Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/99b535-c42b-4e01-8793-722294783e9e/1/G3jb8-hZWC_R7aLy3N5UIilRRvE.mft
File: G3jb8-hZWC_R7aLy3N5UIilRRvE.mft (raw, json)
Hash identifier: qCmoxdr/Kqfdgclqq1XSX3Pi3TQ/qjpQq9sHHc0Auf4=
Subject key identifier: 17:BD:BF:E5:C1:09:F6:1C:9C:48:97:6E:F5:3A:82:9A:7F:32:9C:6A
Authority key identifier: 1B:78:DB:F3:E8:59:58:2F:D1:ED:A2:F2:DC:DE:54:22:29:51:46:F1
Certificate issuer: /CN=1b78dbf3e859582fd1eda2f2dcde5422295146f1
Certificate serial: 019FA3A9924C4445DB84931707DC1B284686
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G3jb8-hZWC_R7aLy3N5UIilRRvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/99b535-c42b-4e01-8793-722294783e9e/1/G3jb8-hZWC_R7aLy3N5UIilRRvE.mft
Manifest number: 19D1
Signing time: Mon 27 Jul 2026 13:00:26 +0000
Manifest this update: Mon 27 Jul 2026 13:00:26 +0000
Manifest next update: Tue 28 Jul 2026 13:00:26 +0000
Files and hashes: 1: G3jb8-hZWC_R7aLy3N5UIilRRvE.crl (hash: nRjC7I5JBoEPhJg6r+DdVL5YfvQT9M8zjk2t/smO6Go=)
2: a_j0083lOlqZLjjJqW5npMU2K1c.roa (hash: faxoEGXKDneOWfMQo/aCLuHRodBLAUIu/JQekys4GcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/99b535-c42b-4e01-8793-722294783e9e/1/G3jb8-hZWC_R7aLy3N5UIilRRvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/99b535-c42b-4e01-8793-722294783e9e/1/G3jb8-hZWC_R7aLy3N5UIilRRvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/G3jb8-hZWC_R7aLy3N5UIilRRvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 13:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:a9:92:4c:44:45:db:84:93:17:07:dc:1b:28:46:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b78dbf3e859582fd1eda2f2dcde5422295146f1
Validity
Not Before: Jul 27 13:00:26 2026 GMT
Not After : Jul 28 13:00:26 2026 GMT
Subject: CN=17bdbfe5c109f61c9c48976ef53a829a7f329c6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a9:d0:c8:03:93:bd:6f:7a:c1:23:88:a7:0c:
29:c2:0d:37:30:ce:82:f7:de:52:23:aa:2f:62:c3:
ad:83:75:5e:fe:4e:6a:b2:38:96:81:b2:42:e4:78:
ab:3c:fe:a7:aa:b3:09:fd:1d:84:b1:35:64:bc:e6:
a1:19:8e:cf:10:a8:88:d6:77:69:ae:cb:5e:57:71:
92:ab:94:71:3c:42:d1:07:98:ae:dc:b2:f8:0d:b4:
75:ed:f0:ef:a2:94:b1:52:a6:55:c1:7d:93:c7:21:
fd:de:9f:90:22:86:8e:c9:4b:0c:c0:a2:c2:b3:c2:
f5:62:3a:84:90:92:f3:5c:e3:f2:95:7b:da:a6:3a:
82:29:93:4e:97:d1:46:f5:25:71:23:7c:55:22:81:
70:da:fe:c2:1b:35:37:e5:69:fd:ec:46:7c:93:58:
16:12:03:4e:b1:cc:a3:6c:27:b0:42:0c:dd:5b:1d:
8c:95:12:81:62:a2:9b:a3:d1:b5:31:c0:fc:4c:1b:
0b:6b:ae:5e:47:56:b1:16:fe:cc:9d:0c:78:0e:73:
6e:7f:ad:f2:7a:3b:05:ac:a3:34:bb:22:e7:d2:00:
75:bd:b8:42:6a:9c:cc:21:6a:19:45:ca:1a:38:2b:
25:55:f9:6a:7b:36:83:0d:7d:99:84:5c:cf:97:e4:
e2:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:BD:BF:E5:C1:09:F6:1C:9C:48:97:6E:F5:3A:82:9A:7F:32:9C:6A
X509v3 Authority Key Identifier:
keyid:1B:78:DB:F3:E8:59:58:2F:D1:ED:A2:F2:DC:DE:54:22:29:51:46:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G3jb8-hZWC_R7aLy3N5UIilRRvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/99b535-c42b-4e01-8793-722294783e9e/1/G3jb8-hZWC_R7aLy3N5UIilRRvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/99b535-c42b-4e01-8793-722294783e9e/1/G3jb8-hZWC_R7aLy3N5UIilRRvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:6c:12:3f:d4:b1:ea:a9:ec:83:74:2d:66:a7:39:e0:82:6d:
e5:88:32:a3:29:80:3d:62:3d:3f:55:1a:08:21:48:49:4e:ac:
8c:5e:34:48:23:0d:b1:02:1f:b2:74:35:1a:c7:06:09:c8:3a:
a9:56:15:4e:89:3f:4a:0f:f8:94:cf:70:9d:0b:26:c9:11:c4:
27:7b:fb:d3:90:e2:c2:23:ee:7c:8f:fd:39:95:82:2b:c4:ae:
81:92:a2:fc:fb:ca:3d:20:87:ad:ef:aa:5b:a4:4d:b7:1c:aa:
19:64:22:6d:06:b5:55:e2:bb:23:dd:37:f6:3f:3b:8e:3b:48:
81:fb:eb:08:86:57:06:2b:c9:21:f1:14:a4:ae:ca:29:26:82:
46:a1:bb:3a:4b:80:75:22:37:25:05:4c:8d:c8:4a:3d:94:6e:
cd:23:c2:40:bb:aa:ba:2e:31:0d:a5:39:fe:a9:7f:71:29:57:
85:5f:95:5c:cd:db:1b:c5:d0:a0:ba:0f:96:e7:f7:d5:ac:7c:
a3:4d:e0:bd:22:44:36:8f:ec:4c:c2:17:7f:4e:c0:2d:06:be:
13:b3:e7:cb:25:74:1a:cd:1b:52:f6:32:d3:88:c9:cb:5b:57:
b3:e3:9e:41:0e:98:b3:33:44:ab:e7:4f:a9:ae:60:c1:d5:42:
c4:15:49:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 20:20:57 2026 by rpki-client