Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/bec335-5ee0-4c4d-bda7-7e6d12c3736f/1/Gr5e7LI69WmqcBp6sWz3rB-Q-WA.mft
File: Gr5e7LI69WmqcBp6sWz3rB-Q-WA.mft (raw, json)
Hash identifier: RdvTZHq3lqM4xfjYJYfh05Y8T4KhRrkRE4wDnUBOzdU=
Subject key identifier: C2:08:8D:AB:16:17:43:5A:59:0D:D0:C8:3F:D5:B4:F3:BA:3A:C0:38
Authority key identifier: 1A:BE:5E:EC:B2:3A:F5:69:AA:70:1A:7A:B1:6C:F7:AC:1F:90:F9:60
Certificate issuer: /CN=1abe5eecb23af569aa701a7ab16cf7ac1f90f960
Certificate serial: 019D08FA3576BF77EC4ACAF9A61922499076
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gr5e7LI69WmqcBp6sWz3rB-Q-WA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/bec335-5ee0-4c4d-bda7-7e6d12c3736f/1/Gr5e7LI69WmqcBp6sWz3rB-Q-WA.mft
Manifest number: 1875
Signing time: Fri 20 Mar 2026 02:01:48 +0000
Manifest this update: Fri 20 Mar 2026 02:01:48 +0000
Manifest next update: Sat 21 Mar 2026 02:01:48 +0000
Files and hashes: 1: 0Jl1abYGtc0G0VxCIikfpEXcyQA.asa (hash: spCudA/BRA5WS4oGW3ZjJD1TfyKLPu1VOB18U9BAu44=)
2: Gr5e7LI69WmqcBp6sWz3rB-Q-WA.crl (hash: ymRRdiqqnKFWSvHDvpAlLyMFLu+ACSprLEZ/QCNtOtk=)
3: LVeS85DfebbtBcAsMZC_wog4u10.roa (hash: A1rVGsYR8Sw3aAlxQ52458EV4JvWNk3L8x2i96mTExo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/bec335-5ee0-4c4d-bda7-7e6d12c3736f/1/Gr5e7LI69WmqcBp6sWz3rB-Q-WA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/bec335-5ee0-4c4d-bda7-7e6d12c3736f/1/Gr5e7LI69WmqcBp6sWz3rB-Q-WA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gr5e7LI69WmqcBp6sWz3rB-Q-WA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Mar 2026 01:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:08:fa:35:76:bf:77:ec:4a:ca:f9:a6:19:22:49:90:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1abe5eecb23af569aa701a7ab16cf7ac1f90f960
Validity
Not Before: Mar 20 02:01:48 2026 GMT
Not After : Mar 21 02:01:48 2026 GMT
Subject: CN=c2088dab1617435a590dd0c83fd5b4f3ba3ac038
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:48:af:0a:4f:c8:22:bb:9c:a3:ba:8b:06:32:
c0:56:d0:ff:61:5b:06:1e:9b:32:0d:64:92:e4:8e:
f1:39:c2:62:50:26:af:13:a3:ed:ef:e4:89:3e:dd:
00:e4:87:55:d7:23:a3:30:9e:79:17:3d:33:14:14:
d4:12:e5:15:5e:62:a9:25:8d:3c:35:c7:0b:5d:71:
fb:53:d3:a2:e2:f0:40:3b:8a:5c:0b:06:5a:1a:76:
91:50:53:c1:7b:83:64:a2:e1:4e:52:22:03:36:36:
e8:fb:ed:d0:6d:74:83:48:31:74:5d:28:a0:d0:d9:
e9:95:81:e5:f1:e0:fe:d3:d9:68:a6:ac:51:69:28:
e0:26:9e:5a:1d:69:65:6d:68:9b:94:3a:f2:88:57:
05:56:62:3a:da:b6:d8:6f:14:23:27:6f:0c:2a:33:
57:df:03:da:ba:90:49:72:b1:af:86:72:8e:f3:3a:
81:e5:96:7b:67:01:da:aa:a9:b5:ae:68:21:8e:34:
65:66:f8:02:15:c0:ab:04:3d:ed:25:65:ec:a8:8f:
fe:02:29:fc:06:62:6f:2b:0a:93:d1:16:33:69:a4:
aa:23:62:6d:35:66:b9:fc:90:b5:a8:44:71:04:de:
a3:2b:ce:3e:44:f7:ef:d3:fe:1b:48:64:95:89:79:
6a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:08:8D:AB:16:17:43:5A:59:0D:D0:C8:3F:D5:B4:F3:BA:3A:C0:38
X509v3 Authority Key Identifier:
keyid:1A:BE:5E:EC:B2:3A:F5:69:AA:70:1A:7A:B1:6C:F7:AC:1F:90:F9:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gr5e7LI69WmqcBp6sWz3rB-Q-WA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/bec335-5ee0-4c4d-bda7-7e6d12c3736f/1/Gr5e7LI69WmqcBp6sWz3rB-Q-WA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/bec335-5ee0-4c4d-bda7-7e6d12c3736f/1/Gr5e7LI69WmqcBp6sWz3rB-Q-WA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:b7:19:46:95:d2:5a:0d:89:6d:6a:07:dd:21:07:72:e8:5f:
d0:1e:7d:a3:61:d1:43:ad:45:58:9c:ee:56:45:56:f2:f1:20:
59:e6:81:e5:a2:e5:01:35:1e:19:7b:92:db:ee:f1:5e:f9:8d:
9b:bf:a0:61:e7:c9:91:4c:ca:8f:ea:11:e9:e1:2b:55:d2:f9:
f6:4d:4b:34:cc:1e:88:8c:17:34:c9:73:d9:a7:b5:d4:7f:7b:
77:15:33:ba:8e:db:1f:fc:ad:39:4b:2a:40:29:45:a3:8b:9b:
8d:2b:f6:0e:94:ea:eb:5b:f6:fe:60:25:a2:0f:b0:f3:63:ee:
55:4a:fa:3a:87:b5:b5:4d:53:c9:6c:83:67:b4:91:dc:5f:ab:
83:b9:f2:31:4a:f8:8f:62:26:f1:82:75:31:79:b5:13:ee:8b:
ed:bc:c5:4a:0a:cd:61:d8:35:d1:ee:49:c2:94:d6:82:72:eb:
24:de:ae:e8:ad:22:5f:c0:ae:d6:39:f4:9b:97:ae:77:46:e7:
6e:90:f8:4a:3b:1b:d2:8b:85:b2:a4:b2:43:69:98:54:d9:0d:
d0:e3:3f:f3:45:0a:93:fe:7a:80:0a:10:a3:91:2c:9a:7a:02:
5a:41:7f:ac:26:e3:54:b5:dd:18:5e:3a:66:59:9d:6b:9d:d1:
72:f0:fb:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 20 05:36:36 2026 by rpki-client