Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/148eca-c39f-4673-886f-ecf82302f726/1/G95wrxU0lDVJRmSKzWQRY-KvGx0.mft
File: G95wrxU0lDVJRmSKzWQRY-KvGx0.mft (raw, json)
Hash identifier: AgmsmV0q/aRf34Ud2adsbY0JIi4cVMSDjjHqxz9EYNo=
Subject key identifier: 23:C9:A3:50:4B:BA:C8:1C:86:E1:4D:C1:31:09:CE:61:27:2C:2E:88
Authority key identifier: 1B:DE:70:AF:15:34:94:35:49:46:64:8A:CD:64:11:63:E2:AF:1B:1D
Certificate issuer: /CN=1bde70af153494354946648acd641163e2af1b1d
Certificate serial: 019E213605FD8E5A527F06EFADF58F838B55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G95wrxU0lDVJRmSKzWQRY-KvGx0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/148eca-c39f-4673-886f-ecf82302f726/1/G95wrxU0lDVJRmSKzWQRY-KvGx0.mft
Manifest number: 0E13
Signing time: Wed 13 May 2026 12:00:48 +0000
Manifest this update: Wed 13 May 2026 12:00:48 +0000
Manifest next update: Thu 14 May 2026 12:00:48 +0000
Files and hashes: 1: 1-G_9qaTlg9_9ZXzg69NS2bmEGWE.roa (hash: +lDVdHNQmmTIYvQZgxKxtZPdzwOYciN1IB8yFnfGP4A=)
2: G95wrxU0lDVJRmSKzWQRY-KvGx0.crl (hash: IQczYxTPoRjXfFbkVakO/uQoxs+06r2ACSugYWEAHDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/148eca-c39f-4673-886f-ecf82302f726/1/G95wrxU0lDVJRmSKzWQRY-KvGx0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/148eca-c39f-4673-886f-ecf82302f726/1/G95wrxU0lDVJRmSKzWQRY-KvGx0.mft
rsync://rpki.ripe.net/repository/DEFAULT/G95wrxU0lDVJRmSKzWQRY-KvGx0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:21:36:05:fd:8e:5a:52:7f:06:ef:ad:f5:8f:83:8b:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bde70af153494354946648acd641163e2af1b1d
Validity
Not Before: May 13 12:00:48 2026 GMT
Not After : May 14 12:00:48 2026 GMT
Subject: CN=23c9a3504bbac81c86e14dc13109ce61272c2e88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:28:64:c8:99:52:1b:14:e3:84:ef:24:8f:98:
b3:5c:bc:6c:bf:c2:28:a3:23:6c:46:1c:ea:c1:cd:
42:95:e3:b3:1d:69:d1:d3:46:d6:fd:fb:39:e6:a7:
24:26:61:1a:98:f6:76:93:7f:17:a1:2b:af:ff:e9:
7d:ef:d0:e4:f3:9b:e6:aa:4c:fd:d1:ce:af:46:6e:
45:f3:b7:b8:b5:a0:f8:97:f6:ff:4e:dc:23:75:da:
fc:d1:f7:21:ee:d6:74:ed:80:d8:ab:f5:0c:95:dd:
b1:ed:e9:1d:5b:3f:93:aa:c0:25:ff:a8:f3:9a:87:
39:9d:26:2f:58:6e:6f:90:5a:0c:e1:08:d4:18:db:
53:05:b2:7d:e3:4c:f4:0d:cf:b9:1a:48:a4:e3:0b:
c9:3e:b5:49:ab:a8:88:e3:5f:61:d2:e5:00:7b:ae:
3b:a2:59:d6:85:48:3b:09:c9:f2:9d:a7:8b:22:9d:
fb:97:cc:ef:44:37:0c:77:46:b0:69:66:9a:64:9f:
bb:6f:8b:14:ac:9e:08:65:ad:87:b8:2e:36:9f:4f:
5a:32:3f:97:8e:ff:6d:ae:55:09:71:64:36:f8:ce:
d3:57:9a:e7:51:cb:62:0e:b1:87:65:32:2f:b0:1c:
18:3b:a3:19:d0:86:e4:fd:ec:4e:8a:2c:2b:18:c5:
ba:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:C9:A3:50:4B:BA:C8:1C:86:E1:4D:C1:31:09:CE:61:27:2C:2E:88
X509v3 Authority Key Identifier:
keyid:1B:DE:70:AF:15:34:94:35:49:46:64:8A:CD:64:11:63:E2:AF:1B:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G95wrxU0lDVJRmSKzWQRY-KvGx0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/148eca-c39f-4673-886f-ecf82302f726/1/G95wrxU0lDVJRmSKzWQRY-KvGx0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/148eca-c39f-4673-886f-ecf82302f726/1/G95wrxU0lDVJRmSKzWQRY-KvGx0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:99:52:80:63:24:65:f9:e2:61:fe:31:46:ff:77:c5:31:96:
c3:7c:7e:d8:83:c3:74:dc:2a:81:08:ca:e2:1b:ee:43:c2:81:
7b:bd:aa:55:39:6a:19:80:12:2f:9f:1d:39:d3:0b:f8:ae:39:
27:3d:37:df:9c:ff:b4:a5:24:e5:97:19:6d:a0:bf:dd:62:d0:
f2:bd:52:d6:a5:e2:81:43:a1:9d:47:45:96:54:e2:cc:29:d1:
65:c9:d8:bf:fb:19:dc:23:55:f3:80:eb:d9:10:43:83:5c:b7:
f1:51:2f:55:a1:86:91:db:2b:16:6c:9a:11:a9:4e:f9:67:c5:
0c:e2:bd:ff:b4:13:33:2a:83:21:0e:b5:94:0b:fd:78:63:23:
29:08:05:64:4b:6d:bb:0d:61:c6:93:67:16:4a:01:e7:ea:a1:
bc:f9:e1:a7:a0:e7:00:8a:05:5f:16:ba:a1:9a:0e:27:d3:94:
3a:35:11:29:a5:ef:aa:d3:cc:e9:aa:60:cb:1e:0f:2e:8c:21:
0b:c1:70:b6:4f:3d:c5:d0:97:2b:f5:40:1d:78:6a:28:82:6f:
f7:79:13:19:d3:f3:41:28:1d:47:a1:8a:8e:ce:a7:51:47:b4:
f3:2b:e7:52:3e:eb:29:cf:af:d0:9f:53:b6:49:1e:20:60:b7:
00:1d:9d:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:59:47 2026 by rpki-client