Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/b88532-9974-4612-94c4-5e0777b04049/1/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.mft
File: GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.mft (raw, json)
Hash identifier: bsDOSOnh3rtjAaAW32KT1c67qFAXeb6LqgEXauQWqbw=
Subject key identifier: 66:02:A1:80:BB:AD:9F:F3:23:96:DA:2F:FE:AD:BD:D5:90:9C:11:41
Authority key identifier: 18:8E:D4:88:4F:11:19:39:CA:6C:7F:0F:34:B2:79:2B:39:B9:34:23
Certificate issuer: /CN=188ed4884f111939ca6c7f0f34b2792b39b93423
Certificate serial: 019D39780E00DFA4AA954322012860A72393
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/b88532-9974-4612-94c4-5e0777b04049/1/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.mft
Manifest number: 1822
Signing time: Sun 29 Mar 2026 12:01:02 +0000
Manifest this update: Sun 29 Mar 2026 12:01:02 +0000
Manifest next update: Mon 30 Mar 2026 12:01:02 +0000
Files and hashes: 1: 6LC4FnmLLsng6HVU2xR3jbERaDc.roa (hash: LpXh0JZ4HonUdcN7azN27CT2g+jjECs6HIXpWyOrLLQ=)
2: GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.crl (hash: CbKvasJxuKtrZs7EIIwisyGdZRMEQor328KIx+ngl9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/b88532-9974-4612-94c4-5e0777b04049/1/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/b88532-9974-4612-94c4-5e0777b04049/1/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.mft
rsync://rpki.ripe.net/repository/DEFAULT/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:78:0e:00:df:a4:aa:95:43:22:01:28:60:a7:23:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=188ed4884f111939ca6c7f0f34b2792b39b93423
Validity
Not Before: Mar 29 12:01:02 2026 GMT
Not After : Mar 30 12:01:02 2026 GMT
Subject: CN=6602a180bbad9ff32396da2ffeadbdd5909c1141
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d3:cf:ed:d7:b1:58:44:42:5d:8a:4f:1f:6e:
b1:05:c0:ca:3a:c3:fc:e7:84:6a:db:d4:13:bd:e6:
f4:28:20:7e:17:78:2d:7a:97:9d:17:4c:b5:3a:d8:
c1:5e:78:0c:5b:73:9a:88:0e:9d:51:98:e0:00:7e:
2f:87:62:54:ee:54:de:05:68:3d:a5:1e:25:93:52:
b8:d5:90:e8:19:e1:28:c6:04:e6:41:0f:4d:25:a9:
7e:35:78:2d:5e:a4:e6:50:e6:78:39:af:c2:4c:da:
22:49:21:24:5c:cc:aa:44:b8:6b:08:23:a0:8a:06:
e7:27:e0:59:3f:15:e4:b5:1e:c0:4e:1c:fe:49:cf:
18:c5:f0:0f:dc:90:f3:4d:3a:8c:2c:de:7e:7e:d5:
01:c3:e7:59:09:56:cd:1b:f0:45:a2:b1:6e:4f:93:
e4:fe:16:91:89:2c:cb:8a:13:54:2a:88:0f:44:b5:
89:9e:40:55:df:f9:e1:2c:7e:4b:d5:4c:26:df:0c:
3d:06:96:da:30:6d:06:56:ba:aa:60:df:ca:1c:5e:
c7:51:8d:2c:26:a7:d9:9d:12:3d:ba:86:69:3a:51:
a3:b2:b7:03:a5:fb:91:8f:2b:c7:e0:34:c9:b3:ab:
9d:68:25:79:ef:eb:27:ab:34:b8:c6:5f:15:10:53:
55:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:02:A1:80:BB:AD:9F:F3:23:96:DA:2F:FE:AD:BD:D5:90:9C:11:41
X509v3 Authority Key Identifier:
keyid:18:8E:D4:88:4F:11:19:39:CA:6C:7F:0F:34:B2:79:2B:39:B9:34:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b88532-9974-4612-94c4-5e0777b04049/1/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b88532-9974-4612-94c4-5e0777b04049/1/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:4d:3d:fd:07:f8:10:84:67:dd:25:fb:95:b8:03:a0:b8:65:
db:8b:ea:e0:2a:f3:66:97:c6:85:c1:97:59:de:aa:62:e3:cd:
fc:59:2d:3d:15:17:d6:77:05:6a:6c:87:a8:b8:d3:82:3a:59:
c0:98:7a:8d:ff:88:0e:8e:ae:6a:9b:23:be:17:68:c4:15:7a:
2e:d6:ac:4a:03:14:dd:13:18:a7:de:c7:0b:81:d4:a9:50:70:
5d:ff:ac:8d:29:19:3c:7f:57:77:4c:aa:f5:31:17:f5:45:bc:
22:01:78:67:4b:1b:b3:8d:53:a4:ab:da:c7:fc:9d:ba:49:c2:
52:6a:1d:c8:a0:14:41:59:81:f0:ec:8c:21:04:cf:be:1a:6e:
67:f5:80:98:88:a1:46:41:f8:3c:85:c3:34:c6:9d:b0:11:5c:
dc:23:5d:71:77:c5:b0:b2:24:a7:44:25:c4:85:3c:43:88:51:
e6:50:51:6a:7d:ac:03:16:e4:b9:c2:da:b3:c9:d1:89:a0:b9:
8c:6f:48:b1:d2:cf:11:4f:6d:3c:ff:18:97:08:53:59:21:85:
07:6b:9a:8c:a4:9a:f5:30:97:5a:ad:13:a5:b9:6f:96:63:57:
a7:bb:5b:57:5f:1b:eb:65:d0:67:a0:05:dc:34:7a:47:34:d8:
01:83:df:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05eA4A36SqlUMiAShgpyOTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4OGVkNDg4NGYxMTE5MzljYTZjN2YwZjM0YjI3OTJiMzli
OTM0MjMwHhcNMjYwMzI5MTIwMTAyWhcNMjYwMzMwMTIwMTAyWjAzMTEwLwYDVQQD
Eyg2NjAyYTE4MGJiYWQ5ZmYzMjM5NmRhMmZmZWFkYmRkNTkwOWMxMTQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtPP7dexWERCXYpPH26xBcDKOsP8
54Rq29QTveb0KCB+F3gtepedF0y1OtjBXngMW3OaiA6dUZjgAH4vh2JU7lTeBWg9
pR4lk1K41ZDoGeEoxgTmQQ9NJal+NXgtXqTmUOZ4Oa/CTNoiSSEkXMyqRLhrCCOg
igbnJ+BZPxXktR7AThz+Sc8YxfAP3JDzTTqMLN5+ftUBw+dZCVbNG/BForFuT5Pk
/haRiSzLihNUKogPRLWJnkBV3/nhLH5L1Uwm3ww9BpbaMG0GVrqqYN/KHF7HUY0s
JqfZnRI9uoZpOlGjsrcDpfuRjyvH4DTJs6udaCV57+snqzS4xl8VEFNVZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGYCoYC7rZ/zI5baL/6tvdWQnBFBMB8GA1UdIwQY
MBaAFBiO1IhPERk5ymx/DzSyeSs5uTQjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0k3VWlFOFJHVG5LYkg4UE5MSjVLem01TkNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9iODg1MzItOTk3NC00NjEyLTk0YzQt
NWUwNzc3YjA0MDQ5LzEvR0k3VWlFOFJHVG5LYkg4UE5MSjVLem01TkNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy9iODg1MzItOTk3NC00NjEyLTk0YzQtNWUwNzc3YjA0MDQ5
LzEvR0k3VWlFOFJHVG5LYkg4UE5MSjVLem01TkNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABU09/Qf4
EIRn3SX7lbgDoLhl24vq4CrzZpfGhcGXWd6qYuPN/FktPRUX1ncFamyHqLjTgjpZ
wJh6jf+IDo6uapsjvhdoxBV6LtasSgMU3RMYp97HC4HUqVBwXf+sjSkZPH9Xd0yq
9TEX9UW8IgF4Z0sbs41TpKvax/yduknCUmodyKAUQVmB8OyMIQTPvhpuZ/WAmIih
RkH4PIXDNMadsBFc3CNdcXfFsLIkp0QlxIU8Q4hR5lBRan2sAxbkucLas8nRiaC5
jG9IsdLPEU9tPP8YlwhTWSGFB2uajKSa9TCXWq0TpblvlmNXp7tbV18b62XQZ6AF
3DR6RzTYAYPf4g==
-----END CERTIFICATE-----
Generated at Sun Mar 29 18:38:37 2026 by rpki-client