Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/655006-6275-4d24-b3db-02c47b9ea49d/1/G28HR08S96M-XCG8L_uwdaF70T8.mft
File: G28HR08S96M-XCG8L_uwdaF70T8.mft (raw, json)
Hash identifier: CYP0FlijaTnaIUo+lZKxmw6ngQ9qLCfuKRp6EiXjR8c=
Subject key identifier: D5:9A:76:46:6F:40:32:2B:A4:41:EA:25:FE:61:2C:C9:E0:E5:B1:7F
Authority key identifier: 1B:6F:07:47:4F:12:F7:A3:3E:5C:21:BC:2F:FB:B0:75:A1:7B:D1:3F
Certificate issuer: /CN=1b6f07474f12f7a33e5c21bc2ffbb075a17bd13f
Certificate serial: 019D29CE6EF444DA6FC112083EB45F12656F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G28HR08S96M-XCG8L_uwdaF70T8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/655006-6275-4d24-b3db-02c47b9ea49d/1/G28HR08S96M-XCG8L_uwdaF70T8.mft
Manifest number: 150C
Signing time: Thu 26 Mar 2026 11:01:27 +0000
Manifest this update: Thu 26 Mar 2026 11:01:27 +0000
Manifest next update: Fri 27 Mar 2026 11:01:27 +0000
Files and hashes: 1: 0jmv6E6nQfihp67UOSMcz_xDPcw.roa (hash: LsnhLL47q0cgL81shTzaL8RIZARhHeGkiQjpcXf/BNY=)
2: G28HR08S96M-XCG8L_uwdaF70T8.crl (hash: xgwFC/hsBSbNbqsjCUTsy7GEQdj1N3DjXu0FB/yLYYk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/655006-6275-4d24-b3db-02c47b9ea49d/1/G28HR08S96M-XCG8L_uwdaF70T8.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/655006-6275-4d24-b3db-02c47b9ea49d/1/G28HR08S96M-XCG8L_uwdaF70T8.mft
rsync://rpki.ripe.net/repository/DEFAULT/G28HR08S96M-XCG8L_uwdaF70T8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:6e:f4:44:da:6f:c1:12:08:3e:b4:5f:12:65:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b6f07474f12f7a33e5c21bc2ffbb075a17bd13f
Validity
Not Before: Mar 26 11:01:27 2026 GMT
Not After : Mar 27 11:01:27 2026 GMT
Subject: CN=d59a76466f40322ba441ea25fe612cc9e0e5b17f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:bb:11:57:32:f0:22:22:2c:f1:a5:ac:a7:f4:
33:b5:d4:6a:6b:a4:61:63:c9:83:6c:35:56:1f:e6:
ca:a3:87:d7:45:92:5b:02:d9:a5:df:00:75:d4:e0:
29:26:4c:cc:8e:f3:43:8c:7a:5d:45:6d:75:88:07:
58:79:c8:8c:02:70:7e:2d:18:71:85:4c:ce:d3:87:
c0:17:84:c6:e0:1b:51:c5:ee:96:e1:90:46:22:4b:
a3:16:16:37:0c:f2:d9:2b:ec:cf:94:c5:64:0d:e0:
37:d6:13:79:f8:b1:98:96:20:db:2b:b3:97:1c:25:
7f:34:fc:14:d7:bc:11:14:cd:66:5e:0c:78:29:f2:
17:77:46:85:b3:83:4e:d2:6c:6a:0d:86:e5:e5:9e:
d5:9a:3a:81:ef:33:3e:73:34:96:85:e3:9e:19:34:
b3:3e:ab:f6:74:32:50:3b:66:ce:e6:bd:be:dc:bc:
c1:cb:7d:b2:9a:60:db:e9:30:41:d4:8f:17:82:5b:
8f:9a:b0:9d:0a:3c:ea:86:a8:c9:fb:06:03:b6:42:
00:f8:e0:4b:00:76:5b:32:ff:7b:3c:56:23:48:1d:
68:9d:e2:a3:33:fc:20:0f:1d:7a:58:55:1d:51:9b:
ea:58:25:65:a5:16:4f:9b:a3:64:b2:28:1e:71:99:
1d:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:9A:76:46:6F:40:32:2B:A4:41:EA:25:FE:61:2C:C9:E0:E5:B1:7F
X509v3 Authority Key Identifier:
keyid:1B:6F:07:47:4F:12:F7:A3:3E:5C:21:BC:2F:FB:B0:75:A1:7B:D1:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G28HR08S96M-XCG8L_uwdaF70T8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/655006-6275-4d24-b3db-02c47b9ea49d/1/G28HR08S96M-XCG8L_uwdaF70T8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/655006-6275-4d24-b3db-02c47b9ea49d/1/G28HR08S96M-XCG8L_uwdaF70T8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:5f:ad:73:ae:a4:f7:81:95:d3:80:b7:05:ac:08:56:25:e3:
48:99:c9:ae:78:0c:24:5c:f2:69:47:ff:4c:88:fa:cc:11:15:
59:90:78:44:d4:44:51:cf:21:43:cf:8e:6b:8e:f5:45:24:00:
8f:b9:8d:c1:69:b6:30:0e:b4:3f:1a:b7:28:a5:0a:c7:65:f2:
e7:e6:b0:95:de:47:05:54:de:a2:96:68:8c:b3:99:07:db:dd:
aa:56:f5:15:e1:e0:e4:7d:b1:09:1e:ba:8f:74:e7:02:9a:1a:
69:bb:6f:d1:53:82:5b:8a:1c:fc:dc:2f:55:b4:4f:50:d6:d6:
7a:ea:a6:bc:ad:e7:ce:b2:71:85:9a:0a:fe:d1:6c:86:9f:76:
78:ca:84:fc:43:5d:35:d5:b8:b7:6e:a3:d3:ee:c3:db:9a:7a:
ea:c3:ef:f0:5e:39:8c:b5:9d:7b:10:f6:38:59:22:e6:48:64:
99:94:89:8d:be:b9:73:8d:00:14:cd:4e:a4:42:e5:ea:67:04:
39:cb:14:fa:ec:25:2c:39:40:fe:35:ec:69:17:0f:e8:ba:7e:
61:23:e1:3b:56:b6:16:24:14:2a:c2:26:29:9c:29:33:3c:3b:
14:16:e8:96:6e:d6:47:51:6a:41:d2:13:af:da:90:5c:f2:38:
b7:62:14:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pzm70RNpvwRIIPrRfEmVvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiNmYwNzQ3NGYxMmY3YTMzZTVjMjFiYzJmZmJiMDc1YTE3
YmQxM2YwHhcNMjYwMzI2MTEwMTI3WhcNMjYwMzI3MTEwMTI3WjAzMTEwLwYDVQQD
EyhkNTlhNzY0NjZmNDAzMjJiYTQ0MWVhMjVmZTYxMmNjOWUwZTViMTdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2LsRVzLwIiIs8aWsp/QztdRqa6Rh
Y8mDbDVWH+bKo4fXRZJbAtml3wB11OApJkzMjvNDjHpdRW11iAdYeciMAnB+LRhx
hUzO04fAF4TG4BtRxe6W4ZBGIkujFhY3DPLZK+zPlMVkDeA31hN5+LGYliDbK7OX
HCV/NPwU17wRFM1mXgx4KfIXd0aFs4NO0mxqDYbl5Z7VmjqB7zM+czSWheOeGTSz
Pqv2dDJQO2bO5r2+3LzBy32ymmDb6TBB1I8XgluPmrCdCjzqhqjJ+wYDtkIA+OBL
AHZbMv97PFYjSB1oneKjM/wgDx16WFUdUZvqWCVlpRZPm6NksigecZkdTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNWadkZvQDIrpEHqJf5hLMng5bF/MB8GA1UdIwQY
MBaAFBtvB0dPEvejPlwhvC/7sHWhe9E/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzI4SFIwOFM5Nk0tWENHOExfdXdkYUY3MFQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC82NTUwMDYtNjI3NS00ZDI0LWIzZGIt
MDJjNDdiOWVhNDlkLzEvRzI4SFIwOFM5Nk0tWENHOExfdXdkYUY3MFQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC82NTUwMDYtNjI3NS00ZDI0LWIzZGItMDJjNDdiOWVhNDlk
LzEvRzI4SFIwOFM5Nk0tWENHOExfdXdkYUY3MFQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeF+tc66k
94GV04C3BawIViXjSJnJrngMJFzyaUf/TIj6zBEVWZB4RNREUc8hQ8+Oa471RSQA
j7mNwWm2MA60Pxq3KKUKx2Xy5+awld5HBVTeopZojLOZB9vdqlb1FeHg5H2xCR66
j3TnApoaabtv0VOCW4oc/NwvVbRPUNbWeuqmvK3nzrJxhZoK/tFshp92eMqE/ENd
NdW4t26j0+7D25p66sPv8F45jLWdexD2OFki5khkmZSJjb65c40AFM1OpELl6mcE
OcsU+uwlLDlA/jXsaRcP6Lp+YSPhO1a2FiQUKsImKZwpMzw7FBbolm7WR1FqQdIT
r9qQXPI4t2IUYg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:54:01 2026 by rpki-client