Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/1e7b02-889b-4a53-a509-8ab5eb558473/1/G-vTPUzUVGXvpQ-qgk-4EsQXOic.mft
File: G-vTPUzUVGXvpQ-qgk-4EsQXOic.mft (raw, json)
Hash identifier: QCIrAPymT75YE/4nhI2dwNYbnLaTn2mfcCYg2UwS0oU=
Subject key identifier: 11:60:80:D5:C4:3E:83:42:DE:C0:38:BB:B2:0A:1A:CD:79:FF:A6:76
Authority key identifier: 1B:EB:D3:3D:4C:D4:54:65:EF:A5:0F:AA:82:4F:B8:12:C4:17:3A:27
Certificate issuer: /CN=1bebd33d4cd45465efa50faa824fb812c4173a27
Certificate serial: 01A122E5B88DE4654D5CB788FDEE7034D10B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-vTPUzUVGXvpQ-qgk-4EsQXOic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/1e7b02-889b-4a53-a509-8ab5eb558473/1/G-vTPUzUVGXvpQ-qgk-4EsQXOic.mft
Manifest number: 1A29
Signing time: Fri 09 Oct 2026 23:00:42 +0000
Manifest this update: Fri 09 Oct 2026 23:00:42 +0000
Manifest next update: Sat 10 Oct 2026 23:00:42 +0000
Files and hashes: 1: G-vTPUzUVGXvpQ-qgk-4EsQXOic.crl (hash: us+hfV8fBbCyx6DEujydr5BR1eEy71IhXveyOEbjPeY=)
2: eIPNgPUYQZlq-n_9mt6Q4q91rPk.roa (hash: DizOEdr2TMu6P8YAoF1vtJ1S55eopXRESZDog/i+PLg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/1e7b02-889b-4a53-a509-8ab5eb558473/1/G-vTPUzUVGXvpQ-qgk-4EsQXOic.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/1e7b02-889b-4a53-a509-8ab5eb558473/1/G-vTPUzUVGXvpQ-qgk-4EsQXOic.mft
rsync://rpki.ripe.net/repository/DEFAULT/G-vTPUzUVGXvpQ-qgk-4EsQXOic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:22:e5:b8:8d:e4:65:4d:5c:b7:88:fd:ee:70:34:d1:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bebd33d4cd45465efa50faa824fb812c4173a27
Validity
Not Before: Oct 9 23:00:42 2026 GMT
Not After : Oct 10 23:00:42 2026 GMT
Subject: CN=116080d5c43e8342dec038bbb20a1acd79ffa676
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fa:d5:d0:d0:b3:6d:31:41:03:74:83:fe:75:
35:63:dd:c7:c0:28:1e:48:4d:ad:55:07:11:41:8e:
3a:cc:eb:88:a5:61:91:c8:ff:71:82:f7:e6:e0:f9:
32:c7:b7:be:2f:6d:16:2e:9a:4c:3b:73:9f:fb:6d:
5a:fd:cf:91:e0:bb:43:9a:81:0a:69:3f:bf:74:5b:
f2:2e:36:0c:45:05:40:ee:12:b7:d3:25:08:78:ad:
28:47:44:4f:5e:b3:0e:98:69:ce:36:02:f6:6b:9e:
06:33:87:1c:6e:71:44:e0:7f:08:64:c0:43:74:26:
1f:c0:c9:e6:f6:ca:55:6c:6f:bf:d9:8a:61:06:48:
a3:00:c2:b4:8b:31:77:36:b8:1a:91:63:50:3b:68:
1b:40:5a:32:c4:04:5b:f0:56:a6:51:a3:95:1c:e2:
f1:da:5d:41:6a:2c:2a:6d:75:d5:97:46:d3:61:97:
5e:ca:a0:5b:b1:36:f2:47:c0:2c:ce:84:0c:bb:18:
69:71:da:55:42:19:1c:e8:f4:2f:90:42:9e:73:0f:
f0:10:ce:2a:ca:91:b9:fc:01:ba:76:a0:9d:92:2b:
bc:0c:3a:11:21:94:c9:58:d9:4c:9f:77:2e:76:7c:
1e:09:5d:dc:2f:55:b9:55:69:8e:2e:6a:0e:3c:fe:
ec:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:60:80:D5:C4:3E:83:42:DE:C0:38:BB:B2:0A:1A:CD:79:FF:A6:76
X509v3 Authority Key Identifier:
keyid:1B:EB:D3:3D:4C:D4:54:65:EF:A5:0F:AA:82:4F:B8:12:C4:17:3A:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-vTPUzUVGXvpQ-qgk-4EsQXOic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/1e7b02-889b-4a53-a509-8ab5eb558473/1/G-vTPUzUVGXvpQ-qgk-4EsQXOic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/1e7b02-889b-4a53-a509-8ab5eb558473/1/G-vTPUzUVGXvpQ-qgk-4EsQXOic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:47:61:b2:e4:48:a4:5f:fa:c4:92:51:60:77:1a:ed:6e:8e:
5d:6d:dd:43:0c:56:a6:4d:fe:ad:ac:95:38:bd:d1:ad:d9:cf:
93:5f:6f:e3:06:d2:ba:f9:c1:e7:66:d6:a2:1a:ed:e7:71:7a:
b4:4b:4c:2a:95:83:df:1f:dc:71:1c:be:e5:d4:0d:35:3c:c6:
b8:9a:cc:79:3c:8d:55:da:7c:99:9c:f3:0c:28:2a:17:e1:68:
f3:da:26:1b:d5:1a:24:a8:19:34:02:74:18:ea:70:28:a7:4f:
db:5f:58:ec:fc:03:07:2b:2c:40:74:2d:5e:04:b2:e3:83:08:
6f:c8:9a:dc:0c:ce:fb:11:54:67:6a:52:04:28:ac:5d:23:f8:
2b:18:28:0a:8c:01:83:33:9b:26:1d:de:54:f8:92:74:c4:eb:
5c:67:e0:6d:cd:f8:57:0b:79:31:20:e7:2c:09:51:c2:51:ef:
2e:a7:f9:ff:dc:07:6f:c2:1b:52:21:83:f9:62:97:42:0b:90:
32:d3:02:c8:bd:09:0a:b5:0e:aa:9b:85:c5:7c:96:0c:db:c8:
8f:4c:a9:b6:32:3e:03:df:55:9c:11:99:8b:8e:e8:d0:4e:b3:
2d:8e:57:4b:bd:52:7e:4d:d5:0d:c7:cc:09:18:84:4c:64:9c:
d2:57:36:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEi5biN5GVNXLeI/e5wNNELMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiZWJkMzNkNGNkNDU0NjVlZmE1MGZhYTgyNGZiODEyYzQx
NzNhMjcwHhcNMjYxMDA5MjMwMDQyWhcNMjYxMDEwMjMwMDQyWjAzMTEwLwYDVQQD
EygxMTYwODBkNWM0M2U4MzQyZGVjMDM4YmJiMjBhMWFjZDc5ZmZhNjc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/rV0NCzbTFBA3SD/nU1Y93HwCge
SE2tVQcRQY46zOuIpWGRyP9xgvfm4Pkyx7e+L20WLppMO3Of+21a/c+R4LtDmoEK
aT+/dFvyLjYMRQVA7hK30yUIeK0oR0RPXrMOmGnONgL2a54GM4ccbnFE4H8IZMBD
dCYfwMnm9spVbG+/2YphBkijAMK0izF3NrgakWNQO2gbQFoyxARb8FamUaOVHOLx
2l1BaiwqbXXVl0bTYZdeyqBbsTbyR8AszoQMuxhpcdpVQhkc6PQvkEKecw/wEM4q
ypG5/AG6dqCdkiu8DDoRIZTJWNlMn3cudnweCV3cL1W5VWmOLmoOPP7sQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBFggNXEPoNC3sA4u7IKGs15/6Z2MB8GA1UdIwQY
MBaAFBvr0z1M1FRl76UPqoJPuBLEFzonMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRy12VFBVelVWR1h2cFEtcWdrLTRFc1FYT2ljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8xZTdiMDItODg5Yi00YTUzLWE1MDkt
OGFiNWViNTU4NDczLzEvRy12VFBVelVWR1h2cFEtcWdrLTRFc1FYT2ljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi8xZTdiMDItODg5Yi00YTUzLWE1MDktOGFiNWViNTU4NDcz
LzEvRy12VFBVelVWR1h2cFEtcWdrLTRFc1FYT2ljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABUdhsuRI
pF/6xJJRYHca7W6OXW3dQwxWpk3+rayVOL3RrdnPk19v4wbSuvnB52bWohrt53F6
tEtMKpWD3x/ccRy+5dQNNTzGuJrMeTyNVdp8mZzzDCgqF+Fo89omG9UaJKgZNAJ0
GOpwKKdP219Y7PwDByssQHQtXgSy44MIb8ia3AzO+xFUZ2pSBCisXSP4KxgoCowB
gzObJh3eVPiSdMTrXGfgbc34Vwt5MSDnLAlRwlHvLqf5/9wHb8IbUiGD+WKXQguQ
MtMCyL0JCrUOqpuFxXyWDNvIj0yptjI+A99VnBGZi47o0E6zLY5XS71Sfk3VDcfM
CRiETGSc0lc28A==
-----END CERTIFICATE-----
Generated at Sat Oct 10 07:56:12 2026 by rpki-client