Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.mft
File: G2RtQs6J1Ak-Ssknp_I283pRq-I.mft (raw, json)
Hash identifier: 81d0QlVLMfNPLC9nOOEs6S76R+uv1GLFocnq+foAuo0=
Subject key identifier: 96:46:75:10:CD:E0:28:D3:C9:87:D5:E1:4B:A8:55:42:75:01:C7:65
Authority key identifier: 1B:64:6D:42:CE:89:D4:09:3E:4A:C9:27:A7:F2:36:F3:7A:51:AB:E2
Certificate issuer: /CN=1b646d42ce89d4093e4ac927a7f236f37a51abe2
Certificate serial: 019D39AEBDEE8A7250D921805C0F3EA4B07F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G2RtQs6J1Ak-Ssknp_I283pRq-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.mft
Manifest number: 10B7
Signing time: Sun 29 Mar 2026 13:00:46 +0000
Manifest this update: Sun 29 Mar 2026 13:00:46 +0000
Manifest next update: Mon 30 Mar 2026 13:00:46 +0000
Files and hashes: 1: G2RtQs6J1Ak-Ssknp_I283pRq-I.crl (hash: kbTUWsCQlh4BO7aochMqubx9ULdBH9UVJabIcNxzbh0=)
2: buasPl807dGAfqgw1urBhY4Km5w.roa (hash: PQav8NXXwoaYuBOPi54S+Cjky9Sn3BtCmVplgakM7xk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/G2RtQs6J1Ak-Ssknp_I283pRq-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:bd:ee:8a:72:50:d9:21:80:5c:0f:3e:a4:b0:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b646d42ce89d4093e4ac927a7f236f37a51abe2
Validity
Not Before: Mar 29 13:00:46 2026 GMT
Not After : Mar 30 13:00:46 2026 GMT
Subject: CN=96467510cde028d3c987d5e14ba855427501c765
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:60:11:29:2b:39:f3:b0:8a:54:0d:59:6b:4f:
36:14:5a:4e:74:bc:67:d4:35:f5:4d:51:97:39:e5:
4b:64:cd:e1:6b:4d:6c:2b:a1:32:32:84:ba:4a:a6:
a2:e4:97:07:c7:1f:ae:a0:e2:fc:d7:9b:de:69:e1:
b3:13:1b:21:5e:f6:5b:58:de:83:08:8f:ec:fd:42:
04:3c:79:d3:5a:fd:c7:ed:95:14:10:6a:f4:b7:d0:
af:cb:74:e5:8c:e5:dc:f8:11:fa:df:3f:b0:0b:c5:
49:ff:ea:c3:39:0a:f2:f7:58:05:89:a3:58:8d:ed:
4f:4b:a8:10:29:da:db:9b:14:60:fe:39:04:59:19:
02:32:ba:82:9a:f8:d3:38:17:44:02:e0:1e:b4:89:
8c:73:d2:67:76:28:98:27:d7:9e:ca:a0:a1:fe:da:
f9:49:89:9b:69:f1:dc:52:22:b5:6e:0e:3b:86:ef:
09:44:8e:c4:17:a9:1a:f3:68:2b:24:82:a5:47:d6:
67:05:fb:08:e5:dd:ac:c5:6e:c9:ad:07:40:1d:43:
e3:8c:3f:62:05:1c:1d:05:ea:c8:db:c0:fd:6f:40:
80:c4:7c:07:fb:74:c4:78:bb:de:d9:37:84:a4:98:
da:89:25:74:88:ff:e8:c2:04:8e:ba:67:72:11:68:
79:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:46:75:10:CD:E0:28:D3:C9:87:D5:E1:4B:A8:55:42:75:01:C7:65
X509v3 Authority Key Identifier:
keyid:1B:64:6D:42:CE:89:D4:09:3E:4A:C9:27:A7:F2:36:F3:7A:51:AB:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2RtQs6J1Ak-Ssknp_I283pRq-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:90:77:66:de:ee:eb:4e:f3:b7:66:41:fb:0a:c6:21:77:5a:
97:b0:cc:1c:e7:5d:77:34:91:ce:61:8a:21:7b:f6:6b:93:67:
6f:60:ed:8f:14:6b:79:5f:aa:ed:28:fd:26:d0:16:79:2c:6a:
98:33:6b:46:60:28:13:2b:86:95:12:f0:31:5a:c1:ba:3f:34:
ca:af:89:73:c5:54:15:aa:4f:18:f4:67:12:5b:79:62:1f:1b:
f2:9a:73:89:98:96:a0:27:00:48:b0:34:42:0a:20:c6:a7:d4:
d3:14:52:d6:d3:17:f3:db:1a:05:f7:fc:00:d3:06:4d:aa:a2:
a5:8d:db:0f:00:61:58:a0:c2:3a:8b:96:36:b8:36:ca:e8:49:
71:c7:a5:f8:51:3b:3a:8e:25:e5:a7:7e:d6:54:61:6f:8c:91:
49:05:a6:ad:c6:ec:be:2d:97:05:52:ec:f5:77:0e:08:54:59:
a3:c4:4b:c3:7c:f2:5d:94:04:ce:dd:72:d5:38:91:4e:5d:67:
8a:b6:64:d6:9f:80:0a:69:a9:06:c7:b3:08:88:f5:b7:89:c6:
db:ef:0d:4d:6c:30:e7:11:7f:a3:60:09:9c:7e:56:20:e6:c7:
1e:48:b6:f6:3f:ab:31:9a:c6:8b:79:22:37:4f:9e:c2:9b:62:
d7:4d:cb:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05rr3uinJQ2SGAXA8+pLB/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiNjQ2ZDQyY2U4OWQ0MDkzZTRhYzkyN2E3ZjIzNmYzN2E1
MWFiZTIwHhcNMjYwMzI5MTMwMDQ2WhcNMjYwMzMwMTMwMDQ2WjAzMTEwLwYDVQQD
Eyg5NjQ2NzUxMGNkZTAyOGQzYzk4N2Q1ZTE0YmE4NTU0Mjc1MDFjNzY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAymARKSs587CKVA1Za082FFpOdLxn
1DX1TVGXOeVLZM3ha01sK6EyMoS6Sqai5JcHxx+uoOL815veaeGzExshXvZbWN6D
CI/s/UIEPHnTWv3H7ZUUEGr0t9Cvy3TljOXc+BH63z+wC8VJ/+rDOQry91gFiaNY
je1PS6gQKdrbmxRg/jkEWRkCMrqCmvjTOBdEAuAetImMc9JndiiYJ9eeyqCh/tr5
SYmbafHcUiK1bg47hu8JRI7EF6ka82grJIKlR9ZnBfsI5d2sxW7JrQdAHUPjjD9i
BRwdBerI28D9b0CAxHwH+3TEeLve2TeEpJjaiSV0iP/owgSOumdyEWh5LQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJZGdRDN4CjTyYfV4UuoVUJ1AcdlMB8GA1UdIwQY
MBaAFBtkbULOidQJPkrJJ6fyNvN6UaviMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzJSdFFzNkoxQWstU3NrbnBfSTI4M3BScS1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9kZjFiY2MtMDIwMC00NmNiLWE5MzMt
NjYzNDBiYmZmMGI5LzEvRzJSdFFzNkoxQWstU3NrbnBfSTI4M3BScS1JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS9kZjFiY2MtMDIwMC00NmNiLWE5MzMtNjYzNDBiYmZmMGI5
LzEvRzJSdFFzNkoxQWstU3NrbnBfSTI4M3BScS1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL5B3Zt7u
607zt2ZB+wrGIXdal7DMHOdddzSRzmGKIXv2a5Nnb2DtjxRreV+q7Sj9JtAWeSxq
mDNrRmAoEyuGlRLwMVrBuj80yq+Jc8VUFapPGPRnElt5Yh8b8ppziZiWoCcASLA0
QgogxqfU0xRS1tMX89saBff8ANMGTaqipY3bDwBhWKDCOouWNrg2yuhJccel+FE7
Oo4l5ad+1lRhb4yRSQWmrcbsvi2XBVLs9XcOCFRZo8RLw3zyXZQEzt1y1TiRTl1n
irZk1p+ACmmpBsezCIj1t4nG2+8NTWww5xF/o2AJnH5WIObHHki29j+rMZrGi3ki
N0+ewpti103LCg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 16:58:51 2026 by rpki-client