Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/83cf01-6cca-48d1-9cbf-5ac6fdfdc0cc/1/G23wvAk_KYsENSLr1O3hl5MIGik.mft
File: G23wvAk_KYsENSLr1O3hl5MIGik.mft (raw, json)
Hash identifier: DzLxbzcKn2GgDQCrw4bhB7Ol0NaSJDNVVJjYw7fnVfA=
Subject key identifier: 76:E1:74:38:53:2A:FA:D6:66:1D:B9:95:D7:AB:23:BB:F8:66:FC:3D
Authority key identifier: 1B:6D:F0:BC:09:3F:29:8B:04:35:22:EB:D4:ED:E1:97:93:08:1A:29
Certificate issuer: /CN=1b6df0bc093f298b043522ebd4ede19793081a29
Certificate serial: 019D382E4D4E74E35459940F43A7277B9A69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G23wvAk_KYsENSLr1O3hl5MIGik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/83cf01-6cca-48d1-9cbf-5ac6fdfdc0cc/1/G23wvAk_KYsENSLr1O3hl5MIGik.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 06:00:51 +0000
Manifest this update: Sun 29 Mar 2026 06:00:51 +0000
Manifest next update: Mon 30 Mar 2026 06:00:51 +0000
Files and hashes: 1: G-ycgm7YOR-sZa0cDT0Ey0HKpRQ.roa (hash: Rd+BM6THTi6+A/aDOIt4oFEHGR29dEm5uWS1GE/mueU=)
2: G23wvAk_KYsENSLr1O3hl5MIGik.crl (hash: W9J0wk6k75Xdpprg8eavDZmgGK2hhd59oF2kxOPwRus=)
3: QfmRg80ICP0Wk2irMKs9YP6N-6U.roa (hash: wg6LRoWXAbVsyyU2ZxflvOEDF09pfNJqXiMahee/sYk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/83cf01-6cca-48d1-9cbf-5ac6fdfdc0cc/1/G23wvAk_KYsENSLr1O3hl5MIGik.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/83cf01-6cca-48d1-9cbf-5ac6fdfdc0cc/1/G23wvAk_KYsENSLr1O3hl5MIGik.mft
rsync://rpki.ripe.net/repository/DEFAULT/G23wvAk_KYsENSLr1O3hl5MIGik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:4d:4e:74:e3:54:59:94:0f:43:a7:27:7b:9a:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b6df0bc093f298b043522ebd4ede19793081a29
Validity
Not Before: Mar 29 06:00:51 2026 GMT
Not After : Mar 30 06:00:51 2026 GMT
Subject: CN=76e17438532afad6661db995d7ab23bbf866fc3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2b:b7:38:9c:38:c8:04:7a:63:c7:ec:80:e3:
e1:d5:32:51:77:e4:1f:1d:48:0c:79:3e:53:b1:72:
3a:91:e1:ce:1b:e7:58:e7:c0:ba:5a:14:74:d4:8d:
f8:e8:42:aa:df:2d:83:cc:64:03:70:fc:b9:6b:2c:
c6:a4:fd:25:f9:40:85:81:f5:ff:86:74:b8:6c:e9:
9e:dd:bb:14:ec:69:4f:8e:10:e7:21:e6:7c:67:82:
f9:74:59:ca:6e:7a:82:c7:60:cf:64:76:af:2d:85:
1a:3c:3d:56:f6:46:3d:5e:e6:fe:30:d6:46:91:55:
7c:d4:3d:e1:69:94:11:b8:54:10:35:7f:79:a0:c5:
c5:7f:59:9b:70:5e:48:95:df:d6:31:9b:81:70:f7:
7b:aa:95:a5:11:82:cf:73:96:30:bc:9b:9b:d4:dc:
09:2d:f2:bf:db:78:90:28:cd:00:30:d0:22:1d:8c:
22:ee:f4:09:bf:47:0e:f0:37:7f:bb:14:ed:f4:94:
c4:18:57:74:c5:7e:f2:6e:8b:08:d4:47:4c:af:c2:
54:ba:83:fc:f0:c1:12:3c:b1:68:a6:0e:93:8e:93:
b0:bc:57:f2:b4:74:99:a0:e7:88:57:1b:06:6a:ba:
49:aa:1b:b0:4e:f1:c7:2b:f3:31:44:a3:1a:1c:b3:
c6:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:E1:74:38:53:2A:FA:D6:66:1D:B9:95:D7:AB:23:BB:F8:66:FC:3D
X509v3 Authority Key Identifier:
keyid:1B:6D:F0:BC:09:3F:29:8B:04:35:22:EB:D4:ED:E1:97:93:08:1A:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G23wvAk_KYsENSLr1O3hl5MIGik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/83cf01-6cca-48d1-9cbf-5ac6fdfdc0cc/1/G23wvAk_KYsENSLr1O3hl5MIGik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/83cf01-6cca-48d1-9cbf-5ac6fdfdc0cc/1/G23wvAk_KYsENSLr1O3hl5MIGik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:2b:78:ec:ff:9e:cb:af:5f:50:dd:ec:a8:a6:67:ff:d1:94:
b0:97:09:b3:e5:c1:ab:e4:1b:44:d8:5f:17:52:d8:05:0f:18:
f3:ef:34:d2:11:1a:b9:d1:ec:d6:2e:1a:23:18:49:8f:dd:55:
b9:60:a3:73:78:0c:2b:8e:57:a2:28:e1:df:69:6e:0a:6c:e1:
67:c0:29:8b:95:1f:01:46:13:5f:90:53:18:41:a5:13:99:d7:
42:f8:8b:3d:f7:53:26:c9:1b:8c:54:b4:14:26:58:7d:25:8a:
b4:ab:c9:7e:66:81:4a:ad:c4:29:5e:b0:e4:fb:b9:8e:75:6d:
68:06:5d:97:90:6b:9c:fd:2c:1b:21:2a:bd:1a:4d:64:02:ae:
e2:62:21:ef:43:56:75:8b:cf:31:d1:e3:4e:06:a6:58:58:99:
6d:64:15:d4:b3:ba:a4:d0:8b:e3:13:b0:1a:cc:6e:ff:69:1b:
88:12:8b:c2:02:44:05:c9:28:8a:22:19:04:0f:ea:bc:98:9d:
35:6b:b3:78:8c:00:05:4d:b4:fd:e0:aa:8a:c7:4e:67:2d:73:
78:f8:7d:da:5c:95:e0:32:a9:79:0c:fc:2e:92:4c:03:3e:8d:
fd:20:41:96:07:ab:aa:de:5b:dd:29:2b:5f:04:9e:a0:8a:cd:
7b:00:43:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:29:42 2026 by rpki-client