Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/bdfe17-91ad-4f31-aecd-81ed12ddf175/1/G55Be7nssazpSR68KCO7eJNLLN8.mft
File: G55Be7nssazpSR68KCO7eJNLLN8.mft (raw, json)
Hash identifier: 4TuDMyKkjg7vxI66r/MwVD2TJHoNYcKbCZFv+hbtA1A=
Subject key identifier: 10:DF:AB:D8:D7:ED:2A:88:31:4A:BC:C7:B1:85:B6:85:9F:D7:57:67
Authority key identifier: 1B:9E:41:7B:B9:EC:B1:AC:E9:49:1E:BC:28:23:BB:78:93:4B:2C:DF
Certificate issuer: /CN=1b9e417bb9ecb1ace9491ebc2823bb78934b2cdf
Certificate serial: 019D26282B43D1A1ADA9B3556EFF8539518A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G55Be7nssazpSR68KCO7eJNLLN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/bdfe17-91ad-4f31-aecd-81ed12ddf175/1/G55Be7nssazpSR68KCO7eJNLLN8.mft
Manifest number: 1734
Signing time: Wed 25 Mar 2026 18:00:59 +0000
Manifest this update: Wed 25 Mar 2026 18:00:59 +0000
Manifest next update: Thu 26 Mar 2026 18:00:59 +0000
Files and hashes: 1: G55Be7nssazpSR68KCO7eJNLLN8.crl (hash: 0LXJwxJh3jFweGF0Pu8uj4ouuOuW4r6XvIU347jt6A4=)
2: Uq5inBb-jqOud0f_hbs-E8z_-XY.roa (hash: S1HZrn9S5gAaduSRYO2e3A+5aLVn8Wyzjkhn28j1jks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/bdfe17-91ad-4f31-aecd-81ed12ddf175/1/G55Be7nssazpSR68KCO7eJNLLN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/bdfe17-91ad-4f31-aecd-81ed12ddf175/1/G55Be7nssazpSR68KCO7eJNLLN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/G55Be7nssazpSR68KCO7eJNLLN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:2b:43:d1:a1:ad:a9:b3:55:6e:ff:85:39:51:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b9e417bb9ecb1ace9491ebc2823bb78934b2cdf
Validity
Not Before: Mar 25 18:00:59 2026 GMT
Not After : Mar 26 18:00:59 2026 GMT
Subject: CN=10dfabd8d7ed2a88314abcc7b185b6859fd75767
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:37:56:92:9a:8b:e8:df:7f:19:f4:22:0b:8d:
ec:b1:4b:7b:5c:91:80:ac:a5:8e:bf:c2:35:ac:69:
0e:23:96:e4:0d:de:e7:6c:fe:23:7f:1e:b9:85:0f:
c7:73:56:e7:89:dd:d9:d6:a3:1a:f8:c5:c7:4b:56:
16:56:2f:09:d4:63:6c:52:39:49:5e:d2:c3:bb:1f:
9b:ca:fd:73:23:2d:1f:85:db:7e:b9:00:25:fd:02:
3c:a2:b7:32:ff:15:f0:bf:89:77:d0:9e:b3:b5:82:
03:d0:6a:f8:5c:a0:db:a1:c5:f1:2a:58:1f:df:85:
42:11:16:72:94:58:9d:f9:7a:23:b3:3d:b6:06:cd:
d7:f0:ea:3a:b0:05:8d:b1:f7:48:26:c0:1b:a0:aa:
bc:69:c5:6b:11:c1:3b:9b:1e:25:a6:95:9f:5a:69:
ce:d0:96:8c:d9:5a:69:3e:c0:7f:53:11:75:ea:22:
5a:91:c1:15:a1:7a:1c:53:7d:0c:ea:ae:06:b1:06:
11:60:05:a5:2e:02:15:3b:db:18:8b:cc:e6:3e:c0:
ee:ab:cd:92:d2:ce:a8:61:09:3e:5c:4e:72:1c:72:
96:d0:21:ce:83:c8:67:2b:f3:4d:7b:4d:e3:44:8d:
7b:79:be:bd:27:b5:88:80:af:35:e0:b7:9a:d3:9b:
a3:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:DF:AB:D8:D7:ED:2A:88:31:4A:BC:C7:B1:85:B6:85:9F:D7:57:67
X509v3 Authority Key Identifier:
keyid:1B:9E:41:7B:B9:EC:B1:AC:E9:49:1E:BC:28:23:BB:78:93:4B:2C:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G55Be7nssazpSR68KCO7eJNLLN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/bdfe17-91ad-4f31-aecd-81ed12ddf175/1/G55Be7nssazpSR68KCO7eJNLLN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/bdfe17-91ad-4f31-aecd-81ed12ddf175/1/G55Be7nssazpSR68KCO7eJNLLN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:07:f3:5c:e4:81:dc:69:1c:61:77:fe:8b:e4:c7:78:98:a2:
24:60:4e:73:60:a5:c8:68:c9:eb:a5:0c:76:3e:e2:c0:cc:c5:
1f:8c:a8:f7:03:39:c5:9d:3c:ea:65:cb:26:62:47:ef:18:1c:
2d:c0:52:bf:58:8d:37:35:44:99:f9:04:40:6f:83:5e:ee:32:
d2:8e:c5:a7:4d:c2:09:28:99:ce:19:cc:eb:08:be:fb:40:80:
f6:cb:3d:ac:f9:4f:64:84:65:71:b0:88:71:b7:a2:99:36:15:
f1:bd:dc:e8:17:ab:42:47:e4:17:4d:10:cd:a2:79:cd:f5:28:
1a:17:c3:82:b0:46:54:00:2a:87:70:78:b9:f1:ee:86:8d:83:
ac:20:67:ba:be:38:30:ae:0e:aa:2b:0a:0c:d4:e0:9d:75:45:
57:38:f9:7c:88:e1:ff:3c:3b:14:de:0c:ab:3d:e3:af:87:d7:
0a:0a:1f:ff:cd:64:92:f4:45:86:f2:5f:a2:18:2a:7e:61:48:
a6:2d:d8:b5:4e:55:76:ed:ff:30:3e:fe:e4:26:c7:6a:c7:ed:
92:30:c4:8f:01:75:48:71:07:fe:2f:2c:b4:bd:d8:48:8f:6f:
3c:54:17:dc:19:11:66:e0:e6:19:2a:12:da:f0:2e:56:31:6c:
ec:d3:2c:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:17:34 2026 by rpki-client