Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/bb0e00-a24d-4935-8c07-1361550cb3d5/1/G2t-l-0j1mqR-4qRv9nGdxEpsas.mft
File: G2t-l-0j1mqR-4qRv9nGdxEpsas.mft (raw, json)
Hash identifier: jJDnfh36sELOp+VwHeo4WqHp3Jhu/cY0ZL0L0uFAP0s=
Subject key identifier: 30:2C:83:2E:D0:ED:E9:05:B0:C7:61:BD:69:96:13:91:0C:82:82:CD
Authority key identifier: 1B:6B:7E:97:ED:23:D6:6A:91:FB:8A:91:BF:D9:C6:77:11:29:B1:AB
Certificate issuer: /CN=1b6b7e97ed23d66a91fb8a91bfd9c6771129b1ab
Certificate serial: 019D25836C5D10433B7621989C59C328CA2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G2t-l-0j1mqR-4qRv9nGdxEpsas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/bb0e00-a24d-4935-8c07-1361550cb3d5/1/G2t-l-0j1mqR-4qRv9nGdxEpsas.mft
Manifest number: 117E
Signing time: Wed 25 Mar 2026 15:01:03 +0000
Manifest this update: Wed 25 Mar 2026 15:01:03 +0000
Manifest next update: Thu 26 Mar 2026 15:01:03 +0000
Files and hashes: 1: G2t-l-0j1mqR-4qRv9nGdxEpsas.crl (hash: B8STNMdyrvy5R3CgGtmkwKEFATSy3kNHdoLFGOzPTcQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/bb0e00-a24d-4935-8c07-1361550cb3d5/1/G2t-l-0j1mqR-4qRv9nGdxEpsas.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/bb0e00-a24d-4935-8c07-1361550cb3d5/1/G2t-l-0j1mqR-4qRv9nGdxEpsas.mft
rsync://rpki.ripe.net/repository/DEFAULT/G2t-l-0j1mqR-4qRv9nGdxEpsas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:6c:5d:10:43:3b:76:21:98:9c:59:c3:28:ca:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b6b7e97ed23d66a91fb8a91bfd9c6771129b1ab
Validity
Not Before: Mar 25 15:01:03 2026 GMT
Not After : Mar 26 15:01:03 2026 GMT
Subject: CN=302c832ed0ede905b0c761bd699613910c8282cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:54:b8:62:a1:ba:ad:02:f9:ce:43:b6:90:20:
d0:d4:ff:22:3a:3a:e7:04:d1:f3:04:1f:31:3d:2d:
02:7f:f9:e8:89:a8:a7:8f:03:2a:87:96:dc:65:81:
90:06:4f:8f:41:e1:b0:c4:e0:19:b8:64:e9:9f:39:
8d:c0:87:32:d9:5a:6e:0a:35:cd:c7:45:76:0c:42:
f3:57:af:08:2d:bd:ef:53:ec:a7:65:49:ad:68:c1:
55:7d:73:8c:7f:d3:2f:75:45:2e:26:a3:49:9b:74:
55:48:2c:64:70:99:e9:db:3c:d6:79:a2:ab:8b:c2:
dc:6f:f2:8e:37:5c:7f:27:5d:cc:4b:05:c4:2c:68:
aa:2a:f1:0c:1b:53:26:f5:f0:37:48:c4:84:a1:c6:
f7:fc:0e:61:36:de:e2:20:37:dd:9b:83:62:36:8d:
7e:1d:f9:d1:bd:ba:e1:e8:a3:52:4b:c8:92:d5:b2:
6d:16:b8:79:32:e6:cb:33:52:a3:15:04:0f:4c:b0:
99:f5:45:94:3f:53:67:62:9e:43:04:91:e9:cf:d4:
0d:23:18:ef:f5:2f:42:9d:f1:07:fb:1e:1f:d1:c2:
4f:29:aa:7c:be:94:ab:d3:da:54:85:69:cd:bb:20:
1d:16:c4:8b:a9:5f:97:03:2b:a9:52:62:98:3d:93:
26:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:2C:83:2E:D0:ED:E9:05:B0:C7:61:BD:69:96:13:91:0C:82:82:CD
X509v3 Authority Key Identifier:
keyid:1B:6B:7E:97:ED:23:D6:6A:91:FB:8A:91:BF:D9:C6:77:11:29:B1:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2t-l-0j1mqR-4qRv9nGdxEpsas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/bb0e00-a24d-4935-8c07-1361550cb3d5/1/G2t-l-0j1mqR-4qRv9nGdxEpsas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/bb0e00-a24d-4935-8c07-1361550cb3d5/1/G2t-l-0j1mqR-4qRv9nGdxEpsas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:7e:28:eb:7d:9e:c0:23:cc:32:a7:f6:a9:bc:95:04:a8:e8:
bb:e3:f7:e2:8c:4a:d2:e4:22:e8:ac:03:b3:e3:2a:0f:04:f2:
ed:3b:f6:f3:02:ca:c8:3e:42:4c:d8:69:d1:b5:9b:4f:47:fa:
52:b5:7a:64:5b:79:6c:e6:af:6b:26:5a:7b:d8:14:65:33:0f:
ab:18:3a:4b:50:33:97:21:ac:c0:bd:82:e1:10:b9:3f:18:d7:
41:0b:bc:5b:97:b2:ee:c3:77:36:90:db:1a:9f:4b:c3:6d:6e:
16:8e:88:2e:98:47:37:b9:0f:04:00:c8:03:3f:5c:91:63:ec:
de:b1:c9:3a:bf:d9:54:a3:6c:c7:fb:7b:80:22:76:af:6a:39:
da:93:fd:64:52:41:4f:10:d6:44:5b:3e:2f:b2:c3:12:3f:d6:
33:c6:35:ea:8d:5c:77:12:0c:8c:5e:a3:3c:5e:55:97:19:4f:
11:4e:ae:c1:76:49:7c:52:f9:50:c1:fa:33:18:bb:8b:f5:bb:
db:1b:61:1a:96:db:e6:3b:06:57:7b:07:85:b1:1f:05:0d:7e:
86:6f:2e:c9:9e:67:47:f2:af:2e:61:24:db:23:0e:80:9a:a7:
3c:1c:58:b4:1b:e3:08:7c:36:b2:35:37:b3:93:0b:b7:cf:c5:
59:7d:d9:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:21:23 2026 by rpki-client