Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/655006-6275-4d24-b3db-02c47b9ea49d/1/G28HR08S96M-XCG8L_uwdaF70T8.mft
File: G28HR08S96M-XCG8L_uwdaF70T8.mft (raw, json)
Hash identifier: xI0XVY3xm8dmO9Wg+uJmdBma1zECh/uZ1JUX6moqsQc=
Subject key identifier: F9:86:B9:CF:03:52:C9:40:4C:C1:47:A7:3A:A1:A5:4C:E8:87:8F:B9
Authority key identifier: 1B:6F:07:47:4F:12:F7:A3:3E:5C:21:BC:2F:FB:B0:75:A1:7B:D1:3F
Certificate issuer: /CN=1b6f07474f12f7a33e5c21bc2ffbb075a17bd13f
Certificate serial: 019D39414A67A2B31C7B8E2691CB3E1994C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G28HR08S96M-XCG8L_uwdaF70T8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/655006-6275-4d24-b3db-02c47b9ea49d/1/G28HR08S96M-XCG8L_uwdaF70T8.mft
Manifest number: 1514
Signing time: Sun 29 Mar 2026 11:01:13 +0000
Manifest this update: Sun 29 Mar 2026 11:01:13 +0000
Manifest next update: Mon 30 Mar 2026 11:01:13 +0000
Files and hashes: 1: 0jmv6E6nQfihp67UOSMcz_xDPcw.roa (hash: LsnhLL47q0cgL81shTzaL8RIZARhHeGkiQjpcXf/BNY=)
2: G28HR08S96M-XCG8L_uwdaF70T8.crl (hash: qjtNExk3vXdwPASlOyp3kWAcAfG/jqpT2hdatsJxigk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/655006-6275-4d24-b3db-02c47b9ea49d/1/G28HR08S96M-XCG8L_uwdaF70T8.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/655006-6275-4d24-b3db-02c47b9ea49d/1/G28HR08S96M-XCG8L_uwdaF70T8.mft
rsync://rpki.ripe.net/repository/DEFAULT/G28HR08S96M-XCG8L_uwdaF70T8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:4a:67:a2:b3:1c:7b:8e:26:91:cb:3e:19:94:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b6f07474f12f7a33e5c21bc2ffbb075a17bd13f
Validity
Not Before: Mar 29 11:01:13 2026 GMT
Not After : Mar 30 11:01:13 2026 GMT
Subject: CN=f986b9cf0352c9404cc147a73aa1a54ce8878fb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:01:c0:8b:f4:2e:de:4a:c6:ca:40:4b:5a:40:
1d:dc:d7:fa:9f:05:12:6d:d2:d4:d2:41:79:c9:50:
85:af:71:74:1e:2f:2b:4e:22:0c:6c:de:4c:f2:ff:
79:68:c4:b3:86:55:fd:88:90:31:2e:eb:7e:80:5a:
6c:cb:47:82:5b:7e:88:c1:c4:46:7b:ca:e0:e3:8d:
81:ad:fb:49:d7:d8:9d:af:83:03:86:0b:43:ff:14:
ab:07:2e:ff:38:eb:2d:5d:fb:b6:97:36:14:f4:82:
47:77:bb:9f:31:e6:9b:b7:fc:fa:8e:1c:b6:e2:9e:
65:a3:56:f0:73:46:af:ad:c7:17:f4:75:cd:e5:48:
8a:92:4d:ca:6c:be:49:d7:6f:85:95:78:fe:cd:83:
1d:60:8a:e7:98:2b:77:b1:71:ce:c8:12:ef:12:da:
be:1b:95:61:f2:37:1a:37:f7:c8:d3:e5:38:67:ea:
5f:f5:a9:7d:7f:a8:87:dc:17:78:53:4d:11:99:9a:
b3:f4:3f:69:80:15:38:3d:cd:19:88:0b:95:79:40:
e9:b1:45:2d:6e:e5:7f:5e:c8:5d:fc:f7:0a:42:46:
fc:74:0f:ab:3a:23:8c:49:d5:bd:76:75:fa:e2:35:
29:41:ea:2e:1f:48:b2:da:9f:55:38:80:52:66:e6:
f8:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:86:B9:CF:03:52:C9:40:4C:C1:47:A7:3A:A1:A5:4C:E8:87:8F:B9
X509v3 Authority Key Identifier:
keyid:1B:6F:07:47:4F:12:F7:A3:3E:5C:21:BC:2F:FB:B0:75:A1:7B:D1:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G28HR08S96M-XCG8L_uwdaF70T8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/655006-6275-4d24-b3db-02c47b9ea49d/1/G28HR08S96M-XCG8L_uwdaF70T8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/655006-6275-4d24-b3db-02c47b9ea49d/1/G28HR08S96M-XCG8L_uwdaF70T8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:15:01:9c:d0:3d:7e:88:e5:d4:0b:f7:a8:7d:69:32:4b:d3:
48:fc:a3:eb:c8:7b:22:05:80:71:78:6c:c4:bb:07:84:03:48:
95:75:e7:42:28:27:a9:07:00:63:24:c9:92:18:fb:04:4e:6f:
b0:29:cd:7d:88:d5:a6:ec:ca:7a:fd:57:b1:8e:3b:d4:f0:a3:
34:57:40:e3:de:57:be:7f:b8:9d:f9:77:4d:12:82:e3:50:08:
4c:5f:27:bc:93:59:fb:71:38:6d:f6:27:7b:b6:d2:03:89:b7:
5e:30:c3:4d:44:8f:97:53:83:3d:2e:1c:ae:97:a0:75:fb:b1:
ce:d6:72:41:12:32:ab:38:31:85:ec:bb:fc:e7:ed:e8:94:0b:
37:67:ff:db:90:ae:a6:ed:29:9b:69:35:6c:f0:2b:b5:9a:e9:
5b:ee:c1:4d:bf:b7:6d:92:b3:d3:f0:f2:32:d0:42:ca:c9:b3:
d1:d0:65:cd:86:fe:f9:9e:5c:06:16:0e:5e:c8:85:d5:25:df:
c2:25:29:fc:ab:cf:5d:1e:04:dc:d4:76:63:66:23:8c:0e:90:
63:f3:db:7d:15:68:ed:52:e1:b6:8e:aa:34:ce:98:0f:e6:d7:
8b:27:6a:c0:84:4c:9e:de:f9:19:5e:7f:89:51:78:b4:a6:43:
44:11:03:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:06:28 2026 by rpki-client