Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/96106f-3da3-4a67-bb3c-69c4e8533521/1/GiKBg0kKxrJSPb_MCHwTgW-cJhI.mft
File: GiKBg0kKxrJSPb_MCHwTgW-cJhI.mft (raw, json)
Hash identifier: b4+bAkX80sWj49rVAL4ZZEeTQQFuhWpz3TgeELrBp1M=
Subject key identifier: A6:84:47:18:36:5F:86:61:04:17:06:0B:4E:C1:1D:4F:82:D5:C6:98
Authority key identifier: 1A:22:81:83:49:0A:C6:B2:52:3D:BF:CC:08:7C:13:81:6F:9C:26:12
Certificate issuer: /CN=1a228183490ac6b2523dbfcc087c13816f9c2612
Certificate serial: 019D389C5215688D7DCD944533973C5050E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GiKBg0kKxrJSPb_MCHwTgW-cJhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/96106f-3da3-4a67-bb3c-69c4e8533521/1/GiKBg0kKxrJSPb_MCHwTgW-cJhI.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 08:01:01 +0000
Manifest this update: Sun 29 Mar 2026 08:01:01 +0000
Manifest next update: Mon 30 Mar 2026 08:01:01 +0000
Files and hashes: 1: 2gMkKbJA554Yq2voG-iU3zjpglc.roa (hash: wMFCnORiTnuilB2AGLAPYKYN/hd+vlQrA8D8lSugV4Y=)
2: GiKBg0kKxrJSPb_MCHwTgW-cJhI.crl (hash: 4YGXMDvG/tAFBYJ+uRec2n2tQiPOWzeESt/v0on6JsE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/96106f-3da3-4a67-bb3c-69c4e8533521/1/GiKBg0kKxrJSPb_MCHwTgW-cJhI.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/96106f-3da3-4a67-bb3c-69c4e8533521/1/GiKBg0kKxrJSPb_MCHwTgW-cJhI.mft
rsync://rpki.ripe.net/repository/DEFAULT/GiKBg0kKxrJSPb_MCHwTgW-cJhI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:52:15:68:8d:7d:cd:94:45:33:97:3c:50:50:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a228183490ac6b2523dbfcc087c13816f9c2612
Validity
Not Before: Mar 29 08:01:01 2026 GMT
Not After : Mar 30 08:01:01 2026 GMT
Subject: CN=a6844718365f86610417060b4ec11d4f82d5c698
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f6:6d:0e:bd:d6:4f:a4:c9:31:96:cc:b1:5b:
e0:34:e0:1f:92:49:7f:0a:b2:a2:cb:a8:9b:e2:83:
ed:7b:eb:f0:5c:7c:0d:3c:4e:ba:db:1b:36:29:3f:
55:fe:68:e7:66:4d:9e:1d:82:08:57:37:e7:58:0d:
a3:e8:b5:b3:d2:7e:3b:30:86:71:fc:70:8f:ee:da:
54:b1:09:0f:0b:73:41:62:5c:ee:19:6e:5e:51:88:
34:14:75:a8:34:e6:d7:0a:6a:c6:bf:33:1e:85:3c:
3b:1c:e3:78:39:0f:33:0d:45:33:25:ed:17:fe:f0:
97:b7:e5:d0:1a:86:04:05:d1:ce:15:c3:16:06:43:
8b:9d:6f:44:72:6e:fb:39:db:0d:3e:fa:ce:0f:c1:
52:47:25:80:63:f5:b1:a8:00:5a:68:28:33:28:c5:
bc:ba:5c:3a:58:99:83:8f:4a:45:9e:cf:24:35:9f:
b4:1b:42:5f:ae:cf:aa:a6:44:e3:61:a1:a4:9e:79:
6a:5b:e7:ee:2d:00:71:37:af:8a:45:47:1e:2c:10:
df:d7:04:98:b0:5d:63:83:12:0a:d6:a2:dd:59:22:
86:b6:4d:f3:fb:b8:50:2d:74:53:48:d0:f6:39:19:
f3:f7:62:07:3f:58:7d:c2:13:91:35:44:2c:67:e3:
e3:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:84:47:18:36:5F:86:61:04:17:06:0B:4E:C1:1D:4F:82:D5:C6:98
X509v3 Authority Key Identifier:
keyid:1A:22:81:83:49:0A:C6:B2:52:3D:BF:CC:08:7C:13:81:6F:9C:26:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GiKBg0kKxrJSPb_MCHwTgW-cJhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/96106f-3da3-4a67-bb3c-69c4e8533521/1/GiKBg0kKxrJSPb_MCHwTgW-cJhI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/96106f-3da3-4a67-bb3c-69c4e8533521/1/GiKBg0kKxrJSPb_MCHwTgW-cJhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:8a:d3:a4:a3:57:3e:a4:81:e2:2a:2c:e2:95:9b:dd:1e:16:
99:6f:27:47:a5:75:03:1f:d5:c6:79:35:ee:75:ab:9e:64:52:
7d:c6:ce:07:9e:0d:1f:f0:fb:81:96:e1:f2:29:68:87:5c:10:
5b:46:6b:21:2b:0c:fe:38:0d:35:56:c9:c7:d3:2c:1c:ba:e5:
11:5e:b6:ce:e6:40:8e:ec:fb:2a:ee:1c:f0:c9:9d:ae:4f:26:
dc:90:75:c6:2d:e4:fa:64:77:18:17:da:dc:08:8c:2c:3c:c6:
bd:10:94:69:1a:f1:bd:c5:ff:25:d9:9d:80:ae:65:f7:56:8c:
67:9d:4d:ff:6e:e3:f3:ba:1c:04:f9:72:c5:f9:24:dc:1b:67:
5f:66:ea:8e:66:99:31:6e:dd:87:ec:70:05:43:3f:ac:75:72:
b2:6f:87:61:85:20:2d:87:fa:bf:45:cd:13:ed:f7:9b:b4:17:
e5:58:8c:05:0c:d6:f1:96:5d:38:54:a6:ec:b5:70:e7:11:0c:
1a:9b:dc:09:35:fc:3a:d3:19:ac:c4:db:12:6c:9c:25:fa:9a:
5a:f5:28:b0:09:0f:96:30:5a:d8:97:51:ed:68:da:59:30:a1:
92:00:f5:21:f3:2b:2a:1c:44:1b:70:91:11:a2:a2:4a:db:48:
92:76:42:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:49:34 2026 by rpki-client