Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/453542-08b2-4399-bc5c-c756ae01fa8a/1/g2CIUSAjKNzl_AG_ndKSUgUw2f4.mft
File: g2CIUSAjKNzl_AG_ndKSUgUw2f4.mft (raw, json)
Hash identifier: nnJbdEc1viGhtX8Tu5KjV/e19SkWa7gTdvRdIgVL3q8=
Subject key identifier: D6:CB:CC:6F:7F:25:EB:C8:20:A3:34:D6:A3:CD:20:08:44:31:D7:C7
Authority key identifier: 83:60:88:51:20:23:28:DC:E5:FC:01:BF:9D:D2:92:52:05:30:D9:FE
Certificate issuer: /CN=83608851202328dce5fc01bf9dd292520530d9fe
Certificate serial: 019E1F11791E1584EF0AE8D077604A662145
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g2CIUSAjKNzl_AG_ndKSUgUw2f4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/453542-08b2-4399-bc5c-c756ae01fa8a/1/g2CIUSAjKNzl_AG_ndKSUgUw2f4.mft
Manifest number: 08B2
Signing time: Wed 13 May 2026 02:01:38 +0000
Manifest this update: Wed 13 May 2026 02:01:38 +0000
Manifest next update: Thu 14 May 2026 02:01:38 +0000
Files and hashes: 1: Ya4-DOHb6IMAOxmkcETIsWTPCOg.roa (hash: u4TLCuqpTYyL9fIrK/kr+oWhEP1P1uyD8bPrTE+F3k0=)
2: g2CIUSAjKNzl_AG_ndKSUgUw2f4.crl (hash: CHZe4jajxMGvPLc2JMZOXYphaVmPh2mawhdMwTZheoo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/453542-08b2-4399-bc5c-c756ae01fa8a/1/g2CIUSAjKNzl_AG_ndKSUgUw2f4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/453542-08b2-4399-bc5c-c756ae01fa8a/1/g2CIUSAjKNzl_AG_ndKSUgUw2f4.mft
rsync://rpki.ripe.net/repository/DEFAULT/g2CIUSAjKNzl_AG_ndKSUgUw2f4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:11:79:1e:15:84:ef:0a:e8:d0:77:60:4a:66:21:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83608851202328dce5fc01bf9dd292520530d9fe
Validity
Not Before: May 13 02:01:38 2026 GMT
Not After : May 14 02:01:38 2026 GMT
Subject: CN=d6cbcc6f7f25ebc820a334d6a3cd20084431d7c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:12:7e:9e:d8:8d:f5:ff:69:c6:ae:b5:c5:41:
84:37:df:dd:ff:dd:ae:c9:45:92:45:cb:41:c3:1e:
e4:00:96:f0:b0:33:90:47:74:20:37:e4:57:6d:98:
f5:40:d2:6b:31:3f:7a:b6:e2:f8:a6:ee:5d:e2:98:
2d:00:29:fd:40:53:05:10:c2:c9:1d:f7:31:f2:4f:
55:23:ec:24:8c:67:a9:9f:e1:fb:63:52:2d:95:78:
a1:39:eb:5c:8e:37:7f:c3:13:53:9e:f8:91:70:12:
6d:98:9a:55:c3:d4:bc:77:3c:6f:4e:ab:52:70:10:
28:4c:99:9f:5c:fb:a4:d6:68:3b:38:c4:1a:c2:f0:
6b:9c:34:15:65:cf:95:9e:4f:5b:90:bc:d4:a7:42:
cf:d4:52:a7:c3:28:46:a2:98:6b:6c:ef:6f:a9:25:
e2:42:94:34:3f:0c:3a:70:c0:3e:7d:59:77:b3:08:
92:18:f8:78:42:a3:05:64:23:50:26:c6:46:8f:a0:
6e:63:ae:29:77:b8:b7:5f:c4:04:d0:db:ba:c1:b8:
e0:e7:25:5b:b9:66:b9:ae:55:c7:aa:4e:9f:34:d8:
56:1f:c6:8a:8b:6e:42:af:16:27:5e:d1:8a:dc:2b:
4b:d0:04:ea:c9:27:c5:37:81:a7:34:db:0e:6b:c1:
f7:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:CB:CC:6F:7F:25:EB:C8:20:A3:34:D6:A3:CD:20:08:44:31:D7:C7
X509v3 Authority Key Identifier:
keyid:83:60:88:51:20:23:28:DC:E5:FC:01:BF:9D:D2:92:52:05:30:D9:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2CIUSAjKNzl_AG_ndKSUgUw2f4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/453542-08b2-4399-bc5c-c756ae01fa8a/1/g2CIUSAjKNzl_AG_ndKSUgUw2f4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/453542-08b2-4399-bc5c-c756ae01fa8a/1/g2CIUSAjKNzl_AG_ndKSUgUw2f4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:8b:79:44:32:47:8f:46:30:eb:2a:98:72:8b:50:d6:49:9a:
e2:cb:c7:ad:3b:2c:5d:9d:16:1a:8f:70:9b:f8:33:38:4f:83:
51:57:31:9f:92:92:8a:5c:fb:72:4f:66:ca:56:b2:e5:dc:2f:
51:49:0a:a1:b8:5b:0c:ec:44:e8:ee:87:36:2e:3e:07:2e:11:
47:92:19:b7:7c:c6:f2:2e:f8:81:31:94:e6:aa:ac:d6:2b:15:
8b:f9:e0:e6:c7:9c:e5:e4:a1:ec:7a:3a:15:56:c5:5e:53:74:
6c:00:76:22:7d:e4:2d:83:b4:1e:c7:de:c8:ca:16:10:d5:98:
ed:a5:05:e0:c7:55:a5:0e:d0:33:93:9a:3a:c8:8f:26:c3:3c:
fb:dd:f7:8b:5f:9b:a5:01:3e:cd:8d:c9:e2:88:df:da:40:79:
d7:ab:e7:30:8e:3f:d7:e3:42:b6:f2:ce:b8:3f:7f:e9:c3:b5:
ac:0d:15:20:01:7e:a1:bb:ac:58:96:ad:ba:d1:f2:b3:60:e9:
88:e4:dd:7c:eb:22:8e:cc:04:a6:73:b8:5e:f8:c7:76:cf:90:
c0:6e:de:03:01:ef:81:a1:33:72:b2:ad:f6:7b:2a:9b:56:52:
00:1f:33:69:e3:8a:5b:e5:7d:12:23:52:f0:42:72:f0:38:e6:
8a:5f:ee:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4fEXkeFYTvCujQd2BKZiFFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzNjA4ODUxMjAyMzI4ZGNlNWZjMDFiZjlkZDI5MjUyMDUz
MGQ5ZmUwHhcNMjYwNTEzMDIwMTM4WhcNMjYwNTE0MDIwMTM4WjAzMTEwLwYDVQQD
EyhkNmNiY2M2ZjdmMjVlYmM4MjBhMzM0ZDZhM2NkMjAwODQ0MzFkN2M3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBJ+ntiN9f9pxq61xUGEN9/d/92u
yUWSRctBwx7kAJbwsDOQR3QgN+RXbZj1QNJrMT96tuL4pu5d4pgtACn9QFMFEMLJ
Hfcx8k9VI+wkjGepn+H7Y1ItlXihOetcjjd/wxNTnviRcBJtmJpVw9S8dzxvTqtS
cBAoTJmfXPuk1mg7OMQawvBrnDQVZc+Vnk9bkLzUp0LP1FKnwyhGophrbO9vqSXi
QpQ0Pww6cMA+fVl3swiSGPh4QqMFZCNQJsZGj6BuY64pd7i3X8QE0Nu6wbjg5yVb
uWa5rlXHqk6fNNhWH8aKi25CrxYnXtGK3CtL0ATqySfFN4GnNNsOa8H33wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNbLzG9/JevIIKM01qPNIAhEMdfHMB8GA1UdIwQY
MBaAFINgiFEgIyjc5fwBv53SklIFMNn+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzJDSVVTQWpLTnpsX0FHX25kS1NVZ1V3MmY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC80NTM1NDItMDhiMi00Mzk5LWJjNWMt
Yzc1NmFlMDFmYThhLzEvZzJDSVVTQWpLTnpsX0FHX25kS1NVZ1V3MmY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC80NTM1NDItMDhiMi00Mzk5LWJjNWMtYzc1NmFlMDFmYThh
LzEvZzJDSVVTQWpLTnpsX0FHX25kS1NVZ1V3MmY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfYt5RDJH
j0Yw6yqYcotQ1kma4svHrTssXZ0WGo9wm/gzOE+DUVcxn5KSilz7ck9mylay5dwv
UUkKobhbDOxE6O6HNi4+By4RR5IZt3zG8i74gTGU5qqs1isVi/ng5sec5eSh7Ho6
FVbFXlN0bAB2In3kLYO0HsfeyMoWENWY7aUF4MdVpQ7QM5OaOsiPJsM8+933i1+b
pQE+zY3J4ojf2kB516vnMI4/1+NCtvLOuD9/6cO1rA0VIAF+obusWJatutHys2Dp
iOTdfOsijswEpnO4XvjHds+QwG7eAwHvgaEzcrKt9nsqm1ZSAB8zaeOKW+V9EiNS
8EJy8Djmil/uDg==
-----END CERTIFICATE-----
Generated at Wed May 13 05:19:52 2026 by rpki-client