Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f3/37e6bc-3bb6-4025-9067-ee14382b1bbb/1/G1VDeLv22mSc_WBxZvZcfE921lY.mft
File: G1VDeLv22mSc_WBxZvZcfE921lY.mft (raw, json)
Hash identifier: TjAa7fSX3GgB/gfjiS9N4BTq5Zpdf0tvp6t2rHiFjcs=
Subject key identifier: EF:5A:E4:74:DE:B7:61:D9:28:21:AB:F9:72:4C:68:BD:29:A3:3F:C0
Authority key identifier: 1B:55:43:78:BB:F6:DA:64:9C:FD:60:71:66:F6:5C:7C:4F:76:D6:56
Certificate issuer: /CN=1b554378bbf6da649cfd607166f65c7c4f76d656
Certificate serial: 01A1A2247DA05ED87EC4623E30316EB2BDE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G1VDeLv22mSc_WBxZvZcfE921lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/37e6bc-3bb6-4025-9067-ee14382b1bbb/1/G1VDeLv22mSc_WBxZvZcfE921lY.mft
Manifest number: 72
Signing time: Tue 03 Nov 2026 16:01:02 +0000
Manifest this update: Tue 03 Nov 2026 16:01:02 +0000
Manifest next update: Wed 04 Nov 2026 16:01:02 +0000
Files and hashes: 1: G1VDeLv22mSc_WBxZvZcfE921lY.crl (hash: +zkh1hIAg9PJszikItWwCjThpl9ZZH5UQMwc9mLEDHw=)
2: vpfwIrst8D-mUhYikydHJdbxWYU.roa (hash: cDSlaXYAliFmFBD60YnB9lxqeC0VbURWwjdvKxvvUyo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/37e6bc-3bb6-4025-9067-ee14382b1bbb/1/G1VDeLv22mSc_WBxZvZcfE921lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/37e6bc-3bb6-4025-9067-ee14382b1bbb/1/G1VDeLv22mSc_WBxZvZcfE921lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/G1VDeLv22mSc_WBxZvZcfE921lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Nov 2026 16:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a2:24:7d:a0:5e:d8:7e:c4:62:3e:30:31:6e:b2:bd:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b554378bbf6da649cfd607166f65c7c4f76d656
Validity
Not Before: Nov 3 16:01:02 2026 GMT
Not After : Nov 4 16:01:02 2026 GMT
Subject: CN=ef5ae474deb761d92821abf9724c68bd29a33fc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:3d:e4:f3:69:2e:69:a2:55:08:5f:25:9c:fd:
7b:64:ac:de:02:97:5f:d1:37:a2:96:14:8a:c6:56:
42:cd:ce:3a:dc:35:1c:0f:90:4f:71:70:e8:58:7c:
4f:db:60:b6:bf:1a:e5:19:8f:1e:96:d8:d7:26:60:
9c:b0:0a:81:7c:e9:8c:05:c9:4e:7d:d2:fb:24:e2:
02:6a:91:09:67:5b:bc:1e:67:b2:72:fe:5b:55:81:
c2:fe:0b:f0:e0:b7:32:23:cf:dc:85:b0:37:f9:21:
eb:72:bd:75:a3:49:8f:db:1c:b6:13:98:b6:24:23:
a2:09:1e:3e:e5:a7:ab:34:7b:1c:01:b5:ab:41:6b:
2c:75:7d:93:af:a3:8a:fb:41:73:4e:d6:8a:15:ed:
bd:10:4c:9a:5d:06:d5:dc:9e:6f:e7:ce:9e:88:b4:
34:8d:88:2e:e6:cc:04:bb:52:dc:72:b3:82:3a:cd:
6b:1d:f4:3c:ba:e1:98:b9:c5:5c:83:18:95:29:07:
00:ea:ed:bd:06:02:55:b6:57:30:af:06:f1:7e:37:
0e:5a:58:b3:90:59:68:4d:3a:51:fa:bf:ff:68:e3:
38:0b:85:ae:8c:e9:23:81:95:ee:09:06:0d:17:94:
0d:1a:6c:ad:44:64:8c:4a:ec:f8:7b:a4:fa:6b:b2:
9c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:5A:E4:74:DE:B7:61:D9:28:21:AB:F9:72:4C:68:BD:29:A3:3F:C0
X509v3 Authority Key Identifier:
keyid:1B:55:43:78:BB:F6:DA:64:9C:FD:60:71:66:F6:5C:7C:4F:76:D6:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G1VDeLv22mSc_WBxZvZcfE921lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/37e6bc-3bb6-4025-9067-ee14382b1bbb/1/G1VDeLv22mSc_WBxZvZcfE921lY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/37e6bc-3bb6-4025-9067-ee14382b1bbb/1/G1VDeLv22mSc_WBxZvZcfE921lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:24:dd:ab:16:00:b0:99:db:69:f9:3d:a3:69:38:81:3e:10:
0e:ff:f2:bd:a0:6d:53:40:59:a4:ec:69:3d:97:e0:d1:d8:b4:
12:ef:0b:14:a1:03:1c:8f:b2:f9:0d:28:a9:e0:f4:e3:ac:ed:
6f:58:29:7e:fc:d6:19:ec:4c:3f:7c:08:02:b5:7a:6b:ec:ce:
1b:85:86:41:96:4f:db:c2:db:56:c4:07:10:88:82:98:d2:6d:
bb:1e:99:35:31:ef:93:d6:51:8d:88:6e:bc:72:94:6b:a9:23:
e7:59:d2:4b:82:68:9b:e4:f1:cc:ad:63:99:92:ce:74:72:10:
1c:b7:33:37:00:89:c8:09:5d:08:39:d5:52:94:f2:5d:60:c5:
62:6d:59:a1:2b:2b:cc:0f:5e:17:52:2b:05:f5:2b:7c:e1:68:
63:e7:cb:67:71:25:2f:3f:53:64:ec:7f:b2:51:41:fb:54:73:
16:cc:33:42:14:0d:7e:67:8e:49:cf:30:1c:1b:40:ff:1e:2a:
40:ec:48:9a:22:e9:d5:00:30:30:c8:ca:3e:c1:91:00:52:8e:
ba:30:6f:31:d1:10:70:7c:8e:62:75:23:96:9b:e0:9a:f1:29:
49:93:a8:ba:b1:82:38:d2:b6:f1:9a:34:00:2e:68:7c:ba:7a:
52:d5:b0:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGiJH2gXth+xGI+MDFusr3jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiNTU0Mzc4YmJmNmRhNjQ5Y2ZkNjA3MTY2ZjY1YzdjNGY3
NmQ2NTYwHhcNMjYxMTAzMTYwMTAyWhcNMjYxMTA0MTYwMTAyWjAzMTEwLwYDVQQD
EyhlZjVhZTQ3NGRlYjc2MWQ5MjgyMWFiZjk3MjRjNjhiZDI5YTMzZmMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhj3k82kuaaJVCF8lnP17ZKzeApdf
0TeilhSKxlZCzc463DUcD5BPcXDoWHxP22C2vxrlGY8eltjXJmCcsAqBfOmMBclO
fdL7JOICapEJZ1u8Hmeycv5bVYHC/gvw4LcyI8/chbA3+SHrcr11o0mP2xy2E5i2
JCOiCR4+5aerNHscAbWrQWssdX2Tr6OK+0FzTtaKFe29EEyaXQbV3J5v586eiLQ0
jYgu5swEu1LccrOCOs1rHfQ8uuGYucVcgxiVKQcA6u29BgJVtlcwrwbxfjcOWliz
kFloTTpR+r//aOM4C4WujOkjgZXuCQYNF5QNGmytRGSMSuz4e6T6a7KchQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO9a5HTet2HZKCGr+XJMaL0poz/AMB8GA1UdIwQY
MBaAFBtVQ3i79tpknP1gcWb2XHxPdtZWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzFWRGVMdjIybVNjX1dCeFp2WmNmRTkyMWxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy8zN2U2YmMtM2JiNi00MDI1LTkwNjct
ZWUxNDM4MmIxYmJiLzEvRzFWRGVMdjIybVNjX1dCeFp2WmNmRTkyMWxZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy8zN2U2YmMtM2JiNi00MDI1LTkwNjctZWUxNDM4MmIxYmJi
LzEvRzFWRGVMdjIybVNjX1dCeFp2WmNmRTkyMWxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAByTdqxYA
sJnbafk9o2k4gT4QDv/yvaBtU0BZpOxpPZfg0di0Eu8LFKEDHI+y+Q0oqeD046zt
b1gpfvzWGexMP3wIArV6a+zOG4WGQZZP28LbVsQHEIiCmNJtux6ZNTHvk9ZRjYhu
vHKUa6kj51nSS4Jom+TxzK1jmZLOdHIQHLczNwCJyAldCDnVUpTyXWDFYm1ZoSsr
zA9eF1IrBfUrfOFoY+fLZ3ElLz9TZOx/slFB+1RzFswzQhQNfmeOSc8wHBtA/x4q
QOxImiLp1QAwMMjKPsGRAFKOujBvMdEQcHyOYnUjlpvgmvEpSZOourGCONK28Zo0
AC5ofLp6UtWwPQ==
-----END CERTIFICATE-----
Generated at Tue Nov 3 21:33:52 2026 by rpki-client