Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/ed1609-1086-47b4-a49d-f10d26e3c3df/1/G57Ppx7--bsb_nsuQCFc2lsjHl0.mft
File: G57Ppx7--bsb_nsuQCFc2lsjHl0.mft (raw, json)
Hash identifier: VCuZJRmSAWfYpW0y1PdltvqHPlFgUiVUhPkdUx34kKo=
Subject key identifier: AE:3A:EE:05:E4:5C:C3:ED:F3:09:32:37:20:B5:C4:32:83:B8:34:EF
Authority key identifier: 1B:9E:CF:A7:1E:FE:F9:BB:1B:FE:7B:2E:40:21:5C:DA:5B:23:1E:5D
Certificate issuer: /CN=1b9ecfa71efef9bb1bfe7b2e40215cda5b231e5d
Certificate serial: 019D2996E747417F2CBB21DAE370B8FFA670
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G57Ppx7--bsb_nsuQCFc2lsjHl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/ed1609-1086-47b4-a49d-f10d26e3c3df/1/G57Ppx7--bsb_nsuQCFc2lsjHl0.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 10:00:48 +0000
Manifest this update: Thu 26 Mar 2026 10:00:48 +0000
Manifest next update: Fri 27 Mar 2026 10:00:48 +0000
Files and hashes: 1: G57Ppx7--bsb_nsuQCFc2lsjHl0.crl (hash: ZGhe2I6N6ird1HFNsJ4enyxkrDG0rDVrywfEIg1AvnU=)
2: Qlwx02bVgQI182YdOV5q9bl7nUU.roa (hash: IuhFZVGxERjaK21zfd0QTArpWqNI5veVEdc1bKjlJVk=)
3: vZ9biZ3U2tRv6wz5Y-SkkAFolzo.roa (hash: 21jHChNoDK3qxfeLr4qOaAbRTR/to9DRO343vs5y4QE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/ed1609-1086-47b4-a49d-f10d26e3c3df/1/G57Ppx7--bsb_nsuQCFc2lsjHl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/ed1609-1086-47b4-a49d-f10d26e3c3df/1/G57Ppx7--bsb_nsuQCFc2lsjHl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/G57Ppx7--bsb_nsuQCFc2lsjHl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:96:e7:47:41:7f:2c:bb:21:da:e3:70:b8:ff:a6:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b9ecfa71efef9bb1bfe7b2e40215cda5b231e5d
Validity
Not Before: Mar 26 10:00:48 2026 GMT
Not After : Mar 27 10:00:48 2026 GMT
Subject: CN=ae3aee05e45cc3edf309323720b5c43283b834ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0d:2d:3b:78:82:e6:6a:58:ce:2d:31:9c:31:
80:ae:c3:22:17:e0:cc:62:69:55:b2:49:fd:e4:98:
c9:60:96:22:1c:5f:10:f4:a1:75:2c:3b:21:af:57:
d4:ed:75:7a:2e:f5:56:23:f0:9f:ba:48:bf:fd:c9:
ac:d8:f4:83:48:4c:a6:08:70:04:76:d9:e8:46:0b:
51:4a:c3:c8:14:37:12:ed:13:d5:77:c8:24:19:6c:
31:bf:02:30:74:e0:6d:f5:fe:04:1a:fc:e9:6b:11:
64:51:8b:c6:0a:87:22:2e:63:a0:ce:ea:d7:d7:91:
5e:69:25:1b:fe:87:e3:44:1a:7b:31:a2:b5:52:6c:
f8:17:c5:10:23:78:6d:11:ab:15:b3:71:2b:52:01:
7c:03:40:1e:c7:8f:63:30:f9:ba:fa:5a:93:48:30:
45:4a:b6:c9:2a:b9:d0:ce:49:d5:f9:1e:d5:06:93:
d8:ae:37:5b:61:ff:d3:6b:61:27:37:32:50:44:19:
22:62:fd:92:ef:e5:16:09:6b:74:3f:61:5c:46:21:
31:21:cd:a9:5a:dd:28:4a:c6:dd:b3:b2:29:c2:68:
77:b8:12:1f:d2:7c:14:dd:b1:9e:14:95:bb:29:c4:
3d:6d:8a:2d:88:90:64:56:03:0d:ca:e6:0a:5a:c0:
c3:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:3A:EE:05:E4:5C:C3:ED:F3:09:32:37:20:B5:C4:32:83:B8:34:EF
X509v3 Authority Key Identifier:
keyid:1B:9E:CF:A7:1E:FE:F9:BB:1B:FE:7B:2E:40:21:5C:DA:5B:23:1E:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G57Ppx7--bsb_nsuQCFc2lsjHl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/ed1609-1086-47b4-a49d-f10d26e3c3df/1/G57Ppx7--bsb_nsuQCFc2lsjHl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/ed1609-1086-47b4-a49d-f10d26e3c3df/1/G57Ppx7--bsb_nsuQCFc2lsjHl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:c7:9e:fc:51:96:bc:25:e0:a5:f1:83:37:d2:b3:74:04:6c:
8f:3c:24:1e:45:08:64:e7:0f:3f:d0:5a:3b:7d:3b:0a:bb:55:
13:3d:89:51:2d:be:95:4c:88:c7:2e:f9:bd:44:c3:90:5a:20:
c2:a5:25:2c:bb:b5:ec:be:8a:8d:0e:0e:7d:88:41:b2:a2:99:
c2:ed:45:d9:d7:41:5e:73:fc:5e:3a:ca:f9:b1:a1:67:a7:0b:
dc:33:0d:ee:77:e4:9d:86:5c:d4:e3:55:0a:c7:31:52:05:a6:
05:da:73:be:3a:e1:ce:b8:b8:64:b6:e1:c4:cb:ef:60:fe:d8:
35:e7:52:ec:da:20:fd:26:26:dd:19:bb:e7:6d:96:80:46:10:
dd:21:e3:a6:01:67:b5:f5:94:23:83:b6:81:91:e3:0e:fe:c8:
3d:24:63:1c:ce:c5:d9:6e:00:ed:d3:34:54:7a:b5:e5:bd:df:
ed:5a:49:7d:e4:56:0d:dc:2c:35:aa:a6:32:f3:98:f7:6f:60:
f3:4d:ae:3c:2b:b3:58:05:34:9b:2e:db:2e:ed:ef:8b:61:d7:
22:c9:c0:c4:fd:ef:89:20:69:85:e5:67:e1:53:04:d8:2c:da:
7a:d8:7e:32:81:44:99:73:f4:f7:21:86:30:76:a2:7c:5f:39:
3b:76:67:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:19:31 2026 by rpki-client