Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/d8b0c3-3f70-43db-85a4-5be1202367e9/1/G2pafunSGn3UW7v_9DGzZN6gta4.mft
File: G2pafunSGn3UW7v_9DGzZN6gta4.mft (raw, json)
Hash identifier: k5sSFqh8ZXb8dcgZdW/ZS1SOcnIlscKhlYJwT52Sb7Y=
Subject key identifier: AB:A9:CE:1B:B4:1E:37:96:A0:29:E7:3C:3E:3C:1F:43:30:E6:C9:15
Authority key identifier: 1B:6A:5A:7E:E9:D2:1A:7D:D4:5B:BB:FF:F4:31:B3:64:DE:A0:B5:AE
Certificate issuer: /CN=1b6a5a7ee9d21a7dd45bbbfff431b364dea0b5ae
Certificate serial: 019D3A1C4A618281D04922F9BA5EEACC9414
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G2pafunSGn3UW7v_9DGzZN6gta4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/d8b0c3-3f70-43db-85a4-5be1202367e9/1/G2pafunSGn3UW7v_9DGzZN6gta4.mft
Manifest number: 0ABC
Signing time: Sun 29 Mar 2026 15:00:25 +0000
Manifest this update: Sun 29 Mar 2026 15:00:25 +0000
Manifest next update: Mon 30 Mar 2026 15:00:25 +0000
Files and hashes: 1: G2pafunSGn3UW7v_9DGzZN6gta4.crl (hash: mgjnnLr5DtwbPLsyKPpiKoldpb71hh+ejhVZp3ZVKTg=)
2: tjiTHEP-kK7YvaF4jOv_5AENFR8.roa (hash: +t1GaH9nJ8B0HL8q2iIaAV18s/F2KC1qzK08FxWPKP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/d8b0c3-3f70-43db-85a4-5be1202367e9/1/G2pafunSGn3UW7v_9DGzZN6gta4.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/d8b0c3-3f70-43db-85a4-5be1202367e9/1/G2pafunSGn3UW7v_9DGzZN6gta4.mft
rsync://rpki.ripe.net/repository/DEFAULT/G2pafunSGn3UW7v_9DGzZN6gta4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 15:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:4a:61:82:81:d0:49:22:f9:ba:5e:ea:cc:94:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b6a5a7ee9d21a7dd45bbbfff431b364dea0b5ae
Validity
Not Before: Mar 29 15:00:25 2026 GMT
Not After : Mar 30 15:00:25 2026 GMT
Subject: CN=aba9ce1bb41e3796a029e73c3e3c1f4330e6c915
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:77:7a:83:48:39:09:da:25:ff:e6:ce:42:cd:
03:94:01:09:05:9e:30:d5:d2:0d:cb:ce:58:90:60:
75:70:e5:40:0e:94:43:d9:81:d7:0d:55:0b:a4:c1:
84:c0:f1:40:60:a2:bf:46:ea:12:06:ed:42:05:9f:
b9:4a:07:12:70:03:01:5e:ef:9a:70:6f:35:11:30:
4f:aa:b5:e7:e3:06:6e:77:ec:2b:33:96:ee:ce:25:
dd:35:ef:53:d8:8c:b0:65:f5:9a:d9:c2:1c:2b:f1:
f7:d7:a4:f8:54:c5:64:30:1b:8d:d3:46:80:64:4f:
99:34:b7:a9:74:93:7b:ea:1a:eb:e8:a5:c8:8c:9f:
c0:47:38:53:a7:40:02:6b:ef:25:4a:69:18:4e:95:
4f:ff:b7:c1:ba:6c:5e:4c:f2:ca:fe:cb:a6:d1:4e:
fe:1a:87:8b:04:a5:43:af:a1:da:b9:24:91:a8:e4:
f0:37:a3:1e:66:6f:fb:78:8d:a2:39:69:84:4b:f6:
6e:1d:fe:df:5a:d3:de:bc:6a:ec:89:d8:8f:2e:22:
03:93:b5:51:4b:63:c5:f1:e6:f6:ae:cf:4d:8b:5b:
73:27:0c:a2:f1:17:f5:9b:89:d4:b4:81:de:2a:b8:
06:9b:e8:d3:ea:77:f1:75:7d:06:91:92:62:d0:56:
2a:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:A9:CE:1B:B4:1E:37:96:A0:29:E7:3C:3E:3C:1F:43:30:E6:C9:15
X509v3 Authority Key Identifier:
keyid:1B:6A:5A:7E:E9:D2:1A:7D:D4:5B:BB:FF:F4:31:B3:64:DE:A0:B5:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2pafunSGn3UW7v_9DGzZN6gta4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/d8b0c3-3f70-43db-85a4-5be1202367e9/1/G2pafunSGn3UW7v_9DGzZN6gta4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/d8b0c3-3f70-43db-85a4-5be1202367e9/1/G2pafunSGn3UW7v_9DGzZN6gta4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:f2:f8:6f:6b:49:0d:66:5b:52:77:0f:9e:52:09:15:57:15:
50:b3:58:fb:06:91:77:21:16:bb:0f:89:49:a6:7d:a9:2c:07:
3f:e6:05:8d:e1:f9:8c:c4:ef:78:95:cd:03:f3:73:a7:3a:9c:
cd:ec:4e:ea:48:b6:61:79:6d:44:35:c0:29:51:84:65:cb:f6:
dd:c7:30:15:16:33:d9:fa:d4:9c:10:f2:db:e7:8a:38:ee:8c:
ee:20:33:3e:e1:d1:cc:23:36:65:d3:5c:2a:7c:bf:a4:68:ff:
98:78:91:91:f9:33:c4:d0:8e:ba:e2:93:a6:a9:0e:78:53:68:
dd:3f:01:73:96:7a:a9:de:fb:71:52:f1:8e:8d:b4:7f:5b:44:
f0:df:28:ec:2b:2b:64:f8:1a:7e:ad:68:91:e0:ed:bb:44:10:
b8:91:90:81:f0:4b:7a:0a:9b:59:ca:61:d2:f5:0a:fc:02:84:
5a:d4:b4:eb:ac:6d:bb:39:30:05:58:e6:82:91:43:c9:5a:26:
2b:98:20:b6:ca:75:76:b2:7b:d5:4d:94:a0:04:7d:1f:8f:66:
25:10:5e:c8:25:ce:15:7c:3d:d9:76:21:c7:31:b7:a0:80:80:
7f:2d:37:a8:b2:dc:2b:9b:3b:12:24:ff:88:1e:cb:34:ba:68:
e6:8c:6a:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:02:17 2026 by rpki-client