Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/b88532-9974-4612-94c4-5e0777b04049/1/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.mft
File: GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.mft (raw, json)
Hash identifier: Vu8qHS7FZ8AcBI3cSOstQZ+vqRFb4+SBmOqW5OOB8kg=
Subject key identifier: 65:C1:AA:AC:19:2C:59:66:0F:E4:8C:ED:AC:81:6C:D7:5F:78:2B:AA
Authority key identifier: 18:8E:D4:88:4F:11:19:39:CA:6C:7F:0F:34:B2:79:2B:39:B9:34:23
Certificate issuer: /CN=188ed4884f111939ca6c7f0f34b2792b39b93423
Certificate serial: 019D262874BE32DD078E8E533D0A4D9C9454
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/b88532-9974-4612-94c4-5e0777b04049/1/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.mft
Manifest number: 1818
Signing time: Wed 25 Mar 2026 18:01:18 +0000
Manifest this update: Wed 25 Mar 2026 18:01:18 +0000
Manifest next update: Thu 26 Mar 2026 18:01:18 +0000
Files and hashes: 1: 6LC4FnmLLsng6HVU2xR3jbERaDc.roa (hash: LpXh0JZ4HonUdcN7azN27CT2g+jjECs6HIXpWyOrLLQ=)
2: GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.crl (hash: TR/zvNvjmaW34fK3d0fiXI12vnMvluEq/GZhwCL5SgA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/b88532-9974-4612-94c4-5e0777b04049/1/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/b88532-9974-4612-94c4-5e0777b04049/1/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.mft
rsync://rpki.ripe.net/repository/DEFAULT/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:74:be:32:dd:07:8e:8e:53:3d:0a:4d:9c:94:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=188ed4884f111939ca6c7f0f34b2792b39b93423
Validity
Not Before: Mar 25 18:01:18 2026 GMT
Not After : Mar 26 18:01:18 2026 GMT
Subject: CN=65c1aaac192c59660fe48cedac816cd75f782baa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2d:ea:f0:39:a2:81:0a:58:7c:ee:9f:37:20:
ff:05:c5:88:46:f9:cd:4d:a9:ff:c7:01:f2:10:9f:
89:76:6c:9a:33:11:d1:c3:fe:95:a7:dc:57:57:49:
87:40:27:94:cb:0f:55:8e:27:33:83:46:6f:c2:1c:
38:d1:71:73:e6:07:4d:cd:09:6c:95:14:d4:5a:91:
4a:a2:3c:f7:09:93:ce:f5:4b:01:30:26:45:6c:ab:
88:5b:5f:f3:5b:f4:50:2d:a3:72:60:98:49:7a:d2:
11:11:dc:98:00:34:3b:3d:38:21:bd:79:8d:59:13:
39:79:c7:99:08:da:f4:a9:cc:19:4b:fd:97:6d:6b:
85:8f:ee:f6:7a:a9:98:1f:19:c5:7a:8a:f9:59:7f:
e4:8f:32:51:45:4b:10:50:46:5e:e4:11:89:e7:0b:
dc:1c:ca:76:b9:94:6b:bf:47:19:f5:a4:72:8a:d9:
33:5c:b7:be:b7:2f:2e:dd:a5:6b:9b:89:27:08:e2:
f3:68:f7:be:74:bc:98:8c:7c:97:d5:0c:c0:9f:7f:
0f:bc:cd:38:f7:91:76:d2:a9:fd:fa:a5:39:a3:17:
fc:9a:17:20:84:68:a0:18:a3:b3:f0:66:6d:d1:df:
14:d6:f0:4f:2f:6c:d8:e5:df:ad:d6:37:6f:85:8e:
c3:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:C1:AA:AC:19:2C:59:66:0F:E4:8C:ED:AC:81:6C:D7:5F:78:2B:AA
X509v3 Authority Key Identifier:
keyid:18:8E:D4:88:4F:11:19:39:CA:6C:7F:0F:34:B2:79:2B:39:B9:34:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b88532-9974-4612-94c4-5e0777b04049/1/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b88532-9974-4612-94c4-5e0777b04049/1/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:0e:44:90:6b:6a:fe:c3:e6:4c:8f:54:7c:d1:b7:5b:4b:1a:
65:d8:53:5f:31:c5:28:63:e9:1d:fb:7a:4a:7d:b1:4d:24:ec:
99:59:21:9c:5e:d0:55:65:02:7f:09:c7:e2:ad:b7:b1:9e:19:
7c:7c:fa:a3:ea:34:b3:01:ee:58:c1:ee:40:24:3b:e8:9d:56:
33:13:84:f9:9c:10:66:0b:dc:6d:a9:0e:b0:b4:2a:3b:1b:36:
ea:c5:ef:3b:b1:64:27:da:ca:c1:3c:9c:90:c4:44:03:04:5d:
f5:ad:81:4a:47:cf:5e:8d:96:4b:9a:fd:90:93:5b:b8:d0:dd:
59:e0:4a:d8:c3:e9:24:3a:91:44:48:0f:f2:de:8a:b0:ff:60:
bd:1a:7f:ec:cb:91:98:3b:4a:d9:e1:1c:e2:33:32:8c:3a:e0:
e9:5a:5a:4b:d1:d7:99:e3:a6:80:36:1e:70:aa:f1:c8:e5:d0:
c1:b5:55:1c:52:17:b9:ed:9c:80:c0:3f:79:a3:39:ac:ff:b2:
ca:0f:81:de:d3:c7:9f:57:35:91:13:0f:bc:1c:7c:24:34:2c:
6e:5f:1b:c6:bb:cd:2f:7a:e3:b8:8e:83:0c:33:21:40:cd:d3:
e3:74:e8:5f:bd:e2:4b:23:5a:d2:33:06:dc:df:41:e1:23:99:
12:51:a9:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:22:16 2026 by rpki-client