Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.mft
File: G2RtQs6J1Ak-Ssknp_I283pRq-I.mft (raw, json)
Hash identifier: c4E3OPjQa3vFYM/YcALTtKzyPNrwF7XbbaWpZUxr4Fc=
Subject key identifier: A0:CE:69:F2:B0:76:AB:68:CB:5C:CD:81:2D:D9:9F:AA:50:D1:BC:C7
Authority key identifier: 1B:64:6D:42:CE:89:D4:09:3E:4A:C9:27:A7:F2:36:F3:7A:51:AB:E2
Certificate issuer: /CN=1b646d42ce89d4093e4ac927a7f236f37a51abe2
Certificate serial: 019E2926FE9F2DEF7D70B0834D7088C8A1A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G2RtQs6J1Ak-Ssknp_I283pRq-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.mft
Manifest number: 1133
Signing time: Fri 15 May 2026 01:01:21 +0000
Manifest this update: Fri 15 May 2026 01:01:21 +0000
Manifest next update: Sat 16 May 2026 01:01:21 +0000
Files and hashes: 1: G2RtQs6J1Ak-Ssknp_I283pRq-I.crl (hash: jp/FAVfqpxvp/LvqNNtVZE4YLuVV8jaV+YWNiXUxcj0=)
2: buasPl807dGAfqgw1urBhY4Km5w.roa (hash: PQav8NXXwoaYuBOPi54S+Cjky9Sn3BtCmVplgakM7xk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/G2RtQs6J1Ak-Ssknp_I283pRq-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 01:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:29:26:fe:9f:2d:ef:7d:70:b0:83:4d:70:88:c8:a1:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b646d42ce89d4093e4ac927a7f236f37a51abe2
Validity
Not Before: May 15 01:01:21 2026 GMT
Not After : May 16 01:01:21 2026 GMT
Subject: CN=a0ce69f2b076ab68cb5ccd812dd99faa50d1bcc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:63:c4:82:40:8a:87:65:ae:8b:56:d1:61:56:
bd:e2:a8:e1:77:b9:75:b0:cd:c0:aa:90:8d:d4:82:
b9:97:5f:77:2a:b3:c0:4e:77:96:a8:36:37:13:77:
c3:69:39:ad:9b:ca:a5:74:a0:df:66:0c:80:48:c3:
87:a4:ab:b0:d7:00:34:62:9e:33:3a:70:da:c8:4c:
fc:68:a5:e0:72:b1:d7:0d:e8:c8:3f:af:c8:97:9c:
4b:ff:47:b7:cc:52:18:17:2a:42:ba:d2:77:9f:da:
ec:ab:a2:81:14:25:e2:2b:0e:de:a9:fb:8b:9c:01:
72:22:8c:44:16:43:14:66:9e:17:3e:ab:ee:7d:c3:
9b:55:4e:1c:44:be:74:b2:35:4b:b2:1e:60:b1:6a:
1c:1f:fd:67:fc:ed:60:3e:6c:48:1a:be:75:fb:76:
de:64:60:d1:de:81:1c:65:4e:f0:1c:b6:87:77:48:
ea:4a:f0:95:dd:c7:f0:d3:20:64:cc:62:97:23:7d:
06:32:e8:fd:ed:bd:d5:e1:0e:1b:77:6f:30:8f:ac:
32:b7:31:28:26:c5:0c:98:ff:69:45:d4:9a:52:86:
1b:01:de:86:a4:58:ad:7f:a9:c0:1b:41:e1:21:da:
b5:6b:4b:f0:46:a7:13:74:83:d2:42:38:95:d8:bb:
94:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:CE:69:F2:B0:76:AB:68:CB:5C:CD:81:2D:D9:9F:AA:50:D1:BC:C7
X509v3 Authority Key Identifier:
keyid:1B:64:6D:42:CE:89:D4:09:3E:4A:C9:27:A7:F2:36:F3:7A:51:AB:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2RtQs6J1Ak-Ssknp_I283pRq-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:d5:d4:58:43:20:71:71:9a:7c:50:00:56:b2:e3:8b:a6:bd:
50:4a:c0:fd:de:42:be:5e:1c:16:c1:1f:13:78:8a:ea:f5:07:
2c:84:12:27:06:39:d3:2a:fa:38:cb:ba:b0:a5:1f:ec:9c:bb:
97:e1:7c:a9:c6:dc:40:96:eb:b1:8b:1d:2e:d3:42:de:a7:b0:
a1:7e:88:07:88:c2:e2:de:53:15:e2:51:77:80:c8:32:06:ef:
e3:63:20:2a:ab:02:7b:63:bf:5f:14:f3:62:25:4e:31:eb:e9:
a1:fc:64:f9:b1:bc:a7:25:80:05:2a:96:bf:fb:2f:de:f3:b0:
64:fd:05:dc:61:f7:a4:c5:29:47:21:41:21:fc:80:ea:70:22:
9d:6b:ae:8a:f6:45:76:84:37:5e:55:26:6e:30:0b:88:9e:2c:
a1:69:65:b6:0a:d7:00:c5:70:2f:95:c2:ff:64:42:f8:76:8b:
55:4b:97:26:c5:bd:e8:63:42:1f:a8:0e:a5:a2:56:05:33:c9:
05:68:6d:fb:da:4a:35:15:05:92:09:da:f4:34:cf:50:26:d9:
ba:e3:85:bf:f3:8d:e7:d7:42:c6:32:5c:b0:5f:8f:88:c4:51:
50:f3:02:bd:d2:24:95:bd:e9:9b:de:1b:3a:9c:ff:84:67:26:
6b:f3:32:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4pJv6fLe99cLCDTXCIyKGoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiNjQ2ZDQyY2U4OWQ0MDkzZTRhYzkyN2E3ZjIzNmYzN2E1
MWFiZTIwHhcNMjYwNTE1MDEwMTIxWhcNMjYwNTE2MDEwMTIxWjAzMTEwLwYDVQQD
EyhhMGNlNjlmMmIwNzZhYjY4Y2I1Y2NkODEyZGQ5OWZhYTUwZDFiY2M3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWPEgkCKh2Wui1bRYVa94qjhd7l1
sM3AqpCN1IK5l193KrPATneWqDY3E3fDaTmtm8qldKDfZgyASMOHpKuw1wA0Yp4z
OnDayEz8aKXgcrHXDejIP6/Il5xL/0e3zFIYFypCutJ3n9rsq6KBFCXiKw7eqfuL
nAFyIoxEFkMUZp4XPqvufcObVU4cRL50sjVLsh5gsWocH/1n/O1gPmxIGr51+3be
ZGDR3oEcZU7wHLaHd0jqSvCV3cfw0yBkzGKXI30GMuj97b3V4Q4bd28wj6wytzEo
JsUMmP9pRdSaUoYbAd6GpFitf6nAG0HhIdq1a0vwRqcTdIPSQjiV2LuUPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKDOafKwdqtoy1zNgS3Zn6pQ0bzHMB8GA1UdIwQY
MBaAFBtkbULOidQJPkrJJ6fyNvN6UaviMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzJSdFFzNkoxQWstU3NrbnBfSTI4M3BScS1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9kZjFiY2MtMDIwMC00NmNiLWE5MzMt
NjYzNDBiYmZmMGI5LzEvRzJSdFFzNkoxQWstU3NrbnBfSTI4M3BScS1JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS9kZjFiY2MtMDIwMC00NmNiLWE5MzMtNjYzNDBiYmZmMGI5
LzEvRzJSdFFzNkoxQWstU3NrbnBfSTI4M3BScS1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ9XUWEMg
cXGafFAAVrLji6a9UErA/d5Cvl4cFsEfE3iK6vUHLIQSJwY50yr6OMu6sKUf7Jy7
l+F8qcbcQJbrsYsdLtNC3qewoX6IB4jC4t5TFeJRd4DIMgbv42MgKqsCe2O/XxTz
YiVOMevpofxk+bG8pyWABSqWv/sv3vOwZP0F3GH3pMUpRyFBIfyA6nAinWuuivZF
doQ3XlUmbjALiJ4soWlltgrXAMVwL5XC/2RC+HaLVUuXJsW96GNCH6gOpaJWBTPJ
BWht+9pKNRUFkgna9DTPUCbZuuOFv/ON59dCxjJcsF+PiMRRUPMCvdIklb3pm94b
Opz/hGcma/Myxg==
-----END CERTIFICATE-----
Generated at Fri May 15 07:02:28 2026 by rpki-client