Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/4f5951-2047-44bc-b69a-03bc63ca25a3/1/G2goETu6NCPRVzGWT-V7XyUr_eY.mft
File: G2goETu6NCPRVzGWT-V7XyUr_eY.mft (raw, json)
Hash identifier: zvcOfNpREeIt+z1F6tIzRR/D8AuloilJlEpq2Z3hfME=
Subject key identifier: CE:1C:22:12:28:FC:36:B1:CF:B0:1C:DA:89:2F:D0:EB:51:DE:60:A0
Authority key identifier: 1B:68:28:11:3B:BA:34:23:D1:57:31:96:4F:E5:7B:5F:25:2B:FD:E6
Certificate issuer: /CN=1b6828113bba3423d15731964fe57b5f252bfde6
Certificate serial: 019D2772B9423E25C45BD9FB5993575AEA5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G2goETu6NCPRVzGWT-V7XyUr_eY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/4f5951-2047-44bc-b69a-03bc63ca25a3/1/G2goETu6NCPRVzGWT-V7XyUr_eY.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 00:02:03 +0000
Manifest this update: Thu 26 Mar 2026 00:02:03 +0000
Manifest next update: Fri 27 Mar 2026 00:02:03 +0000
Files and hashes: 1: 9RWhzRxq8FPw1YkS-zkDw9ykoNg.roa (hash: KHfuWgWaHX6Mz8Yo4JI6aEe/kuXdFK4S2I7AeBzy96w=)
2: G2goETu6NCPRVzGWT-V7XyUr_eY.crl (hash: V8qOMDlUeriRn6EEPnGHJJU8JanV6Z6Fi2/jZDTitDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/4f5951-2047-44bc-b69a-03bc63ca25a3/1/G2goETu6NCPRVzGWT-V7XyUr_eY.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/4f5951-2047-44bc-b69a-03bc63ca25a3/1/G2goETu6NCPRVzGWT-V7XyUr_eY.mft
rsync://rpki.ripe.net/repository/DEFAULT/G2goETu6NCPRVzGWT-V7XyUr_eY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:b9:42:3e:25:c4:5b:d9:fb:59:93:57:5a:ea:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b6828113bba3423d15731964fe57b5f252bfde6
Validity
Not Before: Mar 26 00:02:03 2026 GMT
Not After : Mar 27 00:02:03 2026 GMT
Subject: CN=ce1c221228fc36b1cfb01cda892fd0eb51de60a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ee:d7:3c:6d:34:6f:10:37:19:41:de:51:a4:
59:c6:45:8a:10:84:6b:c4:34:c5:2c:cc:2f:74:6f:
46:ea:89:b9:0a:4b:4c:7d:0d:a5:8c:47:6b:93:ad:
6e:7b:9f:8a:eb:6a:56:c9:5a:db:67:0a:29:a5:11:
e9:54:96:bb:36:c4:e4:d2:55:cf:1c:b1:9b:59:53:
00:f9:71:80:9a:f9:a4:ab:6d:03:ff:4f:26:83:d7:
52:59:fe:a1:ed:04:70:c6:c8:9c:ac:6b:95:20:05:
6d:0f:7d:f6:b4:d0:4d:12:a9:5e:d9:d7:9e:a2:59:
91:bf:8d:74:79:6a:a9:88:6b:af:ce:7b:85:cd:f2:
5a:3c:1a:0a:3c:e7:1a:80:d8:dd:19:b0:10:73:a6:
65:0b:9e:ed:85:f2:31:91:ea:69:8c:97:05:db:a0:
3b:c7:9a:3a:22:98:39:5f:29:72:06:63:3b:20:5e:
8e:31:06:c7:47:41:9f:e1:68:f3:95:14:d6:ef:4c:
ac:1a:3a:e3:b1:e2:42:bd:d5:bb:5e:17:62:73:e4:
ee:91:f1:ce:ed:90:db:69:0d:98:be:e8:a5:ea:6a:
5f:4d:b1:42:a1:84:1a:eb:c4:78:21:c2:f6:c9:c0:
d3:48:3f:1c:ed:14:e1:f9:09:99:47:bf:c2:12:e0:
23:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:1C:22:12:28:FC:36:B1:CF:B0:1C:DA:89:2F:D0:EB:51:DE:60:A0
X509v3 Authority Key Identifier:
keyid:1B:68:28:11:3B:BA:34:23:D1:57:31:96:4F:E5:7B:5F:25:2B:FD:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2goETu6NCPRVzGWT-V7XyUr_eY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4f5951-2047-44bc-b69a-03bc63ca25a3/1/G2goETu6NCPRVzGWT-V7XyUr_eY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4f5951-2047-44bc-b69a-03bc63ca25a3/1/G2goETu6NCPRVzGWT-V7XyUr_eY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:6a:ba:db:04:f6:46:e5:29:be:df:f0:f9:50:84:c7:bc:67:
56:44:e7:c5:36:a0:97:7d:ec:7b:82:34:71:2b:ea:e2:c3:70:
9f:f2:a7:3d:63:a3:66:65:0b:63:aa:37:72:a1:8c:b1:2c:20:
5c:0e:44:3c:29:56:1e:8b:1d:da:7d:ed:df:83:f6:d5:d1:ad:
ca:5b:33:82:f7:bb:d5:5f:da:80:6f:0a:e9:8d:be:d5:7e:c5:
16:87:11:57:19:b1:e6:c0:26:47:7a:78:60:8b:0b:d2:87:3c:
df:98:f9:23:47:f8:cf:20:81:95:26:a1:2f:2a:1e:54:94:d0:
2b:f4:1a:b2:33:1c:0b:5a:d1:68:82:11:aa:7c:5e:6e:c8:a1:
92:4e:38:8a:1c:52:20:af:69:4f:da:c5:71:21:e2:0c:54:07:
cd:4b:bc:b7:fe:f3:93:bf:d2:a2:aa:84:a1:25:bf:7a:0a:9d:
15:da:01:17:cf:d6:1f:85:0e:5f:aa:95:f9:50:0e:70:ea:92:
25:80:5d:b8:b1:89:a3:d9:89:65:cf:3b:d9:b2:51:7f:ea:0b:
16:0c:29:d5:0a:7f:e1:19:9c:0f:55:c8:e4:9e:dd:2d:bc:33:
4c:d4:b3:f4:72:62:a8:4a:ec:19:d3:92:f8:e4:6e:3f:54:95:
ac:d2:26:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ncrlCPiXEW9n7WZNXWupdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiNjgyODExM2JiYTM0MjNkMTU3MzE5NjRmZTU3YjVmMjUy
YmZkZTYwHhcNMjYwMzI2MDAwMjAzWhcNMjYwMzI3MDAwMjAzWjAzMTEwLwYDVQQD
EyhjZTFjMjIxMjI4ZmMzNmIxY2ZiMDFjZGE4OTJmZDBlYjUxZGU2MGEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAru7XPG00bxA3GUHeUaRZxkWKEIRr
xDTFLMwvdG9G6om5CktMfQ2ljEdrk61ue5+K62pWyVrbZwoppRHpVJa7NsTk0lXP
HLGbWVMA+XGAmvmkq20D/08mg9dSWf6h7QRwxsicrGuVIAVtD332tNBNEqle2dee
olmRv410eWqpiGuvznuFzfJaPBoKPOcagNjdGbAQc6ZlC57thfIxkeppjJcF26A7
x5o6Ipg5XylyBmM7IF6OMQbHR0Gf4WjzlRTW70ysGjrjseJCvdW7Xhdic+TukfHO
7ZDbaQ2Yvuil6mpfTbFCoYQa68R4IcL2ycDTSD8c7RTh+QmZR7/CEuAjCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM4cIhIo/Daxz7Ac2okv0OtR3mCgMB8GA1UdIwQY
MBaAFBtoKBE7ujQj0Vcxlk/le18lK/3mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzJnb0VUdTZOQ1BSVnpHV1QtVjdYeVVyX2VZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS80ZjU5NTEtMjA0Ny00NGJjLWI2OWEt
MDNiYzYzY2EyNWEzLzEvRzJnb0VUdTZOQ1BSVnpHV1QtVjdYeVVyX2VZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS80ZjU5NTEtMjA0Ny00NGJjLWI2OWEtMDNiYzYzY2EyNWEz
LzEvRzJnb0VUdTZOQ1BSVnpHV1QtVjdYeVVyX2VZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASWq62wT2
RuUpvt/w+VCEx7xnVkTnxTagl33se4I0cSvq4sNwn/KnPWOjZmULY6o3cqGMsSwg
XA5EPClWHosd2n3t34P21dGtylszgve71V/agG8K6Y2+1X7FFocRVxmx5sAmR3p4
YIsL0oc835j5I0f4zyCBlSahLyoeVJTQK/QasjMcC1rRaIIRqnxebsihkk44ihxS
IK9pT9rFcSHiDFQHzUu8t/7zk7/SoqqEoSW/egqdFdoBF8/WH4UOX6qV+VAOcOqS
JYBduLGJo9mJZc872bJRf+oLFgwp1Qp/4RmcD1XI5J7dLbwzTNSz9HJiqErsGdOS
+ORuP1SVrNIm3Q==
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:00:39 2026 by rpki-client