Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/5ddd92-41d6-469f-896c-e0c966c15d5f/1/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.mft
File: G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.mft (raw, json)
Hash identifier: 5nnegtdHRfEN+DStw5jlZNONmzrGizU6UTkBXl06APo=
Subject key identifier: BE:AB:28:04:E7:FD:4B:10:93:2E:18:67:12:1E:EA:72:A0:E6:1F:A1
Authority key identifier: 1B:E3:6F:CF:B0:47:B8:C6:53:FF:A3:27:FC:2C:A5:11:69:E9:47:A4
Certificate issuer: /CN=1be36fcfb047b8c653ffa327fc2ca51169e947a4
Certificate serial: 019D270472F50CF5750B3DF541E113E07F79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/5ddd92-41d6-469f-896c-e0c966c15d5f/1/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.mft
Manifest number: 0D05
Signing time: Wed 25 Mar 2026 22:01:36 +0000
Manifest this update: Wed 25 Mar 2026 22:01:36 +0000
Manifest next update: Thu 26 Mar 2026 22:01:36 +0000
Files and hashes: 1: A9Wb5TUgy6_nes46nQIzu3J2gJ0.roa (hash: HBds/dPFgakP+7Jk7BYLI0SRbVkbpB9JVxok50Ozwgs=)
2: G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.crl (hash: 4L1/Vy78mNnRaUIw1bzOE/F3JlxYgC58zSQNvFI1whM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/5ddd92-41d6-469f-896c-e0c966c15d5f/1/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/5ddd92-41d6-469f-896c-e0c966c15d5f/1/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:72:f5:0c:f5:75:0b:3d:f5:41:e1:13:e0:7f:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1be36fcfb047b8c653ffa327fc2ca51169e947a4
Validity
Not Before: Mar 25 22:01:36 2026 GMT
Not After : Mar 26 22:01:36 2026 GMT
Subject: CN=beab2804e7fd4b10932e1867121eea72a0e61fa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c6:fc:90:09:52:da:9f:53:ce:36:05:a0:f8:
4b:cc:6f:51:bd:74:fb:ec:e8:1e:73:de:b5:01:ef:
5a:92:3d:a8:45:70:58:32:f6:99:28:30:9b:21:0b:
be:50:20:0a:c4:a8:de:a6:30:3b:3d:3a:14:41:31:
90:78:dc:5c:00:39:b9:83:f7:58:0d:05:65:95:12:
5c:4b:34:3e:7b:4d:17:5d:ef:5c:82:95:a4:2b:bd:
5c:f6:47:90:4a:55:b8:af:f9:47:85:78:4b:de:17:
a5:40:0a:5d:c5:1f:57:93:a5:73:7b:60:e1:9d:0e:
5e:94:22:25:ca:f2:5e:fb:b6:21:e0:21:9f:c2:46:
b3:fd:87:ad:4f:e3:39:91:8b:e7:a3:11:3d:be:2c:
0d:66:14:55:1e:4f:5d:30:4d:5e:53:2a:25:98:63:
e6:7b:92:70:2a:52:0a:f5:e9:8f:42:2e:2b:ad:d9:
6d:c4:83:5d:a3:34:14:00:34:84:db:06:0a:08:b3:
cd:2d:b1:ff:0d:0e:a4:21:ed:1c:83:eb:80:03:0f:
f6:49:df:93:20:71:b8:b8:df:04:92:76:e7:87:d9:
b7:e3:ce:81:b3:26:e3:be:f1:be:f1:62:ee:d2:23:
ec:5f:a5:7a:75:47:24:93:4a:f4:7b:65:d7:74:f2:
b3:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:AB:28:04:E7:FD:4B:10:93:2E:18:67:12:1E:EA:72:A0:E6:1F:A1
X509v3 Authority Key Identifier:
keyid:1B:E3:6F:CF:B0:47:B8:C6:53:FF:A3:27:FC:2C:A5:11:69:E9:47:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/5ddd92-41d6-469f-896c-e0c966c15d5f/1/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/5ddd92-41d6-469f-896c-e0c966c15d5f/1/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:4b:7f:9b:d7:2d:62:41:13:59:0e:cf:80:f6:60:aa:8b:77:
ce:b6:ec:82:db:b2:aa:fa:81:13:6b:07:79:b2:a4:60:38:06:
35:9c:ed:90:38:a4:f3:a5:28:82:75:11:71:14:78:2d:03:fe:
dc:e1:7a:f9:9f:52:15:b5:74:70:06:4f:af:c7:e1:2b:8b:b5:
4d:0d:ee:e4:7b:ef:aa:e1:f5:46:1d:f7:a1:c0:78:70:2b:a6:
ae:83:9b:93:b3:a1:e7:8c:b6:9f:4a:ca:b0:fc:db:fc:15:94:
ed:58:ce:ec:87:bb:b1:24:80:08:93:a6:54:1b:a2:98:44:42:
f4:2c:e5:c7:7d:a3:4e:a8:92:0c:23:c9:5d:37:11:97:4a:ed:
37:25:91:83:fe:e0:28:f7:f3:f1:aa:f6:c0:e0:29:60:1b:df:
f2:60:89:42:8c:41:0e:71:6c:ef:77:3f:08:2d:86:32:40:e5:
7e:9a:2c:e1:39:18:3f:08:fe:e5:1d:b1:75:b3:1d:0f:02:c5:
92:f5:ab:3e:83:61:9a:1a:d5:c6:93:25:d9:7e:ef:a4:fd:8a:
8e:c2:ce:49:e5:c6:b1:4a:30:ff:80:c9:da:15:a5:f7:76:a3:
85:19:16:55:76:04:cb:3d:54:2c:c7:8f:3d:e3:cf:35:5d:1f:
2e:ca:7e:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:00:11 2026 by rpki-client