Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/7f7361-b1e6-4019-ad63-2005994df471/1/G_ksKZT_tTV_jcRieb3Zm-OlbL0.mft
File: G_ksKZT_tTV_jcRieb3Zm-OlbL0.mft (raw, json)
Hash identifier: Jtox4fQWHq6hbAqfo9ogiN4WnINoBOx9bWce6AAwU9c=
Subject key identifier: 4F:3C:56:E5:9A:BB:F4:DD:F6:0C:DC:9F:3D:34:0B:AE:90:DA:BC:D5
Authority key identifier: 1B:F9:2C:29:94:FF:B5:35:7F:8D:C4:62:79:BD:D9:9B:E3:A5:6C:BD
Certificate issuer: /CN=1bf92c2994ffb5357f8dc46279bdd99be3a56cbd
Certificate serial: 019D38656B18C3F583ADAC617A35662CD2F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G_ksKZT_tTV_jcRieb3Zm-OlbL0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/7f7361-b1e6-4019-ad63-2005994df471/1/G_ksKZT_tTV_jcRieb3Zm-OlbL0.mft
Manifest number: 1027
Signing time: Sun 29 Mar 2026 07:01:03 +0000
Manifest this update: Sun 29 Mar 2026 07:01:03 +0000
Manifest next update: Mon 30 Mar 2026 07:01:03 +0000
Files and hashes: 1: G_ksKZT_tTV_jcRieb3Zm-OlbL0.crl (hash: EEOj7bHWqQxbIf8XswIB9Wb7k8Y4xPj1eJ0ptl1vR7w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/7f7361-b1e6-4019-ad63-2005994df471/1/G_ksKZT_tTV_jcRieb3Zm-OlbL0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/7f7361-b1e6-4019-ad63-2005994df471/1/G_ksKZT_tTV_jcRieb3Zm-OlbL0.mft
rsync://rpki.ripe.net/repository/DEFAULT/G_ksKZT_tTV_jcRieb3Zm-OlbL0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:6b:18:c3:f5:83:ad:ac:61:7a:35:66:2c:d2:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bf92c2994ffb5357f8dc46279bdd99be3a56cbd
Validity
Not Before: Mar 29 07:01:03 2026 GMT
Not After : Mar 30 07:01:03 2026 GMT
Subject: CN=4f3c56e59abbf4ddf60cdc9f3d340bae90dabcd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5e:a2:c5:d1:8f:86:3a:d5:30:b6:93:57:c1:
0f:d8:db:0d:01:25:13:bd:8a:9c:4e:b1:36:b3:e8:
7f:7b:fe:aa:5e:ac:dc:35:19:2a:0a:9e:63:3e:b3:
6b:b7:06:dd:5d:08:a4:17:0d:86:4f:e0:0a:bb:83:
27:d0:ad:3a:22:02:09:7f:94:8d:e5:2a:04:9f:d7:
16:07:7d:28:a1:c9:2c:86:31:18:6d:1a:84:ad:12:
ae:77:81:0d:b1:26:f8:cc:e3:7f:32:a2:ea:67:d9:
1f:c4:4d:89:78:9f:88:75:45:df:be:46:2d:fe:20:
6f:94:b1:e5:c2:6b:d3:df:c2:ed:71:e6:e3:cf:fa:
dc:a1:fc:80:9a:73:a2:3e:e0:db:fe:55:c3:f2:f4:
ab:1c:22:09:69:50:55:5b:80:b8:8a:3e:82:f6:14:
e5:1e:a5:fc:f5:96:29:c4:3c:3d:94:f4:d2:56:41:
9b:83:45:f1:13:ef:17:43:5c:a6:f2:80:25:90:44:
09:a5:91:a1:d5:4d:42:57:a2:d1:d7:5b:cb:4e:19:
1e:e3:30:9c:89:2f:fe:7b:15:5d:65:09:49:86:96:
6f:b0:ed:40:b8:ad:bd:9c:71:30:ce:42:a6:39:d0:
22:cc:3c:dd:d7:54:b9:bf:7f:be:e0:e5:ac:14:7a:
c1:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:3C:56:E5:9A:BB:F4:DD:F6:0C:DC:9F:3D:34:0B:AE:90:DA:BC:D5
X509v3 Authority Key Identifier:
keyid:1B:F9:2C:29:94:FF:B5:35:7F:8D:C4:62:79:BD:D9:9B:E3:A5:6C:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G_ksKZT_tTV_jcRieb3Zm-OlbL0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/7f7361-b1e6-4019-ad63-2005994df471/1/G_ksKZT_tTV_jcRieb3Zm-OlbL0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/7f7361-b1e6-4019-ad63-2005994df471/1/G_ksKZT_tTV_jcRieb3Zm-OlbL0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:12:23:f6:a1:32:db:a3:b5:25:3c:6a:de:1e:20:ed:eb:6c:
ce:1d:3b:76:36:85:c8:b2:c4:01:83:b6:b1:b2:38:31:29:55:
7d:18:df:4a:57:8e:cf:0f:e9:df:80:d0:07:4a:41:8b:e6:25:
5f:ec:0a:1c:12:68:df:32:0b:e3:4a:d5:44:86:51:e3:8a:11:
e7:1a:10:86:2d:44:db:44:26:57:e4:63:46:77:b8:b1:12:4a:
ff:68:35:b1:24:4c:c7:07:4d:ae:ff:f0:5f:fd:ce:33:3a:15:
fd:16:39:0e:90:41:c2:24:84:00:bb:81:d0:e6:f4:ce:d3:49:
c7:24:03:ee:a9:98:75:9f:0d:63:56:b5:e4:fd:8c:85:fb:f8:
27:28:aa:07:7b:d9:81:cc:4c:1d:68:e6:b8:42:48:cd:cc:06:
3d:c2:ab:ed:76:32:1c:54:2d:d8:48:74:8b:84:47:37:7a:98:
c0:dc:fe:06:b5:c9:e5:c9:ae:53:35:e6:ec:c9:92:dd:3b:59:
97:89:69:6f:56:6c:f5:38:f2:6a:1a:30:c1:b3:fa:65:97:43:
a1:c1:7f:21:56:b6:da:96:5d:48:77:92:fc:6c:1c:e3:6a:a6:
b8:76:9e:78:50:64:cd:cf:db:a1:87:cf:51:f7:07:bb:5c:40:
dc:ee:03:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:13:26 2026 by rpki-client