Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/d60752-ca7e-4acf-8cd1-ee5988e873e1/1/G_A9uL9mABk75I-xDm4xa4tfiOM.mft
File: G_A9uL9mABk75I-xDm4xa4tfiOM.mft (raw, json)
Hash identifier: NEaTs0EJZAYZ8xs09DjrC60/8iR414p5HTH5g+aLoJo=
Subject key identifier: A8:89:26:61:0C:85:6A:24:61:34:07:8C:F9:CA:77:38:51:52:F6:21
Authority key identifier: 1B:F0:3D:B8:BF:66:00:19:3B:E4:8F:B1:0E:6E:31:6B:8B:5F:88:E3
Certificate issuer: /CN=1bf03db8bf6600193be48fb10e6e316b8b5f88e3
Certificate serial: 019D43569EBC99033D50BFED819F44E88FB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G_A9uL9mABk75I-xDm4xa4tfiOM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/d60752-ca7e-4acf-8cd1-ee5988e873e1/1/G_A9uL9mABk75I-xDm4xa4tfiOM.mft
Manifest number: 07DC
Signing time: Tue 31 Mar 2026 10:00:43 +0000
Manifest this update: Tue 31 Mar 2026 10:00:43 +0000
Manifest next update: Wed 01 Apr 2026 10:00:43 +0000
Files and hashes: 1: G_A9uL9mABk75I-xDm4xa4tfiOM.crl (hash: HclQIOAxtmmMm/iuDJZQOVfUqhqmHl25ZsmiZEYyiqQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/d60752-ca7e-4acf-8cd1-ee5988e873e1/1/G_A9uL9mABk75I-xDm4xa4tfiOM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/d60752-ca7e-4acf-8cd1-ee5988e873e1/1/G_A9uL9mABk75I-xDm4xa4tfiOM.mft
rsync://rpki.ripe.net/repository/DEFAULT/G_A9uL9mABk75I-xDm4xa4tfiOM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Apr 2026 08:03:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:43:56:9e:bc:99:03:3d:50:bf:ed:81:9f:44:e8:8f:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bf03db8bf6600193be48fb10e6e316b8b5f88e3
Validity
Not Before: Mar 31 10:00:43 2026 GMT
Not After : Apr 1 10:00:43 2026 GMT
Subject: CN=a88926610c856a246134078cf9ca77385152f621
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f1:54:1e:c7:c1:c9:c7:f8:a8:2d:b3:2f:68:
90:cb:27:fb:52:16:12:3e:3b:16:85:a1:e7:02:46:
90:f9:a4:d8:ec:6a:58:75:3a:d9:7d:ff:06:76:93:
6d:99:04:28:d0:0b:b5:c6:15:cb:8b:a4:2e:9b:6d:
14:4d:62:8c:29:80:08:10:46:2e:12:63:ca:2f:eb:
31:3d:a3:f4:8c:48:00:70:fa:a4:6b:55:4c:bd:f6:
08:96:86:74:a6:33:01:59:11:0a:cd:60:7a:8f:54:
a1:33:b9:da:98:2b:92:cc:64:98:55:f4:a6:67:f3:
5b:3c:37:d1:04:fc:5d:06:ac:c9:89:44:6f:a8:eb:
13:08:57:f6:8a:97:ef:99:a0:8f:e4:1f:5e:bb:a5:
51:1c:a5:30:4c:29:16:6a:9e:84:6f:67:48:d7:17:
e7:80:bc:78:d1:50:b2:2a:b4:a9:cd:4f:bf:a3:af:
ba:b2:04:7b:b1:49:54:96:40:5a:fb:36:60:d3:45:
e7:01:42:f2:24:45:ae:3d:f2:2f:68:e6:7d:2f:a6:
f7:43:f1:77:9c:c1:2f:d6:08:79:d0:df:05:41:91:
de:d5:04:76:cb:60:c1:cc:d4:eb:48:70:3e:aa:bc:
17:76:df:94:ec:9f:1d:31:08:19:74:b1:d1:37:76:
22:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:89:26:61:0C:85:6A:24:61:34:07:8C:F9:CA:77:38:51:52:F6:21
X509v3 Authority Key Identifier:
keyid:1B:F0:3D:B8:BF:66:00:19:3B:E4:8F:B1:0E:6E:31:6B:8B:5F:88:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G_A9uL9mABk75I-xDm4xa4tfiOM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d60752-ca7e-4acf-8cd1-ee5988e873e1/1/G_A9uL9mABk75I-xDm4xa4tfiOM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d60752-ca7e-4acf-8cd1-ee5988e873e1/1/G_A9uL9mABk75I-xDm4xa4tfiOM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:18:e3:f4:d9:3a:a2:4e:04:7c:2b:6f:67:e6:fb:7e:44:9b:
19:18:2f:86:d7:0a:9e:77:51:ea:22:71:f6:42:13:55:b3:f5:
cb:2e:e8:20:58:e6:ba:09:29:98:4d:87:5b:82:41:f6:02:e2:
fe:70:b5:47:c5:6a:b4:07:6a:ee:aa:ab:00:33:85:a5:07:6b:
e7:2c:b5:79:ae:7e:b9:db:af:12:06:6d:2c:1f:4a:69:6a:08:
7e:40:67:d6:59:dd:83:7d:7d:74:b0:18:af:38:6f:17:a6:73:
53:a3:6a:74:4f:66:2e:8b:3f:f1:e9:48:f8:c7:bd:c7:94:06:
1e:8f:8b:ad:4b:e9:c4:25:3e:34:25:d8:93:c1:27:e4:a2:cf:
5d:b6:29:93:5e:50:25:c4:3f:65:cb:7d:58:82:1b:c6:aa:20:
e9:18:f2:68:cb:a0:5b:f3:6f:91:0c:0f:80:67:a7:2d:b5:8c:
16:6d:80:ca:b2:55:44:5b:ef:1f:4a:63:db:c6:df:d3:2f:bf:
e4:7f:a6:d8:38:44:bf:18:18:73:52:4c:7d:63:83:8c:df:6e:
43:3f:13:77:13:a9:ea:19:c5:b6:d6:7d:08:3c:53:b6:44:10:
11:2d:1f:8d:c0:24:f3:49:6b:02:cc:e2:00:76:0e:b5:b0:e2:
5b:24:5d:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 31 13:06:03 2026 by rpki-client