Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/4a293b-4c41-428c-9287-bd98b3e90e43/1/G9vEEUREgGUxPvC4LhzPeubqVyA.mft
File: G9vEEUREgGUxPvC4LhzPeubqVyA.mft (raw, json)
Hash identifier: Ekl2nN6Z2IM/6TChmZ4a45Gc3eWhl955/tWU9ku1cm4=
Subject key identifier: 37:71:B4:5D:B4:98:32:8A:79:FA:75:08:21:F6:B2:19:1B:75:F4:66
Authority key identifier: 1B:DB:C4:11:44:44:80:65:31:3E:F0:B8:2E:1C:CF:7A:E6:EA:57:20
Certificate issuer: /CN=1bdbc41144448065313ef0b82e1ccf7ae6ea5720
Certificate serial: 01A13748D8AE80AC9DD0983E319F4000E0B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G9vEEUREgGUxPvC4LhzPeubqVyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/4a293b-4c41-428c-9287-bd98b3e90e43/1/G9vEEUREgGUxPvC4LhzPeubqVyA.mft
Manifest number: 1AA3
Signing time: Tue 13 Oct 2026 22:01:23 +0000
Manifest this update: Tue 13 Oct 2026 22:01:23 +0000
Manifest next update: Wed 14 Oct 2026 22:01:23 +0000
Files and hashes: 1: G9vEEUREgGUxPvC4LhzPeubqVyA.crl (hash: UdgzGkmLejEv7/QCqeYoQ5LlTkfH1Y4EZAf6r9Yd4WI=)
2: tXwPHcD7KOQpl4ubBwGZXMLcNGc.roa (hash: kHVmMcCLDSaK/L8IsfRUQoLqMYtr8aRP/Gpfi71r/IU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/4a293b-4c41-428c-9287-bd98b3e90e43/1/G9vEEUREgGUxPvC4LhzPeubqVyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/4a293b-4c41-428c-9287-bd98b3e90e43/1/G9vEEUREgGUxPvC4LhzPeubqVyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/G9vEEUREgGUxPvC4LhzPeubqVyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 20:43:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:37:48:d8:ae:80:ac:9d:d0:98:3e:31:9f:40:00:e0:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bdbc41144448065313ef0b82e1ccf7ae6ea5720
Validity
Not Before: Oct 13 22:01:23 2026 GMT
Not After : Oct 14 22:01:23 2026 GMT
Subject: CN=3771b45db498328a79fa750821f6b2191b75f466
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c2:d5:08:cf:0a:4d:00:72:e6:0d:fc:7a:6a:
fd:80:ca:10:d2:a6:95:b8:d0:d5:e1:e9:a6:93:63:
b6:98:43:6c:6a:6f:1e:45:57:a9:1a:04:04:0b:b6:
8b:f2:8c:de:3e:0f:3e:56:f1:39:54:76:53:05:d6:
f1:f1:0b:54:04:bb:06:e4:fa:88:96:8a:6d:bb:51:
70:8c:ef:8d:89:b5:01:85:5e:6b:5f:20:43:76:79:
bd:b0:3e:43:6f:6d:7d:b6:ea:f7:70:a8:0f:d4:46:
49:38:ac:4e:e0:ba:25:40:43:a0:1e:6d:f6:25:d2:
86:cf:71:19:c2:26:0b:4a:57:b5:1c:19:db:79:42:
02:e5:f0:4f:c8:76:4f:9c:c8:f2:ee:c2:d2:d2:1d:
a8:ca:d5:61:9c:2e:13:17:e2:01:93:11:68:a0:95:
b4:dd:44:27:14:45:15:a2:66:62:e7:f9:60:cc:fc:
57:2c:1e:8a:fd:96:d6:83:0e:7d:42:ef:6f:48:39:
c6:28:02:44:b6:3b:5f:35:1b:44:46:60:9d:53:85:
40:b1:01:fc:fc:19:1b:ce:3f:cc:52:60:19:03:f6:
90:40:fc:ea:f7:0d:14:27:7f:82:63:90:73:26:02:
c6:f8:39:22:87:64:97:7b:c3:9e:5b:2f:18:77:c6:
33:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:71:B4:5D:B4:98:32:8A:79:FA:75:08:21:F6:B2:19:1B:75:F4:66
X509v3 Authority Key Identifier:
keyid:1B:DB:C4:11:44:44:80:65:31:3E:F0:B8:2E:1C:CF:7A:E6:EA:57:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G9vEEUREgGUxPvC4LhzPeubqVyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4a293b-4c41-428c-9287-bd98b3e90e43/1/G9vEEUREgGUxPvC4LhzPeubqVyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4a293b-4c41-428c-9287-bd98b3e90e43/1/G9vEEUREgGUxPvC4LhzPeubqVyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:2b:f3:25:3b:49:0e:bf:19:d5:37:1f:c3:8c:c1:fc:73:9f:
ab:51:d2:d6:59:26:1d:26:cd:68:ec:11:1d:73:49:64:e6:ef:
c3:a9:47:4b:7f:0b:fa:4b:bf:29:b6:fb:93:91:06:23:b4:5d:
47:a7:ee:4f:b9:de:c4:85:9c:a0:b8:c5:42:d1:e2:8c:13:00:
92:54:f9:e6:65:32:5c:f9:6a:d9:9f:3b:ca:aa:69:e4:eb:09:
42:6e:fd:8a:f3:cd:f9:12:92:36:31:b5:4d:0e:a7:c7:b0:e0:
26:9e:31:5b:ff:f2:49:ba:bf:76:b3:5a:1f:6a:74:c9:aa:44:
a2:d6:80:ed:dc:e2:cb:14:3b:9f:3d:77:04:c8:6d:2c:2a:70:
31:56:62:64:ac:3b:68:ad:23:cb:06:a0:15:df:72:b8:3d:42:
7d:7c:a2:2f:12:d3:91:b0:00:f2:95:b8:6e:fc:4b:49:66:9a:
b2:fb:48:ff:27:7d:04:8f:57:02:9f:33:bb:69:ab:e9:b3:72:
e0:6b:7a:59:32:4c:be:25:99:fb:2b:5a:fe:92:b1:25:53:d9:
61:64:70:80:78:58:4b:bb:4c:c7:d2:55:51:56:0d:39:27:21:
4c:dc:c2:b3:2f:10:74:07:04:96:1e:0c:9c:83:98:33:cc:67:
95:94:fe:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE3SNiugKyd0Jg+MZ9AAOCxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiZGJjNDExNDQ0NDgwNjUzMTNlZjBiODJlMWNjZjdhZTZl
YTU3MjAwHhcNMjYxMDEzMjIwMTIzWhcNMjYxMDE0MjIwMTIzWjAzMTEwLwYDVQQD
EygzNzcxYjQ1ZGI0OTgzMjhhNzlmYTc1MDgyMWY2YjIxOTFiNzVmNDY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMLVCM8KTQBy5g38emr9gMoQ0qaV
uNDV4emmk2O2mENsam8eRVepGgQEC7aL8ozePg8+VvE5VHZTBdbx8QtUBLsG5PqI
loptu1FwjO+NibUBhV5rXyBDdnm9sD5Db219tur3cKgP1EZJOKxO4LolQEOgHm32
JdKGz3EZwiYLSle1HBnbeUIC5fBPyHZPnMjy7sLS0h2oytVhnC4TF+IBkxFooJW0
3UQnFEUVomZi5/lgzPxXLB6K/ZbWgw59Qu9vSDnGKAJEtjtfNRtERmCdU4VAsQH8
/Bkbzj/MUmAZA/aQQPzq9w0UJ3+CY5BzJgLG+Dkih2SXe8OeWy8Yd8YztQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDdxtF20mDKKefp1CCH2shkbdfRmMB8GA1UdIwQY
MBaAFBvbxBFERIBlMT7wuC4cz3rm6lcgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzl2RUVVUkVnR1V4UHZDNExoelBldWJxVnlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy80YTI5M2ItNGM0MS00MjhjLTkyODct
YmQ5OGIzZTkwZTQzLzEvRzl2RUVVUkVnR1V4UHZDNExoelBldWJxVnlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy80YTI5M2ItNGM0MS00MjhjLTkyODctYmQ5OGIzZTkwZTQz
LzEvRzl2RUVVUkVnR1V4UHZDNExoelBldWJxVnlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvivzJTtJ
Dr8Z1Tcfw4zB/HOfq1HS1lkmHSbNaOwRHXNJZObvw6lHS38L+ku/Kbb7k5EGI7Rd
R6fuT7nexIWcoLjFQtHijBMAklT55mUyXPlq2Z87yqpp5OsJQm79ivPN+RKSNjG1
TQ6nx7DgJp4xW//ySbq/drNaH2p0yapEotaA7dziyxQ7nz13BMhtLCpwMVZiZKw7
aK0jywagFd9yuD1CfXyiLxLTkbAA8pW4bvxLSWaasvtI/yd9BI9XAp8zu2mr6bNy
4Gt6WTJMviWZ+yta/pKxJVPZYWRwgHhYS7tMx9JVUVYNOSchTNzCsy8QdAcElh4M
nIOYM8xnlZT+5w==
-----END CERTIFICATE-----
Generated at Wed Oct 14 01:57:53 2026 by rpki-client