Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/0143cd-a814-4d48-a87c-d7c0e9393ea0/1/GNwjUhF2AjItdBxRNoyouN0aPqo.mft
File: GNwjUhF2AjItdBxRNoyouN0aPqo.mft (raw, json)
Hash identifier: OZJx8W2k0WNvXxBr8/nb6ImYxvK7Ay8xyFR8ZvJEp7k=
Subject key identifier: BA:25:BB:04:54:FD:80:F3:F9:DC:D5:7E:C8:C1:AA:8F:06:72:0F:45
Authority key identifier: 18:DC:23:52:11:76:02:32:2D:74:1C:51:36:8C:A8:B8:DD:1A:3E:AA
Certificate issuer: /CN=18dc2352117602322d741c51368ca8b8dd1a3eaa
Certificate serial: 019D273B143C69BF431CD09B179D9A9E86E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GNwjUhF2AjItdBxRNoyouN0aPqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/0143cd-a814-4d48-a87c-d7c0e9393ea0/1/GNwjUhF2AjItdBxRNoyouN0aPqo.mft
Manifest number: 0A2D
Signing time: Wed 25 Mar 2026 23:01:16 +0000
Manifest this update: Wed 25 Mar 2026 23:01:16 +0000
Manifest next update: Thu 26 Mar 2026 23:01:16 +0000
Files and hashes: 1: GNwjUhF2AjItdBxRNoyouN0aPqo.crl (hash: ggCjJC9r99P1xeYzvzGKnCXksVz2K2ZN87v4Rq7yPJo=)
2: nTSOIsFCXPktLiPKU0rpSqAxP9c.roa (hash: p4pPo4o8ji9IxG+yykgVyf22JPwriVlViBGbSDBIE2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/0143cd-a814-4d48-a87c-d7c0e9393ea0/1/GNwjUhF2AjItdBxRNoyouN0aPqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/0143cd-a814-4d48-a87c-d7c0e9393ea0/1/GNwjUhF2AjItdBxRNoyouN0aPqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/GNwjUhF2AjItdBxRNoyouN0aPqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3b:14:3c:69:bf:43:1c:d0:9b:17:9d:9a:9e:86:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18dc2352117602322d741c51368ca8b8dd1a3eaa
Validity
Not Before: Mar 25 23:01:16 2026 GMT
Not After : Mar 26 23:01:16 2026 GMT
Subject: CN=ba25bb0454fd80f3f9dcd57ec8c1aa8f06720f45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ef:b3:1c:0e:81:87:c6:88:cd:97:77:e6:0e:
62:5a:c2:96:17:63:e1:c6:b1:eb:1f:93:29:5e:09:
89:61:88:6a:8d:3f:ce:2a:22:92:ce:17:0c:d9:6c:
5a:8e:17:ce:16:fb:bf:b7:24:42:e6:18:21:c3:04:
66:d7:a8:33:a1:61:33:c4:72:32:4e:4d:fa:b3:1d:
f5:83:58:9e:76:de:31:1a:93:60:46:bd:26:36:ad:
92:c6:7d:6a:47:9f:c7:1a:6a:75:d1:78:7b:9f:1f:
c7:15:43:b6:ee:12:23:c9:3d:68:73:14:bf:5e:a3:
37:25:0c:a8:d4:42:09:49:5e:ff:4e:da:2d:cd:c5:
83:48:92:fe:4b:d7:c2:11:35:09:37:6d:0e:e6:76:
fe:e4:2a:40:49:ab:63:f8:35:0b:2d:38:ca:4f:4e:
32:aa:74:51:fb:55:45:fc:8c:09:c9:f7:ec:8d:0c:
83:e7:32:70:c4:4f:a9:e9:af:c5:89:d3:cf:df:b3:
25:a7:1a:28:d7:6b:bd:0e:3a:f4:07:b5:6a:64:7e:
87:3a:bc:89:d0:52:d6:67:3c:dc:b9:8f:e4:78:29:
2d:33:52:ac:02:d2:ed:ca:19:66:e9:5b:96:5d:52:
cf:0f:8c:47:9c:d4:b8:4b:ef:c5:f2:48:42:8f:e4:
c6:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:25:BB:04:54:FD:80:F3:F9:DC:D5:7E:C8:C1:AA:8F:06:72:0F:45
X509v3 Authority Key Identifier:
keyid:18:DC:23:52:11:76:02:32:2D:74:1C:51:36:8C:A8:B8:DD:1A:3E:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GNwjUhF2AjItdBxRNoyouN0aPqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/0143cd-a814-4d48-a87c-d7c0e9393ea0/1/GNwjUhF2AjItdBxRNoyouN0aPqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/0143cd-a814-4d48-a87c-d7c0e9393ea0/1/GNwjUhF2AjItdBxRNoyouN0aPqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:48:88:9a:7a:65:d8:8b:1e:25:91:c8:67:bc:98:33:87:d4:
b2:7c:5f:6a:5c:b9:f8:11:31:a2:5b:df:9f:0b:be:48:0c:81:
e8:96:f6:95:db:e2:a2:26:48:fd:ad:b6:54:c2:c7:f0:e1:83:
2b:84:f0:42:68:b5:c4:08:50:42:f7:e1:8d:f9:b0:28:21:44:
75:bd:c6:20:c5:0f:ab:12:cc:ef:47:8d:80:2f:36:4d:ca:1c:
a5:ac:7a:72:48:48:c2:71:20:08:31:7b:4a:f2:d2:1c:05:a7:
76:70:83:89:75:ab:2e:08:27:58:f8:c1:56:0f:21:ff:0b:db:
78:43:b1:ff:31:ee:40:c3:e7:b6:df:97:f8:8d:21:fc:c0:e0:
8c:b5:67:96:7f:67:39:36:96:a3:ff:50:ce:aa:c4:09:81:9f:
ce:d5:d8:24:7e:68:8c:48:8c:20:c7:bb:46:70:5d:f2:e4:21:
9e:b5:56:dc:e7:0e:dd:bf:cd:4b:19:b4:0b:2b:1b:51:6a:cf:
a5:8d:29:2c:52:da:27:b6:a0:16:5e:f6:0b:c8:49:bc:17:6c:
01:40:70:2e:e3:a5:67:ab:7f:69:bf:70:eb:4d:e9:15:fe:0f:
c1:33:1b:a5:28:49:03:39:89:b4:01:48:ab:56:aa:fc:2a:9c:
2b:35:6b:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:33:56 2026 by rpki-client