Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/7f0c82-6330-4971-98c0-59b53b3a6da1/1/G5E2MmgJ8Gh_fX1Nwagbe5mj19M.mft
File: G5E2MmgJ8Gh_fX1Nwagbe5mj19M.mft (raw, json)
Hash identifier: D/sEkxiq+qgOw23/oltiBoU62xtbgCRbBcd7iXGIkRU=
Subject key identifier: 32:2C:AD:9F:77:FE:17:D9:25:55:D7:62:C9:91:B2:EF:D8:92:E2:97
Authority key identifier: 1B:91:36:32:68:09:F0:68:7F:7D:7D:4D:C1:A8:1B:7B:99:A3:D7:D3
Certificate issuer: /CN=1b9136326809f0687f7d7d4dc1a81b7b99a3d7d3
Certificate serial: 019D386585F2E644841DAE93AAE0873144F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G5E2MmgJ8Gh_fX1Nwagbe5mj19M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/7f0c82-6330-4971-98c0-59b53b3a6da1/1/G5E2MmgJ8Gh_fX1Nwagbe5mj19M.mft
Manifest number: 0D54
Signing time: Sun 29 Mar 2026 07:01:10 +0000
Manifest this update: Sun 29 Mar 2026 07:01:10 +0000
Manifest next update: Mon 30 Mar 2026 07:01:10 +0000
Files and hashes: 1: G5E2MmgJ8Gh_fX1Nwagbe5mj19M.crl (hash: guKQfcoYgWJTfafyWtMRRrfXOyCuLqRmnzHvzz8JbPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/7f0c82-6330-4971-98c0-59b53b3a6da1/1/G5E2MmgJ8Gh_fX1Nwagbe5mj19M.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/7f0c82-6330-4971-98c0-59b53b3a6da1/1/G5E2MmgJ8Gh_fX1Nwagbe5mj19M.mft
rsync://rpki.ripe.net/repository/DEFAULT/G5E2MmgJ8Gh_fX1Nwagbe5mj19M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:85:f2:e6:44:84:1d:ae:93:aa:e0:87:31:44:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b9136326809f0687f7d7d4dc1a81b7b99a3d7d3
Validity
Not Before: Mar 29 07:01:10 2026 GMT
Not After : Mar 30 07:01:10 2026 GMT
Subject: CN=322cad9f77fe17d92555d762c991b2efd892e297
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d2:9e:17:db:c1:ef:a5:c0:2c:8d:22:5f:dd:
c4:1c:aa:57:ed:fe:2d:b9:51:da:a1:11:8b:c0:7f:
27:f6:94:5b:45:0f:63:14:6a:de:fd:dd:b8:61:d6:
be:bb:89:b1:2b:e4:52:54:f6:70:5a:37:2c:a5:ff:
f1:c9:7e:37:ed:fb:2b:68:42:59:11:2b:20:ab:64:
8e:d4:1d:a3:bd:ce:a4:e6:a3:a5:40:40:9d:04:10:
7c:d1:e5:aa:84:10:e4:b2:a6:41:e7:e8:58:17:19:
83:89:da:e4:dd:d4:fd:c7:da:49:83:90:48:91:00:
3d:67:1e:61:61:fc:2d:99:38:24:d4:04:7c:ce:22:
f2:60:54:f9:bb:d2:19:39:70:87:27:e0:d5:9a:f5:
e2:78:86:29:e8:0d:ef:65:15:e5:86:4b:12:9e:0b:
ac:43:d8:c9:b0:3b:70:79:83:b8:ed:3b:b8:2f:c9:
75:71:83:4c:d8:5d:77:0c:b0:1c:ed:07:b2:69:f4:
a1:62:26:08:fb:ee:4f:48:d6:d8:67:6d:87:b7:2e:
9c:86:ce:df:de:93:08:ed:23:7f:22:19:17:72:ad:
4d:61:eb:01:c6:a9:f1:c4:80:c0:25:57:2c:e5:6e:
53:73:04:80:d9:c7:77:66:c0:a3:fb:d8:84:0f:78:
35:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:2C:AD:9F:77:FE:17:D9:25:55:D7:62:C9:91:B2:EF:D8:92:E2:97
X509v3 Authority Key Identifier:
keyid:1B:91:36:32:68:09:F0:68:7F:7D:7D:4D:C1:A8:1B:7B:99:A3:D7:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G5E2MmgJ8Gh_fX1Nwagbe5mj19M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7f0c82-6330-4971-98c0-59b53b3a6da1/1/G5E2MmgJ8Gh_fX1Nwagbe5mj19M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7f0c82-6330-4971-98c0-59b53b3a6da1/1/G5E2MmgJ8Gh_fX1Nwagbe5mj19M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:37:51:28:14:1d:19:51:23:8d:c4:14:70:d6:1c:16:b1:a4:
76:77:10:90:95:e7:39:a9:18:ca:2b:90:89:81:2a:e0:18:b3:
f9:83:ce:2c:0d:46:d9:e5:c6:80:1b:8f:b7:e9:1d:ed:0d:17:
cf:5c:c9:3f:e5:cd:65:8b:93:56:11:2f:38:a3:a5:cc:7e:06:
eb:c8:56:35:a4:df:1f:e8:a9:6b:2c:a9:85:98:40:40:f7:80:
21:b6:0b:87:7c:a9:05:77:66:1f:49:aa:b5:be:e7:79:7f:5d:
d8:26:93:ef:17:aa:95:e7:73:f6:91:fc:d8:eb:ef:73:bf:07:
2d:f6:ae:c1:d8:cb:93:af:fe:63:77:b7:3a:2b:8b:b0:60:7c:
38:60:fe:f6:93:b9:d0:3e:d8:c0:e4:20:25:38:1f:b0:1f:46:
de:67:00:79:c8:fe:f3:a1:fb:df:c2:fa:d3:f2:2b:76:ba:3f:
a3:84:dd:96:62:13:17:e1:c8:d9:df:95:c5:c8:95:7b:f5:2d:
02:b3:4d:80:e2:b1:ad:bb:c9:95:f4:4e:a8:25:87:e1:70:40:
3d:da:99:9e:59:76:5b:4b:f8:90:0e:06:ee:f2:ce:f8:57:4e:
29:08:78:0e:36:5c:03:d8:0b:2e:69:cb:eb:ed:72:23:a6:1e:
98:50:e4:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:56:41 2026 by rpki-client