Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/99b535-c42b-4e01-8793-722294783e9e/1/G3jb8-hZWC_R7aLy3N5UIilRRvE.mft
File: G3jb8-hZWC_R7aLy3N5UIilRRvE.mft (raw, json)
Hash identifier: KTOSFk+24Yi7UCb3p3D0ysLqxiUhZ9RjhKWEvoM+mQg=
Subject key identifier: BE:B1:C2:F0:E4:FE:01:26:F8:CB:07:7D:B8:12:01:87:3A:D3:66:18
Authority key identifier: 1B:78:DB:F3:E8:59:58:2F:D1:ED:A2:F2:DC:DE:54:22:29:51:46:F1
Certificate issuer: /CN=1b78dbf3e859582fd1eda2f2dcde5422295146f1
Certificate serial: 019EB9FDAA9C0E3D1515676449A757C648B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G3jb8-hZWC_R7aLy3N5UIilRRvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/99b535-c42b-4e01-8793-722294783e9e/1/G3jb8-hZWC_R7aLy3N5UIilRRvE.mft
Manifest number: 1958
Signing time: Fri 12 Jun 2026 04:01:09 +0000
Manifest this update: Fri 12 Jun 2026 04:01:09 +0000
Manifest next update: Sat 13 Jun 2026 04:01:09 +0000
Files and hashes: 1: G3jb8-hZWC_R7aLy3N5UIilRRvE.crl (hash: 5G/csTFKZ00PUN0leclnfWNmLlwxj2b36cD3QdEpTZs=)
2: a_j0083lOlqZLjjJqW5npMU2K1c.roa (hash: faxoEGXKDneOWfMQo/aCLuHRodBLAUIu/JQekys4GcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/99b535-c42b-4e01-8793-722294783e9e/1/G3jb8-hZWC_R7aLy3N5UIilRRvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/99b535-c42b-4e01-8793-722294783e9e/1/G3jb8-hZWC_R7aLy3N5UIilRRvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/G3jb8-hZWC_R7aLy3N5UIilRRvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:fd:aa:9c:0e:3d:15:15:67:64:49:a7:57:c6:48:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b78dbf3e859582fd1eda2f2dcde5422295146f1
Validity
Not Before: Jun 12 04:01:09 2026 GMT
Not After : Jun 13 04:01:09 2026 GMT
Subject: CN=beb1c2f0e4fe0126f8cb077db81201873ad36618
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d4:d3:5c:ca:c0:f6:ec:38:2f:61:cf:b2:9f:
3e:8a:53:bf:0c:73:13:20:ff:d9:21:50:08:4b:1e:
1a:83:c3:e0:4a:ff:1b:1d:b7:39:21:fa:bc:f8:01:
de:d4:81:8b:6f:dd:2d:6c:06:37:ae:82:fa:07:7e:
f7:d0:6d:fd:ca:57:c4:cb:bf:6e:8e:33:59:11:76:
55:bf:e9:51:81:e9:bc:9e:2e:5f:a5:4a:e8:e2:91:
2b:f3:2e:1b:bc:53:8a:65:25:cb:59:42:85:e1:02:
db:b7:12:03:40:fa:b6:7c:c5:c3:88:0d:9f:c6:04:
fe:d4:da:46:81:26:4b:8a:5e:77:5b:b6:49:86:30:
60:87:d6:fe:17:e1:19:3c:ed:17:06:d5:32:8a:3f:
89:65:fa:72:b4:6e:b3:9f:fa:23:d7:8c:ce:f9:11:
37:99:dc:25:a0:f9:3b:42:b3:1b:be:00:6a:6c:9e:
04:e3:b6:fa:a2:00:b2:bf:ad:d8:95:36:a1:56:e5:
51:ec:f7:21:91:0e:a3:22:e3:d7:1b:13:61:a3:1c:
9a:84:2f:05:1e:6b:90:bc:76:ee:ee:f1:1b:7d:0f:
1c:d8:27:eb:9f:4d:c9:06:b7:4a:62:11:be:24:1a:
0b:d3:a0:6d:0e:33:a7:ff:fc:08:cc:f6:d6:3a:fa:
19:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:B1:C2:F0:E4:FE:01:26:F8:CB:07:7D:B8:12:01:87:3A:D3:66:18
X509v3 Authority Key Identifier:
keyid:1B:78:DB:F3:E8:59:58:2F:D1:ED:A2:F2:DC:DE:54:22:29:51:46:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G3jb8-hZWC_R7aLy3N5UIilRRvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/99b535-c42b-4e01-8793-722294783e9e/1/G3jb8-hZWC_R7aLy3N5UIilRRvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/99b535-c42b-4e01-8793-722294783e9e/1/G3jb8-hZWC_R7aLy3N5UIilRRvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:15:5c:8f:64:77:d5:fa:80:e2:4e:42:44:e1:25:23:84:7b:
58:f9:59:23:47:15:00:97:e6:02:1c:2b:73:7e:65:da:8d:f4:
6e:17:72:bf:40:e4:e9:db:26:97:62:e9:8a:42:2b:90:51:2e:
8c:6e:eb:3a:fa:09:bc:fa:ad:ae:3f:2f:f3:d8:73:8c:c7:69:
e7:4e:dc:4f:e4:f1:c1:69:dd:e2:7d:97:36:dd:64:69:3b:9f:
96:46:da:54:ff:20:77:55:02:cb:f7:8b:35:7e:cf:ba:bf:88:
02:68:14:11:46:51:e9:96:a7:e5:3a:93:0d:bb:1b:eb:c2:36:
47:3c:6e:42:09:ec:3e:14:58:76:78:ae:74:e3:43:8f:2b:35:
cf:75:67:74:09:4f:57:a9:9f:6a:5e:fb:1f:31:65:b6:a9:e4:
38:4e:ec:ac:75:82:89:c8:17:0b:8d:af:71:9b:d4:8f:2c:f1:
79:c6:1c:31:00:66:d7:51:ed:74:37:e9:3e:fd:43:c6:7f:6f:
ad:58:72:5a:c1:f0:e5:5c:5e:75:fa:af:20:98:64:89:77:26:
17:77:a8:76:9b:c4:fb:8c:c6:ce:d4:45:de:9f:2b:07:33:bd:
96:e6:a8:b0:de:6c:5b:ed:e6:e7:15:b0:0b:b7:af:0f:5e:c1:
7d:05:09:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 06:10:20 2026 by rpki-client