Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/4a293b-4c41-428c-9287-bd98b3e90e43/1/G9vEEUREgGUxPvC4LhzPeubqVyA.mft
File: G9vEEUREgGUxPvC4LhzPeubqVyA.mft (raw, json)
Hash identifier: pqvYKjdH0HBJ7iH5dPgT7zCpASVCZ/iBg6EkrLKUBbA=
Subject key identifier: EC:53:36:E1:67:97:52:B5:C3:93:C0:01:FD:C7:7A:87:BB:5F:C0:25
Authority key identifier: 1B:DB:C4:11:44:44:80:65:31:3E:F0:B8:2E:1C:CF:7A:E6:EA:57:20
Certificate issuer: /CN=1bdbc41144448065313ef0b82e1ccf7ae6ea5720
Certificate serial: 019D20948553A2FE97E2D98CD9F692A8CA4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G9vEEUREgGUxPvC4LhzPeubqVyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/4a293b-4c41-428c-9287-bd98b3e90e43/1/G9vEEUREgGUxPvC4LhzPeubqVyA.mft
Manifest number: 1885
Signing time: Tue 24 Mar 2026 16:01:37 +0000
Manifest this update: Tue 24 Mar 2026 16:01:37 +0000
Manifest next update: Wed 25 Mar 2026 16:01:37 +0000
Files and hashes: 1: G9vEEUREgGUxPvC4LhzPeubqVyA.crl (hash: 0/Qo8N7wSesmhgxN/Y4ffBCCjmGD/VrkYHQfxKlM8EI=)
2: tXwPHcD7KOQpl4ubBwGZXMLcNGc.roa (hash: kHVmMcCLDSaK/L8IsfRUQoLqMYtr8aRP/Gpfi71r/IU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/4a293b-4c41-428c-9287-bd98b3e90e43/1/G9vEEUREgGUxPvC4LhzPeubqVyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/4a293b-4c41-428c-9287-bd98b3e90e43/1/G9vEEUREgGUxPvC4LhzPeubqVyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/G9vEEUREgGUxPvC4LhzPeubqVyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 25 Mar 2026 16:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:20:94:85:53:a2:fe:97:e2:d9:8c:d9:f6:92:a8:ca:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bdbc41144448065313ef0b82e1ccf7ae6ea5720
Validity
Not Before: Mar 24 16:01:37 2026 GMT
Not After : Mar 25 16:01:37 2026 GMT
Subject: CN=ec5336e1679752b5c393c001fdc77a87bb5fc025
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ba:8f:c4:33:f7:c0:69:6f:f7:26:8f:3e:51:
60:dd:6a:1f:2d:df:d4:b3:12:72:2c:c2:88:2d:66:
e5:d9:95:6a:25:ec:aa:61:ad:22:36:d2:7c:e0:92:
54:74:e9:05:20:a7:2e:13:92:b6:8f:66:9f:13:f5:
4c:1f:2a:9c:68:cd:e7:da:9d:de:c9:09:68:75:34:
37:72:b0:ee:ac:1b:19:5f:57:4f:d2:0a:53:d7:26:
03:43:a9:46:df:ed:73:66:5e:3a:25:26:d1:b8:a7:
ec:02:fd:49:d5:af:82:ff:7d:63:2d:14:a8:68:ba:
f8:1a:32:40:81:86:e6:d8:47:c3:e6:68:fb:e9:af:
0f:d9:4c:20:a1:b7:71:19:b8:e2:8c:18:2a:99:5c:
cd:6a:ec:31:c9:94:e1:88:3f:2d:e9:29:a4:4e:71:
8a:42:3e:60:bf:a7:00:94:dd:d1:a4:38:db:bc:a7:
b2:44:47:8e:4c:19:a4:d8:11:17:00:dc:11:f0:53:
6e:0a:42:aa:7b:98:5c:48:1a:1c:99:53:d8:c3:29:
11:80:b0:70:ee:f9:03:4e:1d:5b:24:da:eb:cc:ef:
1b:81:5a:04:5a:3a:76:00:1a:81:58:b0:a4:87:cc:
1d:5c:26:76:2f:28:0d:f3:fc:5a:4f:ad:0a:00:82:
4e:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:53:36:E1:67:97:52:B5:C3:93:C0:01:FD:C7:7A:87:BB:5F:C0:25
X509v3 Authority Key Identifier:
keyid:1B:DB:C4:11:44:44:80:65:31:3E:F0:B8:2E:1C:CF:7A:E6:EA:57:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G9vEEUREgGUxPvC4LhzPeubqVyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4a293b-4c41-428c-9287-bd98b3e90e43/1/G9vEEUREgGUxPvC4LhzPeubqVyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4a293b-4c41-428c-9287-bd98b3e90e43/1/G9vEEUREgGUxPvC4LhzPeubqVyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:d6:d8:9f:93:a7:7e:58:0b:c5:cb:7a:1b:f1:d5:dd:50:93:
54:63:e8:b7:b2:4a:82:bb:3a:84:11:d6:4b:5f:9a:10:0c:37:
32:20:18:5b:9e:14:f5:d7:39:06:5e:58:b2:2c:59:8a:08:06:
e7:c5:14:5b:b4:3c:19:16:67:68:91:11:56:38:7a:18:58:00:
64:a9:12:9d:8d:ac:c8:e2:40:63:17:cd:f6:d1:40:6c:34:4b:
7f:7f:bd:15:72:3a:c7:2d:6f:c8:07:4e:37:0e:32:62:20:e4:
27:93:2c:f6:de:8f:85:f1:4b:96:ac:ad:8c:98:91:ce:04:9e:
e3:a3:91:a7:88:26:64:39:38:66:d6:76:c1:d8:03:cf:d9:75:
55:b5:f6:0b:cd:38:d2:0a:7d:4d:57:72:fe:6d:f9:97:d4:62:
b0:13:c6:f8:ee:c6:91:86:a2:e1:1d:3d:1c:04:b6:55:4e:17:
2b:1e:41:8e:ed:82:c4:a9:c3:38:00:62:b5:56:fc:c1:7f:a3:
15:33:72:63:43:62:26:de:83:d8:4a:7a:fb:48:71:f9:66:7f:
f6:ad:5c:51:0f:dd:0b:f6:de:be:18:d5:fa:cf:4c:98:d6:aa:
72:12:be:c2:4e:43:1b:3a:43:03:25:32:91:7f:6e:4e:ea:a4:
43:cd:1c:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 02:31:48 2026 by rpki-client