Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/8c6e96-d778-49dd-9e5e-3cf2b8002031/1/G9JpBH0C_otaKsnrjV_sB7GH7aE.mft
File: G9JpBH0C_otaKsnrjV_sB7GH7aE.mft (raw, json)
Hash identifier: Y7cmIbQ0NIEtCTQHeaTyexl+H/YzGjkR41paGaWksfU=
Subject key identifier: EE:3D:66:45:60:85:CD:BD:B6:F3:72:8F:6B:50:46:AA:39:C0:46:42
Authority key identifier: 1B:D2:69:04:7D:02:FE:8B:5A:2A:C9:EB:8D:5F:EC:07:B1:87:ED:A1
Certificate issuer: /CN=1bd269047d02fe8b5a2ac9eb8d5fec07b187eda1
Certificate serial: 019D27DF9000DF3930537DE2E58BEA650331
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G9JpBH0C_otaKsnrjV_sB7GH7aE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/8c6e96-d778-49dd-9e5e-3cf2b8002031/1/G9JpBH0C_otaKsnrjV_sB7GH7aE.mft
Manifest number: 05B6
Signing time: Thu 26 Mar 2026 02:00:55 +0000
Manifest this update: Thu 26 Mar 2026 02:00:55 +0000
Manifest next update: Fri 27 Mar 2026 02:00:55 +0000
Files and hashes: 1: G9JpBH0C_otaKsnrjV_sB7GH7aE.crl (hash: rAfho1P9vcH8jYnbN6wWPUoW6veCXMKDTmORnPyIdnI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/8c6e96-d778-49dd-9e5e-3cf2b8002031/1/G9JpBH0C_otaKsnrjV_sB7GH7aE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/8c6e96-d778-49dd-9e5e-3cf2b8002031/1/G9JpBH0C_otaKsnrjV_sB7GH7aE.mft
rsync://rpki.ripe.net/repository/DEFAULT/G9JpBH0C_otaKsnrjV_sB7GH7aE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:90:00:df:39:30:53:7d:e2:e5:8b:ea:65:03:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bd269047d02fe8b5a2ac9eb8d5fec07b187eda1
Validity
Not Before: Mar 26 02:00:55 2026 GMT
Not After : Mar 27 02:00:55 2026 GMT
Subject: CN=ee3d66456085cdbdb6f3728f6b5046aa39c04642
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:6d:62:e6:4e:2e:8f:8f:08:56:17:08:05:ce:
bc:77:f6:c9:61:4e:13:85:b6:b3:64:33:94:03:47:
80:f9:fb:8f:85:5e:7d:ed:de:64:b1:84:8b:71:d4:
25:62:e1:9b:fb:e6:a4:c5:09:dc:31:59:6e:4f:ae:
7f:27:49:af:83:74:20:b0:e5:ba:60:0d:a9:8e:cc:
73:ac:28:aa:1b:4e:5d:7f:e3:1c:5c:b8:98:fd:4d:
d5:98:63:c4:1c:ad:d4:13:3c:8b:3e:a4:96:d8:dd:
e4:91:5c:bd:64:28:4f:f8:bb:c6:2e:e1:66:96:59:
3a:50:bb:dc:09:b5:b4:99:a7:1d:2c:7a:e9:52:83:
f0:13:b6:32:4e:9c:90:ba:ed:9f:f8:52:69:e4:17:
ac:58:85:a7:93:f7:81:d2:f8:1b:a9:94:2b:d3:47:
0b:1c:2b:37:c6:c3:66:56:03:59:f3:46:63:c9:40:
6e:25:d0:06:59:7c:35:18:5a:24:a3:d6:58:19:85:
14:53:28:2d:3d:82:5b:38:68:48:88:ef:ff:f6:56:
07:44:94:89:f3:42:89:3f:bf:ec:d3:11:41:07:da:
38:6d:64:71:94:7c:54:45:f6:08:c6:53:99:2f:62:
7c:7f:02:35:b0:1b:d1:90:97:6f:09:10:41:24:05:
ac:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:3D:66:45:60:85:CD:BD:B6:F3:72:8F:6B:50:46:AA:39:C0:46:42
X509v3 Authority Key Identifier:
keyid:1B:D2:69:04:7D:02:FE:8B:5A:2A:C9:EB:8D:5F:EC:07:B1:87:ED:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G9JpBH0C_otaKsnrjV_sB7GH7aE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/8c6e96-d778-49dd-9e5e-3cf2b8002031/1/G9JpBH0C_otaKsnrjV_sB7GH7aE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/8c6e96-d778-49dd-9e5e-3cf2b8002031/1/G9JpBH0C_otaKsnrjV_sB7GH7aE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:4f:ab:72:3f:90:9e:d1:a2:0b:f6:cd:39:f8:53:94:d5:7b:
2e:1d:cf:f1:a0:07:ea:8c:19:f4:ef:f2:41:42:09:dd:b0:ac:
88:a2:da:62:69:94:ec:0a:a0:cf:3d:ff:9c:93:d6:e7:9a:17:
32:1b:43:6a:4b:b7:e3:27:44:dc:3c:bd:ed:ee:43:c7:a3:0f:
e0:bf:78:3a:2a:4a:94:4e:25:46:24:e1:b9:11:e2:16:bc:f9:
f7:61:06:83:ae:c7:f4:49:4e:d0:90:74:e7:b4:02:ff:47:f4:
24:2d:9a:da:e2:0f:e9:90:c4:d1:6b:06:3f:63:4c:47:ab:a0:
27:d3:00:95:4e:13:94:c5:08:2f:4f:4a:08:2e:df:05:bf:08:
86:47:78:e8:3f:96:17:75:cb:59:81:63:39:28:3b:d6:5b:ef:
13:8e:1f:1f:0e:06:15:5c:6c:cc:3a:07:b9:c3:0c:d1:49:19:
71:30:c8:f4:f9:34:53:c9:02:41:67:83:9f:d4:08:6d:72:8d:
e5:b3:ee:ec:ce:96:26:97:db:e1:c9:83:15:84:35:2d:24:84:
7a:25:08:66:e6:ca:01:16:3e:e0:b6:66:6c:8c:50:71:24:3a:
73:66:2d:6b:ca:31:4c:95:1f:02:cd:fd:e5:88:2c:f5:be:ac:
9c:7c:ce:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:57:18 2026 by rpki-client