Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/73c3e3-81e6-4eb4-a946-609fa4e54067/1/GnU2E7QiD2jytUbQkqIwvtbtrLg.mft
File: GnU2E7QiD2jytUbQkqIwvtbtrLg.mft (raw, json)
Hash identifier: obPXQM6kDlGmz2NoGJvNVBW4zbK+ZykjHlNPTXqHI04=
Subject key identifier: E8:5E:93:A8:B5:63:2F:E3:27:5C:C5:B2:52:74:D6:65:8B:B7:D4:46
Authority key identifier: 1A:75:36:13:B4:22:0F:68:F2:B5:46:D0:92:A2:30:BE:D6:ED:AC:B8
Certificate issuer: /CN=1a753613b4220f68f2b546d092a230bed6edacb8
Certificate serial: 019D2704346D4099C7F8B1222AD707AD018F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GnU2E7QiD2jytUbQkqIwvtbtrLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/73c3e3-81e6-4eb4-a946-609fa4e54067/1/GnU2E7QiD2jytUbQkqIwvtbtrLg.mft
Manifest number: 0BD5
Signing time: Wed 25 Mar 2026 22:01:20 +0000
Manifest this update: Wed 25 Mar 2026 22:01:20 +0000
Manifest next update: Thu 26 Mar 2026 22:01:20 +0000
Files and hashes: 1: GnU2E7QiD2jytUbQkqIwvtbtrLg.crl (hash: y5zgFwcBJl93bnv3hA6HMjJTjGx+4S/9W+/EIG8RGBM=)
2: h_yjq7AmhSaSJ2TqEYTtarEnp7c.roa (hash: 2lWs2bC7i2HgN7Q/Gmo0OtQZ5nH0I3WfwhHR9PEz0Mw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/73c3e3-81e6-4eb4-a946-609fa4e54067/1/GnU2E7QiD2jytUbQkqIwvtbtrLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/73c3e3-81e6-4eb4-a946-609fa4e54067/1/GnU2E7QiD2jytUbQkqIwvtbtrLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/GnU2E7QiD2jytUbQkqIwvtbtrLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:34:6d:40:99:c7:f8:b1:22:2a:d7:07:ad:01:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a753613b4220f68f2b546d092a230bed6edacb8
Validity
Not Before: Mar 25 22:01:20 2026 GMT
Not After : Mar 26 22:01:20 2026 GMT
Subject: CN=e85e93a8b5632fe3275cc5b25274d6658bb7d446
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:ef:f5:5e:c7:88:84:a5:f7:14:eb:15:1f:66:
68:6a:c1:ef:0a:91:4d:a1:93:f2:1f:82:97:61:f6:
4c:1f:4e:81:39:5f:51:75:e3:c0:83:63:7c:9f:23:
7b:84:c5:d0:54:da:dd:dd:39:b1:87:fe:70:49:af:
b0:15:2d:6e:a6:bb:9e:a1:4e:b9:0e:0b:a4:b0:c3:
01:7a:98:cb:13:d5:2a:2b:06:7e:95:ef:35:6b:52:
3d:84:0d:1c:87:66:e6:1e:40:d4:3c:f3:e7:19:0d:
89:d7:9a:83:49:e2:93:bf:84:ca:5a:3b:62:47:e3:
44:f0:f4:fd:70:0c:61:1c:e1:0b:6f:00:4d:69:e9:
2a:22:ec:36:00:09:80:f4:ce:c1:a0:5a:ba:7f:2d:
b3:70:0a:96:ce:18:d6:9a:3d:fd:46:a2:11:83:60:
83:88:79:db:11:33:bf:6e:5a:9b:64:60:c0:de:eb:
c5:0b:d5:b4:45:b7:45:df:cf:bd:62:bb:7e:5d:d0:
25:08:f3:50:c8:df:07:1e:e6:8a:8e:64:f7:26:d3:
d3:38:ee:10:ae:6f:c0:90:f1:8c:44:ff:f2:24:11:
04:e4:5e:86:9a:ca:82:c0:be:5f:4c:61:33:7e:0f:
30:50:62:f5:77:3e:e1:57:b2:6c:ec:5b:91:42:98:
7b:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:5E:93:A8:B5:63:2F:E3:27:5C:C5:B2:52:74:D6:65:8B:B7:D4:46
X509v3 Authority Key Identifier:
keyid:1A:75:36:13:B4:22:0F:68:F2:B5:46:D0:92:A2:30:BE:D6:ED:AC:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GnU2E7QiD2jytUbQkqIwvtbtrLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/73c3e3-81e6-4eb4-a946-609fa4e54067/1/GnU2E7QiD2jytUbQkqIwvtbtrLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/73c3e3-81e6-4eb4-a946-609fa4e54067/1/GnU2E7QiD2jytUbQkqIwvtbtrLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:50:24:4e:f8:ff:bf:8f:c4:98:b0:40:6a:cf:2a:9e:7f:28:
46:fe:76:41:ca:4a:96:54:27:c4:d6:6d:da:b1:18:8e:e7:af:
aa:52:61:7d:dd:67:07:54:3c:31:cc:f0:b9:e9:bd:b0:8e:98:
fd:43:cf:83:f5:8d:69:d8:35:c7:ca:4f:8c:18:5a:76:d9:35:
ba:12:9a:f3:f6:d4:49:a3:5e:21:53:92:7d:93:c9:4b:4d:33:
6b:e1:99:aa:9d:f0:e2:9b:a9:cb:17:dd:14:6a:20:da:76:53:
29:e7:00:69:d8:bd:9a:cf:3a:49:d5:f3:70:51:90:9e:01:e5:
46:9b:7e:6c:b0:72:85:97:2e:4a:84:68:5a:82:ff:38:d6:6d:
83:2c:7e:4c:97:14:dc:ab:e4:da:93:f2:08:2a:a2:88:a8:74:
d4:8b:fe:34:f8:ac:d2:f6:29:ba:3d:44:f7:21:6a:99:ee:b0:
43:e2:06:c6:a0:39:53:df:3f:e3:9f:9f:4a:2a:d9:69:08:09:
22:49:71:99:75:8d:da:a8:83:a6:ab:70:f1:06:10:f1:ec:10:
57:43:65:aa:12:e0:b9:61:1a:97:4d:af:e7:89:9c:69:0e:04:
c4:0d:a7:a8:0b:1c:6b:a0:97:67:51:bc:7d:df:39:8f:c7:a5:
61:be:69:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:38:22 2026 by rpki-client