Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.mft
File: cG1kE0-qdGKTwDhO2sA3GVDzsiQ.mft (raw, json)
Hash identifier: OvCarrjvjj8M8KMInc4PQxpEjEVBsx6xFHwJXJX6sQU=
Subject key identifier: BF:48:4C:7E:51:05:52:CA:7B:59:66:E7:F9:99:98:2C:DA:69:A6:8A
Authority key identifier: 70:6D:64:13:4F:AA:74:62:93:C0:38:4E:DA:C0:37:19:50:F3:B2:24
Certificate issuer: /CN=706d64134faa746293c0384edac0371950f3b224
Certificate serial: 019D22143FC3918EE4F03AC1C31AF849AC5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.mft
Manifest number: 1885
Signing time: Tue 24 Mar 2026 23:00:45 +0000
Manifest this update: Tue 24 Mar 2026 23:00:45 +0000
Manifest next update: Wed 25 Mar 2026 23:00:45 +0000
Files and hashes: 1: 1LWZZOwIVksOEqA3t1p1E5yKrbk.roa (hash: OwPK45NthsXIz7j/9BbdI2UVojWHpISnd2scPcpKEVU=)
2: BU1_bDFU6vflOkzUwIXSHb0FY3g.roa (hash: Cc5Z9uPct4eSTXCrQaUv8nKSh9r+kgrw5uVAV3eQfow=)
3: RR77_TZWFm2zN09tkZTb-aJWQ-g.roa (hash: cAzRaMhGElLRCS7w5moSCJqvr37/rS0oJQ36ENwyvTc=)
4: cG1kE0-qdGKTwDhO2sA3GVDzsiQ.crl (hash: cz+rbp91q5iP6Sz5QEbfjuG05zcRCSZStVSvs5r0J4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 25 Mar 2026 23:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:22:14:3f:c3:91:8e:e4:f0:3a:c1:c3:1a:f8:49:ac:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=706d64134faa746293c0384edac0371950f3b224
Validity
Not Before: Mar 24 23:00:45 2026 GMT
Not After : Mar 25 23:00:45 2026 GMT
Subject: CN=bf484c7e510552ca7b5966e7f999982cda69a68a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:50:aa:68:da:42:46:4d:5e:ed:8d:48:45:3a:
f0:2b:83:6e:3d:4d:b8:d2:54:70:66:44:6b:bc:9b:
84:42:6b:a2:2f:39:10:1a:ef:03:31:d4:bd:f6:02:
b1:3b:7e:0c:c1:1f:de:d8:10:fb:06:5d:19:65:7a:
8c:18:6b:88:48:4f:da:50:c6:eb:32:24:8c:af:fa:
d1:ec:e7:24:8d:7b:87:eb:66:3c:50:f0:ed:68:df:
da:8b:a4:80:f5:9a:9a:ae:58:14:88:1a:ba:08:d3:
9c:ca:b8:93:3a:29:b1:c7:e6:55:43:6a:8e:a5:a6:
48:2c:63:59:fb:61:27:6a:eb:2d:0e:85:57:40:8d:
fa:11:4f:10:27:a8:0e:90:64:cc:62:ea:89:37:fd:
ff:c2:47:27:99:9b:fb:4d:c4:95:ab:45:15:e0:f2:
c6:40:f3:2a:f4:5f:f5:1f:4f:2c:00:5c:95:89:28:
ac:55:e2:12:fd:78:56:2e:da:ca:ea:d5:d0:13:e3:
a8:a3:84:42:ee:a0:29:00:23:ff:69:5f:9c:20:5c:
00:a3:76:98:d3:b7:2b:0c:95:11:36:d3:a9:1f:fe:
ce:5e:ed:58:37:c4:84:fe:38:99:e6:3c:9d:b2:b0:
ed:2c:57:cc:73:12:f6:1b:e1:a7:e5:8d:02:f7:61:
94:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:48:4C:7E:51:05:52:CA:7B:59:66:E7:F9:99:98:2C:DA:69:A6:8A
X509v3 Authority Key Identifier:
keyid:70:6D:64:13:4F:AA:74:62:93:C0:38:4E:DA:C0:37:19:50:F3:B2:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:ff:77:c9:1a:dd:0b:fb:37:31:57:fb:cb:0f:23:9c:ce:2a:
84:4b:ff:2d:e1:93:8f:96:d0:58:2f:83:8a:06:63:61:08:92:
18:24:c7:00:41:29:2f:42:03:2e:17:5f:c3:f8:e3:8e:34:d1:
f6:95:54:8c:c8:f5:fe:52:3b:81:38:e7:71:03:66:99:01:fb:
e1:65:0b:c4:bf:bb:22:1a:7c:45:73:8f:be:83:59:d6:08:9e:
44:80:f2:3f:b4:0f:a3:ab:59:a6:69:a0:6f:d0:73:92:1f:c9:
d5:ec:62:43:e4:59:70:94:15:96:16:f5:e0:96:d0:56:6b:4d:
b0:16:5f:61:e8:32:56:49:ea:06:66:be:59:6a:3e:3f:9b:d7:
db:7e:16:e7:bb:cd:ca:d7:12:4b:71:9a:2d:f9:19:7f:33:28:
2b:5b:ef:0b:e7:b6:72:e8:85:e3:45:b4:80:f0:81:df:ba:6a:
0a:fe:8b:73:36:21:2a:09:7f:29:05:0b:e0:d7:8d:90:5f:10:
35:19:e9:80:68:bb:90:2f:1c:38:dd:8b:2a:a6:7f:d1:31:8f:
05:c2:1b:60:79:9f:11:cc:85:15:41:9f:06:fe:0e:48:67:a0:
58:2f:11:6f:64:0d:a7:11:bf:c9:48:93:d4:5a:8b:34:4a:c5:
05:cf:8c:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0iFD/DkY7k8DrBwxr4SaxbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwNmQ2NDEzNGZhYTc0NjI5M2MwMzg0ZWRhYzAzNzE5NTBm
M2IyMjQwHhcNMjYwMzI0MjMwMDQ1WhcNMjYwMzI1MjMwMDQ1WjAzMTEwLwYDVQQD
EyhiZjQ4NGM3ZTUxMDU1MmNhN2I1OTY2ZTdmOTk5OTgyY2RhNjlhNjhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4lCqaNpCRk1e7Y1IRTrwK4NuPU24
0lRwZkRrvJuEQmuiLzkQGu8DMdS99gKxO34MwR/e2BD7Bl0ZZXqMGGuISE/aUMbr
MiSMr/rR7OckjXuH62Y8UPDtaN/ai6SA9ZqarlgUiBq6CNOcyriTOimxx+ZVQ2qO
paZILGNZ+2EnaustDoVXQI36EU8QJ6gOkGTMYuqJN/3/wkcnmZv7TcSVq0UV4PLG
QPMq9F/1H08sAFyViSisVeIS/XhWLtrK6tXQE+Ooo4RC7qApACP/aV+cIFwAo3aY
07crDJURNtOpH/7OXu1YN8SE/jiZ5jydsrDtLFfMcxL2G+Gn5Y0C92GU1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL9ITH5RBVLKe1lm5/mZmCzaaaaKMB8GA1UdIwQY
MBaAFHBtZBNPqnRik8A4TtrANxlQ87IkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0cxa0UwLXFkR0tUd0RoTzJzQTNHVkR6c2lRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8zMjk4ZTMtOWE1MC00Y2ZiLTg0ZTYt
ZDEzN2FkZTE2NmQxLzEvY0cxa0UwLXFkR0tUd0RoTzJzQTNHVkR6c2lRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC8zMjk4ZTMtOWE1MC00Y2ZiLTg0ZTYtZDEzN2FkZTE2NmQx
LzEvY0cxa0UwLXFkR0tUd0RoTzJzQTNHVkR6c2lRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZv93yRrd
C/s3MVf7yw8jnM4qhEv/LeGTj5bQWC+DigZjYQiSGCTHAEEpL0IDLhdfw/jjjjTR
9pVUjMj1/lI7gTjncQNmmQH74WULxL+7Ihp8RXOPvoNZ1gieRIDyP7QPo6tZpmmg
b9Bzkh/J1exiQ+RZcJQVlhb14JbQVmtNsBZfYegyVknqBma+WWo+P5vX234W57vN
ytcSS3GaLfkZfzMoK1vvC+e2cuiF40W0gPCB37pqCv6LczYhKgl/KQUL4NeNkF8Q
NRnpgGi7kC8cON2LKqZ/0TGPBcIbYHmfEcyFFUGfBv4OSGegWC8Rb2QNpxG/yUiT
1FqLNErFBc+MQg==
-----END CERTIFICATE-----
Generated at Wed Mar 25 09:58:18 2026 by rpki-client