Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/839fd8-c28c-4112-979a-7ec402ecfb5c/1/G-u7vrbpIjF2ylod8UmJhgF-jig.mft
File: G-u7vrbpIjF2ylod8UmJhgF-jig.mft (raw, json)
Hash identifier: 3xQlcMdVEX1AN6aEkmRslamQhS/NCb3q9vlqw19lVls=
Subject key identifier: DA:55:6D:67:ED:28:BB:9B:58:82:EC:D6:8B:23:D5:CE:35:38:12:CD
Authority key identifier: 1B:EB:BB:BE:B6:E9:22:31:76:CA:5A:1D:F1:49:89:86:01:7E:8E:28
Certificate issuer: /CN=1bebbbbeb6e9223176ca5a1df1498986017e8e28
Certificate serial: 019D3865651E62FE84B6022EFD6D9B230438
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-u7vrbpIjF2ylod8UmJhgF-jig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/839fd8-c28c-4112-979a-7ec402ecfb5c/1/G-u7vrbpIjF2ylod8UmJhgF-jig.mft
Manifest number: 176F
Signing time: Sun 29 Mar 2026 07:01:02 +0000
Manifest this update: Sun 29 Mar 2026 07:01:02 +0000
Manifest next update: Mon 30 Mar 2026 07:01:02 +0000
Files and hashes: 1: G-u7vrbpIjF2ylod8UmJhgF-jig.crl (hash: +WXPqHXzmAM/KM29J2A5I5AAi2WXwyrLcqvqanzLPas=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/839fd8-c28c-4112-979a-7ec402ecfb5c/1/G-u7vrbpIjF2ylod8UmJhgF-jig.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/839fd8-c28c-4112-979a-7ec402ecfb5c/1/G-u7vrbpIjF2ylod8UmJhgF-jig.mft
rsync://rpki.ripe.net/repository/DEFAULT/G-u7vrbpIjF2ylod8UmJhgF-jig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:65:1e:62:fe:84:b6:02:2e:fd:6d:9b:23:04:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bebbbbeb6e9223176ca5a1df1498986017e8e28
Validity
Not Before: Mar 29 07:01:02 2026 GMT
Not After : Mar 30 07:01:02 2026 GMT
Subject: CN=da556d67ed28bb9b5882ecd68b23d5ce353812cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:73:09:9e:cc:f6:a2:85:ed:a4:60:75:08:7e:
30:d0:9b:f7:85:15:10:10:ff:23:a3:e1:64:e4:a2:
3a:28:0e:81:20:06:1d:33:9f:04:4a:13:3d:a6:db:
14:59:89:25:1c:4d:d4:e6:8d:39:a2:cb:60:18:96:
01:aa:12:70:9e:eb:25:3c:12:d7:94:7e:04:9e:8b:
cf:33:5a:c1:a3:d3:d7:16:7e:b6:98:0d:ee:91:a9:
ad:89:d9:7a:70:ba:11:2d:dd:b5:75:d6:24:f9:aa:
20:0a:39:52:00:a2:3f:0d:f9:2e:58:29:93:ef:e3:
4e:8f:61:94:af:7a:16:fd:72:24:a7:ea:d2:6d:54:
bf:f0:f0:2b:92:54:6b:34:e8:95:df:94:8c:ff:9d:
8c:2d:c6:36:ef:e5:4e:d5:8b:fe:10:7f:66:01:ef:
aa:5d:55:a3:0f:c8:cb:ab:7c:2c:fc:ff:a0:87:a3:
e4:4f:0b:4b:90:21:e1:d5:1d:ba:df:12:21:e4:b1:
e7:ff:fd:73:27:2c:ec:18:c5:7b:e5:ec:cd:31:3c:
62:51:70:fb:16:59:65:96:91:f8:ba:0d:7a:2a:3d:
bf:bb:48:cb:93:65:1f:08:4f:f2:b3:0a:03:a7:8b:
f5:81:58:1c:54:33:5b:df:98:e3:7e:ca:6e:d3:e7:
b9:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:55:6D:67:ED:28:BB:9B:58:82:EC:D6:8B:23:D5:CE:35:38:12:CD
X509v3 Authority Key Identifier:
keyid:1B:EB:BB:BE:B6:E9:22:31:76:CA:5A:1D:F1:49:89:86:01:7E:8E:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-u7vrbpIjF2ylod8UmJhgF-jig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/839fd8-c28c-4112-979a-7ec402ecfb5c/1/G-u7vrbpIjF2ylod8UmJhgF-jig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/839fd8-c28c-4112-979a-7ec402ecfb5c/1/G-u7vrbpIjF2ylod8UmJhgF-jig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:3f:9b:5e:54:a4:dc:e4:20:23:0b:d9:39:a0:8b:4f:d3:3a:
23:6c:4c:e0:de:db:ab:7b:5f:3f:e1:8d:80:8d:21:ea:dc:68:
c8:b8:bb:1c:43:de:5f:f2:e4:6a:8a:d6:ed:4e:dd:8b:61:f1:
f9:c1:b5:f9:49:89:55:5c:76:40:6b:25:b8:81:cf:4b:2f:ba:
0d:bd:53:5c:06:7b:c4:78:25:42:6c:3f:32:34:e5:a2:0b:a9:
98:eb:4f:16:bb:62:e8:2e:11:8b:10:aa:74:69:a5:5a:64:9b:
35:10:fd:17:75:3d:e5:b2:93:e9:66:12:af:fd:4a:d3:3d:e6:
83:4f:a7:fb:0e:5b:21:22:19:ff:e0:31:27:80:23:e4:88:55:
e0:fd:ef:e6:50:11:de:16:fa:ff:c2:ef:cb:bc:4f:85:b4:28:
e0:8a:6c:2f:6f:d2:11:5b:73:a0:67:de:b3:b8:a1:ec:b1:18:
af:df:95:ed:bc:1b:58:01:f6:a2:95:e5:28:88:65:03:e2:1c:
58:de:f0:a8:72:fc:58:1f:92:cf:48:4f:aa:d0:a4:12:ee:bb:
e7:50:2b:54:f9:d1:55:4d:9a:cf:33:61:45:f5:50:32:e1:10:
9e:36:ec:72:8b:dd:3e:c9:ea:70:d5:89:cb:a6:f6:3a:f6:21:
01:70:2c:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:37:50 2026 by rpki-client