Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/f1db36-665d-4d80-a1b2-515ee1570259/1/G1RDfJLB4IsG4Hdhh8eITdUcDjg.mft
File: G1RDfJLB4IsG4Hdhh8eITdUcDjg.mft (raw, json)
Hash identifier: 34WJKY/LiDpYI76xQK3aXHyU8lSPF3E3EdHGDVRSPPQ=
Subject key identifier: C2:FC:3A:75:E9:9B:50:81:A8:4D:57:41:53:C8:E0:FF:B4:83:B4:51
Authority key identifier: 1B:54:43:7C:92:C1:E0:8B:06:E0:77:61:87:C7:88:4D:D5:1C:0E:38
Certificate issuer: /CN=1b54437c92c1e08b06e0776187c7884dd51c0e38
Certificate serial: 019D3865ECE2186E04DB160402740C6BAD67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G1RDfJLB4IsG4Hdhh8eITdUcDjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/f1db36-665d-4d80-a1b2-515ee1570259/1/G1RDfJLB4IsG4Hdhh8eITdUcDjg.mft
Manifest number: 0975
Signing time: Sun 29 Mar 2026 07:01:36 +0000
Manifest this update: Sun 29 Mar 2026 07:01:36 +0000
Manifest next update: Mon 30 Mar 2026 07:01:36 +0000
Files and hashes: 1: 5N0vtDieER6JLHXCItm0SSiMncg.roa (hash: SGCzDUwLAus0ZQKT3w7xorMqefRunoszLUQViV8By+o=)
2: G1RDfJLB4IsG4Hdhh8eITdUcDjg.crl (hash: rQk9gnz9ksK6FI4UaJxRJLVYdh3KulBTT+OfKHAJR8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/f1db36-665d-4d80-a1b2-515ee1570259/1/G1RDfJLB4IsG4Hdhh8eITdUcDjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/f1db36-665d-4d80-a1b2-515ee1570259/1/G1RDfJLB4IsG4Hdhh8eITdUcDjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/G1RDfJLB4IsG4Hdhh8eITdUcDjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:ec:e2:18:6e:04:db:16:04:02:74:0c:6b:ad:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b54437c92c1e08b06e0776187c7884dd51c0e38
Validity
Not Before: Mar 29 07:01:36 2026 GMT
Not After : Mar 30 07:01:36 2026 GMT
Subject: CN=c2fc3a75e99b5081a84d574153c8e0ffb483b451
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9f:09:04:de:b5:04:0e:46:28:dc:f2:d2:eb:
6b:38:77:3c:f2:6b:38:f9:8b:6a:1e:07:9c:47:f7:
4b:0d:05:d0:8b:a9:c8:a1:4a:8d:b7:34:ea:34:02:
f4:4a:43:7f:b1:66:e8:bc:ca:0f:57:46:c9:e3:33:
ad:b1:d5:d8:51:c3:53:2e:3f:22:de:ed:a8:ed:d3:
a5:6f:5b:85:3c:f8:67:5e:c5:6e:93:f2:fb:db:13:
78:98:bb:60:10:e9:a0:fc:68:fd:a7:c6:a8:49:e0:
f3:ae:9c:10:a5:7a:74:3c:87:66:63:97:e4:82:9e:
49:d4:c3:0f:4a:a9:0c:d2:0b:dd:f4:dd:53:6c:c0:
50:a1:7c:8a:eb:f4:94:c1:62:da:34:f1:99:b0:7a:
c5:71:69:4f:b2:72:be:ff:2f:74:d4:4f:1b:83:de:
40:7d:01:09:b2:ec:65:ad:86:d1:6b:cb:0d:d0:c2:
f5:f1:fb:59:1c:20:a0:fa:50:85:da:51:11:b6:8c:
ac:52:79:72:9f:65:89:cc:c4:ee:48:11:87:2f:00:
ef:cc:24:d0:1d:ff:d9:35:e9:64:b5:11:55:9c:53:
d0:a6:49:d2:6b:21:92:f8:8a:b6:b4:08:c7:8e:05:
17:c3:2f:e0:4c:8d:b7:b7:0e:0a:6c:8e:ea:2d:03:
01:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:FC:3A:75:E9:9B:50:81:A8:4D:57:41:53:C8:E0:FF:B4:83:B4:51
X509v3 Authority Key Identifier:
keyid:1B:54:43:7C:92:C1:E0:8B:06:E0:77:61:87:C7:88:4D:D5:1C:0E:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G1RDfJLB4IsG4Hdhh8eITdUcDjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/f1db36-665d-4d80-a1b2-515ee1570259/1/G1RDfJLB4IsG4Hdhh8eITdUcDjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/f1db36-665d-4d80-a1b2-515ee1570259/1/G1RDfJLB4IsG4Hdhh8eITdUcDjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:b6:97:79:d3:aa:3a:d1:77:ed:8f:ae:bc:1d:be:25:0a:1e:
a1:5c:85:4c:d6:3a:54:8d:2c:54:67:79:68:94:16:da:44:01:
0a:81:83:ae:cd:5d:d9:b4:90:53:53:fe:9b:ea:d1:6c:e9:fb:
90:88:e3:7a:19:94:4a:47:a4:e8:d7:be:ac:d2:eb:83:68:8a:
a1:48:34:8e:e6:a3:ab:18:13:46:cc:fd:b5:95:11:8d:14:bf:
7a:5b:62:8f:04:32:76:de:ac:30:8a:84:88:33:4a:25:47:30:
b9:34:60:b3:61:12:60:56:d2:d2:f8:9b:5c:27:a9:b2:53:e7:
8f:ba:b6:6e:66:7e:79:57:a1:02:02:8c:21:5e:b8:09:7f:90:
c1:02:73:34:82:a7:09:98:cb:09:61:90:7c:ff:fe:39:fa:18:
a0:ad:4b:4b:63:79:aa:c5:1f:e8:8a:0b:03:76:99:64:b2:fd:
01:ae:88:be:00:f2:ca:97:af:33:46:8d:15:42:46:0c:8d:66:
05:7c:b2:e9:5c:b4:96:0e:25:f9:3c:a7:3a:f5:9b:b4:cc:22:
f9:51:f6:84:cc:23:71:cc:fa:e1:d9:99:e1:a4:01:92:92:78:
3a:74:d1:bf:8d:38:87:82:8d:62:6d:25:f7:5a:c1:37:fa:1b:
f2:29:bf:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:31 2026 by rpki-client