Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/d8b0c3-3f70-43db-85a4-5be1202367e9/1/G2pafunSGn3UW7v_9DGzZN6gta4.mft
File: G2pafunSGn3UW7v_9DGzZN6gta4.mft (raw, json)
Hash identifier: /FbXYg02G1cptIbSPl2gJ6j7QFwFfkUe/oSHBQ9ZTHY=
Subject key identifier: B2:52:E9:3C:D8:6E:C2:73:AD:5C:9E:E9:BB:BD:E5:21:8E:AA:6C:AF
Authority key identifier: 1B:6A:5A:7E:E9:D2:1A:7D:D4:5B:BB:FF:F4:31:B3:64:DE:A0:B5:AE
Certificate issuer: /CN=1b6a5a7ee9d21a7dd45bbbfff431b364dea0b5ae
Certificate serial: 019D28BB621F771B928780CB53B1C8EE721D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G2pafunSGn3UW7v_9DGzZN6gta4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/d8b0c3-3f70-43db-85a4-5be1202367e9/1/G2pafunSGn3UW7v_9DGzZN6gta4.mft
Manifest number: 0AB3
Signing time: Thu 26 Mar 2026 06:01:01 +0000
Manifest this update: Thu 26 Mar 2026 06:01:01 +0000
Manifest next update: Fri 27 Mar 2026 06:01:01 +0000
Files and hashes: 1: G2pafunSGn3UW7v_9DGzZN6gta4.crl (hash: P64zFqxfQhHH+RCngVRIMqwwdGAVw0SRofvK/RvDZuY=)
2: tjiTHEP-kK7YvaF4jOv_5AENFR8.roa (hash: +t1GaH9nJ8B0HL8q2iIaAV18s/F2KC1qzK08FxWPKP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/d8b0c3-3f70-43db-85a4-5be1202367e9/1/G2pafunSGn3UW7v_9DGzZN6gta4.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/d8b0c3-3f70-43db-85a4-5be1202367e9/1/G2pafunSGn3UW7v_9DGzZN6gta4.mft
rsync://rpki.ripe.net/repository/DEFAULT/G2pafunSGn3UW7v_9DGzZN6gta4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:62:1f:77:1b:92:87:80:cb:53:b1:c8:ee:72:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b6a5a7ee9d21a7dd45bbbfff431b364dea0b5ae
Validity
Not Before: Mar 26 06:01:01 2026 GMT
Not After : Mar 27 06:01:01 2026 GMT
Subject: CN=b252e93cd86ec273ad5c9ee9bbbde5218eaa6caf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:a0:08:15:fd:29:80:d0:ba:85:d7:2f:eb:0a:
27:13:47:19:76:5b:f5:be:c7:8c:c2:5b:c1:1c:d8:
5b:10:a5:96:ed:74:ae:46:30:fa:b8:4e:00:d3:bd:
01:af:fd:15:f4:45:41:c5:8a:35:39:ec:66:37:6d:
f7:cb:3c:1b:f3:77:91:a6:68:7d:d0:b6:a2:b1:78:
8d:ac:44:7c:95:74:ea:4f:9b:9c:c1:7c:29:7b:5f:
e9:3d:9f:e7:3a:11:10:af:59:0c:7e:4f:c5:22:e6:
41:c7:35:3a:ac:1f:c8:f6:a6:b1:63:74:60:4f:92:
a2:9e:5e:d3:40:a8:55:3d:e9:10:b7:02:c2:3a:68:
0e:1c:0a:ad:80:82:22:97:48:17:cb:6a:d7:63:80:
32:95:83:90:e6:a1:ab:77:ea:04:d3:33:7d:99:17:
ff:cf:b0:b2:45:ae:47:6b:3d:72:bd:12:33:85:67:
b4:53:a9:89:32:ee:80:d0:88:0d:b0:c9:94:bd:60:
08:13:4e:08:7f:99:a5:71:80:8f:ae:79:34:5e:92:
7b:fd:be:86:c0:ac:b6:68:23:e3:a7:0a:3a:f1:9b:
27:af:50:dd:c6:67:fc:62:f9:fd:6c:bd:56:17:7c:
e5:91:c0:88:2a:6b:43:14:86:cf:ca:a8:5c:c4:4c:
ca:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:52:E9:3C:D8:6E:C2:73:AD:5C:9E:E9:BB:BD:E5:21:8E:AA:6C:AF
X509v3 Authority Key Identifier:
keyid:1B:6A:5A:7E:E9:D2:1A:7D:D4:5B:BB:FF:F4:31:B3:64:DE:A0:B5:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2pafunSGn3UW7v_9DGzZN6gta4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/d8b0c3-3f70-43db-85a4-5be1202367e9/1/G2pafunSGn3UW7v_9DGzZN6gta4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/d8b0c3-3f70-43db-85a4-5be1202367e9/1/G2pafunSGn3UW7v_9DGzZN6gta4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:58:d6:73:c8:2f:aa:8a:34:aa:fc:08:78:4a:f4:ca:40:7c:
bd:b3:f3:ac:4e:c7:3b:dd:7b:d7:cf:e5:90:1a:2f:90:a2:4b:
12:4f:fd:d9:85:b8:62:5e:b4:c0:b0:49:ac:99:76:7f:5c:d4:
fa:66:a0:0e:20:38:52:a8:b8:42:2c:ed:9c:1b:92:7a:a9:ee:
6e:1d:80:80:7d:27:85:82:2c:8f:c3:8f:55:ed:32:ef:55:a3:
05:70:e3:ec:6d:6f:1c:70:71:cb:5c:f2:48:f9:77:9f:e9:81:
d5:25:3d:63:94:ed:b8:23:1a:c0:32:13:cf:a6:40:09:98:0a:
69:33:70:5b:3c:79:f1:07:29:76:63:23:8d:43:ae:f3:b7:eb:
8a:6a:aa:c0:e7:85:e2:20:da:93:d8:54:c2:7c:f4:02:90:8f:
04:27:ec:62:5d:89:eb:c4:da:5b:69:44:cd:5f:b7:bb:ab:e4:
04:09:2e:a6:e2:fb:b9:ec:35:65:a4:e5:6f:5e:53:c9:51:1b:
51:8e:8a:5e:e7:1c:84:33:08:bf:e8:33:22:dd:8a:c4:4f:86:
a3:8e:ce:54:fc:a2:49:26:fc:8b:76:a7:01:b5:04:20:bc:72:
55:c7:60:d5:43:37:05:9a:31:f1:f2:04:e1:5d:36:a3:d9:b6:
3b:d3:41:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:34:19 2026 by rpki-client