Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/a56723-d37c-417b-a8a1-6e22bf436304/1/G_5rmg5omKei6dhNPb9jJ7RT5mI.mft
File: G_5rmg5omKei6dhNPb9jJ7RT5mI.mft (raw, json)
Hash identifier: 665ilrkJGwIfRUeIYNEtDLEcpOqDqr3zYvO1O0TztWY=
Subject key identifier: 29:03:89:96:77:40:D2:65:87:3A:71:6A:7C:76:EC:C6:E3:AB:75:F6
Authority key identifier: 1B:FE:6B:9A:0E:68:98:A7:A2:E9:D8:4D:3D:BF:63:27:B4:53:E6:62
Certificate issuer: /CN=1bfe6b9a0e6898a7a2e9d84d3dbf6327b453e662
Certificate serial: 019D3977E0DE896635A66EFA73AC9FAA51D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G_5rmg5omKei6dhNPb9jJ7RT5mI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/a56723-d37c-417b-a8a1-6e22bf436304/1/G_5rmg5omKei6dhNPb9jJ7RT5mI.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 12:00:50 +0000
Manifest this update: Sun 29 Mar 2026 12:00:50 +0000
Manifest next update: Mon 30 Mar 2026 12:00:50 +0000
Files and hashes: 1: G_5rmg5omKei6dhNPb9jJ7RT5mI.crl (hash: ywN2OSq52BCBg05nGgPH0/mJfCX0m4jzX4Ztc0ijTfY=)
2: POtSiaRU3J6NN-3FcEzbyyc3iz4.roa (hash: xQmKcGL1aOnWYp2nu+qGyN+OtS+NUIMwhRaeCUEKn08=)
3: TKnfOm4ncEvg1o32_XggY8G_M1w.roa (hash: 0iZMIhG/WHr4eSkp/IKOXtdgHPLNekvLpZ/qpsVoNRs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/a56723-d37c-417b-a8a1-6e22bf436304/1/G_5rmg5omKei6dhNPb9jJ7RT5mI.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/a56723-d37c-417b-a8a1-6e22bf436304/1/G_5rmg5omKei6dhNPb9jJ7RT5mI.mft
rsync://rpki.ripe.net/repository/DEFAULT/G_5rmg5omKei6dhNPb9jJ7RT5mI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:e0:de:89:66:35:a6:6e:fa:73:ac:9f:aa:51:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bfe6b9a0e6898a7a2e9d84d3dbf6327b453e662
Validity
Not Before: Mar 29 12:00:50 2026 GMT
Not After : Mar 30 12:00:50 2026 GMT
Subject: CN=290389967740d265873a716a7c76ecc6e3ab75f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a5:c9:d7:01:73:49:e1:be:e7:04:3c:0f:67:
08:32:af:b4:17:68:2b:1a:7b:46:c8:57:dd:74:f3:
33:8b:fe:00:39:6c:f4:7b:ac:42:36:3a:97:14:f0:
11:e5:67:1f:46:1b:88:0b:bb:28:ed:6c:1d:f2:30:
b5:35:71:30:51:39:6e:d6:f9:a4:a5:f5:00:7b:84:
d2:9f:71:79:64:cf:d7:92:b4:a7:76:c1:9a:77:30:
1c:57:c0:dc:5c:e4:98:a1:66:ea:d3:56:1c:0a:b2:
15:1a:8b:b4:71:c7:4a:2d:65:f9:e4:e4:c6:cc:a7:
9c:5e:34:ab:ec:c9:05:77:64:d5:8f:bd:d2:e1:19:
4e:23:18:3b:70:d7:f4:9a:67:2d:ca:28:0d:73:6e:
7f:9d:ca:eb:d7:29:d0:25:e0:26:5d:18:60:be:97:
4c:b8:19:e3:c9:d8:f2:7e:e8:22:e5:df:6e:2d:90:
21:c1:ce:d8:a4:73:b8:89:59:00:82:d6:5f:a4:c8:
70:33:84:1b:2c:58:bb:4d:93:ad:52:43:77:41:fa:
5d:3f:fc:26:29:29:6a:81:dc:74:69:1a:17:c0:a1:
0d:f3:9a:0f:25:54:76:d1:a5:65:d3:e7:21:fd:47:
21:7b:03:2a:05:a7:bd:5b:4f:96:f0:6d:c2:e6:00:
1f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:03:89:96:77:40:D2:65:87:3A:71:6A:7C:76:EC:C6:E3:AB:75:F6
X509v3 Authority Key Identifier:
keyid:1B:FE:6B:9A:0E:68:98:A7:A2:E9:D8:4D:3D:BF:63:27:B4:53:E6:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G_5rmg5omKei6dhNPb9jJ7RT5mI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/a56723-d37c-417b-a8a1-6e22bf436304/1/G_5rmg5omKei6dhNPb9jJ7RT5mI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/a56723-d37c-417b-a8a1-6e22bf436304/1/G_5rmg5omKei6dhNPb9jJ7RT5mI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:72:51:d6:d5:c2:59:d8:7a:59:f3:b0:5c:9c:14:49:96:46:
2b:9e:63:23:b6:d7:cc:bd:e7:b3:a0:30:96:ba:6e:66:5c:aa:
5e:47:6c:88:56:a7:27:56:79:97:b9:b1:c2:c5:e2:38:d9:b1:
d9:64:7f:f1:86:5a:3d:4e:41:cd:33:24:7b:24:89:7a:bb:8f:
91:bc:38:d6:6a:1d:77:37:a8:02:67:1c:84:1b:ff:99:57:57:
05:dd:81:13:39:94:c6:21:24:d3:56:6d:e8:5b:76:03:61:a8:
6f:02:61:f3:83:49:e9:04:cf:7c:46:24:73:f3:6d:28:cb:55:
2f:0b:20:dd:4d:93:c6:2b:08:9b:0e:6a:36:54:72:fc:a5:2e:
76:b9:4c:08:b8:a2:3b:45:ab:80:dd:83:67:1f:40:b2:0c:fc:
aa:ce:9a:aa:b4:2b:8b:f5:0c:e4:04:70:f2:f8:65:67:b4:6a:
41:3a:56:48:32:ab:cd:0e:fd:58:c6:fd:b7:68:e8:aa:a3:5d:
6a:ee:78:5a:e5:c2:8f:55:7b:fc:08:9e:cb:5d:a1:ae:ac:c3:
c7:3a:c6:61:c9:7e:5d:d8:56:fc:0a:ec:8d:b4:95:d7:0a:eb:
91:26:db:02:1a:e1:cd:0d:a9:e4:e3:3f:96:9f:f5:dd:5c:78:
f3:20:83:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05d+DeiWY1pm76c6yfqlHRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiZmU2YjlhMGU2ODk4YTdhMmU5ZDg0ZDNkYmY2MzI3YjQ1
M2U2NjIwHhcNMjYwMzI5MTIwMDUwWhcNMjYwMzMwMTIwMDUwWjAzMTEwLwYDVQQD
EygyOTAzODk5Njc3NDBkMjY1ODczYTcxNmE3Yzc2ZWNjNmUzYWI3NWY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6XJ1wFzSeG+5wQ8D2cIMq+0F2gr
GntGyFfddPMzi/4AOWz0e6xCNjqXFPAR5WcfRhuIC7so7Wwd8jC1NXEwUTlu1vmk
pfUAe4TSn3F5ZM/XkrSndsGadzAcV8DcXOSYoWbq01YcCrIVGou0ccdKLWX55OTG
zKecXjSr7MkFd2TVj73S4RlOIxg7cNf0mmctyigNc25/ncrr1ynQJeAmXRhgvpdM
uBnjydjyfugi5d9uLZAhwc7YpHO4iVkAgtZfpMhwM4QbLFi7TZOtUkN3QfpdP/wm
KSlqgdx0aRoXwKEN85oPJVR20aVl0+ch/UchewMqBae9W0+W8G3C5gAfgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCkDiZZ3QNJlhzpxanx27Mbjq3X2MB8GA1UdIwQY
MBaAFBv+a5oOaJinounYTT2/Yye0U+ZiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR181cm1nNW9tS2VpNmRoTlBiOWpKN1JUNW1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9hNTY3MjMtZDM3Yy00MTdiLWE4YTEt
NmUyMmJmNDM2MzA0LzEvR181cm1nNW9tS2VpNmRoTlBiOWpKN1JUNW1JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9hNTY3MjMtZDM3Yy00MTdiLWE4YTEtNmUyMmJmNDM2MzA0
LzEvR181cm1nNW9tS2VpNmRoTlBiOWpKN1JUNW1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmnJR1tXC
Wdh6WfOwXJwUSZZGK55jI7bXzL3ns6AwlrpuZlyqXkdsiFanJ1Z5l7mxwsXiONmx
2WR/8YZaPU5BzTMkeySJeruPkbw41moddzeoAmcchBv/mVdXBd2BEzmUxiEk01Zt
6Ft2A2GobwJh84NJ6QTPfEYkc/NtKMtVLwsg3U2TxisImw5qNlRy/KUudrlMCLii
O0WrgN2DZx9Asgz8qs6aqrQri/UM5ARw8vhlZ7RqQTpWSDKrzQ79WMb9t2joqqNd
au54WuXCj1V7/Aiey12hrqzDxzrGYcl+XdhW/ArsjbSV1wrrkSbbAhrhzQ2p5OM/
lp/13Vx48yCDJQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 16:27:39 2026 by rpki-client