Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.mft
File: G2I9umK4V8pz2KgKEZkPceBOfbY.mft (raw, json)
Hash identifier: WdZZythrvE9y/1e5Wb3eogNRC2szCuYGqxpVkT1xgkw=
Subject key identifier: B8:67:39:DA:57:36:76:E0:46:6F:C4:5C:EC:EE:AC:60:8C:DD:92:43
Authority key identifier: 1B:62:3D:BA:62:B8:57:CA:73:D8:A8:0A:11:99:0F:71:E0:4E:7D:B6
Certificate issuer: /CN=1b623dba62b857ca73d8a80a11990f71e04e7db6
Certificate serial: 019CF34D78483BD34B221B65AD84234CA065
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G2I9umK4V8pz2KgKEZkPceBOfbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.mft
Manifest number: 0FF0
Signing time: Sun 15 Mar 2026 21:01:06 +0000
Manifest this update: Sun 15 Mar 2026 21:01:06 +0000
Manifest next update: Mon 16 Mar 2026 21:01:06 +0000
Files and hashes: 1: G2I9umK4V8pz2KgKEZkPceBOfbY.crl (hash: fs/L3pbpbh8N0n4pQXy2NG87z4VK7WTCW7PmEs3AknQ=)
2: _TZJcz_b9cq-8luNUL6eEZRU19o.roa (hash: XV8xsUjzIwVTNMvOzhZSqDe2iSUDHqLPyeEkThsb7Tw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/G2I9umK4V8pz2KgKEZkPceBOfbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Mar 2026 21:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f3:4d:78:48:3b:d3:4b:22:1b:65:ad:84:23:4c:a0:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b623dba62b857ca73d8a80a11990f71e04e7db6
Validity
Not Before: Mar 15 21:01:06 2026 GMT
Not After : Mar 16 21:01:06 2026 GMT
Subject: CN=b86739da573676e0466fc45ceceeac608cdd9243
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c4:35:4e:c3:44:6a:01:62:99:7e:de:71:77:
2c:23:99:d4:3a:63:50:5e:91:ef:d0:c8:88:00:0f:
9f:d4:dc:86:80:97:c0:83:e6:a9:27:18:b1:34:a3:
98:98:df:25:27:27:16:07:87:01:6e:41:5b:8c:65:
49:d7:20:c9:9a:c1:42:e3:46:34:5c:b2:3a:f0:f7:
13:3a:8e:8c:02:05:e1:79:1b:89:40:b5:5d:72:c7:
64:df:a8:aa:82:cb:cd:08:9a:9a:17:11:8e:fd:1c:
85:9c:03:fd:1d:52:3d:cc:4e:4c:6a:d2:f0:1b:9e:
1e:e9:89:be:3c:15:cc:ec:be:0c:7a:6b:30:95:63:
eb:fa:bb:f5:96:7e:43:d4:72:21:3d:f3:1a:2a:c7:
b2:fa:3f:7a:20:74:62:22:ab:7b:e9:ee:5c:2f:e4:
d2:f5:4f:e7:bc:b3:d4:10:bb:a0:a5:30:26:1f:29:
c4:79:2f:8e:47:69:fb:b4:8c:7a:01:f7:93:df:bb:
f5:d3:24:7b:54:8c:39:c2:81:0e:eb:03:0b:21:33:
cb:2e:d4:b8:62:72:ca:c1:cf:29:32:a8:c0:d5:03:
29:51:e3:1e:02:b1:e2:98:53:f8:25:cb:ba:bc:b6:
79:61:cb:58:85:fe:78:b9:96:7d:e2:28:02:bf:26:
7f:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:67:39:DA:57:36:76:E0:46:6F:C4:5C:EC:EE:AC:60:8C:DD:92:43
X509v3 Authority Key Identifier:
keyid:1B:62:3D:BA:62:B8:57:CA:73:D8:A8:0A:11:99:0F:71:E0:4E:7D:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2I9umK4V8pz2KgKEZkPceBOfbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:7d:ef:da:b8:63:23:60:0b:15:8d:b6:16:7e:ac:dc:b8:79:
3e:26:a9:51:da:fb:b0:82:6d:d5:c1:7d:e5:18:16:72:15:dd:
99:33:0e:1a:ef:16:29:40:50:03:5c:a8:fe:d3:3f:00:38:22:
59:eb:33:cb:99:54:f4:00:76:95:76:19:b5:22:33:e1:e8:85:
ff:1a:cf:7b:2d:02:c7:2e:08:81:8e:81:72:fc:6a:70:92:6d:
52:df:90:98:b8:89:fd:56:44:64:b2:f0:83:de:70:fb:f1:9e:
bb:7e:41:dd:5f:fc:8f:9f:56:f8:b3:2d:73:a1:8c:9a:6a:80:
bc:ae:a2:3e:71:0b:88:50:85:1e:42:1e:e8:3e:e0:39:76:a9:
af:ff:e8:30:4d:a4:92:9b:61:32:f8:97:54:df:77:ed:2f:e4:
51:00:ba:ce:bd:ac:57:3d:1a:36:ca:99:7e:6e:1c:a1:14:bd:
4e:4b:a1:5b:f3:ea:97:e0:db:5c:d1:38:9d:67:3f:ce:4e:53:
95:61:e0:34:74:49:8d:bd:ac:be:14:61:da:2f:86:fa:6d:fc:
df:58:1d:fb:cc:f1:14:38:c1:c1:9e:00:dd:5e:1b:d4:eb:54:
c3:ca:7a:83:5a:a7:84:78:6a:f4:aa:64:00:a1:7a:6a:ff:e1:
d0:b3:65:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzzTXhIO9NLIhtlrYQjTKBlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiNjIzZGJhNjJiODU3Y2E3M2Q4YTgwYTExOTkwZjcxZTA0
ZTdkYjYwHhcNMjYwMzE1MjEwMTA2WhcNMjYwMzE2MjEwMTA2WjAzMTEwLwYDVQQD
EyhiODY3MzlkYTU3MzY3NmUwNDY2ZmM0NWNlY2VlYWM2MDhjZGQ5MjQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8Q1TsNEagFimX7ecXcsI5nUOmNQ
XpHv0MiIAA+f1NyGgJfAg+apJxixNKOYmN8lJycWB4cBbkFbjGVJ1yDJmsFC40Y0
XLI68PcTOo6MAgXheRuJQLVdcsdk36iqgsvNCJqaFxGO/RyFnAP9HVI9zE5MatLw
G54e6Ym+PBXM7L4MemswlWPr+rv1ln5D1HIhPfMaKsey+j96IHRiIqt76e5cL+TS
9U/nvLPUELugpTAmHynEeS+OR2n7tIx6AfeT37v10yR7VIw5woEO6wMLITPLLtS4
YnLKwc8pMqjA1QMpUeMeArHimFP4Jcu6vLZ5YctYhf54uZZ94igCvyZ/YwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLhnOdpXNnbgRm/EXOzurGCM3ZJDMB8GA1UdIwQY
MBaAFBtiPbpiuFfKc9ioChGZD3HgTn22MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzJJOXVtSzRWOHB6MktnS0Vaa1BjZUJPZmJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8wYTBlNGQtNGU3NS00OWE1LWJkMGMt
MWE1Yzc2MzU1ODhiLzEvRzJJOXVtSzRWOHB6MktnS0Vaa1BjZUJPZmJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC8wYTBlNGQtNGU3NS00OWE1LWJkMGMtMWE1Yzc2MzU1ODhi
LzEvRzJJOXVtSzRWOHB6MktnS0Vaa1BjZUJPZmJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd33v2rhj
I2ALFY22Fn6s3Lh5PiapUdr7sIJt1cF95RgWchXdmTMOGu8WKUBQA1yo/tM/ADgi
Weszy5lU9AB2lXYZtSIz4eiF/xrPey0Cxy4IgY6BcvxqcJJtUt+QmLiJ/VZEZLLw
g95w+/Geu35B3V/8j59W+LMtc6GMmmqAvK6iPnELiFCFHkIe6D7gOXapr//oME2k
kpthMviXVN937S/kUQC6zr2sVz0aNsqZfm4coRS9TkuhW/Pql+DbXNE4nWc/zk5T
lWHgNHRJjb2svhRh2i+G+m3831gd+8zxFDjBwZ4A3V4b1OtUw8p6g1qnhHhq9Kpk
AKF6av/h0LNlbw==
-----END CERTIFICATE-----
Generated at Mon Mar 16 03:22:16 2026 by rpki-client