Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/dd533d-2855-4793-965a-0e29858c637a/1/G5NFd8tJ2NIxt0xVBybzOH4CbPY.mft
File: G5NFd8tJ2NIxt0xVBybzOH4CbPY.mft (raw, json)
Hash identifier: i3tyTVOMaCw98FgxqlfSYF2+uNAuHwjwFTOlSzZ2ZRI=
Subject key identifier: C6:BC:7A:0F:35:59:10:CE:DA:21:CA:D7:D2:FF:5E:7B:5F:24:36:DF
Authority key identifier: 1B:93:45:77:CB:49:D8:D2:31:B7:4C:55:07:26:F3:38:7E:02:6C:F6
Certificate issuer: /CN=1b934577cb49d8d231b74c550726f3387e026cf6
Certificate serial: 019FA260439CD361383FDF87BA8841ACCEE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G5NFd8tJ2NIxt0xVBybzOH4CbPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/dd533d-2855-4793-965a-0e29858c637a/1/G5NFd8tJ2NIxt0xVBybzOH4CbPY.mft
Manifest number: 19CB
Signing time: Mon 27 Jul 2026 07:00:45 +0000
Manifest this update: Mon 27 Jul 2026 07:00:45 +0000
Manifest next update: Tue 28 Jul 2026 07:00:45 +0000
Files and hashes: 1: G5NFd8tJ2NIxt0xVBybzOH4CbPY.crl (hash: 1wSCslZl/796b3GtX5uk5Zywumh84pm/wM/rNRDPHks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/dd533d-2855-4793-965a-0e29858c637a/1/G5NFd8tJ2NIxt0xVBybzOH4CbPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/dd533d-2855-4793-965a-0e29858c637a/1/G5NFd8tJ2NIxt0xVBybzOH4CbPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/G5NFd8tJ2NIxt0xVBybzOH4CbPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:60:43:9c:d3:61:38:3f:df:87:ba:88:41:ac:ce:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b934577cb49d8d231b74c550726f3387e026cf6
Validity
Not Before: Jul 27 07:00:45 2026 GMT
Not After : Jul 28 07:00:45 2026 GMT
Subject: CN=c6bc7a0f355910ceda21cad7d2ff5e7b5f2436df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c7:18:0a:e7:ec:f0:98:d6:bd:57:14:5a:9e:
41:f8:6c:b8:36:9a:7d:f1:4e:18:6e:7e:f1:24:e8:
6d:84:48:a1:0e:0a:08:bc:1d:11:7f:b4:1a:39:fd:
92:ce:a7:c8:2f:41:94:35:41:b1:16:2a:a8:99:6e:
39:9f:3a:0b:1a:3b:21:58:c5:61:57:bf:2d:71:82:
9f:5c:ac:8c:c0:a9:87:2d:22:89:0c:90:ca:e1:bb:
e5:dc:91:4d:af:e4:36:06:35:75:44:01:26:d3:e8:
7d:3b:2e:e3:25:b6:95:72:f4:24:17:d4:95:1f:83:
76:11:60:2c:50:d2:7b:c1:ec:db:22:6b:3b:65:21:
4a:58:7a:68:f9:54:52:54:25:05:1d:b8:04:6c:99:
fc:60:4d:67:65:a0:72:aa:33:44:88:bd:fd:54:13:
9e:dc:4a:75:70:66:b9:f1:ea:53:21:1b:47:8e:35:
55:e0:22:b4:42:28:d0:25:8e:63:c3:3c:1d:e7:90:
0c:82:8e:3d:70:5c:69:ca:10:77:e8:b5:14:e3:42:
aa:76:b5:5f:81:e4:c2:d6:8b:c6:10:b3:a4:36:94:
e9:3d:e2:4e:29:89:da:da:89:08:12:dd:a2:80:20:
3f:f2:6e:4d:5f:3f:4f:95:ce:a5:44:6f:e8:5b:f5:
ca:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:BC:7A:0F:35:59:10:CE:DA:21:CA:D7:D2:FF:5E:7B:5F:24:36:DF
X509v3 Authority Key Identifier:
keyid:1B:93:45:77:CB:49:D8:D2:31:B7:4C:55:07:26:F3:38:7E:02:6C:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G5NFd8tJ2NIxt0xVBybzOH4CbPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/dd533d-2855-4793-965a-0e29858c637a/1/G5NFd8tJ2NIxt0xVBybzOH4CbPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/dd533d-2855-4793-965a-0e29858c637a/1/G5NFd8tJ2NIxt0xVBybzOH4CbPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:f3:11:54:ba:ac:f8:33:7c:03:4d:00:1e:47:a3:5e:45:01:
b2:15:30:9d:79:c9:39:1d:3c:15:14:09:7a:66:c5:43:5f:30:
92:c1:f0:66:0a:86:4f:1e:4d:85:32:84:b9:64:5c:a3:a8:58:
c5:ea:d1:73:43:3e:72:b2:cc:bb:14:77:b7:4f:43:19:91:89:
68:8b:55:b4:f2:f7:26:db:03:67:a6:c3:93:3b:81:b4:01:54:
6c:e1:85:10:9a:bd:48:1c:a3:6f:48:50:c2:eb:74:16:ee:b1:
73:d7:fe:16:3b:fe:96:f9:24:0d:0f:04:b8:b7:cc:8a:63:88:
56:fc:3f:3a:4d:c6:39:31:28:48:3d:46:34:99:72:93:ea:d7:
a5:4a:f8:61:cf:4f:90:c8:11:d5:25:1b:5d:38:46:96:b0:74:
da:c1:c6:e7:a1:ba:84:4a:f8:57:06:93:50:b0:96:82:19:c9:
35:13:30:4c:5c:74:2e:07:72:7b:ce:89:45:ec:a7:ea:bf:3b:
3f:e5:03:0d:cb:3a:00:32:d4:ca:33:d7:54:f6:79:b7:57:d4:
f4:40:69:19:72:ea:d7:a6:06:d5:5a:be:40:74:db:d5:42:fd:
8f:cc:a1:d7:fb:bc:0d:ec:28:f2:2a:62:c8:85:e4:87:5d:08:
cd:60:72:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 09:18:27 2026 by rpki-client