Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/c77160-4a85-478d-a540-55ac2026653b/1/G6IBGTlu61biTNCpsu4l-i2kteY.mft
File: G6IBGTlu61biTNCpsu4l-i2kteY.mft (raw, json)
Hash identifier: AA8Gvp5aqzaDe3/f6NM7ii/hM1nP/FJ1RPhUZcDKQKo=
Subject key identifier: 9E:AF:07:09:70:3D:B9:57:EC:7A:12:E6:BA:EF:37:3E:24:B2:6A:8C
Authority key identifier: 1B:A2:01:19:39:6E:EB:56:E2:4C:D0:A9:B2:EE:25:FA:2D:A4:B5:E6
Certificate issuer: /CN=1ba20119396eeb56e24cd0a9b2ee25fa2da4b5e6
Certificate serial: 019D2704A703AD07662B29B4D49706010BE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G6IBGTlu61biTNCpsu4l-i2kteY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/c77160-4a85-478d-a540-55ac2026653b/1/G6IBGTlu61biTNCpsu4l-i2kteY.mft
Manifest number: 0BED
Signing time: Wed 25 Mar 2026 22:01:49 +0000
Manifest this update: Wed 25 Mar 2026 22:01:49 +0000
Manifest next update: Thu 26 Mar 2026 22:01:49 +0000
Files and hashes: 1: G6IBGTlu61biTNCpsu4l-i2kteY.crl (hash: SdytChfG0ClR9NGJoDiutGJiFVOMAa/FhxK+282/oZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/c77160-4a85-478d-a540-55ac2026653b/1/G6IBGTlu61biTNCpsu4l-i2kteY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/c77160-4a85-478d-a540-55ac2026653b/1/G6IBGTlu61biTNCpsu4l-i2kteY.mft
rsync://rpki.ripe.net/repository/DEFAULT/G6IBGTlu61biTNCpsu4l-i2kteY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:a7:03:ad:07:66:2b:29:b4:d4:97:06:01:0b:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ba20119396eeb56e24cd0a9b2ee25fa2da4b5e6
Validity
Not Before: Mar 25 22:01:49 2026 GMT
Not After : Mar 26 22:01:49 2026 GMT
Subject: CN=9eaf0709703db957ec7a12e6baef373e24b26a8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:78:30:f5:db:6b:f1:bf:c0:f4:c0:f5:f7:01:
61:9f:eb:71:c2:84:e8:48:7e:0a:06:2b:dc:69:7a:
dc:29:ae:be:ad:53:39:89:34:93:9c:0d:b6:4c:96:
d3:df:15:41:52:fa:30:0c:56:ba:d0:41:14:14:ba:
94:6b:f6:39:6a:a4:82:d2:d5:cd:ae:a7:a7:01:95:
84:e5:30:63:ab:b4:34:44:df:3f:38:c8:89:d4:07:
6b:78:76:20:c7:9b:d7:2e:49:c6:9e:75:e5:3f:32:
79:21:df:0e:cb:22:6c:35:24:ed:01:e4:33:e4:03:
89:61:79:24:f4:78:eb:0f:9e:2c:73:9f:0c:af:98:
97:ad:aa:f2:00:76:c7:d2:66:9b:3d:f7:22:03:56:
f6:55:ce:d7:64:88:ca:29:1f:86:e6:63:91:7a:c8:
7f:49:fe:c6:d8:39:84:a3:56:65:7d:49:4c:6f:e8:
b5:91:cc:bb:bd:b1:cc:2a:28:54:8c:66:6f:d4:30:
7f:62:3b:ea:0f:b3:d2:fc:34:e3:08:9f:9c:c6:aa:
30:55:93:a2:f8:d6:fe:e6:7d:e1:1d:2b:91:e7:8c:
46:32:dc:cc:07:bc:10:98:77:90:8f:45:91:2a:09:
a6:6c:0a:df:e9:c1:ac:0a:d4:19:c7:78:f1:5b:de:
f2:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:AF:07:09:70:3D:B9:57:EC:7A:12:E6:BA:EF:37:3E:24:B2:6A:8C
X509v3 Authority Key Identifier:
keyid:1B:A2:01:19:39:6E:EB:56:E2:4C:D0:A9:B2:EE:25:FA:2D:A4:B5:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G6IBGTlu61biTNCpsu4l-i2kteY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c77160-4a85-478d-a540-55ac2026653b/1/G6IBGTlu61biTNCpsu4l-i2kteY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c77160-4a85-478d-a540-55ac2026653b/1/G6IBGTlu61biTNCpsu4l-i2kteY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:26:c5:8b:2e:44:47:9e:5a:2e:af:c8:3d:d2:86:ff:7d:d9:
a7:6d:e8:6c:75:94:1b:de:72:2e:da:8a:08:0e:00:59:5f:93:
7b:c5:8a:0f:2f:9f:8a:f2:ed:ae:97:0e:59:7e:98:9c:c8:5f:
67:3d:30:39:0a:24:cc:5f:07:42:3a:c4:13:52:b3:99:38:ff:
53:59:62:b6:84:5f:37:62:5a:56:c3:48:58:7b:dc:f6:94:58:
aa:59:94:7d:e3:a2:55:d2:c6:21:75:e2:2f:a6:f2:0b:d7:18:
4c:3d:04:5e:6f:1e:57:3c:69:fc:82:fc:89:45:1b:d5:93:9c:
db:9d:85:2f:8b:52:71:96:9f:19:b9:ee:86:89:f2:e7:d3:86:
e7:fc:6b:3c:ec:f9:0a:17:2e:4e:d0:95:a3:00:88:33:08:c6:
83:f0:f4:66:dd:eb:65:f5:0f:5a:53:95:01:e4:a3:cb:07:84:
dc:93:0b:3b:10:c6:9c:b3:19:9f:70:14:b9:4a:55:a7:2d:bd:
bc:98:b0:1b:f9:7f:97:92:a5:48:b1:cd:9b:95:f1:7a:47:28:
00:d0:bd:f6:ef:1d:33:1e:a0:f2:0e:4a:9a:d4:84:40:58:e0:
9d:09:5d:7b:f0:56:6e:5b:d8:1f:c2:3d:83:6b:e8:c4:8c:16:
63:6b:2c:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:54 2026 by rpki-client