Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/9293cf-2939-486e-b8f8-c58a9d5c7534/1/Fr_GV2_0KHqI6d4-IQuewOERta0.mft
File: Fr_GV2_0KHqI6d4-IQuewOERta0.mft (raw, json)
Hash identifier: appbTS4eSCWoXH4TuAsjpNZN1sRoIlRRvxtY4VThCLo=
Subject key identifier: 8A:53:3F:84:85:31:57:6E:41:3C:B6:20:CF:65:E4:43:E9:E1:20:48
Authority key identifier: 16:BF:C6:57:6F:F4:28:7A:88:E9:DE:3E:21:0B:9E:C0:E1:11:B5:AD
Certificate issuer: /CN=16bfc6576ff4287a88e9de3e210b9ec0e111b5ad
Certificate serial: 019D3977C9C83E031874A5931F61B23FE9E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fr_GV2_0KHqI6d4-IQuewOERta0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/9293cf-2939-486e-b8f8-c58a9d5c7534/1/Fr_GV2_0KHqI6d4-IQuewOERta0.mft
Manifest number: 1870
Signing time: Sun 29 Mar 2026 12:00:44 +0000
Manifest this update: Sun 29 Mar 2026 12:00:44 +0000
Manifest next update: Mon 30 Mar 2026 12:00:44 +0000
Files and hashes: 1: 2AYux49DjTxA_DsUF1wyzKL0fGM.roa (hash: ocQKGzZeY566sxhr7s6wd2NW9FJp8fCORKMwHIVxLAk=)
2: Fr_GV2_0KHqI6d4-IQuewOERta0.crl (hash: xxCFTzHrAS8fV2g8I/TBT1kkefcoyrjgd3xtVoezLkw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/9293cf-2939-486e-b8f8-c58a9d5c7534/1/Fr_GV2_0KHqI6d4-IQuewOERta0.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/9293cf-2939-486e-b8f8-c58a9d5c7534/1/Fr_GV2_0KHqI6d4-IQuewOERta0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fr_GV2_0KHqI6d4-IQuewOERta0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:c9:c8:3e:03:18:74:a5:93:1f:61:b2:3f:e9:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16bfc6576ff4287a88e9de3e210b9ec0e111b5ad
Validity
Not Before: Mar 29 12:00:44 2026 GMT
Not After : Mar 30 12:00:44 2026 GMT
Subject: CN=8a533f848531576e413cb620cf65e443e9e12048
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:57:41:9e:84:43:40:3c:cf:11:34:66:ac:3d:
5a:3b:87:ac:ea:ea:e2:1f:53:6e:fd:f3:e4:51:aa:
c9:c5:5d:2e:eb:15:0d:7c:a8:d7:93:28:7c:b2:63:
16:71:4a:58:e7:b1:07:d2:a5:4c:3f:5a:a3:25:8a:
08:f8:af:e8:5c:7b:4c:40:6c:c3:cd:e5:1f:b7:4f:
d3:56:23:7a:85:0c:c7:6f:66:20:dd:ef:38:7f:5a:
19:44:d5:07:79:a5:48:02:86:2e:1a:52:98:1d:4f:
51:f9:34:2f:45:00:9b:4c:64:f6:6c:89:7e:8d:bf:
15:ba:70:87:0f:0b:83:f3:9c:47:81:ec:d8:e1:4c:
4a:62:d4:50:6b:a1:94:15:02:96:24:b5:28:4a:ed:
8e:e4:a6:55:97:a1:3f:9a:47:2b:d1:f5:a4:4b:93:
22:e4:1b:79:ee:ad:0b:8e:91:7d:de:19:fa:40:c8:
89:b4:14:63:1b:c7:9a:3a:c0:b1:e1:01:40:cb:a5:
c6:81:ae:a4:09:6f:ca:de:b9:86:a5:75:b0:77:f4:
6a:12:6e:73:6d:a2:cf:11:bc:42:53:e7:a7:29:a9:
7d:27:d4:d4:17:48:ab:81:a3:54:27:cb:05:0c:a4:
2d:ba:34:a5:fd:9f:9c:74:3e:c0:7a:8c:1c:14:c4:
8f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:53:3F:84:85:31:57:6E:41:3C:B6:20:CF:65:E4:43:E9:E1:20:48
X509v3 Authority Key Identifier:
keyid:16:BF:C6:57:6F:F4:28:7A:88:E9:DE:3E:21:0B:9E:C0:E1:11:B5:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fr_GV2_0KHqI6d4-IQuewOERta0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/9293cf-2939-486e-b8f8-c58a9d5c7534/1/Fr_GV2_0KHqI6d4-IQuewOERta0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/9293cf-2939-486e-b8f8-c58a9d5c7534/1/Fr_GV2_0KHqI6d4-IQuewOERta0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:dd:bb:da:16:97:5f:b1:1e:8c:db:7c:d9:a7:f4:28:ff:fd:
4e:10:78:5a:ac:a2:b5:28:94:4a:a9:3b:ab:02:c9:4c:14:6c:
4a:81:c8:b9:60:3c:4a:93:e9:e1:c4:92:13:d1:91:95:cf:a8:
7d:4a:0b:27:03:27:ad:78:e4:d6:b3:b7:f1:32:07:1f:4a:a3:
4e:10:c3:d6:2e:60:7a:94:bf:57:9a:d6:85:de:ce:19:14:dc:
48:12:fc:6c:ca:dc:1e:4b:4a:73:a5:f7:aa:06:04:44:32:49:
87:59:6c:cd:99:cc:92:bc:c2:31:df:b4:31:30:9f:ec:cf:9f:
72:59:05:47:4e:b4:56:7b:cb:19:61:ed:80:89:64:99:2d:a2:
c2:9b:7a:56:84:13:50:14:fe:03:62:63:0b:6c:e5:83:e7:44:
e3:3d:cb:97:20:32:37:2a:e2:5b:20:30:49:8f:6e:ac:29:ec:
e0:02:6c:87:f4:9e:4b:bd:cd:2e:d8:75:b4:58:f0:1b:b6:36:
c4:6c:a7:6d:32:af:92:c2:21:df:87:7a:00:3d:9b:7b:23:dc:
06:de:db:2b:4b:ac:08:b8:83:a7:e5:c8:cb:dc:cb:ce:ad:38:
d2:b2:c3:81:98:fc:dc:01:4b:f3:a2:b3:d1:fd:30:7d:f6:35:
55:73:9b:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:22:29 2026 by rpki-client