Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.mft
File: G2RtQs6J1Ak-Ssknp_I283pRq-I.mft (raw, json)
Hash identifier: LJ5uxVmME+9t9F2tWzsaG6LLA1aa0hkhgrIvXs54XR8=
Subject key identifier: 15:64:80:98:CA:95:EA:E0:8A:0C:77:43:C5:66:96:EA:59:91:C5:3E
Authority key identifier: 1B:64:6D:42:CE:89:D4:09:3E:4A:C9:27:A7:F2:36:F3:7A:51:AB:E2
Certificate issuer: /CN=1b646d42ce89d4093e4ac927a7f236f37a51abe2
Certificate serial: 019CAAC7185748A4F61FD7ABA01A32005A37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G2RtQs6J1Ak-Ssknp_I283pRq-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.mft
Manifest number: 106D
Signing time: Sun 01 Mar 2026 19:01:40 +0000
Manifest this update: Sun 01 Mar 2026 19:01:40 +0000
Manifest next update: Mon 02 Mar 2026 19:01:40 +0000
Files and hashes: 1: G2RtQs6J1Ak-Ssknp_I283pRq-I.crl (hash: ZFLvd4srMkw8OqjirdqUWCCZH4O6am0L1guXzUOVJdU=)
2: buasPl807dGAfqgw1urBhY4Km5w.roa (hash: PQav8NXXwoaYuBOPi54S+Cjky9Sn3BtCmVplgakM7xk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/G2RtQs6J1Ak-Ssknp_I283pRq-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c7:18:57:48:a4:f6:1f:d7:ab:a0:1a:32:00:5a:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b646d42ce89d4093e4ac927a7f236f37a51abe2
Validity
Not Before: Mar 1 19:01:40 2026 GMT
Not After : Mar 2 19:01:40 2026 GMT
Subject: CN=15648098ca95eae08a0c7743c56696ea5991c53e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:cc:6d:24:93:cd:b4:31:32:55:56:02:b8:79:
1b:fe:27:68:c0:de:45:6e:7b:70:dd:dc:01:bf:23:
f9:6b:dd:a8:17:cb:29:72:b1:26:fa:0e:aa:4a:fb:
f6:f7:9f:b6:68:64:f2:a1:12:44:61:e2:da:12:ae:
37:47:7a:c6:ef:9d:96:7b:c0:4a:bd:c6:72:2a:1e:
aa:93:43:06:62:79:13:fb:82:2b:3c:ea:0a:42:21:
69:da:5b:0a:a6:dc:ec:62:e2:b3:69:ea:99:43:36:
da:3b:84:72:4a:10:4c:2d:90:48:e8:c7:32:f3:6f:
a1:4a:14:bd:28:17:5d:ad:aa:37:da:ba:f5:01:db:
9e:d8:37:aa:50:44:9d:81:c2:7c:a0:a4:f1:d0:11:
a1:5e:37:75:3d:3d:b9:9d:72:16:fb:57:3e:5c:47:
2a:57:cd:04:e5:63:51:6d:d1:4e:36:20:1d:eb:09:
4a:87:1b:cc:95:82:42:25:20:55:c9:36:ff:12:a7:
85:81:0c:56:9f:3f:86:8d:b0:61:a1:a8:cd:b5:ed:
3f:4e:73:e3:8d:fa:b8:e7:c0:67:2e:f2:34:10:b4:
63:3b:e9:29:a2:72:40:8a:0b:b8:7d:f8:40:11:d5:
fc:b3:9b:85:97:80:9f:7a:00:0d:8c:c1:68:fc:ea:
6f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:64:80:98:CA:95:EA:E0:8A:0C:77:43:C5:66:96:EA:59:91:C5:3E
X509v3 Authority Key Identifier:
keyid:1B:64:6D:42:CE:89:D4:09:3E:4A:C9:27:A7:F2:36:F3:7A:51:AB:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2RtQs6J1Ak-Ssknp_I283pRq-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:53:ff:dd:3d:c2:7b:0b:b9:cb:a4:1f:0b:34:5b:60:5c:42:
db:b7:89:a0:b2:62:e6:d6:98:ea:b4:a2:8e:11:e7:7f:84:0c:
2b:cf:2a:82:3f:8b:f2:72:a8:4e:bd:c0:b2:03:a9:14:79:9a:
af:ba:30:f4:87:20:1c:bc:01:40:8e:d7:96:53:bb:c8:6d:57:
ea:46:2a:7d:f1:84:f5:51:90:16:f9:4f:d6:5a:f6:1b:22:04:
2e:8e:9b:07:be:94:d0:f9:85:ef:c6:32:de:e1:cd:3b:61:a6:
62:87:1a:3b:4b:5a:1f:6b:fa:37:fe:7f:5f:13:b8:3e:2f:2e:
4b:ae:8b:c5:f8:2b:65:e8:b0:ff:e9:1b:ea:2f:78:b2:19:57:
2b:75:51:b0:2d:cb:12:5a:cd:3f:b4:e2:47:1f:8c:11:fe:00:
47:1c:7c:d1:4c:b8:39:71:74:86:cd:fe:c7:f7:92:c1:a5:a3:
d8:ec:1c:f4:34:cf:82:19:2e:e5:06:95:d7:92:b8:99:1b:a4:
80:9c:91:72:c4:43:0d:2a:b6:85:53:81:fb:e6:af:da:ae:5a:
3f:df:23:72:e1:e8:bc:a1:d5:42:5e:b8:a8:85:dc:ae:4d:46:
1e:b9:3b:06:0b:43:47:be:f2:00:d0:dd:31:dc:45:5d:d4:73:
54:ce:17:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:18:09 2026 by rpki-client