Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/c77160-4a85-478d-a540-55ac2026653b/1/G6IBGTlu61biTNCpsu4l-i2kteY.mft
File: G6IBGTlu61biTNCpsu4l-i2kteY.mft (raw, json)
Hash identifier: StWBhD1XJNxoXxq5jZPodw0Qpzh3g/SKnxiiBQkV+8k=
Subject key identifier: 11:60:02:73:74:A7:0C:A8:88:F5:3C:63:DC:D1:23:3C:9C:81:B7:BA
Authority key identifier: 1B:A2:01:19:39:6E:EB:56:E2:4C:D0:A9:B2:EE:25:FA:2D:A4:B5:E6
Certificate issuer: /CN=1ba20119396eeb56e24cd0a9b2ee25fa2da4b5e6
Certificate serial: 019D3865FBB1B64D8158F25702A5C69B53B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G6IBGTlu61biTNCpsu4l-i2kteY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/c77160-4a85-478d-a540-55ac2026653b/1/G6IBGTlu61biTNCpsu4l-i2kteY.mft
Manifest number: 0BF6
Signing time: Sun 29 Mar 2026 07:01:40 +0000
Manifest this update: Sun 29 Mar 2026 07:01:40 +0000
Manifest next update: Mon 30 Mar 2026 07:01:40 +0000
Files and hashes: 1: G6IBGTlu61biTNCpsu4l-i2kteY.crl (hash: 6m1vyQIKuQbAOIaP9rUeyDKlnFjJPm/9/cH1sanKM6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/c77160-4a85-478d-a540-55ac2026653b/1/G6IBGTlu61biTNCpsu4l-i2kteY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/c77160-4a85-478d-a540-55ac2026653b/1/G6IBGTlu61biTNCpsu4l-i2kteY.mft
rsync://rpki.ripe.net/repository/DEFAULT/G6IBGTlu61biTNCpsu4l-i2kteY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:fb:b1:b6:4d:81:58:f2:57:02:a5:c6:9b:53:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ba20119396eeb56e24cd0a9b2ee25fa2da4b5e6
Validity
Not Before: Mar 29 07:01:40 2026 GMT
Not After : Mar 30 07:01:40 2026 GMT
Subject: CN=1160027374a70ca888f53c63dcd1233c9c81b7ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:7b:3a:b5:cc:bf:41:1c:12:9b:44:b5:3c:e8:
58:95:72:ad:9c:ad:96:16:2a:4e:2a:6b:f6:50:5b:
da:bc:8e:07:20:e2:aa:41:5c:e3:9a:3c:8e:ba:d0:
3b:f6:ee:13:1a:86:1a:8b:b2:23:75:63:fb:19:a0:
f8:fd:29:ac:7e:c2:ff:22:a0:2f:47:56:58:07:e1:
35:bd:b1:fc:b5:26:4b:0d:ba:d8:7f:9f:e9:7f:9d:
a4:ee:f0:2e:89:d0:84:a3:85:96:1c:ac:4d:51:9b:
20:f9:21:4d:f9:a6:8c:fb:9b:8c:05:ae:1c:a8:0a:
09:40:a4:c3:21:33:9c:76:e3:89:af:38:ba:62:51:
df:af:ec:0b:6f:1e:db:11:20:8d:38:53:76:c5:6a:
20:9f:ab:4f:af:b5:e9:23:c5:8b:47:33:c8:5e:90:
06:5b:cf:84:81:fb:41:46:18:44:f7:47:ee:7e:7d:
38:6f:50:6c:91:1d:9c:44:db:e7:9f:7b:7a:7a:5b:
59:1e:96:70:36:1c:2a:ee:d5:68:f2:c5:e4:e4:61:
cb:58:13:fd:e8:61:8d:44:6d:0c:27:2c:2e:4a:5b:
8d:31:b9:f5:07:74:88:53:47:1a:ce:0b:4e:fc:0c:
d8:90:af:fc:31:00:69:e3:3c:6d:38:01:e8:75:bb:
fd:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:60:02:73:74:A7:0C:A8:88:F5:3C:63:DC:D1:23:3C:9C:81:B7:BA
X509v3 Authority Key Identifier:
keyid:1B:A2:01:19:39:6E:EB:56:E2:4C:D0:A9:B2:EE:25:FA:2D:A4:B5:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G6IBGTlu61biTNCpsu4l-i2kteY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c77160-4a85-478d-a540-55ac2026653b/1/G6IBGTlu61biTNCpsu4l-i2kteY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c77160-4a85-478d-a540-55ac2026653b/1/G6IBGTlu61biTNCpsu4l-i2kteY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:a1:d5:3a:fa:c6:fa:88:da:3f:73:4a:d0:17:d3:8e:c6:c6:
e1:8d:47:79:0e:45:5e:98:8b:5f:af:65:d0:d5:82:1f:e1:f8:
e5:33:9b:28:83:16:2e:c0:54:ff:cc:cf:b7:1f:2c:4d:14:ce:
ad:f6:50:e5:b6:f4:6a:3f:7d:15:c3:7c:7e:bc:89:aa:df:47:
38:ac:00:04:e4:ba:7e:25:d2:09:32:02:e4:e1:ed:0b:ca:44:
c3:30:fc:b8:2c:78:ad:77:25:d7:3d:de:c6:e2:62:fa:d0:3d:
6d:fc:52:c7:1e:b6:d0:48:d4:c2:92:ad:56:e2:60:95:f9:2b:
ff:06:c7:1d:3b:47:54:79:05:91:2f:12:e7:6f:47:11:f5:c1:
2d:2d:91:f0:a9:6a:85:19:55:2d:fb:72:d2:c7:7c:49:5a:37:
52:67:94:1c:56:d8:19:6b:67:e4:30:ac:b5:cd:02:8b:00:b0:
47:3e:62:a9:a5:27:e0:22:a0:d5:a9:c1:1b:fd:a7:c1:6b:33:
6c:b2:4d:eb:3b:9e:07:ef:cd:12:da:dd:a1:6f:b2:08:b6:9a:
52:46:31:5a:91:c9:25:8e:58:80:0a:5d:6a:c2:f5:72:44:3b:
ac:8b:c7:99:0e:53:af:b5:19:25:a2:6e:23:a1:83:7d:bb:43:
d5:e3:05:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04Zfuxtk2BWPJXAqXGm1O5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiYTIwMTE5Mzk2ZWViNTZlMjRjZDBhOWIyZWUyNWZhMmRh
NGI1ZTYwHhcNMjYwMzI5MDcwMTQwWhcNMjYwMzMwMDcwMTQwWjAzMTEwLwYDVQQD
EygxMTYwMDI3Mzc0YTcwY2E4ODhmNTNjNjNkY2QxMjMzYzljODFiN2JhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAins6tcy/QRwSm0S1POhYlXKtnK2W
FipOKmv2UFvavI4HIOKqQVzjmjyOutA79u4TGoYai7IjdWP7GaD4/SmsfsL/IqAv
R1ZYB+E1vbH8tSZLDbrYf5/pf52k7vAuidCEo4WWHKxNUZsg+SFN+aaM+5uMBa4c
qAoJQKTDITOcduOJrzi6YlHfr+wLbx7bESCNOFN2xWogn6tPr7XpI8WLRzPIXpAG
W8+EgftBRhhE90fufn04b1BskR2cRNvnn3t6eltZHpZwNhwq7tVo8sXk5GHLWBP9
6GGNRG0MJywuSluNMbn1B3SIU0cazgtO/AzYkK/8MQBp4zxtOAHodbv9LQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBFgAnN0pwyoiPU8Y9zRIzycgbe6MB8GA1UdIwQY
MBaAFBuiARk5butW4kzQqbLuJfotpLXmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzZJQkdUbHU2MWJpVE5DcHN1NGwtaTJrdGVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9jNzcxNjAtNGE4NS00NzhkLWE1NDAt
NTVhYzIwMjY2NTNiLzEvRzZJQkdUbHU2MWJpVE5DcHN1NGwtaTJrdGVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS9jNzcxNjAtNGE4NS00NzhkLWE1NDAtNTVhYzIwMjY2NTNi
LzEvRzZJQkdUbHU2MWJpVE5DcHN1NGwtaTJrdGVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoKHVOvrG
+ojaP3NK0BfTjsbG4Y1HeQ5FXpiLX69l0NWCH+H45TObKIMWLsBU/8zPtx8sTRTO
rfZQ5bb0aj99FcN8fryJqt9HOKwABOS6fiXSCTIC5OHtC8pEwzD8uCx4rXcl1z3e
xuJi+tA9bfxSxx620EjUwpKtVuJglfkr/wbHHTtHVHkFkS8S529HEfXBLS2R8Klq
hRlVLfty0sd8SVo3UmeUHFbYGWtn5DCstc0CiwCwRz5iqaUn4CKg1anBG/2nwWsz
bLJN6zueB+/NEtrdoW+yCLaaUkYxWpHJJY5YgApdasL1ckQ7rIvHmQ5Tr7UZJaJu
I6GDfbtD1eMFzw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:45:51 2026 by rpki-client