Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/573f0b-5325-41d3-b9ff-8f7d56b7b417/1/G7KbPxWPqAcQwSpYtp-5JgmNUSk.mft
File: G7KbPxWPqAcQwSpYtp-5JgmNUSk.mft (raw, json)
Hash identifier: oM3S0zk1kqtfC8De5O3m41nHWfX8mpL+qND8yX4eclo=
Subject key identifier: 80:12:F2:A4:50:36:90:F3:72:B1:53:DA:5C:D7:88:BE:B7:B0:35:31
Authority key identifier: 1B:B2:9B:3F:15:8F:A8:07:10:C1:2A:58:B6:9F:B9:26:09:8D:51:29
Certificate issuer: /CN=1bb29b3f158fa80710c12a58b69fb926098d5129
Certificate serial: 019D37C0A3DC0E350A58C7BE5EBCA6875837
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G7KbPxWPqAcQwSpYtp-5JgmNUSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/573f0b-5325-41d3-b9ff-8f7d56b7b417/1/G7KbPxWPqAcQwSpYtp-5JgmNUSk.mft
Manifest number: 0F24
Signing time: Sun 29 Mar 2026 04:01:04 +0000
Manifest this update: Sun 29 Mar 2026 04:01:04 +0000
Manifest next update: Mon 30 Mar 2026 04:01:04 +0000
Files and hashes: 1: G7KbPxWPqAcQwSpYtp-5JgmNUSk.crl (hash: qWv9v6CIQnJVxf2Rx+Yv9O6Cg41U1WoCb1iLZ/D1fp4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/573f0b-5325-41d3-b9ff-8f7d56b7b417/1/G7KbPxWPqAcQwSpYtp-5JgmNUSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/573f0b-5325-41d3-b9ff-8f7d56b7b417/1/G7KbPxWPqAcQwSpYtp-5JgmNUSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/G7KbPxWPqAcQwSpYtp-5JgmNUSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:a3:dc:0e:35:0a:58:c7:be:5e:bc:a6:87:58:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bb29b3f158fa80710c12a58b69fb926098d5129
Validity
Not Before: Mar 29 04:01:04 2026 GMT
Not After : Mar 30 04:01:04 2026 GMT
Subject: CN=8012f2a4503690f372b153da5cd788beb7b03531
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:55:2c:49:cb:c3:d6:d4:0f:ef:54:e1:b4:89:
c3:49:49:da:50:7d:fd:3d:e8:e0:10:06:d1:63:2e:
56:2c:19:37:eb:d1:04:b7:32:fe:a7:bc:0d:98:e5:
97:e5:83:ac:64:8e:28:14:c4:e1:8a:69:e1:7e:38:
9b:ad:b6:d5:19:b7:04:d3:36:e1:25:71:09:74:49:
8a:7d:87:bb:22:92:d6:c3:5c:12:2d:97:7b:cd:96:
b9:61:c6:d2:32:4a:ed:de:a2:6d:5d:d0:72:83:d6:
6c:be:75:73:32:b3:1c:5a:3d:72:10:b1:bc:6e:91:
cf:09:c7:4f:7b:34:26:e9:b3:d3:c8:6a:dc:04:1a:
d9:b1:37:d4:6a:ab:1a:d8:08:17:03:e1:7f:d0:d7:
11:ef:f3:01:b8:c0:41:10:55:8d:bd:2c:53:9f:a0:
4c:ec:b8:73:c6:9a:d2:3a:65:7c:78:94:47:6c:b7:
80:c5:82:94:7e:31:69:10:76:9c:5c:f3:03:7a:30:
68:a8:d1:3c:6b:86:95:59:87:55:6b:46:03:3e:32:
c7:ae:d6:b0:04:ac:ff:b5:9c:e2:a3:5d:a6:9b:bc:
a6:fb:4e:47:8d:ed:eb:90:34:75:1c:94:e2:bf:a2:
bb:da:ca:1e:60:b6:e5:48:85:1b:87:38:43:81:cf:
4e:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:12:F2:A4:50:36:90:F3:72:B1:53:DA:5C:D7:88:BE:B7:B0:35:31
X509v3 Authority Key Identifier:
keyid:1B:B2:9B:3F:15:8F:A8:07:10:C1:2A:58:B6:9F:B9:26:09:8D:51:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G7KbPxWPqAcQwSpYtp-5JgmNUSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/573f0b-5325-41d3-b9ff-8f7d56b7b417/1/G7KbPxWPqAcQwSpYtp-5JgmNUSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/573f0b-5325-41d3-b9ff-8f7d56b7b417/1/G7KbPxWPqAcQwSpYtp-5JgmNUSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:73:a6:f9:8f:6e:f9:9c:ad:bf:fc:fd:3b:17:18:55:d5:73:
a4:dc:74:77:83:04:e1:24:e2:8e:8b:1b:73:76:2c:c3:5f:19:
77:4f:ba:db:79:9d:96:5b:c6:47:d7:a5:a3:4f:11:3a:b9:1c:
3a:40:48:3a:b4:09:c0:6a:17:88:2e:a2:2d:2c:80:a4:9b:f2:
b6:e9:6d:fd:73:81:4d:b4:74:26:01:d0:fa:90:2a:9c:d1:5f:
89:56:ef:51:d9:43:fc:c1:1a:84:ca:eb:07:f3:0b:fa:25:17:
0a:13:2e:97:0a:39:22:57:2a:a4:81:2d:63:04:c9:80:2d:f4:
7e:29:b5:f1:65:8d:69:da:97:c5:09:1c:e2:c2:fd:83:fc:e5:
95:fb:1b:97:97:1a:1d:6c:85:c4:f3:40:75:b4:7a:40:26:b6:
3d:1e:2d:ae:bb:8e:e6:0f:4e:ad:28:db:bc:25:0a:d8:82:d5:
16:1d:43:5a:66:5d:13:89:40:2b:5f:fd:13:25:5b:5d:d0:e9:
68:16:55:f0:ed:c3:46:3f:e5:bf:4a:a4:fd:8a:f7:e0:20:96:
c2:d5:58:e6:74:3e:24:51:f9:bc:7e:d9:94:fa:d1:51:9b:97:
8b:76:30:3e:bc:ec:d9:da:7b:4d:27:f5:35:b7:25:aa:7e:68:
76:73:6b:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:45:58 2026 by rpki-client