Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/c0b283-88b9-43cd-b08f-a8ea43253ed5/1/G6jqOiKIpq-PZKg4MALHQIVXmgc.mft
File: G6jqOiKIpq-PZKg4MALHQIVXmgc.mft (raw, json)
Hash identifier: sUqEPYrb/MTiHGdo2AqXO/USgK9KlDxed0yhSr/WdbU=
Subject key identifier: 3B:DF:A9:64:D0:33:05:22:AE:8B:11:DC:16:89:71:42:A3:DA:32:D5
Authority key identifier: 1B:A8:EA:3A:22:88:A6:AF:8F:64:A8:38:30:02:C7:40:85:57:9A:07
Certificate issuer: /CN=1ba8ea3a2288a6af8f64a8383002c74085579a07
Certificate serial: 019D39AEE929639E727BFFF1C6539B62277A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G6jqOiKIpq-PZKg4MALHQIVXmgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/c0b283-88b9-43cd-b08f-a8ea43253ed5/1/G6jqOiKIpq-PZKg4MALHQIVXmgc.mft
Manifest number: 172B
Signing time: Sun 29 Mar 2026 13:00:57 +0000
Manifest this update: Sun 29 Mar 2026 13:00:57 +0000
Manifest next update: Mon 30 Mar 2026 13:00:57 +0000
Files and hashes: 1: 1-DM1gd0DhDPlBxIiN43VyzDdiBc.roa (hash: OQEFPc3xHZLNWfUSpSuD4aqC+ajoqGZTHNMTBwY2RZs=)
2: G6jqOiKIpq-PZKg4MALHQIVXmgc.crl (hash: ehchvCaLFKArKCFwmYVFIB+gV85Oi0L5FkfpkGvvT/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/c0b283-88b9-43cd-b08f-a8ea43253ed5/1/G6jqOiKIpq-PZKg4MALHQIVXmgc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/c0b283-88b9-43cd-b08f-a8ea43253ed5/1/G6jqOiKIpq-PZKg4MALHQIVXmgc.mft
rsync://rpki.ripe.net/repository/DEFAULT/G6jqOiKIpq-PZKg4MALHQIVXmgc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:e9:29:63:9e:72:7b:ff:f1:c6:53:9b:62:27:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ba8ea3a2288a6af8f64a8383002c74085579a07
Validity
Not Before: Mar 29 13:00:57 2026 GMT
Not After : Mar 30 13:00:57 2026 GMT
Subject: CN=3bdfa964d0330522ae8b11dc16897142a3da32d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:67:dd:37:97:da:d3:46:88:ea:05:74:93:8a:
d0:ba:c2:64:83:7c:48:09:87:b1:5c:9f:df:0d:2a:
c0:36:09:86:17:27:02:4c:48:58:f9:e3:4f:47:2a:
9f:0c:ea:e5:60:84:60:8f:99:b5:52:fd:87:ec:4d:
09:b5:d8:73:c1:35:e3:ae:3c:55:f2:ce:80:02:bf:
2d:40:6f:70:a3:a0:63:ba:8c:ab:da:36:52:1a:f9:
cb:dc:22:a1:6f:9f:dc:45:39:ad:fa:44:f6:f3:8f:
18:8e:49:e7:68:82:5f:4c:c4:a2:02:a7:ee:f5:12:
5c:29:4d:c6:e8:cb:32:2d:62:17:f3:32:9a:7a:2f:
2e:c4:1c:76:34:a1:ba:43:a9:89:ac:7b:a2:43:11:
96:76:05:cc:9e:9b:cb:54:fa:11:3a:74:9e:9e:fb:
1d:fa:60:28:bc:09:18:1e:67:33:46:9b:03:5a:8d:
03:8d:90:5e:00:63:09:56:2e:aa:81:54:5a:8c:fc:
aa:f2:b9:f3:cd:6c:2b:98:c3:a5:3c:16:c0:47:98:
eb:e7:d0:91:5d:39:15:79:4d:a6:11:3a:77:c8:fd:
74:88:10:50:ce:af:f4:e3:9e:fa:b7:b4:94:2b:c1:
67:17:a9:cb:57:e7:49:07:a7:d6:cc:fd:3f:73:9f:
8d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:DF:A9:64:D0:33:05:22:AE:8B:11:DC:16:89:71:42:A3:DA:32:D5
X509v3 Authority Key Identifier:
keyid:1B:A8:EA:3A:22:88:A6:AF:8F:64:A8:38:30:02:C7:40:85:57:9A:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G6jqOiKIpq-PZKg4MALHQIVXmgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/c0b283-88b9-43cd-b08f-a8ea43253ed5/1/G6jqOiKIpq-PZKg4MALHQIVXmgc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/c0b283-88b9-43cd-b08f-a8ea43253ed5/1/G6jqOiKIpq-PZKg4MALHQIVXmgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:be:db:33:b5:20:95:cc:ea:b3:39:68:a1:c3:03:f8:36:e9:
ec:10:f9:bb:0c:f1:62:f4:07:20:e3:21:52:d8:37:b4:41:74:
78:af:8b:bb:6b:c9:81:61:65:63:73:4e:be:fa:22:d1:95:a7:
07:91:3c:d7:b6:c8:20:26:78:f6:0f:44:d4:66:4a:92:5f:b2:
79:87:09:24:b2:31:f2:89:20:07:c2:37:96:bb:2c:db:f0:b1:
da:ca:32:13:3b:90:9e:f9:d7:71:da:44:c1:0e:4f:98:84:70:
5d:0a:20:d6:e1:2e:0c:92:66:ab:df:5a:9a:bc:b3:ba:71:01:
51:52:e8:64:9b:46:bc:16:56:4a:15:b1:d2:9f:9b:66:e2:7c:
b9:aa:c7:46:11:4a:00:b7:4f:63:9f:a4:cd:bb:7c:95:75:7f:
fa:f9:8c:90:20:b6:54:8a:1d:74:7f:77:3c:f2:88:54:77:af:
69:5d:5f:c4:1b:9f:ca:6f:6d:76:33:14:54:ef:48:58:80:f8:
3b:47:2b:5a:7e:5e:ab:47:5a:b8:23:d4:2b:5f:a0:21:d2:8a:
71:8e:55:05:6e:18:3b:ee:00:e2:aa:05:4d:ef:be:49:90:ca:
02:23:9d:d0:49:d9:10:80:0a:87:a4:ed:4d:1f:6d:9e:60:cf:
c9:26:cf:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:01:14 2026 by rpki-client