Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.mft
File: G87kBAWu-22hejQO7xWc6cTRgyI.mft (raw, json)
Hash identifier: 2kZPKkX2L+p9DMOVW+PgaxPAEWYyFnlE3qJYHDUymZE=
Subject key identifier: 5E:02:8C:97:38:B9:A6:66:96:92:63:92:2C:40:F8:CC:96:95:3F:85
Authority key identifier: 1B:CE:E4:04:05:AE:FB:6D:A1:7A:34:0E:EF:15:9C:E9:C4:D1:83:22
Certificate issuer: /CN=1bcee40405aefb6da17a340eef159ce9c4d18322
Certificate serial: 019D27DFB5051A4D20854574693891B280E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G87kBAWu-22hejQO7xWc6cTRgyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.mft
Manifest number: 159F
Signing time: Thu 26 Mar 2026 02:01:05 +0000
Manifest this update: Thu 26 Mar 2026 02:01:05 +0000
Manifest next update: Fri 27 Mar 2026 02:01:05 +0000
Files and hashes: 1: 1-6iaGXxnmZAQPnrgq_8F_icO1g4.roa (hash: 0E9/yZaAdb1/Mv9Vi0wA6mVdKYXwLD+kDlf9BylOAkE=)
2: G87kBAWu-22hejQO7xWc6cTRgyI.crl (hash: NXdmhK42bv44KPYtf/00ImHRoYOEfun0CZyv3pgVAas=)
3: cDH3zRFxxa5MCdHGhfO_X-DrZiY.roa (hash: XO1nhE/daEhAYwuXZgOrEgjLVoR1QTpbhv4y3qZNEo0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/G87kBAWu-22hejQO7xWc6cTRgyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:b5:05:1a:4d:20:85:45:74:69:38:91:b2:80:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bcee40405aefb6da17a340eef159ce9c4d18322
Validity
Not Before: Mar 26 02:01:05 2026 GMT
Not After : Mar 27 02:01:05 2026 GMT
Subject: CN=5e028c9738b9a666969263922c40f8cc96953f85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:5f:49:5f:17:83:b4:6d:b6:97:c2:27:4b:d3:
cb:42:0b:7a:d5:f7:8b:ed:a2:f5:b4:b9:5c:4d:88:
31:ce:3b:b0:fc:38:b3:bf:5a:83:36:17:18:71:57:
d0:46:3a:e6:c8:ce:e4:3a:2c:dd:71:1f:8a:66:e5:
38:16:31:c3:3d:82:06:54:27:7d:a4:c0:0e:d2:2c:
cf:39:67:32:a6:d3:a7:ce:7c:4b:d9:56:bf:38:78:
93:62:3c:a3:0d:14:4d:e1:d5:d2:21:36:19:4d:3f:
96:ad:7c:76:e0:53:a0:a6:48:9b:3c:34:39:f2:5e:
bc:e1:4e:76:70:cf:a8:29:fb:40:e0:98:91:58:e2:
62:88:34:20:89:97:89:cd:7a:ea:e5:15:48:91:7e:
03:d1:d6:a8:1b:ea:41:09:49:21:dd:a2:a8:00:98:
3f:0c:29:11:49:3f:31:fd:79:d9:ca:79:1c:38:11:
fb:e1:fd:3f:5d:27:ff:ce:1d:03:ff:55:27:ba:4c:
6b:d6:de:60:f3:7d:60:72:55:8c:f3:57:f2:10:76:
90:68:52:dd:82:84:eb:21:ea:05:aa:ad:a0:75:ee:
7a:ea:0c:95:ad:5d:0e:23:b6:67:49:54:3d:96:52:
4e:60:d3:0f:6d:41:75:0e:d2:03:b0:7a:a2:60:e0:
e4:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:02:8C:97:38:B9:A6:66:96:92:63:92:2C:40:F8:CC:96:95:3F:85
X509v3 Authority Key Identifier:
keyid:1B:CE:E4:04:05:AE:FB:6D:A1:7A:34:0E:EF:15:9C:E9:C4:D1:83:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G87kBAWu-22hejQO7xWc6cTRgyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:7e:e4:b5:d1:b7:4c:c6:00:a7:32:c7:2b:3c:0b:01:e7:7f:
ff:c9:74:f4:38:49:36:d4:76:e7:86:ae:74:1e:dc:14:aa:01:
18:6f:07:07:c0:a3:7d:6f:e7:f8:13:f3:40:7e:9b:51:03:49:
76:6c:55:5c:65:4f:5a:23:b2:13:bd:d6:53:8d:b2:95:40:1c:
54:52:99:ca:f7:a4:d6:40:7e:ad:93:a5:57:4c:c0:bf:4a:d4:
79:bb:d7:3b:35:bc:4d:1a:73:b2:02:33:db:e9:c7:31:ed:8e:
54:dc:8b:6a:a1:f6:9a:ba:74:4b:52:b3:7b:4b:d1:b5:76:e0:
eb:ed:d1:ae:10:0f:b6:b1:1b:94:28:1f:3f:f9:c6:39:de:69:
c6:51:33:18:3c:82:ab:38:68:f9:4e:d5:ee:96:df:6c:e7:95:
dc:14:0f:cc:1e:53:04:fe:f3:4a:e3:63:e4:45:7b:0f:24:ef:
42:2d:11:4b:d6:6d:12:f0:b6:25:b3:20:e1:35:7e:f1:04:37:
b4:b3:0c:e6:7d:88:ac:7a:ff:c8:89:75:71:26:3d:27:f8:3e:
b2:ea:4d:6d:ad:59:e1:69:5a:66:2f:90:f8:4b:13:8e:1e:a1:
5f:21:3e:c1:84:9c:d5:13:53:05:69:35:2d:60:da:bf:60:47:
00:79:7b:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:31:26 2026 by rpki-client