Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.mft
File: cG1kE0-qdGKTwDhO2sA3GVDzsiQ.mft (raw, json)
Hash identifier: vXz/h/YVHORkIpExGlmLELNzcYCSDUpwM3z3qv9iye4=
Subject key identifier: 1F:4E:9E:00:80:25:27:A5:03:89:8D:56:E7:AB:34:D8:F0:BF:4F:33
Authority key identifier: 70:6D:64:13:4F:AA:74:62:93:C0:38:4E:DA:C0:37:19:50:F3:B2:24
Certificate issuer: /CN=706d64134faa746293c0384edac0371950f3b224
Certificate serial: 019D27DFEC66835ACA991F1F8D07A3A3F2AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 02:01:19 +0000
Manifest this update: Thu 26 Mar 2026 02:01:19 +0000
Manifest next update: Fri 27 Mar 2026 02:01:19 +0000
Files and hashes: 1: 1LWZZOwIVksOEqA3t1p1E5yKrbk.roa (hash: OwPK45NthsXIz7j/9BbdI2UVojWHpISnd2scPcpKEVU=)
2: BU1_bDFU6vflOkzUwIXSHb0FY3g.roa (hash: Cc5Z9uPct4eSTXCrQaUv8nKSh9r+kgrw5uVAV3eQfow=)
3: RR77_TZWFm2zN09tkZTb-aJWQ-g.roa (hash: cAzRaMhGElLRCS7w5moSCJqvr37/rS0oJQ36ENwyvTc=)
4: cG1kE0-qdGKTwDhO2sA3GVDzsiQ.crl (hash: orkaHqvs5XHNcB2ELSa/XunuNTNNBdz3rFVQHo3H3XA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 02:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:ec:66:83:5a:ca:99:1f:1f:8d:07:a3:a3:f2:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=706d64134faa746293c0384edac0371950f3b224
Validity
Not Before: Mar 26 02:01:19 2026 GMT
Not After : Mar 27 02:01:19 2026 GMT
Subject: CN=1f4e9e00802527a503898d56e7ab34d8f0bf4f33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:75:44:03:a2:bf:63:78:5a:78:ee:99:7e:5a:
79:e2:c9:19:d0:da:9a:2e:cc:48:b7:be:80:a9:b4:
3a:66:f9:e6:7e:be:3b:5f:77:1f:c8:f0:fe:67:15:
f7:ba:5f:e5:00:52:a8:6c:ea:c3:0d:a7:d5:9a:28:
de:73:ea:ff:ce:eb:71:25:93:38:a3:9a:ea:71:7b:
81:b9:8f:c4:30:6e:66:b7:9f:bd:ce:db:51:3e:f3:
14:2b:2e:8f:87:d7:a6:07:15:ec:85:ca:f1:b6:6c:
6a:3f:5f:e6:91:82:9a:ce:91:9c:8a:b9:41:65:64:
4c:60:73:04:84:16:ea:99:75:c6:a9:31:d4:2f:1a:
d6:e3:f8:f2:40:cd:7e:51:19:8f:31:c9:da:46:36:
12:46:d3:2f:20:a9:ec:8b:62:10:bd:4d:72:99:04:
60:0d:ed:d1:83:e1:ff:58:59:6b:25:77:59:0c:6d:
9a:3c:ee:e7:42:e3:e3:7f:41:0f:29:dc:4a:42:f2:
c4:e1:b5:25:ea:98:5b:6e:3a:7a:0f:cb:9f:b6:77:
d9:35:f6:d2:02:ef:e4:86:eb:27:cd:e2:d2:eb:5b:
db:02:cb:b0:74:eb:b6:42:a4:50:88:bf:a5:4c:55:
87:c7:59:be:b7:03:90:6b:6f:54:d7:07:97:8b:44:
35:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:4E:9E:00:80:25:27:A5:03:89:8D:56:E7:AB:34:D8:F0:BF:4F:33
X509v3 Authority Key Identifier:
keyid:70:6D:64:13:4F:AA:74:62:93:C0:38:4E:DA:C0:37:19:50:F3:B2:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:e0:ef:3b:f3:c6:c0:ed:58:99:8d:a8:2d:f9:97:f3:d8:06:
cf:a2:ad:c5:55:f2:9d:d3:6d:19:2e:a5:a9:7d:1c:c7:82:bd:
10:a6:46:2b:0e:f1:5f:94:be:69:d1:4f:a2:25:d4:16:1c:82:
b6:13:36:aa:b0:f2:7f:fb:52:b2:94:c0:34:b2:4c:3d:60:07:
eb:3e:25:00:70:1e:4d:44:cd:21:25:90:e1:7b:53:b0:fc:55:
5f:3d:cd:0d:e5:52:36:71:2c:aa:74:ef:24:a8:02:fa:5d:d5:
dc:7d:4f:4c:ff:6c:7a:6a:ab:4b:0e:30:4a:eb:4c:a2:15:61:
54:95:c3:c7:5c:71:d7:5d:a4:63:7f:e2:27:e4:86:83:7b:9d:
bb:8e:e6:5d:04:e3:41:1e:42:de:93:56:e5:81:ee:7f:d6:ce:
39:6d:50:47:37:cb:60:8b:e8:0a:a0:eb:8b:30:54:e2:ed:24:
f1:fe:89:1d:fc:3e:13:24:aa:cc:b9:ad:18:f4:5e:1e:05:3c:
83:74:2a:4e:68:70:cb:61:4a:d4:e9:f3:fe:ce:f7:13:6d:40:
be:39:36:6d:d0:bf:a1:8f:c2:7a:fb:1a:91:f7:ad:70:e4:40:
4f:22:96:7b:b8:f4:ca:ef:af:bc:f2:11:86:25:6e:09:86:bb:
9a:33:2e:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:12:42 2026 by rpki-client