Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.mft
File: G2RtQs6J1Ak-Ssknp_I283pRq-I.mft (raw, json)
Hash identifier: 9iXGIEr0wO54X9aGDejJ6TD70H4sOo6RL+wqQ9GPBR0=
Subject key identifier: 62:9D:34:8C:61:0B:23:95:30:85:91:54:B4:DA:ED:E9:48:26:E6:F8
Authority key identifier: 1B:64:6D:42:CE:89:D4:09:3E:4A:C9:27:A7:F2:36:F3:7A:51:AB:E2
Certificate issuer: /CN=1b646d42ce89d4093e4ac927a7f236f37a51abe2
Certificate serial: 019D265FB5603685BACA0A7BB3558CFE9B43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G2RtQs6J1Ak-Ssknp_I283pRq-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.mft
Manifest number: 10AD
Signing time: Wed 25 Mar 2026 19:01:39 +0000
Manifest this update: Wed 25 Mar 2026 19:01:39 +0000
Manifest next update: Thu 26 Mar 2026 19:01:39 +0000
Files and hashes: 1: G2RtQs6J1Ak-Ssknp_I283pRq-I.crl (hash: B0fy9dhISBE1CoDuN95HGZKeIrsXjzrdiiHaFbl1mws=)
2: buasPl807dGAfqgw1urBhY4Km5w.roa (hash: PQav8NXXwoaYuBOPi54S+Cjky9Sn3BtCmVplgakM7xk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/G2RtQs6J1Ak-Ssknp_I283pRq-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:b5:60:36:85:ba:ca:0a:7b:b3:55:8c:fe:9b:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b646d42ce89d4093e4ac927a7f236f37a51abe2
Validity
Not Before: Mar 25 19:01:39 2026 GMT
Not After : Mar 26 19:01:39 2026 GMT
Subject: CN=629d348c610b239530859154b4daede94826e6f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:57:cb:04:97:e7:c2:e5:c3:17:4a:bf:2e:68:
78:d7:20:df:76:64:eb:e1:d5:30:9d:35:7b:c5:c1:
19:1f:28:f4:42:71:02:b8:4f:ab:8b:45:0d:0a:71:
04:76:d6:83:d8:64:e9:ef:3a:f3:ae:42:53:bc:7f:
af:eb:b6:fd:8c:c1:5b:56:27:f7:ea:e5:cd:3a:50:
15:5a:e7:8b:08:34:4c:b6:7d:55:c1:5e:30:6a:71:
17:3a:f3:6f:54:5e:4d:79:a4:17:6a:aa:d3:40:45:
16:0a:bd:94:34:31:a9:d6:27:7d:79:2d:4a:03:fb:
7d:50:fa:db:eb:eb:4e:d1:03:a4:27:43:5c:9a:3e:
98:b3:c0:b0:ea:98:40:85:07:17:59:7f:a6:89:c0:
32:46:5e:25:b2:3a:ca:4f:5c:ef:7c:bf:ed:8d:e1:
b5:b7:50:de:be:19:82:5e:94:0f:15:7b:ed:30:bc:
65:9b:8c:2a:76:52:ce:ed:bf:87:24:2a:7d:af:ed:
6a:ec:3b:d4:1a:21:15:ce:96:ae:37:7b:54:a0:28:
27:ad:0e:f6:79:70:02:38:80:5a:e6:8f:c1:85:de:
a9:47:58:20:10:cb:8b:b7:cd:bc:f0:71:77:e7:87:
c4:e1:9e:ed:87:e6:8c:6c:7d:0a:f0:da:9d:d7:b1:
c5:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:9D:34:8C:61:0B:23:95:30:85:91:54:B4:DA:ED:E9:48:26:E6:F8
X509v3 Authority Key Identifier:
keyid:1B:64:6D:42:CE:89:D4:09:3E:4A:C9:27:A7:F2:36:F3:7A:51:AB:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2RtQs6J1Ak-Ssknp_I283pRq-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:d4:15:35:78:3d:5b:db:65:01:c4:5a:f2:2a:48:09:bb:f0:
54:d8:14:00:d1:7f:6c:89:4e:30:81:a6:29:fa:98:a5:c5:1d:
89:a7:eb:7e:7d:28:be:ca:5b:6f:a9:8c:d9:f7:4a:e4:be:35:
a4:8e:e8:8f:a6:d4:8e:96:aa:24:e4:44:2d:2a:76:31:f1:fc:
60:e9:eb:0c:b2:e7:4d:06:00:f2:6c:ed:cd:3a:be:bb:ed:b6:
84:7f:4b:54:83:e8:79:08:e3:94:8b:a4:8a:aa:93:5f:bb:cb:
07:8b:d9:42:cb:d2:e4:10:ec:18:5a:48:78:bb:c6:39:cb:de:
e8:88:79:9f:ce:c8:a1:7f:71:2f:7c:41:40:b9:7f:3b:d9:b5:
13:f5:8b:a6:95:6f:a7:75:f8:ac:cc:68:2f:4a:aa:a0:63:ce:
a3:3c:8a:5d:3b:c1:a7:57:22:85:95:dd:aa:33:c5:70:67:ab:
ea:5e:1f:f1:22:d2:46:8b:c5:0c:4f:81:66:3c:96:cd:b6:47:
22:d0:b0:2f:5f:37:3a:b2:37:c8:c6:f4:7a:ab:0b:7f:a7:70:
57:02:c8:d9:e8:20:ca:6d:00:d3:55:fa:b2:ef:74:9b:3d:8a:
0a:91:b9:b0:a6:a3:b3:ef:35:c5:26:12:9a:17:d4:19:b1:61:
4b:e1:16:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:15 2026 by rpki-client