesaQPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5d6167-f02b-44db-b565-0e4382310ca5/1/G-9aoU0xQMfHxJiPGdqUMesaQPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:80:c4:9b:56:04:eb:05:9c:ad:dc:26:bd:f3:cd:91:3d:89:
0a:c0:f3:52:62:ee:a4:0e:8e:f8:12:74:53:ff:99:20:a8:22:
79:33:5e:ca:50:6e:ed:12:67:4b:42:2e:bb:55:65:22:59:54:
68:dd:b8:22:9f:55:66:31:4d:c7:46:3a:f5:d7:9b:57:b6:7a:
f4:21:d7:b6:92:83:b7:3c:03:9c:40:d6:68:13:a2:a0:24:f0:
96:1a:6d:d4:6c:cd:94:ab:ec:10:09:98:b6:e1:88:60:c8:eb:
35:31:d8:23:1c:98:ec:f2:1b:2a:c7:18:af:01:1e:11:f3:06:
08:97:dd:b0:37:d0:7d:4b:6c:70:30:e8:1d:95:98:30:3b:61:
63:29:78:e5:e8:4a:d9:70:a3:74:1f:64:fc:f0:ad:4c:71:15:
ab:35:43:a1:07:6c:66:02:74:45:7f:31:f9:a5:70:8c:ee:40:
a0:29:a6:44:c5:99:f2:cb:a4:5b:0c:ed:b1:21:b9:88:83:38:
ea:79:ed:c7:a2:63:74:87:91:6f:e1:1b:7b:d5:8a:0e:5c:70:
58:c9:2d:b7:7b:52:2e:8c:23:b3:9b:45:6d:db:ad:98:99:7e:
3f:ac:8a:44:04:e7:a5:2c:58:67:38:7b:d5:7a:71:12:c5:82:
dd:cd:23:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:02:29 2026 by rpki-client