
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/148eca-c39f-4673-886f-ecf82302f726/1/G95wrxU0lDVJRmSKzWQRY-KvGx0.mft
File: G95wrxU0lDVJRmSKzWQRY-KvGx0.mft (raw, json)
Hash identifier: d82SrSc2whG4d676xjeNu72OAZfIohDAUi3bl1220JI=
Subject key identifier: E3:23:58:C7:0C:A8:4A:2F:FF:3A:0D:E5:95:51:C6:17:62:D2:2B:8B
Authority key identifier: 1B:DE:70:AF:15:34:94:35:49:46:64:8A:CD:64:11:63:E2:AF:1B:1D
Certificate issuer: /CN=1bde70af153494354946648acd641163e2af1b1d
Certificate serial: 019E8D5BA4B1247DF61EB6F6441266E6882D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G95wrxU0lDVJRmSKzWQRY-KvGx0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/148eca-c39f-4673-886f-ecf82302f726/1/G95wrxU0lDVJRmSKzWQRY-KvGx0.mft
Manifest number: 0E4B
Signing time: Wed 03 Jun 2026 12:00:53 +0000
Manifest this update: Wed 03 Jun 2026 12:00:53 +0000
Manifest next update: Thu 04 Jun 2026 12:00:53 +0000
Files and hashes: 1: 1-G_9qaTlg9_9ZXzg69NS2bmEGWE.roa (hash: +lDVdHNQmmTIYvQZgxKxtZPdzwOYciN1IB8yFnfGP4A=)
2: G95wrxU0lDVJRmSKzWQRY-KvGx0.crl (hash: 6hKgxOrXbVkCiSdb74d/HrCJnsLOCK+CH4hzZZJC6XY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/148eca-c39f-4673-886f-ecf82302f726/1/G95wrxU0lDVJRmSKzWQRY-KvGx0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/148eca-c39f-4673-886f-ecf82302f726/1/G95wrxU0lDVJRmSKzWQRY-KvGx0.mft
rsync://rpki.ripe.net/repository/DEFAULT/G95wrxU0lDVJRmSKzWQRY-KvGx0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:8d:5b:a4:b1:24:7d:f6:1e:b6:f6:44:12:66:e6:88:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bde70af153494354946648acd641163e2af1b1d
Validity
Not Before: Jun 3 12:00:53 2026 GMT
Not After : Jun 4 12:00:53 2026 GMT
Subject: CN=e32358c70ca84a2fff3a0de59551c61762d22b8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:37:bf:db:a3:5d:38:c4:7a:79:94:91:df:8b:
00:64:16:25:bf:5b:20:d5:27:32:ba:4f:7d:31:e6:
aa:46:0f:42:a9:89:93:a3:37:a9:4c:a4:36:ce:9c:
b4:3f:26:87:91:75:8a:1d:5c:e6:db:4e:ec:6a:2a:
5d:a1:1b:e4:e6:fb:dc:d4:96:77:2a:30:16:89:0a:
f8:2b:ff:92:cb:3d:01:f4:1a:32:20:43:aa:c9:3b:
c3:eb:c2:d2:23:ce:98:d3:5b:31:b1:a0:be:f0:f2:
b8:33:9c:0f:4c:bd:81:cd:89:38:58:14:84:8d:6a:
d5:ad:c8:49:9d:a0:bc:b7:8c:d4:af:f8:5d:1b:8a:
a3:58:19:c6:66:4d:e8:47:1b:85:72:a8:a3:3a:cc:
ba:31:2d:61:ef:95:da:ad:ac:3a:11:31:93:01:6e:
b7:83:02:61:6f:f6:49:01:b9:2b:f0:18:be:09:fd:
ce:89:53:2c:c2:47:99:74:ce:d9:40:df:7f:e7:79:
fa:89:d5:7b:24:5c:f3:73:c0:67:f1:79:41:b4:0a:
03:c1:48:d8:8c:77:19:5f:43:c6:2a:54:b9:a6:b8:
af:b5:7b:61:48:83:05:b4:70:57:3e:4c:58:07:c1:
38:6e:58:e6:ed:db:08:b2:b4:5a:74:d9:56:17:cf:
61:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:23:58:C7:0C:A8:4A:2F:FF:3A:0D:E5:95:51:C6:17:62:D2:2B:8B
X509v3 Authority Key Identifier:
keyid:1B:DE:70:AF:15:34:94:35:49:46:64:8A:CD:64:11:63:E2:AF:1B:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G95wrxU0lDVJRmSKzWQRY-KvGx0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/148eca-c39f-4673-886f-ecf82302f726/1/G95wrxU0lDVJRmSKzWQRY-KvGx0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/148eca-c39f-4673-886f-ecf82302f726/1/G95wrxU0lDVJRmSKzWQRY-KvGx0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:97:5a:64:2b:f7:b6:04:15:e4:fd:ff:cb:2f:e6:5c:93:8b:
e2:ca:01:72:b4:1c:b2:46:30:c5:e5:cd:07:6d:8a:bb:b7:69:
da:e2:ae:d4:a0:eb:b6:c8:34:38:1b:58:07:e6:70:1c:ae:00:
98:e3:c8:08:cc:80:02:4b:1b:cc:74:0c:b0:5f:da:eb:5d:ed:
a4:15:dc:7c:73:46:f8:fd:2e:3a:47:38:ec:29:c0:2a:cc:16:
41:d3:a1:1c:d5:2e:dc:fa:ba:47:6d:2b:51:b3:09:92:df:71:
96:b0:dd:e2:0b:a8:ed:f6:2a:a3:cb:00:bf:a7:89:8e:9c:c5:
0a:bf:74:b9:52:a4:a9:69:84:0c:0f:ae:02:20:12:88:74:d5:
5c:44:26:a7:82:e0:37:dd:94:e4:c5:d1:d2:f5:08:5d:ca:04:
ee:6d:cc:cf:92:ac:96:90:4f:37:79:9b:60:a8:fd:43:4b:a6:
8a:71:ba:43:1b:60:14:11:79:c9:aa:da:a3:a5:c8:56:0a:b8:
f0:e1:1f:a3:ce:51:09:61:a6:8d:52:24:6b:5d:18:16:a3:0b:
a9:56:01:c5:bd:02:c9:46:15:f6:78:24:ba:da:7e:13:ba:47:
80:bb:95:86:33:4a:c6:a4:5c:ca:de:b8:56:dc:9d:28:47:bf:
cc:d3:f6:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6NW6SxJH32Hrb2RBJm5ogtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiZGU3MGFmMTUzNDk0MzU0OTQ2NjQ4YWNkNjQxMTYzZTJh
ZjFiMWQwHhcNMjYwNjAzMTIwMDUzWhcNMjYwNjA0MTIwMDUzWjAzMTEwLwYDVQQD
EyhlMzIzNThjNzBjYTg0YTJmZmYzYTBkZTU5NTUxYzYxNzYyZDIyYjhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlze/26NdOMR6eZSR34sAZBYlv1sg
1Scyuk99MeaqRg9CqYmTozepTKQ2zpy0PyaHkXWKHVzm207saipdoRvk5vvc1JZ3
KjAWiQr4K/+Syz0B9BoyIEOqyTvD68LSI86Y01sxsaC+8PK4M5wPTL2BzYk4WBSE
jWrVrchJnaC8t4zUr/hdG4qjWBnGZk3oRxuFcqijOsy6MS1h75Xaraw6ETGTAW63
gwJhb/ZJAbkr8Bi+Cf3OiVMswkeZdM7ZQN9/53n6idV7JFzzc8Bn8XlBtAoDwUjY
jHcZX0PGKlS5privtXthSIMFtHBXPkxYB8E4bljm7dsIsrRadNlWF89hTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOMjWMcMqEov/zoN5ZVRxhdi0iuLMB8GA1UdIwQY
MBaAFBvecK8VNJQ1SUZkis1kEWPirxsdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzk1d3J4VTBsRFZKUm1TS3pXUVJZLUt2R3gwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy8xNDhlY2EtYzM5Zi00NjczLTg4NmYt
ZWNmODIzMDJmNzI2LzEvRzk1d3J4VTBsRFZKUm1TS3pXUVJZLUt2R3gwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy8xNDhlY2EtYzM5Zi00NjczLTg4NmYtZWNmODIzMDJmNzI2
LzEvRzk1d3J4VTBsRFZKUm1TS3pXUVJZLUt2R3gwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGpdaZCv3
tgQV5P3/yy/mXJOL4soBcrQcskYwxeXNB22Ku7dp2uKu1KDrtsg0OBtYB+ZwHK4A
mOPICMyAAksbzHQMsF/a613tpBXcfHNG+P0uOkc47CnAKswWQdOhHNUu3Pq6R20r
UbMJkt9xlrDd4guo7fYqo8sAv6eJjpzFCr90uVKkqWmEDA+uAiASiHTVXEQmp4Lg
N92U5MXR0vUIXcoE7m3Mz5KslpBPN3mbYKj9Q0uminG6QxtgFBF5yarao6XIVgq4
8OEfo85RCWGmjVIka10YFqMLqVYBxb0CyUYV9ngkutp+E7pHgLuVhjNKxqRcyt64
VtydKEe/zNP2sQ==
-----END CERTIFICATE-----
Generated at Wed Jun 3 20:02:52 2026 by rpki-client