Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/4f5951-2047-44bc-b69a-03bc63ca25a3/1/G2goETu6NCPRVzGWT-V7XyUr_eY.mft
File: G2goETu6NCPRVzGWT-V7XyUr_eY.mft (raw, json)
Hash identifier: CHrTiYVT7C5/AKu/XGBPgk+1645zHBWzuDw53BpI5Pc=
Subject key identifier: CD:B7:A6:CE:70:67:95:D1:E1:50:9B:FD:C4:2B:A9:50:A5:4C:38:26
Authority key identifier: 1B:68:28:11:3B:BA:34:23:D1:57:31:96:4F:E5:7B:5F:25:2B:FD:E6
Certificate issuer: /CN=1b6828113bba3423d15731964fe57b5f252bfde6
Certificate serial: 019D38D3C1709736F3FC17F06FCA37175A1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G2goETu6NCPRVzGWT-V7XyUr_eY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/4f5951-2047-44bc-b69a-03bc63ca25a3/1/G2goETu6NCPRVzGWT-V7XyUr_eY.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 09:01:34 +0000
Manifest this update: Sun 29 Mar 2026 09:01:34 +0000
Manifest next update: Mon 30 Mar 2026 09:01:34 +0000
Files and hashes: 1: 9RWhzRxq8FPw1YkS-zkDw9ykoNg.roa (hash: KHfuWgWaHX6Mz8Yo4JI6aEe/kuXdFK4S2I7AeBzy96w=)
2: G2goETu6NCPRVzGWT-V7XyUr_eY.crl (hash: YGGHZknsuZ7m7klMfUdJhjadLpn8NbVEtJ4FWRVELHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/4f5951-2047-44bc-b69a-03bc63ca25a3/1/G2goETu6NCPRVzGWT-V7XyUr_eY.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/4f5951-2047-44bc-b69a-03bc63ca25a3/1/G2goETu6NCPRVzGWT-V7XyUr_eY.mft
rsync://rpki.ripe.net/repository/DEFAULT/G2goETu6NCPRVzGWT-V7XyUr_eY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:c1:70:97:36:f3:fc:17:f0:6f:ca:37:17:5a:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b6828113bba3423d15731964fe57b5f252bfde6
Validity
Not Before: Mar 29 09:01:34 2026 GMT
Not After : Mar 30 09:01:34 2026 GMT
Subject: CN=cdb7a6ce706795d1e1509bfdc42ba950a54c3826
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8f:f4:55:07:1c:59:ed:18:76:1f:af:14:21:
31:cb:55:86:5b:c9:2b:e1:7c:a1:c0:34:5d:05:a7:
e3:e0:99:77:05:df:f6:2f:34:7b:e0:9a:a4:0f:e8:
df:38:53:39:75:79:31:4c:f2:0b:40:9b:fb:28:60:
47:22:c4:08:4d:79:53:c5:d0:c3:15:e7:2b:23:d4:
43:8d:e6:75:45:cf:b3:10:a3:c7:bd:71:b1:b3:31:
06:ec:15:08:84:68:ca:06:1c:47:6e:77:e5:ed:4b:
90:0a:d7:0d:60:90:f3:8b:20:d8:4d:05:4a:f5:49:
ef:9e:71:6c:5c:3f:39:b2:db:74:62:b0:2b:f2:2e:
d8:06:46:14:b0:af:6a:b7:ae:78:7b:15:25:d2:24:
4e:1e:a4:de:0e:4f:66:88:07:7a:29:5b:34:c1:ca:
b4:0c:9f:d4:77:51:de:dc:e7:21:bc:bf:25:43:5b:
db:55:6e:a0:b4:68:6d:e0:fc:21:f3:c2:16:dd:33:
98:dc:b7:26:e0:34:2f:0a:a4:be:63:a3:3b:ea:1e:
80:73:e8:61:8a:6e:24:fe:8e:ce:bc:a0:5f:28:60:
de:9d:6e:a0:f3:3c:04:6c:bc:26:75:18:7e:65:09:
6c:29:6d:ac:99:78:0a:de:d0:90:f1:71:be:e0:61:
45:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:B7:A6:CE:70:67:95:D1:E1:50:9B:FD:C4:2B:A9:50:A5:4C:38:26
X509v3 Authority Key Identifier:
keyid:1B:68:28:11:3B:BA:34:23:D1:57:31:96:4F:E5:7B:5F:25:2B:FD:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2goETu6NCPRVzGWT-V7XyUr_eY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4f5951-2047-44bc-b69a-03bc63ca25a3/1/G2goETu6NCPRVzGWT-V7XyUr_eY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4f5951-2047-44bc-b69a-03bc63ca25a3/1/G2goETu6NCPRVzGWT-V7XyUr_eY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:d5:ab:77:fc:ba:78:39:c9:81:81:65:3b:ee:e2:41:92:63:
c5:35:80:6b:17:7d:6f:e9:7f:b3:b3:3b:8e:c5:e3:74:62:c0:
a0:7e:d5:09:47:ac:c3:ce:39:e7:cb:db:69:99:36:4f:58:fc:
fe:6a:ad:2c:37:9f:7e:b9:6e:2e:66:ac:45:40:2a:37:18:2b:
fc:2a:26:61:39:c3:6f:df:7a:03:2c:c9:e7:07:c0:d9:09:fb:
57:f1:39:1a:7e:09:93:9c:1b:5f:db:d1:46:da:ca:06:5b:45:
1b:b6:2f:d3:40:fb:1e:03:de:78:66:af:ba:7b:4d:a1:dc:ad:
1f:5f:f8:2e:48:27:f2:cb:33:0e:a1:e0:0c:60:ce:a3:c6:d0:
a0:e2:cb:7f:e4:c5:eb:7b:2b:2d:d8:30:ce:65:25:4c:1f:2d:
ec:b7:78:71:14:6a:9c:cf:5f:2e:72:fa:e5:58:bc:7e:2a:af:
0a:a4:aa:fa:8f:72:e0:88:a4:17:01:e9:27:18:cd:63:d3:98:
ec:90:b2:ef:c7:56:81:45:57:f4:d9:3d:d3:de:bb:63:dc:d9:
4f:5a:c3:98:1b:1a:24:b6:01:80:c0:64:ab:57:91:48:3f:60:
94:56:19:84:a1:ef:dc:5e:9f:13:f5:65:7b:b7:da:c3:ca:f9:
6c:e9:24:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:31:38 2026 by rpki-client