Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/6b4023-adef-4e4d-8cf6-32669737c517/1/G1NNR62NtYlKX8k0LkVY-U5PF_E.mft
File: G1NNR62NtYlKX8k0LkVY-U5PF_E.mft (raw, json)
Hash identifier: je6G5piF7HLssHB738w7mqlSHnXb6nif5ismgWrqrm4=
Subject key identifier: 01:AA:C7:1A:EA:B3:CA:2E:DF:F3:B1:75:4E:C6:A8:12:4E:21:B4:32
Authority key identifier: 1B:53:4D:47:AD:8D:B5:89:4A:5F:C9:34:2E:45:58:F9:4E:4F:17:F1
Certificate issuer: /CN=1b534d47ad8db5894a5fc9342e4558f94e4f17f1
Certificate serial: 019D2695C62F934959FE68D8E39AD6796B1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G1NNR62NtYlKX8k0LkVY-U5PF_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/6b4023-adef-4e4d-8cf6-32669737c517/1/G1NNR62NtYlKX8k0LkVY-U5PF_E.mft
Manifest number: 17DC
Signing time: Wed 25 Mar 2026 20:00:42 +0000
Manifest this update: Wed 25 Mar 2026 20:00:42 +0000
Manifest next update: Thu 26 Mar 2026 20:00:42 +0000
Files and hashes: 1: AovjLMzZvMdo98oRLMX3UQFhYGU.roa (hash: Pirq+8jQHRZFAz4jyR41JVpLGoXjS83ipQMbfBRQoac=)
2: G1NNR62NtYlKX8k0LkVY-U5PF_E.crl (hash: nhG2/dt9daSVN/DZe7Hq42syPCtfGKSvjpzDmwSBX3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/6b4023-adef-4e4d-8cf6-32669737c517/1/G1NNR62NtYlKX8k0LkVY-U5PF_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/6b4023-adef-4e4d-8cf6-32669737c517/1/G1NNR62NtYlKX8k0LkVY-U5PF_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/G1NNR62NtYlKX8k0LkVY-U5PF_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:95:c6:2f:93:49:59:fe:68:d8:e3:9a:d6:79:6b:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b534d47ad8db5894a5fc9342e4558f94e4f17f1
Validity
Not Before: Mar 25 20:00:42 2026 GMT
Not After : Mar 26 20:00:42 2026 GMT
Subject: CN=01aac71aeab3ca2edff3b1754ec6a8124e21b432
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:9f:39:4f:11:95:3a:1d:48:36:a5:af:79:92:
29:c2:76:8b:22:e1:23:e7:77:6c:6d:b0:77:1b:61:
43:d9:b9:05:83:c3:d0:9d:60:64:07:76:a6:76:cc:
10:02:d5:9b:9c:cc:05:85:4c:a2:8e:c9:92:59:fd:
a8:43:da:48:bd:60:75:7e:25:b9:89:81:a4:b5:15:
c5:75:73:ec:a6:92:5c:97:38:3f:39:ca:d4:be:79:
51:41:5e:54:b9:82:9e:24:97:fa:7b:c3:c7:e7:9f:
bd:0f:5f:95:7c:2b:68:32:9b:cb:3c:86:00:93:ea:
60:42:ad:8a:92:89:bf:56:f2:cf:11:21:73:a3:9c:
9f:de:62:93:6a:87:d3:50:60:49:24:57:8c:c1:bc:
49:c2:93:4c:96:15:dc:95:63:75:c3:2e:28:fc:39:
13:49:40:68:5c:a6:84:b2:c4:6c:e9:f9:c8:68:5b:
b5:53:29:97:b2:ba:1a:02:85:14:34:87:60:89:d7:
83:bb:8a:a5:76:1e:6f:6f:d4:f4:eb:48:e9:e0:5f:
19:f3:fd:f2:6a:db:d5:a3:4f:a5:40:64:28:d5:9e:
aa:2a:c8:0d:70:3b:10:b4:a7:86:a4:cf:73:d1:50:
c4:a1:cf:00:fc:be:02:51:e3:bc:a8:ca:d3:d8:3d:
f3:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:AA:C7:1A:EA:B3:CA:2E:DF:F3:B1:75:4E:C6:A8:12:4E:21:B4:32
X509v3 Authority Key Identifier:
keyid:1B:53:4D:47:AD:8D:B5:89:4A:5F:C9:34:2E:45:58:F9:4E:4F:17:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G1NNR62NtYlKX8k0LkVY-U5PF_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/6b4023-adef-4e4d-8cf6-32669737c517/1/G1NNR62NtYlKX8k0LkVY-U5PF_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/6b4023-adef-4e4d-8cf6-32669737c517/1/G1NNR62NtYlKX8k0LkVY-U5PF_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:4e:f5:ac:ff:21:c2:54:a8:b9:68:f6:2b:1d:e8:ae:c4:2d:
2f:d6:55:48:f3:aa:ec:e7:7d:71:8a:51:8a:31:ef:43:02:f0:
09:3c:f2:41:4b:cf:74:39:3c:00:0c:76:04:61:23:c6:b1:cb:
53:af:06:c8:a3:29:64:9c:61:4c:58:49:a4:85:52:81:6f:d6:
e4:71:35:41:78:a8:28:c6:32:5f:7f:78:80:16:76:ca:42:71:
40:88:7c:b4:34:f0:0c:89:6e:95:f3:a4:5f:5b:a0:d0:0b:b4:
23:b8:01:41:04:24:2c:cf:44:f3:bc:39:54:90:01:88:6a:f8:
8b:9c:28:d1:34:a3:e5:6f:e3:66:93:40:e7:34:ce:9f:87:c0:
bc:19:e0:15:6f:aa:5f:c3:e0:0d:79:13:13:ba:ef:76:19:a9:
19:3d:bc:90:5e:13:83:9e:65:d3:55:e3:71:96:69:f9:1b:91:
58:a1:db:6f:9c:e5:9c:96:a9:58:b6:b5:11:87:92:cd:d2:cf:
9a:be:d0:12:1f:58:76:ac:40:97:ad:6b:b1:48:eb:98:c1:9b:
8d:07:ee:b9:4c:b7:dd:f1:51:4a:6a:a2:9f:03:81:f1:e6:eb:
f7:89:e9:99:bf:98:07:03:a0:f4:2a:99:80:c3:0d:13:92:d6:
77:f3:22:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:21:19 2026 by rpki-client