Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/148eca-c39f-4673-886f-ecf82302f726/1/G95wrxU0lDVJRmSKzWQRY-KvGx0.mft
File: G95wrxU0lDVJRmSKzWQRY-KvGx0.mft (raw, json)
Hash identifier: awBuamEkaCrAxSh50Qjzfequ8R/F2KRWfQDT9A2F47Y=
Subject key identifier: D3:CC:B0:A0:91:00:3C:69:C7:D6:FB:53:AB:E6:E3:AF:37:85:4D:10
Authority key identifier: 1B:DE:70:AF:15:34:94:35:49:46:64:8A:CD:64:11:63:E2:AF:1B:1D
Certificate issuer: /CN=1bde70af153494354946648acd641163e2af1b1d
Certificate serial: 019CBA02AC7E44100C67E0B72AEE8B056CED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G95wrxU0lDVJRmSKzWQRY-KvGx0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/148eca-c39f-4673-886f-ecf82302f726/1/G95wrxU0lDVJRmSKzWQRY-KvGx0.mft
Manifest number: 0D59
Signing time: Wed 04 Mar 2026 18:01:03 +0000
Manifest this update: Wed 04 Mar 2026 18:01:03 +0000
Manifest next update: Thu 05 Mar 2026 18:01:03 +0000
Files and hashes: 1: 1-G_9qaTlg9_9ZXzg69NS2bmEGWE.roa (hash: +lDVdHNQmmTIYvQZgxKxtZPdzwOYciN1IB8yFnfGP4A=)
2: G95wrxU0lDVJRmSKzWQRY-KvGx0.crl (hash: AC1oKg9SK6uUq8yZoewUM2ocJZF3PVhTUgja75YbpuI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/148eca-c39f-4673-886f-ecf82302f726/1/G95wrxU0lDVJRmSKzWQRY-KvGx0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/148eca-c39f-4673-886f-ecf82302f726/1/G95wrxU0lDVJRmSKzWQRY-KvGx0.mft
rsync://rpki.ripe.net/repository/DEFAULT/G95wrxU0lDVJRmSKzWQRY-KvGx0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Mar 2026 14:20:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ba:02:ac:7e:44:10:0c:67:e0:b7:2a:ee:8b:05:6c:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bde70af153494354946648acd641163e2af1b1d
Validity
Not Before: Mar 4 18:01:03 2026 GMT
Not After : Mar 5 18:01:03 2026 GMT
Subject: CN=d3ccb0a091003c69c7d6fb53abe6e3af37854d10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:8e:28:af:af:aa:41:72:7e:53:3c:ea:9e:28:
c5:00:9d:1e:8b:40:07:59:09:ad:8d:b5:ea:74:98:
a0:96:1c:f6:f7:21:bd:52:1e:61:cd:96:05:dd:b4:
bb:46:f4:0c:c5:50:9d:c0:fa:d6:ce:17:d9:7a:ba:
23:e2:1f:23:e8:26:a2:83:ac:e8:57:bd:4e:5b:fa:
bf:49:1e:97:4d:b3:1e:20:dd:ed:29:06:77:e0:d6:
3f:ab:cd:21:79:8f:95:c3:89:55:33:15:76:e3:b9:
69:1c:c4:98:ad:4c:4a:6e:0c:82:7d:25:24:fb:e8:
00:7f:a3:2c:49:ca:96:c3:44:ce:82:5d:d4:fa:5f:
37:24:5a:c3:19:55:9f:36:d2:a2:93:ff:0b:a4:00:
7c:2b:44:1e:b6:99:34:4b:6a:62:a1:8d:d0:93:af:
7e:82:41:bf:fc:c5:05:87:16:e7:9a:ce:17:f2:b4:
9e:16:74:67:55:9d:cc:5d:1a:1f:19:f1:93:1b:c5:
56:bf:4a:d1:55:22:1c:3b:55:65:31:03:f4:93:36:
98:b3:e2:ee:94:1b:7e:ef:9a:b2:34:5f:c0:69:4c:
65:71:8f:c1:fa:92:d4:51:b3:89:d1:94:19:33:2d:
e7:a8:5c:cf:59:fb:a7:68:ba:f4:1e:3c:30:ae:ae:
41:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:CC:B0:A0:91:00:3C:69:C7:D6:FB:53:AB:E6:E3:AF:37:85:4D:10
X509v3 Authority Key Identifier:
keyid:1B:DE:70:AF:15:34:94:35:49:46:64:8A:CD:64:11:63:E2:AF:1B:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G95wrxU0lDVJRmSKzWQRY-KvGx0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/148eca-c39f-4673-886f-ecf82302f726/1/G95wrxU0lDVJRmSKzWQRY-KvGx0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/148eca-c39f-4673-886f-ecf82302f726/1/G95wrxU0lDVJRmSKzWQRY-KvGx0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:5f:0f:1e:1f:d6:88:44:37:28:cd:1d:57:4e:f8:2f:99:54:
63:3e:4b:de:d5:80:ab:92:f1:40:d7:9a:d2:3d:0a:a1:23:49:
e6:0c:7b:67:a2:d5:5d:81:60:01:c7:3a:20:d7:bf:c6:f0:4a:
43:b4:e4:6a:42:b6:3f:ce:c6:45:0c:74:5e:57:3f:a3:9b:5a:
4c:40:d4:60:50:82:6e:9b:b7:c9:45:26:c0:f1:61:92:1a:32:
29:05:39:f3:7a:9c:a6:1c:fc:4a:a7:74:e2:d0:a9:76:17:9e:
1d:94:ef:70:6b:fa:1f:6c:91:d3:f9:0f:6e:92:a9:b6:b4:4e:
00:75:83:70:5b:a8:2b:0d:4c:7a:62:7e:ee:48:04:eb:95:54:
99:31:e1:33:45:cc:24:91:a0:d4:12:56:b9:89:29:61:b1:8e:
45:af:8a:81:1f:e2:42:23:43:29:d0:f6:82:78:b4:18:4b:47:
6f:b1:86:3e:8a:cb:06:0b:6c:88:7e:06:88:ba:c9:7f:68:49:
3c:7f:48:ef:5f:86:5c:58:19:36:49:ec:40:fd:a9:43:a0:b3:
31:f6:b6:02:05:29:0f:21:93:36:8d:72:c3:07:c2:c3:e0:71:
35:a9:7e:f7:20:2e:a4:2f:1e:71:ab:7e:49:ba:11:42:93:b3:
b2:d1:c8:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 20:58:32 2026 by rpki-client