Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/427456-4957-4d33-9c64-16f4057fac26/1/G82c0xYDmcHjyAzwdIZ6cp991Pk.mft
File: G82c0xYDmcHjyAzwdIZ6cp991Pk.mft (raw, json)
Hash identifier: AUQkGtPdF9e/brWjKeHPlMTsy4vKs4bLdmGKL4aCJjo=
Subject key identifier: 89:2E:84:A1:93:22:55:39:02:27:E9:CB:70:44:69:56:1B:76:C7:2D
Authority key identifier: 1B:CD:9C:D3:16:03:99:C1:E3:C8:0C:F0:74:86:7A:72:9F:7D:D4:F9
Certificate issuer: /CN=1bcd9cd3160399c1e3c80cf074867a729f7dd4f9
Certificate serial: 019D2AE0A76975C2357BF409A6DC5B16CD54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G82c0xYDmcHjyAzwdIZ6cp991Pk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/427456-4957-4d33-9c64-16f4057fac26/1/G82c0xYDmcHjyAzwdIZ6cp991Pk.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 16:00:58 +0000
Manifest this update: Thu 26 Mar 2026 16:00:58 +0000
Manifest next update: Fri 27 Mar 2026 16:00:58 +0000
Files and hashes: 1: G82c0xYDmcHjyAzwdIZ6cp991Pk.crl (hash: KIAIesKLXW9LVl9Melgri7s+Qzrb73s0+eE6gcQklMQ=)
2: cLvxrkkyUYgMpaai3Fsxuqy0m0Y.roa (hash: syKnvPS7DRThyoysE7TOjvIhTQSg7bMij5xdInvN0jo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/427456-4957-4d33-9c64-16f4057fac26/1/G82c0xYDmcHjyAzwdIZ6cp991Pk.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/427456-4957-4d33-9c64-16f4057fac26/1/G82c0xYDmcHjyAzwdIZ6cp991Pk.mft
rsync://rpki.ripe.net/repository/DEFAULT/G82c0xYDmcHjyAzwdIZ6cp991Pk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:e0:a7:69:75:c2:35:7b:f4:09:a6:dc:5b:16:cd:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bcd9cd3160399c1e3c80cf074867a729f7dd4f9
Validity
Not Before: Mar 26 16:00:58 2026 GMT
Not After : Mar 27 16:00:58 2026 GMT
Subject: CN=892e84a1932255390227e9cb704469561b76c72d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5f:a7:93:e9:a8:e6:f8:bb:3f:6a:1a:ef:97:
87:03:4f:2d:50:90:b6:64:a0:83:20:d8:d6:9e:1b:
2d:e4:c9:8b:bd:44:f3:63:be:4a:32:cb:3c:19:8d:
a4:3e:b4:fc:a5:e3:d3:e5:94:15:12:26:e8:b5:82:
1a:60:6a:f4:40:b1:04:37:0a:0d:22:c2:a9:37:4b:
1b:5c:52:53:bf:97:b3:a7:07:95:bf:15:21:e9:18:
70:65:14:9d:54:3c:be:84:bb:13:54:a4:50:6b:67:
4c:90:dc:16:35:52:b2:e5:1b:c8:ab:9c:9e:a2:ef:
12:ae:d0:60:05:f3:6b:1c:af:cc:04:85:6d:b1:24:
bf:48:0c:2b:df:01:d1:e4:e2:dc:97:93:79:8f:84:
30:2f:b9:af:29:3f:16:4b:85:99:36:76:4f:82:60:
a2:87:c2:bb:6f:a3:59:1c:85:3c:09:0e:a7:21:83:
df:2b:e1:d3:a4:35:35:14:e3:64:f8:1f:fb:2e:46:
68:6d:15:1d:16:f0:3c:b6:cd:a1:fe:62:30:0f:e2:
0f:88:78:5d:c2:57:36:fa:6a:f8:1e:55:2b:b5:98:
25:53:c4:4f:0d:03:42:10:4e:ac:4c:82:53:33:42:
72:c3:b3:67:11:e7:c9:9c:05:be:a3:56:64:1f:da:
13:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:2E:84:A1:93:22:55:39:02:27:E9:CB:70:44:69:56:1B:76:C7:2D
X509v3 Authority Key Identifier:
keyid:1B:CD:9C:D3:16:03:99:C1:E3:C8:0C:F0:74:86:7A:72:9F:7D:D4:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G82c0xYDmcHjyAzwdIZ6cp991Pk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/427456-4957-4d33-9c64-16f4057fac26/1/G82c0xYDmcHjyAzwdIZ6cp991Pk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/427456-4957-4d33-9c64-16f4057fac26/1/G82c0xYDmcHjyAzwdIZ6cp991Pk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:f6:da:da:00:58:c1:45:a9:c6:d7:54:3c:7a:44:11:f3:b9:
32:e3:56:f5:f5:5f:ba:0c:52:5c:f8:6d:f3:1a:01:d0:33:ac:
b3:f9:ec:ba:b6:2e:ef:dd:e2:fd:39:f8:30:17:16:cd:a4:f2:
ee:e8:89:78:9b:8f:b4:03:23:c5:24:e3:95:8d:7b:16:9b:97:
54:c9:3a:d1:09:76:3b:ac:74:39:14:58:1a:ae:73:7b:3f:99:
d2:73:20:d6:b1:0d:de:55:be:ee:46:02:ec:52:7f:d3:c5:83:
81:33:97:bc:43:53:80:a2:2c:61:4e:52:7a:78:8b:32:a5:f1:
81:99:2c:39:10:ec:d9:d7:93:e6:99:87:9e:9c:7a:00:9d:b2:
db:0c:28:24:cf:10:94:20:b9:57:52:23:a5:a0:12:8a:f5:68:
5f:f4:f4:52:f7:10:ec:1c:1a:49:36:d7:a0:4d:b3:83:53:1d:
0a:90:56:20:29:1c:76:15:00:94:8b:55:2e:4b:8d:fd:e1:54:
3a:85:20:c8:8c:1f:4a:87:16:8f:5f:7b:ec:0c:01:b4:73:e1:
2a:ad:c8:3e:81:21:52:0a:3d:3b:43:ba:72:64:1b:4e:7c:37:
0f:10:da:db:2b:e8:02:ac:23:9b:26:bc:c6:43:c1:92:26:55:
87:6d:f3:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 01:55:04 2026 by rpki-client