Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/573f0b-5325-41d3-b9ff-8f7d56b7b417/1/G7KbPxWPqAcQwSpYtp-5JgmNUSk.mft
File: G7KbPxWPqAcQwSpYtp-5JgmNUSk.mft (raw, json)
Hash identifier: l9g2yWLjVAxxxMC+Sm3EiSnEBkn/1mTr48zrtHAdxkA=
Subject key identifier: 26:95:BD:31:91:EA:11:31:8C:CF:CC:11:C0:5B:55:70:16:BD:C7:D6
Authority key identifier: 1B:B2:9B:3F:15:8F:A8:07:10:C1:2A:58:B6:9F:B9:26:09:8D:51:29
Certificate issuer: /CN=1bb29b3f158fa80710c12a58b69fb926098d5129
Certificate serial: 019D2A3C26031A2588C944A7E7AD994F1244
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G7KbPxWPqAcQwSpYtp-5JgmNUSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/573f0b-5325-41d3-b9ff-8f7d56b7b417/1/G7KbPxWPqAcQwSpYtp-5JgmNUSk.mft
Manifest number: 0F1D
Signing time: Thu 26 Mar 2026 13:01:17 +0000
Manifest this update: Thu 26 Mar 2026 13:01:17 +0000
Manifest next update: Fri 27 Mar 2026 13:01:17 +0000
Files and hashes: 1: G7KbPxWPqAcQwSpYtp-5JgmNUSk.crl (hash: jIwcrQBlooVJ287vj+TXa8m8quTDjWhanfvOV4CxZAc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/573f0b-5325-41d3-b9ff-8f7d56b7b417/1/G7KbPxWPqAcQwSpYtp-5JgmNUSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/573f0b-5325-41d3-b9ff-8f7d56b7b417/1/G7KbPxWPqAcQwSpYtp-5JgmNUSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/G7KbPxWPqAcQwSpYtp-5JgmNUSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3c:26:03:1a:25:88:c9:44:a7:e7:ad:99:4f:12:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bb29b3f158fa80710c12a58b69fb926098d5129
Validity
Not Before: Mar 26 13:01:17 2026 GMT
Not After : Mar 27 13:01:17 2026 GMT
Subject: CN=2695bd3191ea11318ccfcc11c05b557016bdc7d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e0:bf:f9:a9:39:83:32:0f:39:1b:a7:5c:f1:
d9:94:8f:05:13:77:e3:86:1f:50:65:64:04:49:77:
20:01:46:3e:45:2e:cf:67:05:68:24:f1:14:82:15:
00:c3:c7:c8:42:b4:e8:8a:26:e8:47:ac:95:be:66:
cb:7d:55:0e:1c:fd:34:af:0d:5e:22:41:49:52:89:
bb:42:dd:0e:08:02:30:95:f6:d6:21:bc:47:5c:52:
fc:81:bb:00:fc:76:9d:92:be:94:55:d6:68:01:45:
92:73:68:95:e9:83:08:86:a0:af:ba:b5:88:29:5a:
4d:f7:00:e4:29:ab:8d:7c:99:a0:44:1c:65:c2:2e:
8e:e0:21:6c:be:11:ad:1e:fe:27:27:61:50:29:3d:
d6:dd:81:9e:ca:2e:4b:1f:7f:d9:d9:a8:4e:c1:41:
75:2e:0b:fb:b0:46:95:a5:a7:bf:86:5a:10:1c:27:
42:70:a8:d4:95:40:6c:78:13:36:92:7f:cc:23:93:
10:48:20:2f:45:92:69:27:0d:39:d8:3f:5f:61:56:
86:b0:e9:98:4d:19:11:5e:36:f6:93:2c:2a:8a:28:
94:fa:f1:ab:22:71:66:60:8e:98:f5:e4:81:ba:53:
60:7f:c3:48:f3:46:0c:49:54:a2:43:8a:38:29:d8:
81:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:95:BD:31:91:EA:11:31:8C:CF:CC:11:C0:5B:55:70:16:BD:C7:D6
X509v3 Authority Key Identifier:
keyid:1B:B2:9B:3F:15:8F:A8:07:10:C1:2A:58:B6:9F:B9:26:09:8D:51:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G7KbPxWPqAcQwSpYtp-5JgmNUSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/573f0b-5325-41d3-b9ff-8f7d56b7b417/1/G7KbPxWPqAcQwSpYtp-5JgmNUSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/573f0b-5325-41d3-b9ff-8f7d56b7b417/1/G7KbPxWPqAcQwSpYtp-5JgmNUSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:d1:e0:78:8f:50:e4:8f:a2:ac:96:fd:25:a4:b0:f1:ee:00:
a2:1d:73:60:fe:69:e7:48:d8:ee:7b:48:f0:0c:a5:32:d7:52:
9a:58:29:15:67:65:21:18:15:78:53:da:c1:4a:43:0e:ef:d2:
9e:fe:c0:3c:ee:70:4a:ca:46:02:2f:71:23:85:3c:e6:e1:12:
ac:43:5d:72:79:6d:bd:c6:2f:e2:ab:1c:24:12:9e:8a:fc:84:
b8:db:70:0e:c2:67:99:4b:8a:24:26:14:39:2f:d1:f1:78:c4:
7b:b2:20:67:7b:83:0f:ef:3b:37:f1:26:cb:c1:8c:40:ab:b9:
b9:11:8b:b8:25:31:5a:5c:93:9b:73:22:7c:60:8b:e3:11:b8:
0d:2b:ae:f0:32:48:76:d0:76:dd:ce:d1:a6:f6:45:93:cb:c7:
30:62:d8:bb:50:5f:00:2c:a5:58:45:8d:4a:56:81:96:9f:52:
49:4c:3d:46:54:a0:71:71:21:7a:e0:9a:be:f2:e7:87:6d:fa:
34:9c:14:66:7f:ff:07:4e:bc:92:9c:28:98:d9:4b:32:dd:a2:
3a:79:1d:81:e2:2b:17:17:09:a4:64:7a:df:ac:74:ec:ce:47:
47:60:37:c2:90:3f:2c:90:cb:8d:54:75:ea:e9:39:ea:52:f4:
44:da:ef:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:14:55 2026 by rpki-client