Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/1cfeb7-d0aa-4c1d-bb9b-763abab97101/1/GF88M_sBE7RdRZKaTAbyjHFNyks.mft
File: GF88M_sBE7RdRZKaTAbyjHFNyks.mft (raw, json)
Hash identifier: DUhissfXHgGeOvGm/kLO4+GRFJFcvra9utqoNsiQsMI=
Subject key identifier: 93:B9:9F:22:1A:EC:76:D0:EC:7A:3C:53:BD:6D:2A:D4:0E:91:DB:06
Authority key identifier: 18:5F:3C:33:FB:01:13:B4:5D:45:92:9A:4C:06:F2:8C:71:4D:CA:4B
Certificate issuer: /CN=185f3c33fb0113b45d45929a4c06f28c714dca4b
Certificate serial: 019D34896450AC9C09F7D54735384B0161FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GF88M_sBE7RdRZKaTAbyjHFNyks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/1cfeb7-d0aa-4c1d-bb9b-763abab97101/1/GF88M_sBE7RdRZKaTAbyjHFNyks.mft
Manifest number: 1862
Signing time: Sat 28 Mar 2026 13:01:52 +0000
Manifest this update: Sat 28 Mar 2026 13:01:52 +0000
Manifest next update: Sun 29 Mar 2026 13:01:52 +0000
Files and hashes: 1: GF88M_sBE7RdRZKaTAbyjHFNyks.crl (hash: YIs8FLHbvELWEM6jElb8M7Z5eOFXF4TCs60m34HtD8Y=)
2: Qmu3wW12Nt0wC-4fyX9XhN0sy00.roa (hash: 3puXzcVdaiUqy4sNyffXvbU1Eh7Kt4nob6sCXMDl8Go=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/1cfeb7-d0aa-4c1d-bb9b-763abab97101/1/GF88M_sBE7RdRZKaTAbyjHFNyks.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/1cfeb7-d0aa-4c1d-bb9b-763abab97101/1/GF88M_sBE7RdRZKaTAbyjHFNyks.mft
rsync://rpki.ripe.net/repository/DEFAULT/GF88M_sBE7RdRZKaTAbyjHFNyks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:34:89:64:50:ac:9c:09:f7:d5:47:35:38:4b:01:61:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=185f3c33fb0113b45d45929a4c06f28c714dca4b
Validity
Not Before: Mar 28 13:01:52 2026 GMT
Not After : Mar 29 13:01:52 2026 GMT
Subject: CN=93b99f221aec76d0ec7a3c53bd6d2ad40e91db06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:6e:ff:5b:6b:9e:75:ec:ba:0f:85:29:7c:25:
5f:b7:c0:2b:50:a6:0f:2f:2f:93:be:ea:b5:d6:a3:
b3:0d:84:ae:81:f2:6d:18:f3:65:c4:c7:8a:52:c4:
8e:e4:24:d8:22:55:b1:c5:af:e6:35:0f:15:a7:36:
9d:c9:e5:9d:ec:2a:fe:34:75:5c:55:63:45:a6:a2:
45:f5:a6:ab:b6:cf:50:87:8b:de:61:a1:16:2e:a3:
72:a3:86:e6:a3:f7:ee:98:9f:b3:4d:ae:7f:3c:db:
dd:3a:2a:c7:20:b8:89:9d:15:47:6e:05:da:f2:9e:
c3:78:25:63:5b:7a:42:5f:72:12:bf:1d:09:b3:2d:
c4:92:c0:72:b1:9a:8a:91:35:e0:b3:8e:e4:b0:27:
e1:4b:e7:71:12:b1:30:dd:a1:35:ff:df:8d:98:ad:
48:00:c6:d1:c9:dd:b1:73:9a:68:96:a7:5d:a9:56:
16:27:b3:d3:e5:a0:b4:60:4b:16:ee:5c:70:16:76:
54:30:30:42:65:38:b2:43:f4:e3:04:56:b1:2d:82:
41:08:5a:d4:e9:54:f2:d1:07:74:c8:db:ad:3b:79:
c1:f5:32:45:1a:5a:cb:5b:c8:17:64:13:8f:96:2f:
24:89:f1:72:3c:39:de:19:3c:49:83:de:da:f5:6a:
d3:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:B9:9F:22:1A:EC:76:D0:EC:7A:3C:53:BD:6D:2A:D4:0E:91:DB:06
X509v3 Authority Key Identifier:
keyid:18:5F:3C:33:FB:01:13:B4:5D:45:92:9A:4C:06:F2:8C:71:4D:CA:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GF88M_sBE7RdRZKaTAbyjHFNyks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/1cfeb7-d0aa-4c1d-bb9b-763abab97101/1/GF88M_sBE7RdRZKaTAbyjHFNyks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/1cfeb7-d0aa-4c1d-bb9b-763abab97101/1/GF88M_sBE7RdRZKaTAbyjHFNyks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:09:59:67:0f:55:c3:81:6f:40:2c:ea:df:95:dc:29:49:51:
2d:d3:ac:07:42:49:ca:4c:06:a5:60:f3:f6:2b:26:3c:a3:a5:
5b:a2:f6:a0:3e:1f:fe:be:16:fb:ee:f2:3d:80:51:b2:72:5f:
c4:2e:d1:7c:ad:a9:39:3f:ca:d4:01:54:95:3f:45:91:fe:32:
68:ed:fe:c2:3e:67:c4:28:a1:0a:20:f2:82:82:01:43:89:c1:
6b:3b:76:4a:ed:73:cf:d8:cf:6c:6b:ab:72:35:5e:08:68:0a:
52:0e:c1:f7:cc:6f:41:73:81:67:e9:d5:ce:b0:45:ad:b7:5b:
71:06:aa:87:8a:2a:0f:47:b2:09:70:e4:e8:27:cc:08:f4:4c:
ce:57:d8:0c:70:f8:90:68:41:17:b2:f5:2b:6e:1f:60:a0:30:
bf:91:1e:7b:e3:49:d1:3d:20:1b:b0:37:f5:bc:24:d9:b5:95:
2c:b1:48:ab:61:ef:ad:85:3a:e3:2b:10:0c:20:e7:88:06:f5:
09:e3:6e:42:83:60:4a:66:84:11:21:ba:7c:d0:1f:93:49:24:
86:f7:dc:f9:4d:e5:cc:79:f0:3a:98:a1:bb:01:a7:b7:79:f2:
19:ae:34:4f:9c:11:c0:8e:a0:ed:cd:a3:c1:1e:71:32:99:9d:
a6:c1:73:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ00iWRQrJwJ99VHNThLAWH8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4NWYzYzMzZmIwMTEzYjQ1ZDQ1OTI5YTRjMDZmMjhjNzE0
ZGNhNGIwHhcNMjYwMzI4MTMwMTUyWhcNMjYwMzI5MTMwMTUyWjAzMTEwLwYDVQQD
Eyg5M2I5OWYyMjFhZWM3NmQwZWM3YTNjNTNiZDZkMmFkNDBlOTFkYjA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA227/W2uedey6D4UpfCVft8ArUKYP
Ly+Tvuq11qOzDYSugfJtGPNlxMeKUsSO5CTYIlWxxa/mNQ8VpzadyeWd7Cr+NHVc
VWNFpqJF9aarts9Qh4veYaEWLqNyo4bmo/fumJ+zTa5/PNvdOirHILiJnRVHbgXa
8p7DeCVjW3pCX3ISvx0Jsy3EksBysZqKkTXgs47ksCfhS+dxErEw3aE1/9+NmK1I
AMbRyd2xc5polqddqVYWJ7PT5aC0YEsW7lxwFnZUMDBCZTiyQ/TjBFaxLYJBCFrU
6VTy0Qd0yNutO3nB9TJFGlrLW8gXZBOPli8kifFyPDneGTxJg97a9WrT2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJO5nyIa7HbQ7Ho8U71tKtQOkdsGMB8GA1UdIwQY
MBaAFBhfPDP7ARO0XUWSmkwG8oxxTcpLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0Y4OE1fc0JFN1JkUlpLYVRBYnlqSEZOeWtzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC8xY2ZlYjctZDBhYS00YzFkLWJiOWIt
NzYzYWJhYjk3MTAxLzEvR0Y4OE1fc0JFN1JkUlpLYVRBYnlqSEZOeWtzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC8xY2ZlYjctZDBhYS00YzFkLWJiOWItNzYzYWJhYjk3MTAx
LzEvR0Y4OE1fc0JFN1JkUlpLYVRBYnlqSEZOeWtzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARwlZZw9V
w4FvQCzq35XcKUlRLdOsB0JJykwGpWDz9ismPKOlW6L2oD4f/r4W++7yPYBRsnJf
xC7RfK2pOT/K1AFUlT9Fkf4yaO3+wj5nxCihCiDygoIBQ4nBazt2Su1zz9jPbGur
cjVeCGgKUg7B98xvQXOBZ+nVzrBFrbdbcQaqh4oqD0eyCXDk6CfMCPRMzlfYDHD4
kGhBF7L1K24fYKAwv5Eee+NJ0T0gG7A39bwk2bWVLLFIq2HvrYU64ysQDCDniAb1
CeNuQoNgSmaEESG6fNAfk0kkhvfc+U3lzHnwOpihuwGnt3nyGa40T5wRwI6g7c2j
wR5xMpmdpsFz1Q==
-----END CERTIFICATE-----
Generated at Sat Mar 28 15:56:07 2026 by rpki-client