Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/5ff89a-2f15-4090-bcc2-807b7c2d6389/1/G7gLSjMnxYOuzbA87z9k8zvVmwg.mft
File: G7gLSjMnxYOuzbA87z9k8zvVmwg.mft (raw, json)
Hash identifier: u+7E7qqrDO9JYm4XEUc4FPMv5Jpy3wKI+oqDmkOGp5U=
Subject key identifier: 47:32:0D:34:2F:68:5F:0A:7F:71:CD:F5:E4:B1:CA:68:06:6F:AE:C5
Authority key identifier: 1B:B8:0B:4A:33:27:C5:83:AE:CD:B0:3C:EF:3F:64:F3:3B:D5:9B:08
Certificate issuer: /CN=1bb80b4a3327c583aecdb03cef3f64f33bd59b08
Certificate serial: 019D386603AF27FC56D9BE6654129745EB4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G7gLSjMnxYOuzbA87z9k8zvVmwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/5ff89a-2f15-4090-bcc2-807b7c2d6389/1/G7gLSjMnxYOuzbA87z9k8zvVmwg.mft
Manifest number: 0DB3
Signing time: Sun 29 Mar 2026 07:01:42 +0000
Manifest this update: Sun 29 Mar 2026 07:01:42 +0000
Manifest next update: Mon 30 Mar 2026 07:01:42 +0000
Files and hashes: 1: G7gLSjMnxYOuzbA87z9k8zvVmwg.crl (hash: JFYChYTDEDhydP0rv+7tMLIkWj4jNbAqi3BSsTYUM5s=)
2: J8v5WR26nlZvCzaCkln0Kxdqo5o.roa (hash: fUoSmipFXo0HTVz8kKFD5jepWNvHoRV0MBDIccRdzZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/5ff89a-2f15-4090-bcc2-807b7c2d6389/1/G7gLSjMnxYOuzbA87z9k8zvVmwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/5ff89a-2f15-4090-bcc2-807b7c2d6389/1/G7gLSjMnxYOuzbA87z9k8zvVmwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/G7gLSjMnxYOuzbA87z9k8zvVmwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:03:af:27:fc:56:d9:be:66:54:12:97:45:eb:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bb80b4a3327c583aecdb03cef3f64f33bd59b08
Validity
Not Before: Mar 29 07:01:42 2026 GMT
Not After : Mar 30 07:01:42 2026 GMT
Subject: CN=47320d342f685f0a7f71cdf5e4b1ca68066faec5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:99:04:bf:ba:42:4a:2e:b9:bc:c6:70:4c:92:
82:93:f9:a8:7e:40:c2:1a:d6:3b:36:b9:ab:d0:0e:
73:ad:0e:e1:97:21:25:43:61:ea:33:bd:98:08:41:
6f:33:9d:3b:84:eb:5b:76:e4:39:cd:74:99:39:df:
e8:91:55:07:c7:73:74:69:80:a9:58:6d:ee:94:06:
a6:07:19:2d:69:0e:c3:67:3b:25:02:2e:4a:18:53:
73:78:ac:41:4c:a7:80:37:16:b4:15:1e:2e:ab:34:
a8:90:ee:14:d0:cf:ed:b0:4c:bd:6d:d1:2f:39:73:
5c:94:7a:41:e7:fe:ac:ab:2e:51:d1:d9:ae:c1:47:
7e:2c:5a:d2:7e:cd:60:8c:18:55:fc:6c:8b:1a:43:
74:62:a8:a4:fe:11:df:54:30:61:80:20:74:3f:36:
f6:93:fe:a3:cf:3c:ac:b4:d9:d0:7d:59:cb:67:4d:
71:ed:e7:4d:9d:d0:6c:3e:b9:d3:e9:cb:a0:25:c3:
e0:ca:f8:51:a6:81:e3:73:cf:b3:d3:7b:65:2f:1b:
04:8c:e1:15:7a:89:97:d3:c0:98:2e:10:1f:ae:5b:
7a:89:15:83:3b:ba:e1:28:2a:99:3e:51:e2:d8:15:
89:08:09:ff:80:2a:45:d2:bc:41:12:c5:3e:fd:6b:
43:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:32:0D:34:2F:68:5F:0A:7F:71:CD:F5:E4:B1:CA:68:06:6F:AE:C5
X509v3 Authority Key Identifier:
keyid:1B:B8:0B:4A:33:27:C5:83:AE:CD:B0:3C:EF:3F:64:F3:3B:D5:9B:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G7gLSjMnxYOuzbA87z9k8zvVmwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/5ff89a-2f15-4090-bcc2-807b7c2d6389/1/G7gLSjMnxYOuzbA87z9k8zvVmwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/5ff89a-2f15-4090-bcc2-807b7c2d6389/1/G7gLSjMnxYOuzbA87z9k8zvVmwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:1b:ed:4e:fc:95:78:92:bb:48:87:c6:3c:df:13:fe:17:50:
81:02:ba:79:4f:ed:de:e9:67:fe:86:84:b2:92:ca:03:ad:b7:
c1:78:e8:4f:4c:1c:79:b4:3b:44:3b:6a:d1:4a:91:6b:22:3a:
c6:f8:14:4e:d0:18:a0:6d:5a:3f:8d:cf:42:a6:1e:48:be:7c:
19:b2:b3:6e:8c:a6:d6:72:05:99:e0:0d:88:fe:88:0e:7a:5b:
02:04:ae:53:e0:33:21:da:d7:90:55:49:d6:07:70:ab:b1:fc:
ff:8a:ed:7b:52:1b:b6:7f:65:e5:7f:73:cc:64:55:be:c6:0c:
3a:00:0d:3b:97:99:fe:3d:b4:d6:53:f8:c6:88:28:77:31:2f:
b7:e2:d2:94:00:7f:1d:a8:e5:71:d4:4a:81:f9:d9:99:c3:55:
ac:88:c5:3b:fd:97:4a:d2:3e:51:3b:b1:60:ad:09:99:1f:ad:
6d:a0:81:ec:f9:80:28:d4:68:26:43:48:cd:9b:00:8c:0f:9f:
49:2f:f3:2a:31:67:34:c0:45:d5:02:e8:78:84:ce:81:06:b8:
4c:53:b2:a9:cf:e1:0f:f7:fe:ac:65:b2:84:a9:d3:d0:78:33:
2a:78:24:48:c6:bd:9f:37:e6:9f:bc:92:e1:0d:13:30:72:90:
cf:11:4c:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:51:06 2026 by rpki-client