Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/2472a9-ff66-4dcf-ac82-30e540d5d3a7/1/G3573I4VumsubQlVJHa7G1WxWcM.mft
File: G3573I4VumsubQlVJHa7G1WxWcM.mft (raw, json)
Hash identifier: 5iUWjv8DIaxBHgCjm+EdquVql48jeTmAyTR2jAw4xh8=
Subject key identifier: F0:6A:09:FE:B0:19:D6:17:B0:95:43:DB:0E:4F:AD:D3:71:5E:41:4D
Authority key identifier: 1B:7E:7B:DC:8E:15:BA:6B:2E:6D:09:55:24:76:BB:1B:55:B1:59:C3
Certificate issuer: /CN=1b7e7bdc8e15ba6b2e6d09552476bb1b55b159c3
Certificate serial: 019D27DFC1C470C91134E9E82EAC0FEA0728
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G3573I4VumsubQlVJHa7G1WxWcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/2472a9-ff66-4dcf-ac82-30e540d5d3a7/1/G3573I4VumsubQlVJHa7G1WxWcM.mft
Manifest number: 1202
Signing time: Thu 26 Mar 2026 02:01:08 +0000
Manifest this update: Thu 26 Mar 2026 02:01:08 +0000
Manifest next update: Fri 27 Mar 2026 02:01:08 +0000
Files and hashes: 1: G3573I4VumsubQlVJHa7G1WxWcM.crl (hash: K2AjkEfe3odNKEjvIb3GD7odOk7Hg+7S37PjEgboE2k=)
2: GTlzvN8hJSJgM1qwowoO5bn8qLU.roa (hash: 73NFakx+FzAAGVTAVqagiaRLqwrqzSJ1FS4nqNgvaXU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/2472a9-ff66-4dcf-ac82-30e540d5d3a7/1/G3573I4VumsubQlVJHa7G1WxWcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/2472a9-ff66-4dcf-ac82-30e540d5d3a7/1/G3573I4VumsubQlVJHa7G1WxWcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/G3573I4VumsubQlVJHa7G1WxWcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 02:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:c1:c4:70:c9:11:34:e9:e8:2e:ac:0f:ea:07:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b7e7bdc8e15ba6b2e6d09552476bb1b55b159c3
Validity
Not Before: Mar 26 02:01:08 2026 GMT
Not After : Mar 27 02:01:08 2026 GMT
Subject: CN=f06a09feb019d617b09543db0e4fadd3715e414d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7c:3a:57:54:93:b5:7d:98:cf:5b:cb:f4:e2:
d9:a8:dd:35:7a:b0:a0:be:15:07:04:06:68:71:09:
52:dd:de:db:ff:09:48:16:11:49:ca:e2:a4:d7:1b:
1a:98:a6:11:43:14:a2:47:f6:c9:fc:cd:a5:2a:01:
62:f0:80:fb:5e:90:ef:53:e8:12:16:c8:1b:c4:e8:
25:1f:2e:17:fe:85:2d:7a:02:4d:af:47:1a:66:e8:
34:c3:4a:8c:38:06:f0:1f:e7:cd:97:7e:e9:08:9c:
04:90:ae:0e:f6:bf:0b:13:58:c9:3e:5f:d4:b3:c8:
4c:e6:57:6b:6e:d9:13:44:59:10:eb:b7:dc:bc:6e:
54:42:d4:0c:ca:02:d0:33:81:ba:87:47:04:32:24:
61:b2:bb:9a:07:e3:51:d8:a5:f1:82:14:9b:d1:50:
0b:08:c8:83:88:dd:4b:63:68:3d:8e:f1:9b:c2:bb:
85:b4:95:58:d1:72:19:16:9e:1b:5b:c1:76:e2:88:
82:35:43:7d:5d:79:9e:e5:8b:6f:5d:e5:9d:86:8c:
0e:e5:f2:68:27:ad:89:ab:65:93:95:3b:84:dd:7e:
83:99:8f:fe:de:96:07:5c:ce:8f:b9:fe:87:de:a3:
d6:e6:16:c8:fe:6d:e8:ed:a1:cd:0d:47:c5:aa:12:
96:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:6A:09:FE:B0:19:D6:17:B0:95:43:DB:0E:4F:AD:D3:71:5E:41:4D
X509v3 Authority Key Identifier:
keyid:1B:7E:7B:DC:8E:15:BA:6B:2E:6D:09:55:24:76:BB:1B:55:B1:59:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G3573I4VumsubQlVJHa7G1WxWcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2472a9-ff66-4dcf-ac82-30e540d5d3a7/1/G3573I4VumsubQlVJHa7G1WxWcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2472a9-ff66-4dcf-ac82-30e540d5d3a7/1/G3573I4VumsubQlVJHa7G1WxWcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:24:55:7c:1f:f2:2d:bc:ab:b3:d4:e2:8d:3e:74:76:be:06:
0f:4e:d7:68:a9:78:cc:ff:96:c3:3d:2b:9f:d4:11:ff:ba:cb:
05:ba:b7:5c:da:4e:0d:6f:9f:62:9f:78:a3:06:4d:a8:28:75:
bd:3b:3a:9d:6d:23:6f:c2:16:cc:ce:5c:9d:0f:4e:6d:8b:f5:
26:0a:20:3c:8e:f1:00:35:72:76:86:d1:6c:e1:4c:1d:e4:ed:
87:02:a0:a7:bf:84:c3:83:bd:9e:02:6d:1e:72:18:01:aa:d4:
93:06:42:19:9b:0e:48:ea:98:33:1f:2f:ef:61:0e:82:09:e9:
44:58:d4:30:7d:73:7a:56:f4:34:7c:57:cb:01:8d:4b:ea:f5:
2b:6e:3e:e0:1f:63:c0:9f:3c:07:e0:ce:1f:7a:75:68:5e:46:
5c:64:1f:df:48:d3:44:42:56:96:20:fb:57:61:cb:f6:da:87:
05:e5:fe:fa:7b:32:de:1d:29:05:8a:12:86:63:a8:d8:f6:44:
2d:63:dd:b3:01:eb:ea:13:df:f6:9a:cb:e2:15:9f:7a:6e:d9:
4e:87:c0:50:df:e7:6a:24:60:fd:fe:10:49:43:67:2b:bf:64:
dd:6f:79:3c:5b:76:9a:71:a2:bc:57:7c:fa:06:4f:86:0c:01:
58:f0:32:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0n38HEcMkRNOnoLqwP6gcoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiN2U3YmRjOGUxNWJhNmIyZTZkMDk1NTI0NzZiYjFiNTVi
MTU5YzMwHhcNMjYwMzI2MDIwMTA4WhcNMjYwMzI3MDIwMTA4WjAzMTEwLwYDVQQD
EyhmMDZhMDlmZWIwMTlkNjE3YjA5NTQzZGIwZTRmYWRkMzcxNWU0MTRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXw6V1STtX2Yz1vL9OLZqN01erCg
vhUHBAZocQlS3d7b/wlIFhFJyuKk1xsamKYRQxSiR/bJ/M2lKgFi8ID7XpDvU+gS
FsgbxOglHy4X/oUtegJNr0caZug0w0qMOAbwH+fNl37pCJwEkK4O9r8LE1jJPl/U
s8hM5ldrbtkTRFkQ67fcvG5UQtQMygLQM4G6h0cEMiRhsruaB+NR2KXxghSb0VAL
CMiDiN1LY2g9jvGbwruFtJVY0XIZFp4bW8F24oiCNUN9XXme5YtvXeWdhowO5fJo
J62Jq2WTlTuE3X6DmY/+3pYHXM6Puf6H3qPW5hbI/m3o7aHNDUfFqhKWLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPBqCf6wGdYXsJVD2w5PrdNxXkFNMB8GA1UdIwQY
MBaAFBt+e9yOFbprLm0JVSR2uxtVsVnDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzM1NzNJNFZ1bXN1YlFsVkpIYTdHMVd4V2NNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8yNDcyYTktZmY2Ni00ZGNmLWFjODIt
MzBlNTQwZDVkM2E3LzEvRzM1NzNJNFZ1bXN1YlFsVkpIYTdHMVd4V2NNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi8yNDcyYTktZmY2Ni00ZGNmLWFjODItMzBlNTQwZDVkM2E3
LzEvRzM1NzNJNFZ1bXN1YlFsVkpIYTdHMVd4V2NNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsSRVfB/y
Lbyrs9TijT50dr4GD07XaKl4zP+Wwz0rn9QR/7rLBbq3XNpODW+fYp94owZNqCh1
vTs6nW0jb8IWzM5cnQ9ObYv1JgogPI7xADVydobRbOFMHeTthwKgp7+Ew4O9ngJt
HnIYAarUkwZCGZsOSOqYMx8v72EOggnpRFjUMH1zelb0NHxXywGNS+r1K24+4B9j
wJ88B+DOH3p1aF5GXGQf30jTREJWliD7V2HL9tqHBeX++nsy3h0pBYoShmOo2PZE
LWPdswHr6hPf9prL4hWfem7ZTofAUN/naiRg/f4QSUNnK79k3W95PFt2mnGivFd8
+gZPhgwBWPAytA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:41:25 2026 by rpki-client