Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/417d77-0e9e-4091-b510-946018241c51/1/G0ILeZxSBqGe93F-48cxL9iDMK4.mft
File: G0ILeZxSBqGe93F-48cxL9iDMK4.mft (raw, json)
Hash identifier: 6y9NkbYfh7MbwI9pK2FS7gRVSboNyqwLfgBnn523xaA=
Subject key identifier: 26:94:D6:AB:80:A6:F0:BF:7E:A9:B9:0A:4C:B8:3A:D9:97:14:DE:74
Authority key identifier: 1B:42:0B:79:9C:52:06:A1:9E:F7:71:7E:E3:C7:31:2F:D8:83:30:AE
Certificate issuer: /CN=1b420b799c5206a19ef7717ee3c7312fd88330ae
Certificate serial: 019D375316DD72127BDF8273F835232117C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G0ILeZxSBqGe93F-48cxL9iDMK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/417d77-0e9e-4091-b510-946018241c51/1/G0ILeZxSBqGe93F-48cxL9iDMK4.mft
Manifest number: 0A91
Signing time: Sun 29 Mar 2026 02:01:25 +0000
Manifest this update: Sun 29 Mar 2026 02:01:25 +0000
Manifest next update: Mon 30 Mar 2026 02:01:25 +0000
Files and hashes: 1: 6HQUO6STMbW7BVm3pNinweHOQTY.roa (hash: 2bOuMAF3TgRjyY2xveVCaA/5uJyPdOr15OyOQ9K3vns=)
2: G0ILeZxSBqGe93F-48cxL9iDMK4.crl (hash: rWRfW8KHfDPomg+YkxpgoI2lncOG3mMN9VOlJm/B44o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/417d77-0e9e-4091-b510-946018241c51/1/G0ILeZxSBqGe93F-48cxL9iDMK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/417d77-0e9e-4091-b510-946018241c51/1/G0ILeZxSBqGe93F-48cxL9iDMK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/G0ILeZxSBqGe93F-48cxL9iDMK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:53:16:dd:72:12:7b:df:82:73:f8:35:23:21:17:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b420b799c5206a19ef7717ee3c7312fd88330ae
Validity
Not Before: Mar 29 02:01:25 2026 GMT
Not After : Mar 30 02:01:25 2026 GMT
Subject: CN=2694d6ab80a6f0bf7ea9b90a4cb83ad99714de74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3c:ec:20:05:f4:c2:94:13:a1:39:bc:c0:e7:
1d:36:a4:fb:1f:14:70:fd:e1:a9:8c:c8:d7:d2:1e:
b9:ca:a1:7c:07:54:ca:25:ce:72:cc:80:ea:f8:ae:
ea:b0:c1:ed:56:94:35:56:60:22:a0:53:1d:fd:8a:
1c:ad:d3:28:fc:8c:55:e6:25:9b:40:f6:57:e7:8e:
c3:77:a3:e5:e0:cb:8d:cf:91:0a:4d:d1:6f:cd:a0:
ff:a8:fa:cf:f0:20:8e:92:c7:2f:bc:70:c7:ea:de:
59:c6:4e:56:3a:c2:a6:b5:08:5d:53:80:82:fd:1a:
9c:21:4e:9d:94:33:30:20:dd:9f:17:ca:1b:94:f7:
4c:6b:5c:cb:a0:15:6d:87:d7:d0:40:09:d0:e4:c4:
fa:6f:d2:ab:a7:88:03:0c:65:e6:89:9b:04:72:b5:
7a:37:5b:3d:65:cb:48:d9:9a:45:f1:07:f4:a1:b7:
be:c7:0e:af:70:67:95:d8:f5:be:32:3a:38:7b:48:
ae:05:82:66:f0:13:de:0c:41:f8:26:8d:6e:dd:8b:
ac:b7:fb:df:b1:39:b0:97:1f:e4:f7:ab:e0:f5:04:
9c:c2:eb:75:5b:5f:bb:a4:f7:e5:da:b4:42:d7:c8:
01:d7:d9:fe:26:66:ae:a2:aa:43:e6:dc:3f:39:ff:
55:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:94:D6:AB:80:A6:F0:BF:7E:A9:B9:0A:4C:B8:3A:D9:97:14:DE:74
X509v3 Authority Key Identifier:
keyid:1B:42:0B:79:9C:52:06:A1:9E:F7:71:7E:E3:C7:31:2F:D8:83:30:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G0ILeZxSBqGe93F-48cxL9iDMK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/417d77-0e9e-4091-b510-946018241c51/1/G0ILeZxSBqGe93F-48cxL9iDMK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/417d77-0e9e-4091-b510-946018241c51/1/G0ILeZxSBqGe93F-48cxL9iDMK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:2a:3d:02:65:5e:89:76:7e:28:8b:05:33:f2:31:de:73:0d:
04:67:01:19:24:93:38:2a:2d:d2:b8:1c:a5:ea:1c:75:f4:61:
17:0e:9e:9b:03:59:48:05:bd:a0:a0:3c:49:a0:5c:d0:bf:ef:
2b:5f:2a:2f:b2:9d:ff:2a:dc:c8:f2:4d:fd:5c:72:a6:e5:44:
4e:8a:11:84:92:0d:3e:32:08:6f:2c:01:bc:84:75:88:23:e5:
db:0f:4b:61:60:a2:5e:5a:4d:ec:cf:17:45:40:47:cd:cb:ef:
58:a7:9e:ea:ae:0c:ae:09:db:73:c3:05:3c:20:e5:7c:1d:54:
13:8b:6b:cf:cc:c9:87:c8:c8:99:87:a1:84:98:36:46:4a:15:
e1:ed:63:28:04:81:9a:b8:d6:22:5b:7a:2e:8f:4d:bd:84:be:
83:68:49:bb:52:f3:7e:5e:e3:56:25:96:d2:0f:6d:5c:d0:dc:
f0:47:af:66:a3:69:e4:98:64:d1:4b:2d:3a:22:f5:c3:99:2e:
13:a4:4d:4d:dc:e3:ea:50:c1:36:c3:08:71:5c:da:09:49:91:
4f:ca:73:72:9d:a2:4d:06:e6:c2:5c:c1:34:eb:15:d2:f3:5b:
68:95:29:3b:2b:4a:5d:a3:59:ab:a8:e9:13:d8:8f:f8:13:bf:
b2:fc:b4:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:16 2026 by rpki-client