Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/5d6167-f02b-44db-b565-0e4382310ca5/1/G-9aoU0xQMfHxJiPGdqUMesaQPE.mft
File: G-9aoU0xQMfHxJiPGdqUMesaQPE.mft (raw, json)
Hash identifier: NwzrAvp3oc+EmKeM7u9omplsUMu0iOuU5y2KHQvursc=
Subject key identifier: 40:1C:45:0C:D7:49:5E:43:29:9A:55:6B:C8:D9:F8:89:CB:46:C9:7F
Authority key identifier: 1B:EF:5A:A1:4D:31:40:C7:C7:C4:98:8F:19:DA:94:31:EB:1A:40:F1
Certificate issuer: /CN=1bef5aa14d3140c7c7c4988f19da9431eb1a40f1
Certificate serial: 019D2C2A0409323C7906C405B486E54D61D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-9aoU0xQMfHxJiPGdqUMesaQPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/5d6167-f02b-44db-b565-0e4382310ca5/1/G-9aoU0xQMfHxJiPGdqUMesaQPE.mft
Manifest number: 188A
Signing time: Thu 26 Mar 2026 22:00:44 +0000
Manifest this update: Thu 26 Mar 2026 22:00:44 +0000
Manifest next update: Fri 27 Mar 2026 22:00:44 +0000
Files and hashes: 1: BFSdsbEkPuA-YZXMwRkjbFSBL_4.roa (hash: 7mDFMoZc4IARD+ubLVsfgMsnY5+CrMhB4pwA/xSdkv8=)
2: G-9aoU0xQMfHxJiPGdqUMesaQPE.crl (hash: sx/vyWqODt9Vd5Ix9rvmLF8blhzkmb1Z0MprMonDP+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/5d6167-f02b-44db-b565-0e4382310ca5/1/G-9aoU0xQMfHxJiPGdqUMesaQPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/5d6167-f02b-44db-b565-0e4382310ca5/1/G-9aoU0xQMfHxJiPGdqUMesaQPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/G-9aoU0xQMfHxJiPGdqUMesaQPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2c:2a:04:09:32:3c:79:06:c4:05:b4:86:e5:4d:61:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bef5aa14d3140c7c7c4988f19da9431eb1a40f1
Validity
Not Before: Mar 26 22:00:44 2026 GMT
Not After : Mar 27 22:00:44 2026 GMT
Subject: CN=401c450cd7495e43299a556bc8d9f889cb46c97f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:54:63:bd:87:47:94:1a:6a:5f:fe:c0:66:b0:
58:b7:87:c6:93:21:10:09:dd:41:2d:69:dd:a6:20:
8e:77:00:54:b5:19:78:48:0a:ad:a2:52:b5:45:07:
93:64:74:f4:32:00:ce:1e:6b:3e:1f:b1:6b:92:45:
31:2e:be:7c:da:8f:ef:bf:bb:2b:9b:60:92:24:4d:
7c:4c:15:fe:26:a3:81:bd:6c:10:f2:24:7e:ad:4a:
c1:0c:94:d6:ab:7b:df:a2:8f:93:53:ca:20:2a:14:
5a:42:3e:4f:03:87:46:c6:c5:5b:9d:26:b7:eb:62:
d4:64:79:f3:e3:26:c3:58:52:78:1c:61:65:b6:70:
d9:72:e8:6b:cc:3b:19:76:9d:40:b8:8b:90:04:be:
f1:6a:eb:66:81:9a:f3:07:25:e0:21:f4:e7:49:d4:
44:f1:de:6e:24:fc:26:73:22:fc:7b:10:e2:54:1a:
87:7b:f3:c7:89:21:d6:c1:ba:02:71:57:3d:0a:86:
f2:6b:0c:eb:06:c8:fe:74:92:70:37:aa:0b:98:20:
ee:f8:7e:a1:07:4e:3b:b6:d8:9f:9b:75:eb:b3:57:
ff:1e:76:b9:3b:87:5d:e3:81:14:aa:26:6d:bf:f1:
9c:a9:31:06:71:c0:80:65:85:c4:b2:a5:95:79:a6:
62:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:1C:45:0C:D7:49:5E:43:29:9A:55:6B:C8:D9:F8:89:CB:46:C9:7F
X509v3 Authority Key Identifier:
keyid:1B:EF:5A:A1:4D:31:40:C7:C7:C4:98:8F:19:DA:94:31:EB:1A:40:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-9aoU0xQMfHxJiPGdqUMesaQPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5d6167-f02b-44db-b565-0e4382310ca5/1/G-9aoU0xQMfHxJiPGdqUMesaQPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5d6167-f02b-44db-b565-0e4382310ca5/1/G-9aoU0xQMfHxJiPGdqUMesaQPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:77:bc:08:50:7b:4e:81:17:1e:d0:8f:91:36:80:25:5f:cb:
2e:00:85:a6:ef:96:cc:2a:87:f8:3f:a7:9e:6a:77:e6:f7:05:
f7:c0:8c:8b:6a:b0:13:c4:ec:34:48:8a:4f:bc:dc:ca:4e:02:
f0:7a:4f:22:be:1c:05:d6:ac:6c:a8:b1:bc:27:df:3c:11:63:
b7:5a:74:b6:70:52:07:1d:94:54:e1:fb:c0:f1:86:c8:9f:36:
3c:64:0a:98:09:d7:51:40:dd:b6:9c:a6:7c:4e:b0:29:5f:4b:
65:c3:71:52:2d:8b:d5:fd:38:f7:ee:6d:f7:d6:d1:ec:02:af:
40:03:8a:0f:60:12:9d:c1:19:59:a1:94:ac:a0:80:97:97:1d:
d4:a0:18:a9:5a:6a:4b:52:5a:fc:ce:ca:a9:bf:90:35:28:a4:
5e:e8:5c:62:93:07:88:5e:7b:37:ad:9b:08:7f:14:c8:c4:9c:
8c:45:19:4c:12:47:5e:cd:21:75:b2:be:47:8a:d3:eb:71:2b:
a9:b8:4c:88:16:b1:14:89:3e:83:ad:f1:67:d3:dd:f9:91:f6:
b5:92:b4:66:22:98:dd:06:50:4a:53:9b:9c:c5:b5:ad:63:b4:
6f:40:7a:f6:52:ae:5d:68:9d:e5:b0:50:d6:3e:bf:3d:9b:d9:
2f:46:41:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 02:00:39 2026 by rpki-client