Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/5d6167-f02b-44db-b565-0e4382310ca5/1/G-9aoU0xQMfHxJiPGdqUMesaQPE.mft
File: G-9aoU0xQMfHxJiPGdqUMesaQPE.mft (raw, json)
Hash identifier: xOhFHPCoFLajxMa8z08G8ayTqa+riZ3V80xAEsOw09o=
Subject key identifier: BD:A9:17:F3:06:1D:D2:83:58:08:07:25:DE:AA:DE:91:1A:42:CB:17
Authority key identifier: 1B:EF:5A:A1:4D:31:40:C7:C7:C4:98:8F:19:DA:94:31:EB:1A:40:F1
Certificate issuer: /CN=1bef5aa14d3140c7c7c4988f19da9431eb1a40f1
Certificate serial: 019D37C0FC1CA65A8187F9A076070C68C4C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-9aoU0xQMfHxJiPGdqUMesaQPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/5d6167-f02b-44db-b565-0e4382310ca5/1/G-9aoU0xQMfHxJiPGdqUMesaQPE.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 04:01:27 +0000
Manifest this update: Sun 29 Mar 2026 04:01:27 +0000
Manifest next update: Mon 30 Mar 2026 04:01:27 +0000
Files and hashes: 1: BFSdsbEkPuA-YZXMwRkjbFSBL_4.roa (hash: 7mDFMoZc4IARD+ubLVsfgMsnY5+CrMhB4pwA/xSdkv8=)
2: G-9aoU0xQMfHxJiPGdqUMesaQPE.crl (hash: FvC+Wbs+9R/CBM7RfN30dDRUwZYRkqzKNo3161vh0nQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/5d6167-f02b-44db-b565-0e4382310ca5/1/G-9aoU0xQMfHxJiPGdqUMesaQPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/5d6167-f02b-44db-b565-0e4382310ca5/1/G-9aoU0xQMfHxJiPGdqUMesaQPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/G-9aoU0xQMfHxJiPGdqUMesaQPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:fc:1c:a6:5a:81:87:f9:a0:76:07:0c:68:c4:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bef5aa14d3140c7c7c4988f19da9431eb1a40f1
Validity
Not Before: Mar 29 04:01:27 2026 GMT
Not After : Mar 30 04:01:27 2026 GMT
Subject: CN=bda917f3061dd28358080725deaade911a42cb17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ea:ad:35:22:a4:20:62:ac:98:d8:35:9d:89:
d9:05:17:eb:15:61:4a:84:4f:5f:d7:ae:41:46:ad:
12:ac:e1:b0:dc:14:98:04:64:41:0f:d0:78:65:a0:
ea:1b:4d:a4:24:58:ef:cb:7a:4a:2d:46:f9:20:81:
36:e3:07:12:22:22:23:f0:23:77:c6:a4:b9:ce:49:
1e:8d:f4:0d:30:c1:91:68:48:2f:6d:78:7e:fa:43:
eb:e0:85:c0:1d:15:cb:8b:20:b6:d3:f2:67:b9:5b:
9b:8e:ae:59:87:df:98:a9:c4:0d:63:cd:f6:79:36:
86:7b:ef:d7:fd:35:de:65:cb:bf:97:fd:6c:34:f6:
27:27:de:b8:6e:ce:c1:ab:48:d4:c6:98:6d:40:4e:
14:27:44:f6:e3:7d:ee:16:7d:ed:7b:0a:9f:bf:09:
a0:a1:65:ae:44:53:86:69:bd:b9:d3:97:ff:c6:84:
0e:76:d1:40:2a:57:e5:9e:aa:af:ef:9b:2e:b1:bb:
80:9b:c9:da:b0:f1:19:fa:ff:0b:a9:27:2c:39:28:
d2:aa:69:64:ad:e0:d5:3c:5d:dc:3b:7e:92:e5:1d:
15:75:dc:c8:3e:08:9d:c0:af:74:b5:78:4f:e3:d2:
1e:47:89:84:32:53:2c:2a:00:ef:c5:c0:2e:49:fd:
6b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:A9:17:F3:06:1D:D2:83:58:08:07:25:DE:AA:DE:91:1A:42:CB:17
X509v3 Authority Key Identifier:
keyid:1B:EF:5A:A1:4D:31:40:C7:C7:C4:98:8F:19:DA:94:31:EB:1A:40:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-9aoU0xQMfHxJiPGdqUMesaQPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5d6167-f02b-44db-b565-0e4382310ca5/1/G-9aoU0xQMfHxJiPGdqUMesaQPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5d6167-f02b-44db-b565-0e4382310ca5/1/G-9aoU0xQMfHxJiPGdqUMesaQPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:7c:72:41:c5:c0:1a:be:8e:12:0b:51:e7:5d:1d:1c:95:f8:
f7:d3:bc:60:a6:fa:0a:a4:08:03:fd:75:26:21:a5:5b:39:9f:
23:69:de:a0:72:fd:a7:96:78:05:0d:37:d4:48:57:7c:4a:8b:
a3:aa:82:db:ba:8b:ee:c1:16:33:20:7c:8c:c5:db:45:d7:55:
61:de:cc:55:cf:64:36:81:8b:14:3f:6a:8d:d4:84:c8:06:4a:
ff:2c:df:15:d0:e5:8f:de:ba:70:df:09:66:3c:97:82:0c:ab:
56:4e:2f:32:d5:a0:1d:de:c0:5d:34:bb:93:9a:e9:58:50:bf:
32:1c:79:f8:a1:f1:e5:ea:bc:a2:70:e0:38:01:ba:89:d3:a6:
b2:a6:77:48:0f:01:eb:be:e9:2b:ff:a6:d0:30:8e:9f:25:99:
99:77:e9:27:16:fc:87:14:3e:9d:ac:53:78:c2:0c:94:40:69:
48:ea:00:d9:75:67:73:4a:27:55:f8:7b:7b:25:29:95:4d:c3:
b6:00:cb:03:8e:f7:b7:cc:7b:5c:55:51:f1:3c:62:68:e9:23:
de:b8:39:8a:dc:ca:48:d7:0d:1b:30:ed:bb:d4:60:cf:c0:e6:
da:30:ac:d3:74:73:5e:5c:c9:3b:9b:28:f8:ea:ba:09:11:f2:
01:22:2e:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:13:07 2026 by rpki-client