Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/8c6e96-d778-49dd-9e5e-3cf2b8002031/1/G9JpBH0C_otaKsnrjV_sB7GH7aE.mft
File: G9JpBH0C_otaKsnrjV_sB7GH7aE.mft (raw, json)
Hash identifier: Y15yJaBExV8MSrljjYHCyooGItFgPfRlYpdcUKQku/M=
Subject key identifier: 0D:E5:B6:3B:55:04:85:BD:9A:FE:67:AF:2A:9E:DD:41:8D:78:D2:55
Authority key identifier: 1B:D2:69:04:7D:02:FE:8B:5A:2A:C9:EB:8D:5F:EC:07:B1:87:ED:A1
Certificate issuer: /CN=1bd269047d02fe8b5a2ac9eb8d5fec07b187eda1
Certificate serial: 019D39413BFCB4DEB1146ADD600171F579BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G9JpBH0C_otaKsnrjV_sB7GH7aE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/8c6e96-d778-49dd-9e5e-3cf2b8002031/1/G9JpBH0C_otaKsnrjV_sB7GH7aE.mft
Manifest number: 05BF
Signing time: Sun 29 Mar 2026 11:01:09 +0000
Manifest this update: Sun 29 Mar 2026 11:01:09 +0000
Manifest next update: Mon 30 Mar 2026 11:01:09 +0000
Files and hashes: 1: G9JpBH0C_otaKsnrjV_sB7GH7aE.crl (hash: Csh9rzR7uuPZ3yGr5a9jkGeM8/f+73qJCng93Gz+m8o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/8c6e96-d778-49dd-9e5e-3cf2b8002031/1/G9JpBH0C_otaKsnrjV_sB7GH7aE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/8c6e96-d778-49dd-9e5e-3cf2b8002031/1/G9JpBH0C_otaKsnrjV_sB7GH7aE.mft
rsync://rpki.ripe.net/repository/DEFAULT/G9JpBH0C_otaKsnrjV_sB7GH7aE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:3b:fc:b4:de:b1:14:6a:dd:60:01:71:f5:79:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bd269047d02fe8b5a2ac9eb8d5fec07b187eda1
Validity
Not Before: Mar 29 11:01:09 2026 GMT
Not After : Mar 30 11:01:09 2026 GMT
Subject: CN=0de5b63b550485bd9afe67af2a9edd418d78d255
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:00:ba:fe:e0:3a:ed:2c:30:41:20:3c:5e:8c:
31:c5:c4:8a:7d:91:f1:25:a4:b8:a6:63:08:0d:f6:
42:d0:e4:51:e3:78:98:3f:78:14:e4:91:7b:20:96:
2a:14:f4:b2:f7:5d:ec:4c:7f:7c:af:83:56:b1:c6:
c8:d8:f2:53:1a:6c:5f:64:eb:10:ba:be:1c:fd:81:
9d:a1:af:b5:f6:8e:da:87:3b:1e:43:98:78:4a:4d:
71:33:85:3b:48:00:56:22:07:b6:ba:be:41:27:f9:
24:6f:d1:d6:6e:63:d9:5e:35:1c:1f:3f:fe:18:8a:
b8:51:74:03:03:5f:24:7f:61:ee:5a:d8:b8:f7:43:
36:d1:1b:8d:93:e1:40:f0:d9:83:73:df:75:f9:c4:
ed:b6:ef:3b:0e:fe:09:44:93:71:9a:88:c5:19:3e:
a4:a5:47:a7:c8:d0:6f:39:5b:63:89:4d:10:a0:7d:
47:44:36:06:4b:c8:ec:a9:4c:36:e7:7a:05:eb:07:
ba:ce:1d:be:c5:39:8f:79:4e:27:e7:0c:60:4a:c5:
f3:ea:ff:57:41:4b:aa:38:9c:f7:f2:df:b5:7c:43:
a9:09:e4:c1:ac:d2:22:72:6e:81:1e:c1:b0:b7:fc:
48:1a:d0:b3:e9:f1:43:3d:98:09:7f:bb:77:5e:35:
69:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:E5:B6:3B:55:04:85:BD:9A:FE:67:AF:2A:9E:DD:41:8D:78:D2:55
X509v3 Authority Key Identifier:
keyid:1B:D2:69:04:7D:02:FE:8B:5A:2A:C9:EB:8D:5F:EC:07:B1:87:ED:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G9JpBH0C_otaKsnrjV_sB7GH7aE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/8c6e96-d778-49dd-9e5e-3cf2b8002031/1/G9JpBH0C_otaKsnrjV_sB7GH7aE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/8c6e96-d778-49dd-9e5e-3cf2b8002031/1/G9JpBH0C_otaKsnrjV_sB7GH7aE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:2c:93:db:0e:4f:8d:0c:14:ac:f2:c1:81:06:0e:3b:dc:80:
5f:fe:5e:7d:4e:74:b2:de:29:b3:06:97:f7:de:4e:b5:33:35:
1c:96:23:dd:bc:9e:9a:06:6b:ed:73:a2:56:62:e8:56:e3:01:
bf:82:3a:1b:63:c4:03:43:9b:75:e9:cd:83:ba:b2:cb:f0:a5:
06:a9:67:c9:3a:b6:8b:bc:bf:6b:18:20:53:c5:26:30:0b:63:
6b:80:84:ca:5b:31:01:cc:1a:22:9b:c5:1e:12:34:89:9b:24:
66:6c:06:86:96:a7:01:8f:d2:70:df:ae:f7:c2:e5:50:6d:11:
11:e4:be:ed:3d:2c:55:56:a6:e7:ed:e5:d2:d7:2f:fc:b0:74:
5a:59:d4:a4:94:42:fd:d9:fe:9e:57:d7:5e:80:63:bf:d9:24:
b6:19:5c:4d:be:40:d4:42:1f:75:45:1d:18:03:b7:25:0a:b6:
ea:3a:80:18:85:54:92:b2:f2:8f:07:9e:c0:aa:c9:8a:4b:22:
b7:6c:94:a3:af:1e:39:dc:d6:8f:ec:11:fb:cd:23:0a:4c:69:
53:b9:6c:67:35:05:b4:06:23:e4:b3:4c:e9:86:6a:bc:5b:f4:
bf:2c:91:60:4d:b6:05:b6:44:31:2d:b7:9c:4e:9c:c4:bf:d5:
8b:88:20:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05QTv8tN6xFGrdYAFx9Xm+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiZDI2OTA0N2QwMmZlOGI1YTJhYzllYjhkNWZlYzA3YjE4
N2VkYTEwHhcNMjYwMzI5MTEwMTA5WhcNMjYwMzMwMTEwMTA5WjAzMTEwLwYDVQQD
EygwZGU1YjYzYjU1MDQ4NWJkOWFmZTY3YWYyYTllZGQ0MThkNzhkMjU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAC6/uA67SwwQSA8XowxxcSKfZHx
JaS4pmMIDfZC0ORR43iYP3gU5JF7IJYqFPSy913sTH98r4NWscbI2PJTGmxfZOsQ
ur4c/YGdoa+19o7ahzseQ5h4Sk1xM4U7SABWIge2ur5BJ/kkb9HWbmPZXjUcHz/+
GIq4UXQDA18kf2HuWti490M20RuNk+FA8NmDc991+cTttu87Dv4JRJNxmojFGT6k
pUenyNBvOVtjiU0QoH1HRDYGS8jsqUw253oF6we6zh2+xTmPeU4n5wxgSsXz6v9X
QUuqOJz38t+1fEOpCeTBrNIicm6BHsGwt/xIGtCz6fFDPZgJf7t3XjVpDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA3ltjtVBIW9mv5nryqe3UGNeNJVMB8GA1UdIwQY
MBaAFBvSaQR9Av6LWirJ641f7Aexh+2hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzlKcEJIMENfb3RhS3NucmpWX3NCN0dIN2FFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi84YzZlOTYtZDc3OC00OWRkLTllNWUt
M2NmMmI4MDAyMDMxLzEvRzlKcEJIMENfb3RhS3NucmpWX3NCN0dIN2FFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi84YzZlOTYtZDc3OC00OWRkLTllNWUtM2NmMmI4MDAyMDMx
LzEvRzlKcEJIMENfb3RhS3NucmpWX3NCN0dIN2FFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWiyT2w5P
jQwUrPLBgQYOO9yAX/5efU50st4pswaX995OtTM1HJYj3byemgZr7XOiVmLoVuMB
v4I6G2PEA0ObdenNg7qyy/ClBqlnyTq2i7y/axggU8UmMAtja4CEylsxAcwaIpvF
HhI0iZskZmwGhpanAY/ScN+u98LlUG0REeS+7T0sVVam5+3l0tcv/LB0WlnUpJRC
/dn+nlfXXoBjv9kkthlcTb5A1EIfdUUdGAO3JQq26jqAGIVUkrLyjweewKrJiksi
t2yUo68eOdzWj+wR+80jCkxpU7lsZzUFtAYj5LNM6YZqvFv0vyyRYE22BbZEMS23
nE6cxL/Vi4ggMw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:39:03 2026 by rpki-client