Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/3d6107-5bce-4780-ae10-22d371d6cdee/1/G2uUO5o9_2loAVFr6EcbxFiFZug.mft
File: G2uUO5o9_2loAVFr6EcbxFiFZug.mft (raw, json)
Hash identifier: LI4qZ97lGqOnKgOV2iwuSYF/K1uYhPvBzBl5B+fuY7o=
Subject key identifier: 99:4C:1F:B8:3F:3A:4E:AB:43:34:72:19:C4:0C:9D:00:C1:16:A0:56
Authority key identifier: 1B:6B:94:3B:9A:3D:FF:69:68:01:51:6B:E8:47:1B:C4:58:85:66:E8
Certificate issuer: /CN=1b6b943b9a3dff696801516be8471bc4588566e8
Certificate serial: 019D389BAE8A2BB741F22AE191DB7B339CEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G2uUO5o9_2loAVFr6EcbxFiFZug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/3d6107-5bce-4780-ae10-22d371d6cdee/1/G2uUO5o9_2loAVFr6EcbxFiFZug.mft
Manifest number: 1534
Signing time: Sun 29 Mar 2026 08:00:19 +0000
Manifest this update: Sun 29 Mar 2026 08:00:19 +0000
Manifest next update: Mon 30 Mar 2026 08:00:19 +0000
Files and hashes: 1: CFO4FgEIRtMb5lyEJ7fTGNyKj1Q.roa (hash: 811rgV28E1K97XcQlVBf+c8AkF0NnU7urjPyYJW2uoM=)
2: G2uUO5o9_2loAVFr6EcbxFiFZug.crl (hash: bDuX5SsRf5TJqg8fPdB6/d5VAcfHcbWY87GRy5YKNCE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/3d6107-5bce-4780-ae10-22d371d6cdee/1/G2uUO5o9_2loAVFr6EcbxFiFZug.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/3d6107-5bce-4780-ae10-22d371d6cdee/1/G2uUO5o9_2loAVFr6EcbxFiFZug.mft
rsync://rpki.ripe.net/repository/DEFAULT/G2uUO5o9_2loAVFr6EcbxFiFZug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:ae:8a:2b:b7:41:f2:2a:e1:91:db:7b:33:9c:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b6b943b9a3dff696801516be8471bc4588566e8
Validity
Not Before: Mar 29 08:00:19 2026 GMT
Not After : Mar 30 08:00:19 2026 GMT
Subject: CN=994c1fb83f3a4eab43347219c40c9d00c116a056
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c9:b1:7b:94:4f:f5:21:55:1b:77:f8:1f:c3:
7a:f8:16:79:75:dc:5a:4c:1c:91:50:d1:7b:56:36:
6e:12:c8:8f:34:4c:0b:3f:ab:7b:1e:0c:24:07:b3:
1d:6a:89:20:67:aa:41:f6:34:e2:26:85:3d:2e:d9:
c3:76:37:ad:29:99:47:08:c2:f1:90:a8:fc:db:11:
09:1b:9d:85:86:13:8a:b7:59:ed:2f:4d:22:69:a9:
a2:eb:21:68:b8:d2:0a:b7:da:2a:dc:a9:86:c7:80:
f5:fd:52:4d:be:33:ad:68:9f:5d:e0:b1:2a:cb:68:
31:af:23:31:4e:57:4e:e0:7e:18:18:f8:41:ce:b8:
a7:b3:06:19:76:58:70:37:3c:0e:1c:98:54:ea:d0:
5e:15:46:74:38:2b:40:09:62:48:26:1e:cb:1e:e5:
e3:e0:a4:9f:f0:8b:26:7f:13:86:76:f3:e1:00:44:
14:43:d4:13:7f:e1:1c:f2:64:33:2f:4c:2b:b7:4e:
6e:7a:f3:cf:67:4b:f1:26:0e:5b:e0:e1:1d:2c:df:
bc:fe:fd:93:a5:8e:20:e7:50:18:f6:8e:b0:0e:4b:
ab:07:4c:14:e0:a9:16:7c:61:3f:d0:82:00:e5:0a:
31:a8:0f:35:9e:ce:33:d9:05:b3:54:98:89:da:7f:
68:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:4C:1F:B8:3F:3A:4E:AB:43:34:72:19:C4:0C:9D:00:C1:16:A0:56
X509v3 Authority Key Identifier:
keyid:1B:6B:94:3B:9A:3D:FF:69:68:01:51:6B:E8:47:1B:C4:58:85:66:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2uUO5o9_2loAVFr6EcbxFiFZug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3d6107-5bce-4780-ae10-22d371d6cdee/1/G2uUO5o9_2loAVFr6EcbxFiFZug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3d6107-5bce-4780-ae10-22d371d6cdee/1/G2uUO5o9_2loAVFr6EcbxFiFZug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:f7:21:df:ff:4f:e5:f4:1d:f5:8b:78:db:53:8b:72:6a:d1:
a9:32:f5:75:53:82:15:2d:15:03:14:67:16:b3:be:f4:26:16:
ee:b6:ca:bd:6b:69:a9:a8:dd:5a:86:d8:f9:3c:2f:ed:0b:5d:
9a:1d:b7:6b:ba:e6:be:8b:ef:d0:db:9b:e8:a0:34:39:b8:32:
26:42:92:11:95:c6:e0:d6:88:a0:b5:cd:5d:3d:58:de:50:f1:
b4:f8:05:88:9a:b4:b0:94:00:3c:68:d6:93:a8:63:d0:86:e6:
6d:ab:85:f2:1c:b8:08:3d:16:94:ea:14:87:f2:8a:5a:44:ad:
52:4b:56:21:8d:79:4a:fa:80:a5:83:f2:27:e7:e6:d6:fe:41:
85:c1:fb:29:ad:9c:58:11:72:44:08:3d:61:20:f5:7a:93:b0:
7f:87:db:26:f4:d5:c9:29:c5:85:dc:30:19:3c:29:ec:a1:8c:
57:d6:38:ce:f3:86:2f:1f:7d:68:f7:f2:ed:ad:1d:2a:c1:64:
c1:4a:83:e9:3a:95:ac:15:ad:8d:fd:6d:de:1a:88:9e:da:43:
22:2c:50:08:36:70:ec:de:40:6f:b5:fc:ae:c7:71:21:1c:5f:
e3:29:4c:f8:cd:da:d6:4c:16:c8:05:ce:c2:8b:15:3e:61:5d:
db:8d:91:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:54:36 2026 by rpki-client