Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/2472a9-ff66-4dcf-ac82-30e540d5d3a7/1/G3573I4VumsubQlVJHa7G1WxWcM.mft
File: G3573I4VumsubQlVJHa7G1WxWcM.mft (raw, json)
Hash identifier: jd30Hy2lO4yjfKr3UVPuCDRyT37jWpttnS1nLCJaxNo=
Subject key identifier: EF:61:C2:5A:E9:CD:CA:94:40:51:41:D0:20:DE:51:9A:F0:08:5A:93
Authority key identifier: 1B:7E:7B:DC:8E:15:BA:6B:2E:6D:09:55:24:76:BB:1B:55:B1:59:C3
Certificate issuer: /CN=1b7e7bdc8e15ba6b2e6d09552476bb1b55b159c3
Certificate serial: 019D375241ADD3524A002012D2F7B9560917
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G3573I4VumsubQlVJHa7G1WxWcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/2472a9-ff66-4dcf-ac82-30e540d5d3a7/1/G3573I4VumsubQlVJHa7G1WxWcM.mft
Manifest number: 120A
Signing time: Sun 29 Mar 2026 02:00:30 +0000
Manifest this update: Sun 29 Mar 2026 02:00:30 +0000
Manifest next update: Mon 30 Mar 2026 02:00:30 +0000
Files and hashes: 1: G3573I4VumsubQlVJHa7G1WxWcM.crl (hash: NQL+oim0q44/T1tbI8YJHtrkHItjwZA8oSfJgKJ1/tU=)
2: GTlzvN8hJSJgM1qwowoO5bn8qLU.roa (hash: 73NFakx+FzAAGVTAVqagiaRLqwrqzSJ1FS4nqNgvaXU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/2472a9-ff66-4dcf-ac82-30e540d5d3a7/1/G3573I4VumsubQlVJHa7G1WxWcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/2472a9-ff66-4dcf-ac82-30e540d5d3a7/1/G3573I4VumsubQlVJHa7G1WxWcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/G3573I4VumsubQlVJHa7G1WxWcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:41:ad:d3:52:4a:00:20:12:d2:f7:b9:56:09:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b7e7bdc8e15ba6b2e6d09552476bb1b55b159c3
Validity
Not Before: Mar 29 02:00:30 2026 GMT
Not After : Mar 30 02:00:30 2026 GMT
Subject: CN=ef61c25ae9cdca94405141d020de519af0085a93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:65:b2:02:dc:7f:57:14:7b:b4:eb:90:fb:23:
92:39:99:e6:ef:99:3f:ef:9b:ce:7f:4b:7f:8d:dd:
b2:56:b6:d3:bd:ab:fc:dd:3c:56:ed:1d:3c:ce:4a:
55:69:a6:5a:b9:fc:0c:1d:89:57:40:3e:fa:52:23:
2d:cf:e2:85:61:f7:cd:4a:c5:b2:8c:48:45:bf:77:
77:07:f3:26:7d:b1:85:5c:5b:c6:14:ce:6b:27:e8:
24:c8:e6:92:19:af:a3:ee:41:73:68:e4:45:93:0c:
77:0b:67:7e:5c:ce:48:14:61:8d:d9:fa:ed:fd:5f:
6f:98:16:38:ad:81:d3:52:76:b7:15:fd:f1:86:c9:
b7:73:0b:87:96:b2:24:b8:6d:af:26:c5:ba:e5:5b:
f3:fb:51:67:48:1d:f3:59:c8:ec:20:aa:3b:e5:c2:
ba:5e:08:c5:6a:4c:1f:27:39:b7:51:a9:d0:30:33:
be:89:df:1c:62:29:c9:bb:12:ad:45:38:c5:5a:a9:
52:8f:b1:19:ac:b7:84:18:89:0e:a6:fa:f0:a2:15:
97:1e:0c:ce:73:2c:81:8c:16:25:9c:63:85:be:75:
2b:bc:e0:20:e6:4b:f0:3b:9e:6e:96:f4:3c:fe:79:
41:ae:68:6c:f7:3a:8d:8b:fc:10:35:ff:37:4c:9c:
ea:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:61:C2:5A:E9:CD:CA:94:40:51:41:D0:20:DE:51:9A:F0:08:5A:93
X509v3 Authority Key Identifier:
keyid:1B:7E:7B:DC:8E:15:BA:6B:2E:6D:09:55:24:76:BB:1B:55:B1:59:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G3573I4VumsubQlVJHa7G1WxWcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2472a9-ff66-4dcf-ac82-30e540d5d3a7/1/G3573I4VumsubQlVJHa7G1WxWcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2472a9-ff66-4dcf-ac82-30e540d5d3a7/1/G3573I4VumsubQlVJHa7G1WxWcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:28:b6:aa:ff:80:aa:5a:9c:95:92:99:c7:97:58:39:26:87:
90:f8:4e:74:02:22:17:24:17:3c:e7:7a:f9:7e:8e:1c:0a:b2:
6e:2b:53:74:e8:c6:2f:21:e4:ca:c2:86:e3:43:53:de:43:a0:
7b:99:2c:6d:80:c9:c7:1c:24:1a:71:f3:ee:8d:ce:6f:35:fb:
13:2a:ea:25:cf:a8:5c:6a:c0:a3:d8:b5:43:a7:cb:1d:2f:10:
85:11:d2:7d:f3:ce:f8:78:2d:bd:a1:a9:77:59:b5:bd:e5:09:
35:c4:f0:99:e2:66:29:e8:f8:db:08:d6:c4:ee:b2:4b:3e:43:
d7:de:98:61:6d:b8:96:f8:4f:1d:5c:5b:f4:e4:33:64:51:fb:
ee:9a:90:d6:5d:2f:5c:ab:ed:89:3a:d0:d8:0d:7e:69:29:bd:
bc:2e:76:af:8f:3a:10:a1:de:67:0c:b9:1a:cb:c1:9d:6c:76:
4f:86:26:d7:b9:58:eb:e4:a4:6c:bc:27:b7:50:67:49:9a:e8:
bc:69:08:0f:58:c7:53:25:fb:e2:1a:d5:56:86:95:27:76:2a:
f0:d7:bf:f8:ff:c1:7e:66:14:61:8d:7e:fb:3a:86:42:af:05:
8a:58:bb:14:fb:bf:61:10:11:ea:40:1e:ae:be:13:4e:b4:c4:
4a:b2:11:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:39:07 2026 by rpki-client