Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f3/37e6bc-3bb6-4025-9067-ee14382b1bbb/1/G1VDeLv22mSc_WBxZvZcfE921lY.mft
File: G1VDeLv22mSc_WBxZvZcfE921lY.mft (raw, json)
Hash identifier: NGB2J1EAE+7Edsc1ZHkKxsUu090/VQdeMkgmX7db6Fc=
Subject key identifier: 52:E7:1A:EA:F0:85:25:C7:DA:00:E3:00:A5:89:5C:FA:23:73:3A:C7
Authority key identifier: 1B:55:43:78:BB:F6:DA:64:9C:FD:60:71:66:F6:5C:7C:4F:76:D6:56
Certificate issuer: /CN=1b554378bbf6da649cfd607166f65c7c4f76d656
Certificate serial: 01A0F643D2E1DEB25F8BE7D4E3669B3740F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G1VDeLv22mSc_WBxZvZcfE921lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/37e6bc-3bb6-4025-9067-ee14382b1bbb/1/G1VDeLv22mSc_WBxZvZcfE921lY.mft
Manifest number: 19
Signing time: Thu 01 Oct 2026 07:00:34 +0000
Manifest this update: Thu 01 Oct 2026 07:00:34 +0000
Manifest next update: Fri 02 Oct 2026 07:00:34 +0000
Files and hashes: 1: G1VDeLv22mSc_WBxZvZcfE921lY.crl (hash: KNE/PMudRikTnt6hn9llYy0wCx1kSBgAVjMQxyH5qc4=)
2: vpfwIrst8D-mUhYikydHJdbxWYU.roa (hash: cDSlaXYAliFmFBD60YnB9lxqeC0VbURWwjdvKxvvUyo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/37e6bc-3bb6-4025-9067-ee14382b1bbb/1/G1VDeLv22mSc_WBxZvZcfE921lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/37e6bc-3bb6-4025-9067-ee14382b1bbb/1/G1VDeLv22mSc_WBxZvZcfE921lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/G1VDeLv22mSc_WBxZvZcfE921lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f6:43:d2:e1:de:b2:5f:8b:e7:d4:e3:66:9b:37:40:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b554378bbf6da649cfd607166f65c7c4f76d656
Validity
Not Before: Oct 1 07:00:34 2026 GMT
Not After : Oct 2 07:00:34 2026 GMT
Subject: CN=52e71aeaf08525c7da00e300a5895cfa23733ac7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:01:6a:51:42:20:30:e2:1e:97:bf:26:f2:fd:
6e:bd:8e:75:3d:3d:38:8b:42:44:fa:9a:29:9d:90:
05:19:ca:68:d7:a5:45:c0:bc:a3:9f:98:4b:3c:4f:
e2:5a:6d:a4:9e:73:df:e5:c4:81:d8:f5:d1:08:91:
d5:64:03:c1:ee:40:e5:46:46:b5:a4:cd:f2:c5:0a:
b8:c8:b4:fb:49:3a:45:93:8f:5c:6e:85:7b:81:a1:
e0:ce:e7:f4:af:0f:1c:17:ee:d4:e2:b0:53:79:af:
29:a3:51:4d:7b:02:b3:e6:7f:48:48:b7:99:3f:88:
70:0b:00:73:ed:e1:01:9e:eb:e5:36:76:85:e8:bd:
b2:ac:9b:b4:3b:10:80:92:b9:4a:c2:06:a6:af:1c:
4d:b6:56:49:bb:70:1f:36:36:71:60:16:13:be:31:
73:01:c4:61:28:b8:40:40:78:0d:fa:35:8d:ab:ef:
19:cf:28:d8:dc:ca:90:50:27:eb:d9:cf:9f:f2:c0:
02:cd:90:d7:5e:8d:84:87:58:95:ba:25:f2:3b:53:
3e:4c:19:52:10:88:81:f6:44:a0:7c:78:c9:20:6e:
ea:9a:30:d3:a7:d4:7a:bf:65:5d:53:73:58:de:3e:
0e:74:c4:9c:03:2c:1e:a5:5c:ba:44:0a:43:d6:11:
b3:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:E7:1A:EA:F0:85:25:C7:DA:00:E3:00:A5:89:5C:FA:23:73:3A:C7
X509v3 Authority Key Identifier:
keyid:1B:55:43:78:BB:F6:DA:64:9C:FD:60:71:66:F6:5C:7C:4F:76:D6:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G1VDeLv22mSc_WBxZvZcfE921lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/37e6bc-3bb6-4025-9067-ee14382b1bbb/1/G1VDeLv22mSc_WBxZvZcfE921lY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/37e6bc-3bb6-4025-9067-ee14382b1bbb/1/G1VDeLv22mSc_WBxZvZcfE921lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:d0:74:ae:f3:d6:c8:75:b6:a8:eb:ce:62:8e:bb:76:f2:88:
66:8c:94:70:7f:df:c5:b4:32:20:f0:6e:dd:7f:58:44:84:c5:
3f:d7:ce:08:78:12:1c:34:4c:c8:6f:05:17:f6:a8:a7:99:d9:
0d:47:7a:6a:55:63:df:b8:61:bb:97:1b:c9:ee:4b:57:34:23:
e7:50:26:96:3b:01:a1:93:c6:ad:2e:6c:2b:45:4f:14:f0:9f:
66:32:57:48:19:6d:9c:ac:00:cc:ae:b2:dc:4a:53:07:dd:b0:
7b:c5:3e:26:a6:20:c3:59:61:ef:9e:91:8f:d7:fd:69:0f:19:
d6:e1:c1:ea:3a:ee:ce:bb:2c:85:30:9a:57:8a:a4:74:f7:89:
50:53:92:e5:24:2f:50:09:36:f2:87:d0:a3:e6:75:30:55:96:
ec:b7:85:43:65:00:08:f1:5c:74:0c:21:8d:ad:c3:e5:ad:05:
0b:8f:aa:e3:80:75:63:80:a7:14:fc:14:5a:d6:ee:c3:9c:c2:
e5:66:21:fe:bf:69:87:99:c8:cb:03:10:14:44:3e:56:94:3f:
59:e7:72:9b:dd:aa:fc:a0:34:8a:d1:9e:1e:be:f1:f2:d3:03:
df:e7:77:fe:91:04:13:67:7c:68:39:07:95:6e:a9:e7:49:f2:
6c:b9:b3:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 13:54:11 2026 by rpki-client