Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/c5e557-8be5-4f39-9565-d99e086846b7/1/G23jwbDHn_sngi4JR_3DjlH8xco.mft
File: G23jwbDHn_sngi4JR_3DjlH8xco.mft (raw, json)
Hash identifier: Fi8cj6Dv/jN2IwLamlfF0/v5Ww0nAkJzKCOD5dlajeM=
Subject key identifier: D2:A3:62:D9:A4:0F:F9:51:C9:80:D1:21:83:BB:18:89:00:D1:46:7F
Authority key identifier: 1B:6D:E3:C1:B0:C7:9F:FB:27:82:2E:09:47:FD:C3:8E:51:FC:C5:CA
Certificate issuer: /CN=1b6de3c1b0c79ffb27822e0947fdc38e51fcc5ca
Certificate serial: 019D378988F48CEA5D31BABC47F77E0CB174
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G23jwbDHn_sngi4JR_3DjlH8xco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/c5e557-8be5-4f39-9565-d99e086846b7/1/G23jwbDHn_sngi4JR_3DjlH8xco.mft
Manifest number: 132F
Signing time: Sun 29 Mar 2026 03:00:53 +0000
Manifest this update: Sun 29 Mar 2026 03:00:53 +0000
Manifest next update: Mon 30 Mar 2026 03:00:53 +0000
Files and hashes: 1: G23jwbDHn_sngi4JR_3DjlH8xco.crl (hash: jh7YSRtUPLJjUe7IBIgjyc7HN23zavs1kPbBUna8RVE=)
2: MxK8xpLc65l6jq47Ix7DiO_bItw.roa (hash: j3Cx4avg2XiA5F+u98NaEufXT6dtcTEAI2lje/Zb/S4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/c5e557-8be5-4f39-9565-d99e086846b7/1/G23jwbDHn_sngi4JR_3DjlH8xco.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/c5e557-8be5-4f39-9565-d99e086846b7/1/G23jwbDHn_sngi4JR_3DjlH8xco.mft
rsync://rpki.ripe.net/repository/DEFAULT/G23jwbDHn_sngi4JR_3DjlH8xco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:88:f4:8c:ea:5d:31:ba:bc:47:f7:7e:0c:b1:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b6de3c1b0c79ffb27822e0947fdc38e51fcc5ca
Validity
Not Before: Mar 29 03:00:53 2026 GMT
Not After : Mar 30 03:00:53 2026 GMT
Subject: CN=d2a362d9a40ff951c980d12183bb188900d1467f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:68:71:1f:39:37:11:cb:6f:14:d2:ec:69:48:
3f:2f:5f:44:53:bf:53:49:ad:bd:b8:ab:e5:50:c4:
81:62:95:d9:85:0e:4c:8b:b9:72:85:95:d2:f1:d4:
78:6e:59:5c:c7:4b:d9:2d:80:7f:1d:14:1c:e4:54:
f1:68:87:0e:15:e4:c2:57:fd:65:38:4f:fc:f1:2e:
3f:1d:bc:35:d5:1e:b9:d2:24:04:ce:26:8f:7a:72:
fb:84:e5:ba:05:91:91:79:ad:b1:a8:e2:47:f0:50:
3c:8e:cd:11:26:87:db:0c:f5:c4:99:1c:37:41:3d:
95:5c:93:84:83:5d:9a:8f:96:7a:83:5e:0b:5d:a5:
41:1d:e6:94:81:59:02:2f:e3:bc:e6:80:08:12:ce:
cf:c7:f0:e9:b4:8d:f5:28:ee:41:9a:cc:fd:34:03:
4d:21:45:f1:cf:d5:55:91:8a:87:74:8c:84:f7:01:
42:90:85:87:c6:0b:22:eb:d6:cb:9f:08:36:59:64:
37:44:d6:fd:d2:58:87:0e:95:b7:83:c2:d1:d9:c4:
eb:e2:96:c9:43:90:a3:e3:c9:48:26:dd:69:da:80:
73:f8:e7:12:71:7f:21:20:3f:de:cb:df:db:67:67:
43:a3:90:3e:5a:a9:a8:fa:96:89:a9:c3:e3:16:7b:
25:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:A3:62:D9:A4:0F:F9:51:C9:80:D1:21:83:BB:18:89:00:D1:46:7F
X509v3 Authority Key Identifier:
keyid:1B:6D:E3:C1:B0:C7:9F:FB:27:82:2E:09:47:FD:C3:8E:51:FC:C5:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G23jwbDHn_sngi4JR_3DjlH8xco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c5e557-8be5-4f39-9565-d99e086846b7/1/G23jwbDHn_sngi4JR_3DjlH8xco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c5e557-8be5-4f39-9565-d99e086846b7/1/G23jwbDHn_sngi4JR_3DjlH8xco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:56:f3:0b:9a:9b:32:d1:dd:ce:3c:5c:45:46:13:34:05:b7:
cf:e5:d2:6b:b5:12:c5:c1:54:ba:cf:aa:30:b9:f7:bb:a5:ce:
eb:a7:cb:1d:cb:2f:35:23:e3:49:b2:ce:73:f1:ee:df:2b:21:
80:48:b6:ad:fb:91:10:7f:15:61:5a:72:e9:48:0e:57:44:9a:
96:6f:74:a2:88:32:0b:0e:9b:6b:cb:5a:d9:0b:af:54:78:cf:
9a:24:2e:de:4f:5f:3d:5d:af:49:c9:47:63:95:b6:5b:80:8e:
6b:58:5c:ed:2c:36:39:f5:47:c1:68:8c:94:99:d4:91:ba:5e:
e5:52:de:45:16:d0:cd:ed:0c:36:8b:4c:8c:2f:84:74:1b:68:
e0:52:ac:f3:14:5f:49:00:cf:ee:a0:11:b5:3e:c6:31:84:50:
e8:b1:ea:5f:58:46:b7:fb:e0:ad:53:66:57:f7:c0:e7:a7:3b:
5a:d0:d3:fe:07:13:7b:25:5a:9b:3e:52:95:cd:fd:58:5d:77:
e0:36:35:db:d4:ad:ac:a7:8a:c2:eb:a8:92:0f:f7:65:ba:1f:
ee:8a:1c:ca:7b:91:4b:0f:4c:1f:93:bd:9d:f6:06:4c:1b:b5:
6c:0f:a1:37:1a:ce:5e:58:b2:3f:35:e5:8f:e5:d7:da:0b:93:
3c:59:9e:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:19 2026 by rpki-client