Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/066478-b066-4736-ad9f-53f41dfe407f/1/G6UWeIg5f_nKqET1VP-DfP2_lyI.mft
File: G6UWeIg5f_nKqET1VP-DfP2_lyI.mft (raw, json)
Hash identifier: nEYq9KuWfC2EmBJrUSltmgwrFK5Ns2r4J4zvBvj/UIo=
Subject key identifier: 1C:B8:90:FB:A0:F9:02:43:61:C2:25:AC:43:98:72:2E:A0:5F:4E:8B
Authority key identifier: 1B:A5:16:78:88:39:7F:F9:CA:A8:44:F5:54:FF:83:7C:FD:BF:97:22
Certificate issuer: /CN=1ba5167888397ff9caa844f554ff837cfdbf9722
Certificate serial: 019D2929A4318DC42315F82202258835525B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G6UWeIg5f_nKqET1VP-DfP2_lyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/066478-b066-4736-ad9f-53f41dfe407f/1/G6UWeIg5f_nKqET1VP-DfP2_lyI.mft
Manifest number: 17DE
Signing time: Thu 26 Mar 2026 08:01:28 +0000
Manifest this update: Thu 26 Mar 2026 08:01:28 +0000
Manifest next update: Fri 27 Mar 2026 08:01:28 +0000
Files and hashes: 1: G6UWeIg5f_nKqET1VP-DfP2_lyI.crl (hash: 9sWEGxtHj6zQ94HyvSEDJYhWZXLt/Jmvdkzb8TAWHr4=)
2: _Q4Z6jbF8NYTsaR27vIk58vSUlI.roa (hash: 7qWyZfAO4daLpycwI/J3xaTZkHMp77aXgml30PjFR4w=)
3: f3kPFs4waiX6locgjDdwFUiP7tk.roa (hash: 4sDGfuSEROWxAzi+C1qp5I+6lZx1ktDF8owXbaFpZn0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/066478-b066-4736-ad9f-53f41dfe407f/1/G6UWeIg5f_nKqET1VP-DfP2_lyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/066478-b066-4736-ad9f-53f41dfe407f/1/G6UWeIg5f_nKqET1VP-DfP2_lyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/G6UWeIg5f_nKqET1VP-DfP2_lyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:a4:31:8d:c4:23:15:f8:22:02:25:88:35:52:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ba5167888397ff9caa844f554ff837cfdbf9722
Validity
Not Before: Mar 26 08:01:28 2026 GMT
Not After : Mar 27 08:01:28 2026 GMT
Subject: CN=1cb890fba0f9024361c225ac4398722ea05f4e8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c9:9d:fd:08:04:ec:61:fb:81:48:bf:d9:39:
4f:e1:40:15:e5:d4:ec:7b:99:ac:93:3b:fb:a7:c6:
18:e3:d0:60:b4:06:c0:20:24:d2:cf:3f:12:df:2e:
9e:db:a1:a7:6d:5f:43:6f:85:e1:5d:51:c1:39:f0:
4a:7a:f9:9f:81:f7:1a:9d:0d:97:70:2a:38:25:a5:
70:76:36:3c:6e:31:2c:86:85:0a:af:c5:9f:36:34:
59:b0:49:8f:c6:bb:55:10:7b:57:c5:1d:45:5f:7a:
a6:8d:4a:8c:61:db:a9:48:16:4b:57:7c:b0:44:90:
20:95:fa:70:c7:86:4f:f5:b5:7f:53:1d:7a:e7:69:
3d:8d:02:99:b0:f2:18:da:f5:4a:b5:70:e7:7c:a4:
8a:9b:ab:11:b3:23:b9:56:c5:39:c8:d2:2d:aa:e0:
db:3b:e3:5b:ba:f3:d7:35:1c:27:59:f7:de:31:53:
e3:4a:33:c2:70:26:41:1a:ed:cb:80:98:aa:53:b3:
a7:75:ee:ff:5c:79:d2:e4:7f:67:67:94:08:00:2e:
54:6a:31:75:c4:7f:e3:97:36:3c:0e:95:45:f9:a6:
c2:de:bf:21:4c:fd:33:d3:5f:25:64:86:f6:6f:9c:
a8:88:7e:7e:ad:ee:a4:97:db:87:6a:f5:9d:4a:a1:
ec:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:B8:90:FB:A0:F9:02:43:61:C2:25:AC:43:98:72:2E:A0:5F:4E:8B
X509v3 Authority Key Identifier:
keyid:1B:A5:16:78:88:39:7F:F9:CA:A8:44:F5:54:FF:83:7C:FD:BF:97:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G6UWeIg5f_nKqET1VP-DfP2_lyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/066478-b066-4736-ad9f-53f41dfe407f/1/G6UWeIg5f_nKqET1VP-DfP2_lyI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/066478-b066-4736-ad9f-53f41dfe407f/1/G6UWeIg5f_nKqET1VP-DfP2_lyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:30:95:0e:b8:70:4a:80:c6:d0:85:2e:19:75:07:e3:f4:51:
36:b9:a4:bd:2e:43:d3:c1:4b:f7:49:3b:7c:08:6a:28:89:bf:
e4:de:7f:46:ce:72:4c:62:c7:16:7d:18:dc:bb:69:1c:52:a0:
30:50:c7:8f:1d:5d:6c:b1:d2:41:35:a8:fc:20:a6:3d:f2:41:
27:e6:08:8a:dc:f8:83:aa:7d:6d:f9:76:4d:5a:b1:ed:27:95:
34:78:7c:85:bf:b9:e6:c0:92:93:19:23:59:bb:18:87:63:e8:
c9:71:1c:32:0f:87:a3:7d:c4:60:21:55:c4:fb:81:07:bc:38:
71:21:89:8c:e7:bb:12:c2:61:60:17:ed:11:bd:23:54:45:72:
0d:c1:f6:a0:e2:de:af:f6:7c:3e:e9:a0:db:e6:c0:f4:fc:8d:
5d:6b:92:de:ef:e5:52:33:bb:0e:f2:fd:d5:8c:7b:31:f7:fe:
4e:15:96:0c:49:c5:dc:d8:27:46:0c:01:c2:45:3a:32:54:8e:
07:bb:cd:1a:10:ce:fe:75:b2:a1:1b:77:69:0c:c9:93:3d:99:
8f:be:e3:07:d9:33:56:70:5c:97:63:fb:b1:16:21:40:99:79:
90:de:d0:1e:ec:82:b8:e9:44:5a:2b:0f:6f:1c:d7:3e:d1:a3:
6f:1d:f8:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:19:22 2026 by rpki-client