
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.mft
File: G2RtQs6J1Ak-Ssknp_I283pRq-I.mft (raw, json)
Hash identifier: kgquNpIOzaP8xipqPMOOEhWbb1t/QWuw3QJx9ZzHyiU=
Subject key identifier: 0B:5F:0D:91:A5:A8:8A:CA:E1:2C:CC:26:62:06:2C:9B:19:D6:94:9B
Authority key identifier: 1B:64:6D:42:CE:89:D4:09:3E:4A:C9:27:A7:F2:36:F3:7A:51:AB:E2
Certificate issuer: /CN=1b646d42ce89d4093e4ac927a7f236f37a51abe2
Certificate serial: 01A0024B7C4F425F6A47B68E21EF34CEC09B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G2RtQs6J1Ak-Ssknp_I283pRq-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.mft
Manifest number: 1228
Signing time: Fri 14 Aug 2026 22:01:36 +0000
Manifest this update: Fri 14 Aug 2026 22:01:36 +0000
Manifest next update: Sat 15 Aug 2026 22:01:36 +0000
Files and hashes: 1: G2RtQs6J1Ak-Ssknp_I283pRq-I.crl (hash: SPCoAueTaTs3ImP3udRBDhV/rnNCbf+cu1AZNxbsWHY=)
2: buasPl807dGAfqgw1urBhY4Km5w.roa (hash: PQav8NXXwoaYuBOPi54S+Cjky9Sn3BtCmVplgakM7xk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/G2RtQs6J1Ak-Ssknp_I283pRq-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:4b:7c:4f:42:5f:6a:47:b6:8e:21:ef:34:ce:c0:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b646d42ce89d4093e4ac927a7f236f37a51abe2
Validity
Not Before: Aug 14 22:01:36 2026 GMT
Not After : Aug 15 22:01:36 2026 GMT
Subject: CN=0b5f0d91a5a88acae12ccc2662062c9b19d6949b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d2:03:0b:84:dd:87:73:9b:1f:c6:fd:46:41:
29:c5:9f:bb:71:a7:cb:61:32:55:ec:69:c0:e2:a7:
31:36:25:46:96:da:f7:5e:12:de:b3:a1:f8:4f:05:
44:1b:8d:2a:54:ed:af:ea:75:73:e4:88:c5:dc:d3:
ee:a1:2a:0b:84:5c:7a:21:c0:5d:1f:9d:bf:7e:43:
7f:1e:3e:8c:82:49:d0:5b:ec:ca:ea:1e:b6:de:cb:
37:60:52:c4:56:12:56:ac:28:c7:97:9e:dc:08:3f:
c7:c7:6a:15:0d:02:63:74:6f:d2:f4:cf:2c:dd:29:
8a:65:25:7a:3c:72:29:dd:21:68:07:1c:2c:94:29:
3f:a0:76:0d:5b:1c:dc:1d:56:17:1e:59:03:a7:af:
97:34:4c:56:6f:73:15:78:1a:37:3c:a2:d0:c7:c5:
bf:de:1a:a1:f0:c7:d6:04:1e:5c:54:d8:c8:3f:86:
64:6d:15:ec:29:d3:17:c6:c6:92:bd:40:bb:e4:18:
9c:3b:48:6d:6e:91:51:36:fe:a6:14:02:55:86:63:
e2:c9:42:5a:07:7a:82:23:15:8c:72:32:b7:69:0a:
94:a1:65:19:5d:71:30:a0:ef:51:22:61:62:51:9f:
11:48:1f:a9:28:31:ef:cb:59:3f:b2:a9:f8:44:11:
dc:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:5F:0D:91:A5:A8:8A:CA:E1:2C:CC:26:62:06:2C:9B:19:D6:94:9B
X509v3 Authority Key Identifier:
keyid:1B:64:6D:42:CE:89:D4:09:3E:4A:C9:27:A7:F2:36:F3:7A:51:AB:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2RtQs6J1Ak-Ssknp_I283pRq-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:09:86:b1:63:b0:d6:c9:26:32:b5:53:8f:5a:72:b2:7e:4d:
95:05:4c:7c:e0:95:e3:7d:ea:40:b4:a1:d4:84:0c:2d:06:3f:
d5:8e:cc:b9:29:4e:40:4b:64:4d:81:19:e6:af:7f:e6:77:0c:
25:52:85:05:3f:92:7e:3c:7c:4d:55:44:1b:b0:eb:67:1b:98:
0a:31:99:1d:8e:20:4b:a1:28:80:26:95:f6:e1:d0:0d:a4:a1:
4a:0d:9b:aa:ef:42:de:86:ba:39:0e:a4:96:ae:80:72:65:61:
9a:38:33:e5:dc:d6:06:3d:05:53:0e:10:f7:0e:19:75:b9:1a:
54:9c:39:87:d5:c5:ad:06:ba:a8:21:c0:69:2e:a4:24:00:7e:
12:04:a3:62:d2:61:92:c9:86:7b:27:45:cd:bd:34:59:ad:14:
ab:f5:c1:25:e5:94:d3:de:fe:6c:ef:d5:f8:fb:bd:df:99:d7:
22:9b:21:7f:30:d9:55:48:79:cd:4d:a8:d7:e8:0f:dd:20:da:
c6:06:6f:07:7c:a6:96:6f:e7:ac:c6:e1:6c:50:03:72:32:41:
de:f3:c7:9f:14:56:91:27:76:b7:c9:28:96:06:22:e7:87:9b:
fb:b4:3f:85:90:31:b4:ad:f7:5a:34:8e:1c:76:96:5b:70:8a:
64:99:be:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaACS3xPQl9qR7aOIe80zsCbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiNjQ2ZDQyY2U4OWQ0MDkzZTRhYzkyN2E3ZjIzNmYzN2E1
MWFiZTIwHhcNMjYwODE0MjIwMTM2WhcNMjYwODE1MjIwMTM2WjAzMTEwLwYDVQQD
EygwYjVmMGQ5MWE1YTg4YWNhZTEyY2NjMjY2MjA2MmM5YjE5ZDY5NDliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1NIDC4Tdh3ObH8b9RkEpxZ+7cafL
YTJV7GnA4qcxNiVGltr3XhLes6H4TwVEG40qVO2v6nVz5IjF3NPuoSoLhFx6IcBd
H52/fkN/Hj6MgknQW+zK6h623ss3YFLEVhJWrCjHl57cCD/Hx2oVDQJjdG/S9M8s
3SmKZSV6PHIp3SFoBxwslCk/oHYNWxzcHVYXHlkDp6+XNExWb3MVeBo3PKLQx8W/
3hqh8MfWBB5cVNjIP4ZkbRXsKdMXxsaSvUC75BicO0htbpFRNv6mFAJVhmPiyUJa
B3qCIxWMcjK3aQqUoWUZXXEwoO9RImFiUZ8RSB+pKDHvy1k/sqn4RBHcoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAtfDZGlqIrK4SzMJmIGLJsZ1pSbMB8GA1UdIwQY
MBaAFBtkbULOidQJPkrJJ6fyNvN6UaviMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzJSdFFzNkoxQWstU3NrbnBfSTI4M3BScS1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9kZjFiY2MtMDIwMC00NmNiLWE5MzMt
NjYzNDBiYmZmMGI5LzEvRzJSdFFzNkoxQWstU3NrbnBfSTI4M3BScS1JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS9kZjFiY2MtMDIwMC00NmNiLWE5MzMtNjYzNDBiYmZmMGI5
LzEvRzJSdFFzNkoxQWstU3NrbnBfSTI4M3BScS1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVAmGsWOw
1skmMrVTj1pysn5NlQVMfOCV433qQLSh1IQMLQY/1Y7MuSlOQEtkTYEZ5q9/5ncM
JVKFBT+Sfjx8TVVEG7DrZxuYCjGZHY4gS6EogCaV9uHQDaShSg2bqu9C3oa6OQ6k
lq6AcmVhmjgz5dzWBj0FUw4Q9w4ZdbkaVJw5h9XFrQa6qCHAaS6kJAB+EgSjYtJh
ksmGeydFzb00Wa0Uq/XBJeWU097+bO/V+Pu935nXIpshfzDZVUh5zU2o1+gP3SDa
xgZvB3ymlm/nrMbhbFADcjJB3vPHnxRWkSd2t8kolgYi54eb+7Q/hZAxtK33WjSO
HHaWW3CKZJm+pw==
-----END CERTIFICATE-----
Generated at Sat Aug 15 04:32:50 2026 by rpki-client