Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7f/6b4023-adef-4e4d-8cf6-32669737c517/1/G1NNR62NtYlKX8k0LkVY-U5PF_E.mft
File: G1NNR62NtYlKX8k0LkVY-U5PF_E.mft (raw, json)
Hash identifier: uLbmSGqw2j26gki7NC73QgmoW3N5dGpijBBfEo2WvUU=
Subject key identifier: E3:CE:14:DF:2C:6D:82:7E:03:8F:FE:E5:45:2A:5B:1A:49:12:37:98
Authority key identifier: 1B:53:4D:47:AD:8D:B5:89:4A:5F:C9:34:2E:45:58:F9:4E:4F:17:F1
Certificate issuer: /CN=1b534d47ad8db5894a5fc9342e4558f94e4f17f1
Certificate serial: 01A17D05309F392FD2AEF3FC836FA571FAFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G1NNR62NtYlKX8k0LkVY-U5PF_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/6b4023-adef-4e4d-8cf6-32669737c517/1/G1NNR62NtYlKX8k0LkVY-U5PF_E.mft
Manifest number: 1A1B
Signing time: Tue 27 Oct 2026 11:00:54 +0000
Manifest this update: Tue 27 Oct 2026 11:00:54 +0000
Manifest next update: Wed 28 Oct 2026 11:00:54 +0000
Files and hashes: 1: AovjLMzZvMdo98oRLMX3UQFhYGU.roa (hash: Pirq+8jQHRZFAz4jyR41JVpLGoXjS83ipQMbfBRQoac=)
2: G1NNR62NtYlKX8k0LkVY-U5PF_E.crl (hash: 08t/8mt5ffqu+C20GZHFUz4rUBol1xaitAzGMf9JV9g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/6b4023-adef-4e4d-8cf6-32669737c517/1/G1NNR62NtYlKX8k0LkVY-U5PF_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/6b4023-adef-4e4d-8cf6-32669737c517/1/G1NNR62NtYlKX8k0LkVY-U5PF_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/G1NNR62NtYlKX8k0LkVY-U5PF_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:05:30:9f:39:2f:d2:ae:f3:fc:83:6f:a5:71:fa:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b534d47ad8db5894a5fc9342e4558f94e4f17f1
Validity
Not Before: Oct 27 11:00:54 2026 GMT
Not After : Oct 28 11:00:54 2026 GMT
Subject: CN=e3ce14df2c6d827e038ffee5452a5b1a49123798
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:07:63:b5:05:67:c3:e4:ae:04:2a:d9:b6:d4:
c9:4a:1b:dc:92:87:b8:58:85:53:f3:b3:c4:dc:44:
27:7e:1e:cf:b8:bf:b5:4c:cb:91:36:36:ea:e1:c1:
d5:2b:d4:5d:4d:47:c0:df:3c:96:16:7b:ab:ae:ca:
04:3d:36:94:6c:b1:0d:da:3b:d2:f0:11:43:cd:b2:
a8:e2:93:86:f0:96:0c:25:a5:49:81:b4:fe:ee:28:
74:2f:93:49:6e:3f:25:61:a7:16:c6:91:16:33:a3:
a0:94:71:c3:ef:25:59:34:b9:98:a7:23:74:6f:e5:
f4:bc:fb:c7:ec:8e:c1:5c:d9:55:d8:9d:5a:86:bb:
50:9c:c7:58:2f:54:ba:b3:94:47:db:76:5b:12:7b:
18:06:d9:b3:31:4f:fc:97:e1:fc:5a:6e:26:3b:05:
70:3f:49:cc:ea:9b:17:49:9b:9f:8d:9b:f7:b7:97:
bf:71:2e:d1:28:91:c9:6a:9d:4b:93:7b:6e:c5:77:
c4:60:7e:a1:bf:35:ca:3e:44:57:67:d4:4b:18:d9:
3d:69:02:6e:32:e8:ce:7e:e0:13:5a:5e:3d:4b:8a:
ee:c6:14:9c:7d:a4:87:07:98:b3:a8:80:b4:41:d2:
95:65:8c:8d:4e:b0:1b:82:30:40:e8:b3:5c:5d:92:
0e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:CE:14:DF:2C:6D:82:7E:03:8F:FE:E5:45:2A:5B:1A:49:12:37:98
X509v3 Authority Key Identifier:
keyid:1B:53:4D:47:AD:8D:B5:89:4A:5F:C9:34:2E:45:58:F9:4E:4F:17:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G1NNR62NtYlKX8k0LkVY-U5PF_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/6b4023-adef-4e4d-8cf6-32669737c517/1/G1NNR62NtYlKX8k0LkVY-U5PF_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/6b4023-adef-4e4d-8cf6-32669737c517/1/G1NNR62NtYlKX8k0LkVY-U5PF_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:ad:38:e4:c8:ae:b3:3c:7b:b3:fb:b3:a5:60:56:52:0a:58:
9e:2d:14:3e:24:79:39:25:38:a5:e1:b8:fd:80:31:87:3d:44:
00:99:b9:a9:7b:9c:c1:68:e8:b4:4c:31:a9:fc:04:ba:11:2d:
3a:3a:1a:68:c9:b7:a0:d7:4e:06:a1:fd:95:b7:fa:b4:60:f8:
d7:9e:f0:44:62:1e:21:7b:6a:2a:ce:08:d5:8f:17:f3:76:a6:
cb:a0:d0:12:bc:95:7e:02:30:87:bf:fe:dc:ee:31:62:1f:8d:
6c:ee:b6:cd:dd:e9:73:2f:a3:91:dd:bb:25:42:5a:aa:6b:67:
1e:7f:5d:23:56:a0:ae:32:81:c0:48:78:ba:60:67:a6:f4:64:
9a:3a:d0:6a:21:95:3c:ac:03:64:7e:19:72:9b:64:05:09:49:
89:89:21:15:64:8c:ad:b4:fb:a5:72:b7:3d:ea:f8:a5:f5:c6:
bd:41:87:ca:d9:52:8b:bb:a8:0c:b5:20:05:54:da:51:51:54:
00:3d:73:8b:8e:b0:e6:0a:9f:89:b2:21:ff:d3:11:84:c8:89:
2d:54:64:66:34:98:65:6f:0e:53:76:63:36:24:06:51:8f:68:
44:ff:5e:e2:6e:46:10:29:a9:42:ac:a2:e0:f4:96:49:af:70:
9f:0a:2c:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:49:09 2026 by rpki-client