Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/bdfe17-91ad-4f31-aecd-81ed12ddf175/1/G55Be7nssazpSR68KCO7eJNLLN8.mft
File: G55Be7nssazpSR68KCO7eJNLLN8.mft (raw, json)
Hash identifier: 5MUbfoFlOQ0DddvEcW4A5CUv04r4zjQFt1y5xtfrL5w=
Subject key identifier: F2:20:0E:17:41:4C:77:58:2A:19:D6:11:8F:74:F7:39:9B:BE:EE:92
Authority key identifier: 1B:9E:41:7B:B9:EC:B1:AC:E9:49:1E:BC:28:23:BB:78:93:4B:2C:DF
Certificate issuer: /CN=1b9e417bb9ecb1ace9491ebc2823bb78934b2cdf
Certificate serial: 019D37899E808CCCFA6C4019239BFD400BC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G55Be7nssazpSR68KCO7eJNLLN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/bdfe17-91ad-4f31-aecd-81ed12ddf175/1/G55Be7nssazpSR68KCO7eJNLLN8.mft
Manifest number: 173D
Signing time: Sun 29 Mar 2026 03:00:58 +0000
Manifest this update: Sun 29 Mar 2026 03:00:58 +0000
Manifest next update: Mon 30 Mar 2026 03:00:58 +0000
Files and hashes: 1: G55Be7nssazpSR68KCO7eJNLLN8.crl (hash: SvVFgl43Is4gPKnRQi1bpTyWidu2W6XV0jFhDpJEj0w=)
2: Uq5inBb-jqOud0f_hbs-E8z_-XY.roa (hash: S1HZrn9S5gAaduSRYO2e3A+5aLVn8Wyzjkhn28j1jks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/bdfe17-91ad-4f31-aecd-81ed12ddf175/1/G55Be7nssazpSR68KCO7eJNLLN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/bdfe17-91ad-4f31-aecd-81ed12ddf175/1/G55Be7nssazpSR68KCO7eJNLLN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/G55Be7nssazpSR68KCO7eJNLLN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:9e:80:8c:cc:fa:6c:40:19:23:9b:fd:40:0b:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b9e417bb9ecb1ace9491ebc2823bb78934b2cdf
Validity
Not Before: Mar 29 03:00:58 2026 GMT
Not After : Mar 30 03:00:58 2026 GMT
Subject: CN=f2200e17414c77582a19d6118f74f7399bbeee92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:03:89:f8:0c:04:29:17:80:73:bf:7d:63:a8:
0c:71:86:0a:33:7d:3b:b0:94:96:87:8c:f7:31:1b:
b8:5d:a3:62:fe:f1:49:37:16:de:c0:af:35:fd:34:
5c:38:3f:a4:a1:e0:31:af:f4:8c:11:e3:59:56:6d:
f3:b9:e7:08:47:5a:98:5d:e2:b6:09:28:d0:09:ce:
d4:8f:6f:dc:54:99:df:63:72:57:52:a3:b5:37:ea:
0f:08:9e:d8:c8:5e:ed:ea:41:d2:8a:0b:bc:af:0d:
e6:a7:5f:2d:1f:a6:af:bd:60:71:57:fb:e7:4c:74:
99:36:da:8a:e6:16:69:67:da:1a:0e:c1:cf:a1:da:
78:25:4d:51:c8:24:d3:90:56:37:0d:f0:32:ea:b6:
c5:9e:9b:80:43:2a:11:8a:a4:15:48:9b:d4:3b:51:
b1:8a:f2:9d:6f:dc:84:56:08:c6:83:47:91:be:f9:
d4:e8:8b:d0:04:f6:b1:c3:18:79:f0:03:81:08:2f:
54:e5:f0:80:ff:6f:85:02:ac:93:23:ad:cb:13:b3:
b3:e6:3b:d9:0a:99:58:0d:4e:ac:86:fb:0d:32:24:
65:43:38:b0:a0:29:e8:6a:5b:13:7c:53:d3:3c:e5:
65:fe:5e:eb:c1:7a:f6:d6:2e:ea:d5:94:44:2f:57:
5e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:20:0E:17:41:4C:77:58:2A:19:D6:11:8F:74:F7:39:9B:BE:EE:92
X509v3 Authority Key Identifier:
keyid:1B:9E:41:7B:B9:EC:B1:AC:E9:49:1E:BC:28:23:BB:78:93:4B:2C:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G55Be7nssazpSR68KCO7eJNLLN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/bdfe17-91ad-4f31-aecd-81ed12ddf175/1/G55Be7nssazpSR68KCO7eJNLLN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/bdfe17-91ad-4f31-aecd-81ed12ddf175/1/G55Be7nssazpSR68KCO7eJNLLN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:df:2c:4c:e0:95:d2:c5:8f:c5:72:c1:aa:9f:93:d7:3f:78:
b6:55:e7:69:ce:f4:e3:60:f3:94:5d:f0:9d:94:20:a3:e2:ba:
6c:75:38:8d:b4:06:3e:13:ee:c7:c2:ca:25:5f:c9:15:cc:f5:
51:82:d6:1e:42:77:82:47:e2:3c:15:41:ad:f8:21:fa:e8:b9:
d2:9d:15:29:7f:4b:4c:89:06:04:2b:83:a9:83:c9:ad:b4:87:
ef:75:42:8d:27:aa:7b:32:41:b6:7c:36:1e:ed:1b:5d:de:4a:
a7:73:17:f4:92:6a:56:26:d8:fa:a2:2b:dd:bf:f6:17:2e:98:
f5:54:20:9d:31:53:d6:ff:1a:8d:fa:e2:91:8e:8b:d8:97:77:
27:2b:3c:48:8a:55:f9:35:60:22:26:45:43:b0:1c:7c:c2:8a:
1a:84:48:c8:48:70:68:da:6c:2f:15:0a:d8:ce:9e:19:91:9c:
60:85:e0:cf:fc:f9:37:9c:7f:ac:b5:de:0a:49:1c:c3:0e:84:
d6:1c:3c:a4:f9:ed:07:9e:4c:6f:f4:91:a6:10:01:2b:3c:bf:
00:5d:20:f9:11:6c:85:bd:2a:e8:07:c4:0e:4e:c6:6f:05:70:
e4:f4:ca:fa:cf:b0:db:97:2d:8f:b3:fc:10:3e:aa:0d:61:57:
27:15:23:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03iZ6AjMz6bEAZI5v9QAvCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiOWU0MTdiYjllY2IxYWNlOTQ5MWViYzI4MjNiYjc4OTM0
YjJjZGYwHhcNMjYwMzI5MDMwMDU4WhcNMjYwMzMwMDMwMDU4WjAzMTEwLwYDVQQD
EyhmMjIwMGUxNzQxNGM3NzU4MmExOWQ2MTE4Zjc0ZjczOTliYmVlZTkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoAOJ+AwEKReAc799Y6gMcYYKM307
sJSWh4z3MRu4XaNi/vFJNxbewK81/TRcOD+koeAxr/SMEeNZVm3zuecIR1qYXeK2
CSjQCc7Uj2/cVJnfY3JXUqO1N+oPCJ7YyF7t6kHSigu8rw3mp18tH6avvWBxV/vn
THSZNtqK5hZpZ9oaDsHPodp4JU1RyCTTkFY3DfAy6rbFnpuAQyoRiqQVSJvUO1Gx
ivKdb9yEVgjGg0eRvvnU6IvQBPaxwxh58AOBCC9U5fCA/2+FAqyTI63LE7Oz5jvZ
CplYDU6shvsNMiRlQziwoCnoalsTfFPTPOVl/l7rwXr21i7q1ZREL1debQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPIgDhdBTHdYKhnWEY909zmbvu6SMB8GA1UdIwQY
MBaAFBueQXu57LGs6UkevCgju3iTSyzfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzU1QmU3bnNzYXpwU1I2OEtDTzdlSk5MTE44LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9iZGZlMTctOTFhZC00ZjMxLWFlY2Qt
ODFlZDEyZGRmMTc1LzEvRzU1QmU3bnNzYXpwU1I2OEtDTzdlSk5MTE44Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9iZGZlMTctOTFhZC00ZjMxLWFlY2QtODFlZDEyZGRmMTc1
LzEvRzU1QmU3bnNzYXpwU1I2OEtDTzdlSk5MTE44LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd98sTOCV
0sWPxXLBqp+T1z94tlXnac7042DzlF3wnZQgo+K6bHU4jbQGPhPux8LKJV/JFcz1
UYLWHkJ3gkfiPBVBrfgh+ui50p0VKX9LTIkGBCuDqYPJrbSH73VCjSeqezJBtnw2
Hu0bXd5Kp3MX9JJqVibY+qIr3b/2Fy6Y9VQgnTFT1v8ajfrikY6L2Jd3Jys8SIpV
+TVgIiZFQ7AcfMKKGoRIyEhwaNpsLxUK2M6eGZGcYIXgz/z5N5x/rLXeCkkcww6E
1hw8pPntB55Mb/SRphABKzy/AF0g+RFshb0q6AfEDk7GbwVw5PTK+s+w25ctj7P8
ED6qDWFXJxUjmA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:44 2026 by rpki-client