Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/148eca-c39f-4673-886f-ecf82302f726/1/G95wrxU0lDVJRmSKzWQRY-KvGx0.mft
File: G95wrxU0lDVJRmSKzWQRY-KvGx0.mft (raw, json)
Hash identifier: 9zpIqrx2CyZU8P0vtNw0WTdO9xbceXga3v1WTj6FQC4=
Subject key identifier: E8:F7:DC:C5:90:9A:27:B3:BE:3A:45:83:00:8A:2E:D2:2F:53:4D:3A
Authority key identifier: 1B:DE:70:AF:15:34:94:35:49:46:64:8A:CD:64:11:63:E2:AF:1B:1D
Certificate issuer: /CN=1bde70af153494354946648acd641163e2af1b1d
Certificate serial: 019D26280FE970A1C21FC548525C3DEEE005
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G95wrxU0lDVJRmSKzWQRY-KvGx0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/148eca-c39f-4673-886f-ecf82302f726/1/G95wrxU0lDVJRmSKzWQRY-KvGx0.mft
Manifest number: 0D91
Signing time: Wed 25 Mar 2026 18:00:52 +0000
Manifest this update: Wed 25 Mar 2026 18:00:52 +0000
Manifest next update: Thu 26 Mar 2026 18:00:52 +0000
Files and hashes: 1: 1-G_9qaTlg9_9ZXzg69NS2bmEGWE.roa (hash: +lDVdHNQmmTIYvQZgxKxtZPdzwOYciN1IB8yFnfGP4A=)
2: G95wrxU0lDVJRmSKzWQRY-KvGx0.crl (hash: ifkS1TGg5aPk6yee/OVuKPnTkkWrvvyR6y5IODsqEww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/148eca-c39f-4673-886f-ecf82302f726/1/G95wrxU0lDVJRmSKzWQRY-KvGx0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/148eca-c39f-4673-886f-ecf82302f726/1/G95wrxU0lDVJRmSKzWQRY-KvGx0.mft
rsync://rpki.ripe.net/repository/DEFAULT/G95wrxU0lDVJRmSKzWQRY-KvGx0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:0f:e9:70:a1:c2:1f:c5:48:52:5c:3d:ee:e0:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bde70af153494354946648acd641163e2af1b1d
Validity
Not Before: Mar 25 18:00:52 2026 GMT
Not After : Mar 26 18:00:52 2026 GMT
Subject: CN=e8f7dcc5909a27b3be3a4583008a2ed22f534d3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:9f:fe:2a:16:b1:3d:ac:15:46:ca:a8:8f:10:
5d:e4:4c:39:10:6f:77:eb:4d:d7:8d:59:f8:7d:20:
38:d4:2e:f0:15:2f:5b:4e:89:34:e3:d9:f2:dc:8f:
b4:2c:e3:3d:e9:54:dd:72:22:f4:ff:f3:db:91:ab:
45:9f:39:71:cb:22:a0:08:99:2e:b4:cf:04:93:8b:
46:34:88:47:98:a4:a0:8f:1b:f7:35:b6:3e:97:2f:
a9:7f:f7:c6:f1:25:4c:1e:1c:5a:a0:72:bc:69:b7:
9b:5b:60:af:5c:5a:ee:81:9f:b7:af:ff:d3:9b:31:
6c:34:19:85:64:c4:e0:9e:ed:6e:96:ab:f8:70:4f:
ad:ba:d0:e5:23:8a:de:3c:3d:b7:5b:11:72:ad:97:
7c:0b:34:de:dc:7f:e8:10:40:de:ab:9e:50:89:16:
f3:24:15:7d:f0:f0:8d:dd:6b:a8:6b:75:42:f2:d9:
15:28:bd:aa:48:9b:72:bb:f1:df:7e:23:1c:9a:79:
73:a4:6e:71:9f:70:61:14:d8:e7:2c:04:27:c3:81:
26:0c:34:f3:b1:04:10:d0:e6:c5:1b:b5:4b:de:5c:
37:9b:e2:b4:5a:15:00:f1:3a:12:43:e7:c5:d6:10:
d5:92:8d:e2:cb:f8:05:95:ba:b7:ad:06:a9:5e:75:
1d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:F7:DC:C5:90:9A:27:B3:BE:3A:45:83:00:8A:2E:D2:2F:53:4D:3A
X509v3 Authority Key Identifier:
keyid:1B:DE:70:AF:15:34:94:35:49:46:64:8A:CD:64:11:63:E2:AF:1B:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G95wrxU0lDVJRmSKzWQRY-KvGx0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/148eca-c39f-4673-886f-ecf82302f726/1/G95wrxU0lDVJRmSKzWQRY-KvGx0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/148eca-c39f-4673-886f-ecf82302f726/1/G95wrxU0lDVJRmSKzWQRY-KvGx0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:26:5f:be:ab:a0:9b:f9:c7:c5:06:78:ce:81:c4:85:b9:71:
d2:71:5d:45:ed:a3:28:4c:9e:27:57:47:f8:a6:82:9b:ba:0a:
2b:00:67:56:0c:67:b5:df:8f:9e:ac:40:65:5c:ec:fe:64:26:
07:3b:9b:2f:0d:2b:88:f0:aa:ba:d5:f0:65:16:e9:2f:5f:e5:
76:54:6f:73:75:9d:19:13:f0:35:67:84:b2:e9:c4:aa:a9:8a:
c2:1b:a6:b5:6a:9a:82:51:c2:6d:ea:3a:f4:7c:5a:8c:4f:2e:
a6:53:19:a9:0c:5b:8d:4b:b5:4c:f8:6a:e6:07:a1:7c:c1:05:
c6:79:80:d7:64:74:5c:56:1a:4a:65:35:7a:62:cd:ed:1b:1d:
f5:ec:94:38:ea:88:cd:48:86:3a:8a:2d:d2:aa:3e:90:c7:57:
cd:c1:7b:b9:71:74:69:c7:8e:fa:42:2a:50:63:33:64:8c:5e:
f2:00:64:f6:81:25:a7:25:ec:1e:f3:7f:57:4f:f9:82:a8:31:
cf:5f:e0:b5:2b:57:74:5d:cd:86:72:c6:42:9d:05:ac:01:62:
a0:ae:03:5c:6e:93:13:39:93:9f:d7:3c:7a:0c:34:19:0f:87:
57:fd:78:8e:29:33:26:82:45:3a:4c:4b:50:1c:ca:19:fc:2e:
4d:e8:a0:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:21:21 2026 by rpki-client