Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.mft
File: G2hlYSYZg3PQeIa_Srj7BrkAZ4A.mft (raw, json)
Hash identifier: iS/AVNIMQZv/23k0TixSKVR3X+O7r+B/Jq19aBGODRo=
Subject key identifier: 29:6C:CA:CD:BF:DE:B7:B9:B7:4B:30:A8:B0:E6:AF:79:1A:EA:CF:30
Authority key identifier: 1B:68:65:61:26:19:83:73:D0:78:86:BF:4A:B8:FB:06:B9:00:67:80
Certificate issuer: /CN=1b68656126198373d07886bf4ab8fb06b9006780
Certificate serial: 019D2AA9DCF17B85BA735D9213C4F14851D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.mft
Manifest number: 188A
Signing time: Thu 26 Mar 2026 15:01:08 +0000
Manifest this update: Thu 26 Mar 2026 15:01:08 +0000
Manifest next update: Fri 27 Mar 2026 15:01:08 +0000
Files and hashes: 1: AdqGNGTNFT1rSz03F0HVwK9B37I.roa (hash: cI5ji7V4dg8v9ui9zXXCNsMNEyJTysTdpdklDgc65jE=)
2: G2hlYSYZg3PQeIa_Srj7BrkAZ4A.crl (hash: rR1Ou/R1kqIbaU59jNu26tclKJswk1pQhCBrRr7eVvE=)
3: SiR8FHHKdbXqmwMkjZZOq7HZtxo.roa (hash: mkRGoCYQs5pO/fqORGXARxwk0SLVCsNlvRMucJrxHow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.mft
rsync://rpki.ripe.net/repository/DEFAULT/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 15:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:a9:dc:f1:7b:85:ba:73:5d:92:13:c4:f1:48:51:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b68656126198373d07886bf4ab8fb06b9006780
Validity
Not Before: Mar 26 15:01:08 2026 GMT
Not After : Mar 27 15:01:08 2026 GMT
Subject: CN=296ccacdbfdeb7b9b74b30a8b0e6af791aeacf30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d8:e2:c0:fd:39:ff:67:13:ee:56:4f:8f:33:
b8:c7:29:57:91:fd:ef:7b:b7:8c:31:d9:a1:7e:44:
c7:0e:f7:7a:b4:16:bb:22:69:2a:61:d6:61:44:84:
cb:73:83:99:27:86:35:4e:b9:97:e0:45:02:09:fe:
d3:81:c6:4d:66:6e:94:86:5d:ed:7b:a4:97:a0:9a:
20:e4:d0:5e:bc:a1:1e:06:78:17:08:06:c7:52:25:
7d:a5:c1:82:cd:5b:45:88:1e:e9:11:47:7a:f8:58:
55:71:30:f3:36:f7:fa:34:41:64:23:41:74:56:a0:
24:01:6b:1a:0b:1b:03:0f:bc:94:74:ff:ba:c0:56:
96:f4:10:67:3d:1d:b3:ef:3e:92:98:4e:32:0d:6e:
7a:87:6f:ea:b8:8a:45:1a:c7:cf:0a:60:02:56:51:
cd:0b:54:f2:a5:af:c3:16:a0:5c:6c:8b:77:b6:47:
b7:7a:26:db:8f:52:17:c0:53:60:3d:92:18:71:b8:
d3:8f:bf:ea:98:f2:25:05:24:12:d9:46:c2:8d:27:
ee:ee:ed:9c:46:2a:22:2d:ea:e1:b0:4c:ef:a5:30:
9b:f6:b2:25:46:69:9d:48:9f:4f:f7:a9:15:61:13:
3a:0f:21:a8:61:96:aa:5b:fb:59:1d:fe:ba:30:82:
7d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:6C:CA:CD:BF:DE:B7:B9:B7:4B:30:A8:B0:E6:AF:79:1A:EA:CF:30
X509v3 Authority Key Identifier:
keyid:1B:68:65:61:26:19:83:73:D0:78:86:BF:4A:B8:FB:06:B9:00:67:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:4d:58:79:c1:83:11:77:1d:05:c8:2f:cc:e6:a3:6b:87:5c:
2b:5f:6b:62:e0:5d:31:8f:f6:c8:47:a9:b3:ee:b9:bf:d4:94:
f0:0a:9d:40:82:28:4b:82:66:33:cf:a5:ba:c0:e3:73:c1:68:
6d:c7:11:68:75:c8:1c:ba:07:02:20:f4:29:97:73:57:b6:c8:
54:f5:d6:7e:23:ed:0b:3d:c1:03:31:4a:4d:c6:41:47:12:7f:
48:cc:30:a7:40:47:2e:c9:2a:4d:da:7b:78:24:2d:40:da:1c:
9a:82:23:01:6a:77:8d:1f:31:55:9d:99:41:8d:a5:42:5f:0a:
df:b2:04:1e:5f:6c:65:c6:19:44:e4:fc:94:0d:8a:e2:92:06:
1b:9c:6e:ff:dc:cc:ee:9a:d0:49:d0:06:5b:68:04:7d:75:40:
f0:44:5c:6a:a0:d2:41:c3:92:de:2c:6e:f7:3c:64:90:11:88:
ef:d8:89:6f:3a:63:b8:be:b7:b0:93:af:d8:ba:b6:86:26:b1:
80:cd:04:2c:36:7f:7e:a7:0f:b5:2a:9c:14:f2:6b:40:cd:76:
1a:ac:0a:c4:59:0b:d3:56:84:65:a4:7b:3c:40:1d:a0:7f:fc:
18:ea:5d:9d:97:ae:c3:1c:7c:ee:81:ab:d8:f7:5a:d3:9f:27:
fa:db:48:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:05:16 2026 by rpki-client