Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/066478-b066-4736-ad9f-53f41dfe407f/1/G6UWeIg5f_nKqET1VP-DfP2_lyI.mft
File: G6UWeIg5f_nKqET1VP-DfP2_lyI.mft (raw, json)
Hash identifier: AvaBxiBiaTZpgJNygYEhfiwaJEeRWUwpwcvDhiIK0Ug=
Subject key identifier: 65:7B:58:04:79:9A:CC:35:BF:49:C2:21:84:46:E7:F6:77:C2:D3:CA
Authority key identifier: 1B:A5:16:78:88:39:7F:F9:CA:A8:44:F5:54:FF:83:7C:FD:BF:97:22
Certificate issuer: /CN=1ba5167888397ff9caa844f554ff837cfdbf9722
Certificate serial: 019D389BFF04C0CBBC5F9B65B6894CB6FB80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G6UWeIg5f_nKqET1VP-DfP2_lyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/066478-b066-4736-ad9f-53f41dfe407f/1/G6UWeIg5f_nKqET1VP-DfP2_lyI.mft
Manifest number: 17E6
Signing time: Sun 29 Mar 2026 08:00:40 +0000
Manifest this update: Sun 29 Mar 2026 08:00:40 +0000
Manifest next update: Mon 30 Mar 2026 08:00:40 +0000
Files and hashes: 1: G6UWeIg5f_nKqET1VP-DfP2_lyI.crl (hash: bnLFbwcFujS5aTEAf+8UM2HcOpx9hXtYgu91GEhcqKM=)
2: _Q4Z6jbF8NYTsaR27vIk58vSUlI.roa (hash: 7qWyZfAO4daLpycwI/J3xaTZkHMp77aXgml30PjFR4w=)
3: f3kPFs4waiX6locgjDdwFUiP7tk.roa (hash: 4sDGfuSEROWxAzi+C1qp5I+6lZx1ktDF8owXbaFpZn0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/066478-b066-4736-ad9f-53f41dfe407f/1/G6UWeIg5f_nKqET1VP-DfP2_lyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/066478-b066-4736-ad9f-53f41dfe407f/1/G6UWeIg5f_nKqET1VP-DfP2_lyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/G6UWeIg5f_nKqET1VP-DfP2_lyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:ff:04:c0:cb:bc:5f:9b:65:b6:89:4c:b6:fb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ba5167888397ff9caa844f554ff837cfdbf9722
Validity
Not Before: Mar 29 08:00:40 2026 GMT
Not After : Mar 30 08:00:40 2026 GMT
Subject: CN=657b5804799acc35bf49c2218446e7f677c2d3ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:3c:b0:71:da:24:16:7a:78:e7:a4:4f:83:6c:
31:73:bb:2e:58:c9:ce:cd:e5:e4:bf:07:96:d0:93:
4e:4e:a1:d7:d8:be:bf:52:d0:7b:e8:8d:e5:30:a3:
ed:53:fb:13:25:77:40:60:af:6f:3c:d9:2c:11:68:
fc:39:77:15:40:b6:be:3e:6a:ef:e9:67:6f:35:c0:
24:da:f3:4f:c1:8c:b2:a5:03:7f:3c:3c:72:dc:46:
f0:5c:44:60:63:a8:8c:1a:ed:a2:7d:ef:65:7a:d4:
16:5c:69:a5:4c:a5:4c:85:2b:a1:a7:b3:b4:68:40:
4a:b1:4e:e3:15:87:3c:fe:17:f0:b0:c7:04:98:c0:
dc:64:3a:75:f2:9c:8b:c0:97:02:52:47:24:34:76:
82:0b:ef:46:13:7c:15:c3:af:90:da:ee:53:d5:73:
f0:c7:69:67:b8:df:90:3e:7c:a9:76:bb:5a:07:b2:
35:4f:47:b0:39:39:18:ec:b5:59:31:7b:99:1e:bb:
38:02:5f:a4:d0:aa:c7:ae:16:48:52:6a:b1:b2:f8:
5e:5a:50:44:79:94:6b:09:9b:6b:da:65:ad:bb:f8:
29:ce:2d:f0:d1:72:e0:cd:f8:4c:d5:ff:07:d2:58:
6e:59:c4:18:ed:a7:fa:a2:7c:1b:b8:2a:ca:a5:ad:
2c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:7B:58:04:79:9A:CC:35:BF:49:C2:21:84:46:E7:F6:77:C2:D3:CA
X509v3 Authority Key Identifier:
keyid:1B:A5:16:78:88:39:7F:F9:CA:A8:44:F5:54:FF:83:7C:FD:BF:97:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G6UWeIg5f_nKqET1VP-DfP2_lyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/066478-b066-4736-ad9f-53f41dfe407f/1/G6UWeIg5f_nKqET1VP-DfP2_lyI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/066478-b066-4736-ad9f-53f41dfe407f/1/G6UWeIg5f_nKqET1VP-DfP2_lyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:5d:5e:7c:8d:86:b2:ac:05:0a:42:b2:9e:2f:8d:3c:fd:a6:
01:f7:85:08:4e:18:2b:a3:be:64:81:4e:0f:7b:54:e9:36:d9:
ec:37:c4:d5:88:97:ff:3f:54:00:3b:72:86:ec:7a:7d:3a:94:
82:2f:90:b9:58:2a:7e:69:7f:54:2c:21:d0:4a:dd:0b:a0:f1:
8e:ed:ce:cb:62:1a:72:e4:99:49:99:4c:a7:6f:a7:99:42:80:
7e:8a:c7:5c:ca:39:7f:97:dc:50:ba:a7:41:b4:c5:1e:50:81:
da:52:dd:12:55:2b:2b:1e:96:25:0b:bf:2a:51:c8:fa:c3:1a:
33:4c:d6:59:d6:d7:98:c0:8d:f5:9a:ae:ea:2f:a3:a0:2f:96:
07:8d:2b:99:ba:50:5f:ff:dd:d9:86:e4:b6:a3:3c:fe:f5:e6:
ca:a0:0f:4e:b3:2c:b1:14:51:2d:39:9c:e2:c7:92:4d:f1:9a:
21:03:7d:76:d5:49:83:24:61:a0:18:7f:73:4e:59:db:54:09:
82:65:37:98:e3:c8:ba:5f:48:7b:43:87:70:54:bd:39:8e:5d:
fc:70:30:3b:81:6f:97:f8:eb:67:91:98:5b:5b:f7:a9:fc:f6:
08:91:aa:33:32:15:16:f7:6b:bc:84:52:ce:85:16:96:26:66:
72:67:b8:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04m/8EwMu8X5tltolMtvuAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiYTUxNjc4ODgzOTdmZjljYWE4NDRmNTU0ZmY4MzdjZmRi
Zjk3MjIwHhcNMjYwMzI5MDgwMDQwWhcNMjYwMzMwMDgwMDQwWjAzMTEwLwYDVQQD
Eyg2NTdiNTgwNDc5OWFjYzM1YmY0OWMyMjE4NDQ2ZTdmNjc3YzJkM2NhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjjywcdokFnp456RPg2wxc7suWMnO
zeXkvweW0JNOTqHX2L6/UtB76I3lMKPtU/sTJXdAYK9vPNksEWj8OXcVQLa+Pmrv
6WdvNcAk2vNPwYyypQN/PDxy3EbwXERgY6iMGu2ife9letQWXGmlTKVMhSuhp7O0
aEBKsU7jFYc8/hfwsMcEmMDcZDp18pyLwJcCUkckNHaCC+9GE3wVw6+Q2u5T1XPw
x2lnuN+QPnypdrtaB7I1T0ewOTkY7LVZMXuZHrs4Al+k0KrHrhZIUmqxsvheWlBE
eZRrCZtr2mWtu/gpzi3w0XLgzfhM1f8H0lhuWcQY7af6onwbuCrKpa0s9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGV7WAR5msw1v0nCIYRG5/Z3wtPKMB8GA1UdIwQY
MBaAFBulFniIOX/5yqhE9VT/g3z9v5ciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzZVV2VJZzVmX25LcUVUMVZQLURmUDJfbHlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8wNjY0NzgtYjA2Ni00NzM2LWFkOWYt
NTNmNDFkZmU0MDdmLzEvRzZVV2VJZzVmX25LcUVUMVZQLURmUDJfbHlJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC8wNjY0NzgtYjA2Ni00NzM2LWFkOWYtNTNmNDFkZmU0MDdm
LzEvRzZVV2VJZzVmX25LcUVUMVZQLURmUDJfbHlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl11efI2G
sqwFCkKyni+NPP2mAfeFCE4YK6O+ZIFOD3tU6TbZ7DfE1YiX/z9UADtyhux6fTqU
gi+QuVgqfml/VCwh0ErdC6Dxju3Oy2IacuSZSZlMp2+nmUKAforHXMo5f5fcULqn
QbTFHlCB2lLdElUrKx6WJQu/KlHI+sMaM0zWWdbXmMCN9Zqu6i+joC+WB40rmbpQ
X//d2YbktqM8/vXmyqAPTrMssRRRLTmc4seSTfGaIQN9dtVJgyRhoBh/c05Z21QJ
gmU3mOPIul9Ie0OHcFS9OY5d/HAwO4Fvl/jrZ5GYW1v3qfz2CJGqMzIVFvdrvIRS
zoUWliZmcme4mg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:55:22 2026 by rpki-client