Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/bbee59-99f4-413c-b0d6-58081a16cbdb/1/G6b10yR0vob2MFiURTdik0TU8Bo.mft
File: G6b10yR0vob2MFiURTdik0TU8Bo.mft (raw, json)
Hash identifier: cqujMoHht5maiOoHQWV4irIdOTkLAacXcB3o92khs5A=
Subject key identifier: 38:B0:71:90:96:08:AA:01:40:EB:32:4B:C1:D5:03:0F:39:79:7A:31
Authority key identifier: 1B:A6:F5:D3:24:74:BE:86:F6:30:58:94:45:37:62:93:44:D4:F0:1A
Certificate issuer: /CN=1ba6f5d32474be86f63058944537629344d4f01a
Certificate serial: 019D265F772908A65592A2908EE61D328249
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G6b10yR0vob2MFiURTdik0TU8Bo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/bbee59-99f4-413c-b0d6-58081a16cbdb/1/G6b10yR0vob2MFiURTdik0TU8Bo.mft
Manifest number: 066A
Signing time: Wed 25 Mar 2026 19:01:23 +0000
Manifest this update: Wed 25 Mar 2026 19:01:23 +0000
Manifest next update: Thu 26 Mar 2026 19:01:23 +0000
Files and hashes: 1: G6b10yR0vob2MFiURTdik0TU8Bo.crl (hash: YAft3dWG98VvUqWmwxltotBmHDFkDU5hOeFl8PmXTCE=)
2: qchTwrqi0nAVLi_bl4CZl5ndb58.roa (hash: ldZEDUqRJgpdyT5wjo7UFqGO3TLrWDAMg94GFQn1Yls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/bbee59-99f4-413c-b0d6-58081a16cbdb/1/G6b10yR0vob2MFiURTdik0TU8Bo.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/bbee59-99f4-413c-b0d6-58081a16cbdb/1/G6b10yR0vob2MFiURTdik0TU8Bo.mft
rsync://rpki.ripe.net/repository/DEFAULT/G6b10yR0vob2MFiURTdik0TU8Bo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:77:29:08:a6:55:92:a2:90:8e:e6:1d:32:82:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ba6f5d32474be86f63058944537629344d4f01a
Validity
Not Before: Mar 25 19:01:23 2026 GMT
Not After : Mar 26 19:01:23 2026 GMT
Subject: CN=38b071909608aa0140eb324bc1d5030f39797a31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:72:bb:6e:62:85:da:2f:38:8f:69:65:c5:51:
ac:56:8a:62:ae:5c:f3:f3:8a:e9:97:2c:cf:fc:8d:
a2:23:4f:66:16:96:8e:c3:3a:5e:6e:ac:f6:b8:4a:
95:a3:b2:92:56:49:1e:14:e9:f7:06:55:9f:cf:31:
ab:4f:f1:2d:22:77:53:8a:90:57:d8:e3:68:13:d2:
a4:d5:46:72:67:14:fc:74:70:d0:e3:24:2f:4d:f5:
c1:f0:b4:ce:f2:3e:56:86:e4:d8:34:d9:c6:ea:1c:
12:24:9b:df:06:24:22:9d:a9:4a:bd:7f:50:2d:c1:
30:c0:34:1d:d1:3a:be:76:8a:05:37:fa:10:53:dc:
2e:f4:a3:b0:f2:a3:1e:e3:20:93:2d:c1:e0:04:f1:
55:28:ee:ed:7b:a2:ff:f1:94:91:51:42:af:43:b7:
a8:89:da:3c:fe:9a:81:f3:b3:f3:7e:1e:bb:19:d1:
cf:a5:52:92:02:13:27:07:26:00:5d:6b:6d:90:0a:
96:1c:22:55:73:f6:d4:f3:1a:b3:e6:43:83:80:ee:
1d:61:72:79:d3:32:5a:ea:61:ff:43:2a:3a:21:cb:
2a:22:bf:26:24:95:99:78:15:16:af:b8:ec:ed:14:
47:1b:3f:5b:59:08:0b:34:25:1c:87:5b:df:a3:4c:
70:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:B0:71:90:96:08:AA:01:40:EB:32:4B:C1:D5:03:0F:39:79:7A:31
X509v3 Authority Key Identifier:
keyid:1B:A6:F5:D3:24:74:BE:86:F6:30:58:94:45:37:62:93:44:D4:F0:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G6b10yR0vob2MFiURTdik0TU8Bo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/bbee59-99f4-413c-b0d6-58081a16cbdb/1/G6b10yR0vob2MFiURTdik0TU8Bo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/bbee59-99f4-413c-b0d6-58081a16cbdb/1/G6b10yR0vob2MFiURTdik0TU8Bo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:3a:a2:fa:e3:a0:50:40:0b:26:dc:2f:6e:c8:d5:b0:f1:56:
71:d9:4b:09:ca:61:f9:66:27:92:90:fa:47:44:65:4d:44:69:
6a:e5:5d:af:a9:e1:ae:4d:c1:a5:d2:f1:8c:fc:66:43:70:7c:
57:e1:45:ab:c1:0d:4f:82:0b:69:dc:3b:21:e8:b6:d3:3f:18:
b2:e9:3c:3c:df:88:ed:9a:4e:e5:f2:93:c2:13:c0:a3:29:f6:
66:18:5c:d3:fd:30:7f:1a:73:42:aa:ec:8f:31:6c:96:b1:c1:
ac:c3:3f:7b:1d:18:f9:35:61:2f:e8:4f:40:72:c6:ed:b2:f6:
7d:a0:ab:4a:a3:90:0a:8f:04:35:e1:10:fd:0e:dc:17:06:6d:
09:4e:20:0c:97:96:0a:38:4c:da:f7:4d:7f:e2:fc:1c:2d:f3:
eb:83:9a:81:d6:1c:cc:30:c5:ea:fb:36:32:4c:83:a9:90:d9:
a2:26:8a:49:df:ee:8a:31:8e:e5:9d:ed:95:0d:60:2f:42:c6:
51:96:6a:33:b9:7b:a6:5a:8c:c7:b8:fc:d0:75:6d:0e:c7:a0:
26:1f:3a:9c:54:8f:ba:ae:e6:56:88:c8:42:ad:8c:3c:fc:97:
28:1a:ba:14:65:d6:c3:2b:70:fd:ad:9c:7a:8d:f7:cb:20:6e:
7e:06:2c:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mX3cpCKZVkqKQjuYdMoJJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiYTZmNWQzMjQ3NGJlODZmNjMwNTg5NDQ1Mzc2MjkzNDRk
NGYwMWEwHhcNMjYwMzI1MTkwMTIzWhcNMjYwMzI2MTkwMTIzWjAzMTEwLwYDVQQD
EygzOGIwNzE5MDk2MDhhYTAxNDBlYjMyNGJjMWQ1MDMwZjM5Nzk3YTMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3XK7bmKF2i84j2llxVGsVopirlzz
84rplyzP/I2iI09mFpaOwzpebqz2uEqVo7KSVkkeFOn3BlWfzzGrT/EtIndTipBX
2ONoE9Kk1UZyZxT8dHDQ4yQvTfXB8LTO8j5WhuTYNNnG6hwSJJvfBiQinalKvX9Q
LcEwwDQd0Tq+dooFN/oQU9wu9KOw8qMe4yCTLcHgBPFVKO7te6L/8ZSRUUKvQ7eo
ido8/pqB87Pzfh67GdHPpVKSAhMnByYAXWttkAqWHCJVc/bU8xqz5kODgO4dYXJ5
0zJa6mH/Qyo6IcsqIr8mJJWZeBUWr7js7RRHGz9bWQgLNCUch1vfo0xw+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDiwcZCWCKoBQOsyS8HVAw85eXoxMB8GA1UdIwQY
MBaAFBum9dMkdL6G9jBYlEU3YpNE1PAaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzZiMTB5UjB2b2IyTUZpVVJUZGlrMFRVOEJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9iYmVlNTktOTlmNC00MTNjLWIwZDYt
NTgwODFhMTZjYmRiLzEvRzZiMTB5UjB2b2IyTUZpVVJUZGlrMFRVOEJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC9iYmVlNTktOTlmNC00MTNjLWIwZDYtNTgwODFhMTZjYmRi
LzEvRzZiMTB5UjB2b2IyTUZpVVJUZGlrMFRVOEJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGjqi+uOg
UEALJtwvbsjVsPFWcdlLCcph+WYnkpD6R0RlTURpauVdr6nhrk3BpdLxjPxmQ3B8
V+FFq8ENT4ILadw7Iei20z8Ysuk8PN+I7ZpO5fKTwhPAoyn2Zhhc0/0wfxpzQqrs
jzFslrHBrMM/ex0Y+TVhL+hPQHLG7bL2faCrSqOQCo8ENeEQ/Q7cFwZtCU4gDJeW
CjhM2vdNf+L8HC3z64OagdYczDDF6vs2MkyDqZDZoiaKSd/uijGO5Z3tlQ1gL0LG
UZZqM7l7plqMx7j80HVtDsegJh86nFSPuq7mVojIQq2MPPyXKBq6FGXWwytw/a2c
eo33yyBufgYsyQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:23:20 2026 by rpki-client