Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e764cb-463d-41ad-a7ec-f581f681a004/1/G1WOmRP2tWzD1WD5T_E38s1vSGI.mft
File: G1WOmRP2tWzD1WD5T_E38s1vSGI.mft (raw, json)
Hash identifier: ZgJ9rXJEmNtF2MxlbvMbmGg1mhxW6ujHGRpzV4Gdsy8=
Subject key identifier: 8A:2E:C7:19:41:B8:89:A9:E7:86:B7:E8:0B:F5:CF:DF:56:CA:06:EA
Authority key identifier: 1B:55:8E:99:13:F6:B5:6C:C3:D5:60:F9:4F:F1:37:F2:CD:6F:48:62
Certificate issuer: /CN=1b558e9913f6b56cc3d560f94ff137f2cd6f4862
Certificate serial: 019D37890CD5E228C3CD583827126CFE5395
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G1WOmRP2tWzD1WD5T_E38s1vSGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/e764cb-463d-41ad-a7ec-f581f681a004/1/G1WOmRP2tWzD1WD5T_E38s1vSGI.mft
Manifest number: 08A6
Signing time: Sun 29 Mar 2026 03:00:21 +0000
Manifest this update: Sun 29 Mar 2026 03:00:21 +0000
Manifest next update: Mon 30 Mar 2026 03:00:21 +0000
Files and hashes: 1: G1WOmRP2tWzD1WD5T_E38s1vSGI.crl (hash: 2WgW866B9MNoh+0HnUTuESyVPs/+cMM+I9q0pjz7WkI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/e764cb-463d-41ad-a7ec-f581f681a004/1/G1WOmRP2tWzD1WD5T_E38s1vSGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/e764cb-463d-41ad-a7ec-f581f681a004/1/G1WOmRP2tWzD1WD5T_E38s1vSGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/G1WOmRP2tWzD1WD5T_E38s1vSGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:0c:d5:e2:28:c3:cd:58:38:27:12:6c:fe:53:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b558e9913f6b56cc3d560f94ff137f2cd6f4862
Validity
Not Before: Mar 29 03:00:21 2026 GMT
Not After : Mar 30 03:00:21 2026 GMT
Subject: CN=8a2ec71941b889a9e786b7e80bf5cfdf56ca06ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:70:e6:1c:d8:e4:64:66:c1:32:c2:0e:59:04:
e7:5b:8f:83:e4:93:d6:36:38:e8:b3:94:a8:d1:f1:
77:36:d2:dd:e3:d8:66:16:15:41:d8:8b:ec:2c:d9:
f6:7e:c5:65:74:c3:3c:6c:af:6d:9f:43:6d:f6:f0:
ad:48:3b:47:61:e2:bc:7f:27:c0:a0:1a:e5:05:df:
22:37:73:fe:0c:74:3f:57:aa:66:b2:ca:c7:48:46:
6b:6a:7a:4b:dd:4f:50:db:31:fb:1c:e7:48:c9:33:
5b:50:f5:2e:c2:5a:b1:a4:2c:f2:01:ab:64:0d:92:
b2:02:f6:ca:1c:4c:61:2f:85:1a:b4:86:13:79:2f:
55:f0:73:3d:d3:83:73:fa:e3:11:2f:3c:66:80:d6:
f8:a1:0a:87:43:67:84:e9:0e:13:93:70:95:cb:87:
52:2f:04:c5:5b:92:38:af:8d:4e:43:77:22:68:37:
39:9a:5b:55:83:6a:e2:8f:f3:81:74:4e:8d:13:42:
f4:05:c1:c2:f6:61:95:26:fa:82:6c:f9:1d:7e:e2:
db:e9:63:f4:93:4c:4b:c3:27:35:20:72:56:64:f3:
8e:e3:58:01:63:f8:45:64:5f:eb:2e:a0:a7:fd:10:
54:c9:d6:c8:75:76:36:d3:1b:fa:0a:7e:cd:74:9b:
23:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:2E:C7:19:41:B8:89:A9:E7:86:B7:E8:0B:F5:CF:DF:56:CA:06:EA
X509v3 Authority Key Identifier:
keyid:1B:55:8E:99:13:F6:B5:6C:C3:D5:60:F9:4F:F1:37:F2:CD:6F:48:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G1WOmRP2tWzD1WD5T_E38s1vSGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e764cb-463d-41ad-a7ec-f581f681a004/1/G1WOmRP2tWzD1WD5T_E38s1vSGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e764cb-463d-41ad-a7ec-f581f681a004/1/G1WOmRP2tWzD1WD5T_E38s1vSGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:be:46:70:f8:10:78:88:c5:15:f8:12:33:f7:78:f5:c9:d1:
5d:3a:d2:b8:c8:22:56:43:9d:41:c1:cc:55:36:78:cf:d3:61:
d3:c1:e3:39:31:60:5c:d8:fa:4c:75:54:45:52:0e:5f:f5:8b:
cc:f5:52:fa:5b:72:6b:cd:26:03:d5:b4:e8:dc:8e:31:22:27:
ec:3f:51:70:02:de:68:bd:27:8d:00:24:09:6d:4b:24:43:0f:
27:85:f1:7b:e9:ae:f9:1f:54:00:d1:79:51:15:7a:0f:81:c1:
38:fc:70:27:5f:cf:80:2c:6c:39:7b:2f:06:45:da:a4:94:a6:
2a:8a:98:5e:80:2b:d5:f5:92:a3:8f:0f:20:4e:71:74:5b:8a:
3b:dd:c1:2b:1e:9c:5c:94:4f:de:f4:74:25:9f:15:10:9c:97:
23:e5:29:e1:8c:2d:4b:a3:2d:4c:62:54:3a:e9:a0:53:57:16:
04:bb:98:97:02:9c:e9:be:38:2d:10:59:db:a3:68:aa:a7:45:
0c:91:0c:7c:00:a1:19:62:42:42:98:9f:1b:eb:2f:67:bb:53:
39:11:c6:ee:4b:de:f8:a0:72:71:92:c4:ad:0a:d6:8e:fb:b9:
90:71:64:a8:0b:4b:fe:f5:5d:7c:22:b9:c0:d1:eb:0b:a2:88:
f5:67:e9:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:47:39 2026 by rpki-client