Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/c2cf4c-78e2-49b5-80e7-57b0dcd7e8af/1/GI8TycwU9V7iIgtEl2mS0R1d6HE.mft
File: GI8TycwU9V7iIgtEl2mS0R1d6HE.mft (raw, json)
Hash identifier: bIj8hHmmkuiVhZJzLCqUwdZSFG7fFIYM0O16stPrjm4=
Subject key identifier: DC:E7:0C:D5:BD:53:8F:E4:25:8D:92:32:63:AC:55:F4:FC:81:DF:3F
Authority key identifier: 18:8F:13:C9:CC:14:F5:5E:E2:22:0B:44:97:69:92:D1:1D:5D:E8:71
Certificate issuer: /CN=188f13c9cc14f55ee2220b44976992d11d5de871
Certificate serial: 019D262877F7FE9F977FCB9B0C15F44D3573
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GI8TycwU9V7iIgtEl2mS0R1d6HE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/c2cf4c-78e2-49b5-80e7-57b0dcd7e8af/1/GI8TycwU9V7iIgtEl2mS0R1d6HE.mft
Manifest number: 017D
Signing time: Wed 25 Mar 2026 18:01:19 +0000
Manifest this update: Wed 25 Mar 2026 18:01:19 +0000
Manifest next update: Thu 26 Mar 2026 18:01:19 +0000
Files and hashes: 1: GI8TycwU9V7iIgtEl2mS0R1d6HE.crl (hash: Jhv/AsoDqwg6PLJj3UKBu11Y7wypi/LKnFsOM7ZR/kA=)
2: PzE_8e48NSrjuEXwETdW0v6zNSY.roa (hash: Gt3prVp6LYLN+xJ8+Sn4cyYMDMXLHyapcc6UlbYLHJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/c2cf4c-78e2-49b5-80e7-57b0dcd7e8af/1/GI8TycwU9V7iIgtEl2mS0R1d6HE.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/c2cf4c-78e2-49b5-80e7-57b0dcd7e8af/1/GI8TycwU9V7iIgtEl2mS0R1d6HE.mft
rsync://rpki.ripe.net/repository/DEFAULT/GI8TycwU9V7iIgtEl2mS0R1d6HE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:77:f7:fe:9f:97:7f:cb:9b:0c:15:f4:4d:35:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=188f13c9cc14f55ee2220b44976992d11d5de871
Validity
Not Before: Mar 25 18:01:19 2026 GMT
Not After : Mar 26 18:01:19 2026 GMT
Subject: CN=dce70cd5bd538fe4258d923263ac55f4fc81df3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:47:44:39:1f:db:07:d8:af:55:f2:6f:91:41:
57:4e:95:c9:37:3e:93:6c:86:82:5b:e7:db:b2:73:
37:d7:b7:c7:18:1c:85:fb:d3:86:11:4b:85:09:1c:
b7:c8:dd:a3:2b:78:a6:6d:bf:7b:37:74:64:2f:d2:
51:14:a3:5c:83:c2:5b:77:40:a3:cb:1c:9d:f0:07:
fe:19:02:36:07:27:78:88:c6:38:86:f6:a7:1f:25:
85:60:e0:13:12:6a:8d:84:28:0e:f3:e6:b8:6f:08:
b5:d4:34:22:18:ac:9e:7a:00:5d:c8:a7:c4:8e:ef:
ff:59:11:f8:a3:51:45:ed:93:bc:dc:a7:32:25:87:
dc:5e:ce:82:8e:a3:4f:46:48:b2:3a:65:c6:be:78:
97:aa:ba:40:22:b1:bf:de:a7:cb:09:7c:74:b4:90:
30:e1:21:08:4b:53:52:e9:25:c4:53:42:70:bd:10:
6b:0c:bb:dc:ec:2f:0d:cb:a7:a4:39:bd:91:4d:8e:
c3:91:32:94:12:07:d5:fc:06:37:68:2e:4b:30:0c:
af:4e:96:7d:fc:32:ff:34:d5:f2:63:d4:12:62:fe:
3f:cc:20:c2:29:5e:1a:ca:25:2f:03:97:8e:1b:6d:
5c:3e:0d:52:26:54:f4:8d:c8:6c:43:0e:72:28:bb:
7c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:E7:0C:D5:BD:53:8F:E4:25:8D:92:32:63:AC:55:F4:FC:81:DF:3F
X509v3 Authority Key Identifier:
keyid:18:8F:13:C9:CC:14:F5:5E:E2:22:0B:44:97:69:92:D1:1D:5D:E8:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GI8TycwU9V7iIgtEl2mS0R1d6HE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/c2cf4c-78e2-49b5-80e7-57b0dcd7e8af/1/GI8TycwU9V7iIgtEl2mS0R1d6HE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/c2cf4c-78e2-49b5-80e7-57b0dcd7e8af/1/GI8TycwU9V7iIgtEl2mS0R1d6HE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:31:45:52:1b:0e:29:0c:a0:c4:5f:d1:4c:d8:8a:58:b4:77:
c2:15:bf:a9:76:2e:23:64:f2:b8:8b:37:17:22:5f:fe:71:32:
7e:a3:c1:cf:72:d3:66:59:a3:f5:e9:5c:6c:8d:f1:8e:db:64:
bd:c8:01:1a:2e:60:37:f7:19:85:14:62:d1:96:bc:9a:86:e7:
0c:1e:a6:aa:80:79:97:ab:ee:de:fe:0e:4e:b5:ae:9f:40:30:
0b:53:4b:d0:ee:e1:7b:65:53:74:35:0d:31:23:d9:a5:fe:53:
f4:35:1e:77:79:f2:da:76:08:5c:d5:89:af:67:9d:e8:a5:25:
93:07:8f:a4:1a:c0:41:2b:3e:09:f2:dd:64:f3:79:03:1e:93:
12:ac:63:ff:1b:98:be:4f:2e:c8:6a:07:5c:0e:64:21:e4:c6:
54:d9:0a:1d:36:27:7a:d9:74:24:48:a2:e2:af:3f:5b:ca:7f:
97:49:c8:e6:8c:ff:be:5d:51:92:3e:a0:95:dd:5c:aa:f7:13:
ea:a1:9f:48:bb:00:c5:e4:76:88:53:1b:83:41:84:a1:6f:c5:
b5:4c:7d:b8:8d:bc:69:75:cf:db:21:fb:f6:81:01:d0:e7:22:
e3:e1:78:85:00:87:26:3d:97:e4:57:e8:81:5f:75:f7:e6:75:
9f:24:c9:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:30:02 2026 by rpki-client