Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.mft
File: G87kBAWu-22hejQO7xWc6cTRgyI.mft (raw, json)
Hash identifier: vMsi5u6MhKpnXe++m8TGgpd/0Ic27bLVNLA4j4S/B0c=
Subject key identifier: 88:72:35:BC:6F:9E:33:00:5B:0F:9D:97:76:46:47:8F:EC:BC:23:34
Authority key identifier: 1B:CE:E4:04:05:AE:FB:6D:A1:7A:34:0E:EF:15:9C:E9:C4:D1:83:22
Certificate issuer: /CN=1bcee40405aefb6da17a340eef159ce9c4d18322
Certificate serial: 019D3940DD9560E83CEABDB3B0A4FFBF3F45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G87kBAWu-22hejQO7xWc6cTRgyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.mft
Manifest number: 15A8
Signing time: Sun 29 Mar 2026 11:00:45 +0000
Manifest this update: Sun 29 Mar 2026 11:00:45 +0000
Manifest next update: Mon 30 Mar 2026 11:00:45 +0000
Files and hashes: 1: 1-6iaGXxnmZAQPnrgq_8F_icO1g4.roa (hash: 0E9/yZaAdb1/Mv9Vi0wA6mVdKYXwLD+kDlf9BylOAkE=)
2: G87kBAWu-22hejQO7xWc6cTRgyI.crl (hash: yOK5937bRFAJs5GP9eQTAwCylD4hetNa4UttYhoCUDo=)
3: cDH3zRFxxa5MCdHGhfO_X-DrZiY.roa (hash: XO1nhE/daEhAYwuXZgOrEgjLVoR1QTpbhv4y3qZNEo0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/G87kBAWu-22hejQO7xWc6cTRgyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:dd:95:60:e8:3c:ea:bd:b3:b0:a4:ff:bf:3f:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bcee40405aefb6da17a340eef159ce9c4d18322
Validity
Not Before: Mar 29 11:00:45 2026 GMT
Not After : Mar 30 11:00:45 2026 GMT
Subject: CN=887235bc6f9e33005b0f9d977646478fecbc2334
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b5:c9:1f:e0:9b:05:0c:82:ed:53:5d:3c:da:
d3:0b:8b:ea:48:21:32:65:60:19:b8:d9:58:d9:1d:
0c:4f:9e:7c:18:b2:6d:d1:e9:8a:c0:83:90:4a:f6:
ed:52:e2:45:0d:68:5a:0a:07:54:f0:cc:c1:e3:3c:
8e:88:5c:e2:3d:c6:89:d7:55:20:40:37:d7:6b:c6:
b6:8c:20:e5:9b:4c:bd:04:45:9d:a3:94:5f:3d:bd:
ea:b0:91:e2:61:84:af:44:b4:e0:a6:3a:c3:5c:24:
07:c5:ce:49:43:7b:08:5c:df:94:57:e4:b9:ed:11:
7d:15:73:f3:8c:89:07:1f:33:da:d5:84:69:01:d3:
02:fd:51:57:af:a7:a5:0b:4c:6f:cc:6c:97:6e:8c:
39:02:26:e6:99:0c:bd:e5:7b:d3:14:b8:27:a3:ed:
85:f7:37:56:1d:88:3b:1e:ad:6f:f5:0c:dc:0a:f6:
7f:8e:c3:72:68:08:23:21:be:00:ed:c4:69:68:f5:
e2:18:1a:60:11:17:83:f7:3e:39:df:e1:4a:01:87:
e2:19:92:e8:e1:88:e2:fc:92:d7:cd:62:99:35:ab:
05:e2:dc:1a:69:ac:06:e5:5d:cc:4b:b5:f7:5f:19:
38:40:cd:74:98:57:dc:cd:00:e5:90:39:6b:62:2d:
80:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:72:35:BC:6F:9E:33:00:5B:0F:9D:97:76:46:47:8F:EC:BC:23:34
X509v3 Authority Key Identifier:
keyid:1B:CE:E4:04:05:AE:FB:6D:A1:7A:34:0E:EF:15:9C:E9:C4:D1:83:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G87kBAWu-22hejQO7xWc6cTRgyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:d6:d7:b3:4d:44:89:6b:ae:15:7d:b8:6e:71:4c:f9:36:3c:
d1:5a:e9:92:7b:a5:95:72:c2:7d:95:1b:a2:36:a0:c6:0d:02:
71:23:c6:9f:21:82:54:18:52:2d:91:ab:a8:a9:0d:0a:64:c7:
fc:8b:4b:fb:63:bf:0d:49:5c:e6:c0:04:b3:d3:85:c4:bf:fc:
d9:2d:84:d8:07:4c:ef:7e:e2:84:9f:45:58:4b:30:41:8f:3a:
99:8a:3d:4d:29:9e:8f:bc:67:96:3c:55:5e:e7:7e:05:53:cc:
a1:3c:61:5c:3f:20:2f:cd:09:ed:40:be:aa:58:f6:85:19:6b:
b2:3a:58:d1:15:20:a1:82:78:9a:d0:81:ee:12:21:8d:e5:2f:
d9:7c:9d:7e:91:cd:9d:4c:78:c0:7f:97:90:95:0e:ae:70:46:
b2:65:02:53:01:78:42:50:20:5d:c5:0a:43:12:93:73:93:4b:
ce:7c:d4:03:07:03:95:47:56:62:c7:93:59:29:f1:ba:b7:91:
8d:3a:bd:95:8c:4d:9c:3f:a7:3d:a6:4a:f2:d0:01:9b:66:c6:
58:85:19:8c:45:06:97:ff:43:a2:42:37:3f:f9:53:24:b9:4d:
22:d9:38:fd:c2:32:67:40:e8:eb:8d:b0:0c:95:01:a0:0f:18:
10:c5:12:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05QN2VYOg86r2zsKT/vz9FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiY2VlNDA0MDVhZWZiNmRhMTdhMzQwZWVmMTU5Y2U5YzRk
MTgzMjIwHhcNMjYwMzI5MTEwMDQ1WhcNMjYwMzMwMTEwMDQ1WjAzMTEwLwYDVQQD
Eyg4ODcyMzViYzZmOWUzMzAwNWIwZjlkOTc3NjQ2NDc4ZmVjYmMyMzM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0LXJH+CbBQyC7VNdPNrTC4vqSCEy
ZWAZuNlY2R0MT558GLJt0emKwIOQSvbtUuJFDWhaCgdU8MzB4zyOiFziPcaJ11Ug
QDfXa8a2jCDlm0y9BEWdo5RfPb3qsJHiYYSvRLTgpjrDXCQHxc5JQ3sIXN+UV+S5
7RF9FXPzjIkHHzPa1YRpAdMC/VFXr6elC0xvzGyXbow5AibmmQy95XvTFLgno+2F
9zdWHYg7Hq1v9QzcCvZ/jsNyaAgjIb4A7cRpaPXiGBpgEReD9z453+FKAYfiGZLo
4Yji/JLXzWKZNasF4twaaawG5V3MS7X3Xxk4QM10mFfczQDlkDlrYi2AjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIhyNbxvnjMAWw+dl3ZGR4/svCM0MB8GA1UdIwQY
MBaAFBvO5AQFrvttoXo0Du8VnOnE0YMiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzg3a0JBV3UtMjJoZWpRTzd4V2M2Y1RSZ3lJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9hZjg5ZDgtOGMzNS00YzhjLWIxNWQt
N2U0NmFkNzQ4NDg0LzEvRzg3a0JBV3UtMjJoZWpRTzd4V2M2Y1RSZ3lJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9hZjg5ZDgtOGMzNS00YzhjLWIxNWQtN2U0NmFkNzQ4NDg0
LzEvRzg3a0JBV3UtMjJoZWpRTzd4V2M2Y1RSZ3lJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADNbXs01E
iWuuFX24bnFM+TY80VrpknullXLCfZUbojagxg0CcSPGnyGCVBhSLZGrqKkNCmTH
/ItL+2O/DUlc5sAEs9OFxL/82S2E2AdM737ihJ9FWEswQY86mYo9TSmej7xnljxV
Xud+BVPMoTxhXD8gL80J7UC+qlj2hRlrsjpY0RUgoYJ4mtCB7hIhjeUv2XydfpHN
nUx4wH+XkJUOrnBGsmUCUwF4QlAgXcUKQxKTc5NLznzUAwcDlUdWYseTWSnxureR
jTq9lYxNnD+nPaZK8tABm2bGWIUZjEUGl/9DokI3P/lTJLlNItk4/cIyZ0Do642w
DJUBoA8YEMUSMQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 15:47:57 2026 by rpki-client