Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.mft
File: G2I9umK4V8pz2KgKEZkPceBOfbY.mft (raw, json)
Hash identifier: zq5WqDE+Plcdi9RAi3pSoW24mHCH2ZAlKVKivQ0gmiU=
Subject key identifier: 98:FD:19:0B:A6:C3:54:A6:62:23:CA:28:C9:56:B5:B1:F7:90:47:8C
Authority key identifier: 1B:62:3D:BA:62:B8:57:CA:73:D8:A8:0A:11:99:0F:71:E0:4E:7D:B6
Certificate issuer: /CN=1b623dba62b857ca73d8a80a11990f71e04e7db6
Certificate serial: 019D3307B6D1722170E0C33FF0E96076C695
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G2I9umK4V8pz2KgKEZkPceBOfbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.mft
Manifest number: 1011
Signing time: Sat 28 Mar 2026 06:00:36 +0000
Manifest this update: Sat 28 Mar 2026 06:00:36 +0000
Manifest next update: Sun 29 Mar 2026 06:00:36 +0000
Files and hashes: 1: G2I9umK4V8pz2KgKEZkPceBOfbY.crl (hash: 97o2RhJcsYx3faRC+O9AABgqk+5s1AAWIMI9XCHs7/Q=)
2: _TZJcz_b9cq-8luNUL6eEZRU19o.roa (hash: XV8xsUjzIwVTNMvOzhZSqDe2iSUDHqLPyeEkThsb7Tw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/G2I9umK4V8pz2KgKEZkPceBOfbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:07:b6:d1:72:21:70:e0:c3:3f:f0:e9:60:76:c6:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b623dba62b857ca73d8a80a11990f71e04e7db6
Validity
Not Before: Mar 28 06:00:36 2026 GMT
Not After : Mar 29 06:00:36 2026 GMT
Subject: CN=98fd190ba6c354a66223ca28c956b5b1f790478c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:c9:20:79:8d:34:e0:63:73:37:8c:50:3e:67:
74:ab:6f:6f:21:75:22:d6:40:6c:62:94:bc:66:a2:
29:2b:f9:15:22:ce:6a:91:f4:b7:22:e7:63:2f:c7:
8f:a7:bd:97:4f:82:3f:ea:dd:89:4b:2e:1d:c5:35:
85:19:c2:17:22:b5:61:05:8a:f6:8d:45:76:2d:d1:
c5:49:08:e7:28:cb:d7:90:fe:ae:c6:60:75:82:89:
c3:62:13:75:9b:44:5b:fa:e1:42:cc:c9:06:f4:e6:
57:36:fd:9d:d2:4c:3a:4c:0c:01:db:b6:bc:2d:7e:
c3:19:9b:6c:80:a3:6f:e5:6f:8d:7c:e3:e0:2c:94:
3c:cc:db:f5:58:44:69:22:e5:ca:52:aa:12:f6:49:
e0:13:fb:d0:fc:da:c3:e2:34:76:c4:ae:2c:d4:6f:
83:84:c1:31:ea:56:0e:99:7a:c6:c2:fb:17:b9:0f:
55:98:98:e8:b5:98:12:23:86:0b:35:ca:bd:28:8d:
d8:b8:3e:f3:34:56:a8:dd:8d:88:c4:e5:95:67:13:
f6:83:6b:47:f8:7c:6a:c0:d5:05:41:cc:9d:a1:59:
85:69:0c:67:4e:dc:21:ef:3c:38:ad:eb:3b:e1:4c:
0c:11:1c:5f:08:0e:dd:74:1a:da:81:9d:ac:b0:cc:
5d:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:FD:19:0B:A6:C3:54:A6:62:23:CA:28:C9:56:B5:B1:F7:90:47:8C
X509v3 Authority Key Identifier:
keyid:1B:62:3D:BA:62:B8:57:CA:73:D8:A8:0A:11:99:0F:71:E0:4E:7D:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2I9umK4V8pz2KgKEZkPceBOfbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:12:1a:99:ea:01:9d:e1:1a:a3:e4:31:79:72:eb:43:07:2d:
c3:11:eb:67:27:2b:80:72:fe:f9:91:9b:bf:a2:09:44:c6:f5:
00:54:05:ce:58:25:3c:8b:33:5d:cf:81:94:d5:d5:17:b6:62:
53:78:82:b1:ac:f8:25:c6:ed:e4:94:b9:ac:14:80:7d:4c:2d:
17:86:64:53:d9:3b:81:20:63:16:dd:c0:f5:16:b1:16:7b:7a:
17:0c:b4:32:f4:82:e0:c5:c6:50:f5:cf:44:8b:7d:e1:9d:c5:
f2:21:ee:94:27:7e:57:f3:b5:e8:e0:6b:ee:e9:4f:be:db:26:
92:7f:7e:01:c0:0c:45:75:91:62:ca:e4:84:f6:c2:a0:8e:f1:
fd:d2:68:45:33:7b:f8:9a:c5:21:24:e3:1e:66:5a:5c:30:86:
cc:df:7a:e2:48:87:ff:d3:8c:4c:b5:c5:9a:5b:20:d8:32:0a:
21:4d:74:65:13:ff:1a:08:2f:e5:78:42:2f:18:3a:a0:bd:cf:
88:1e:d3:e8:f6:db:6a:36:d0:fb:dd:91:bb:e9:40:cf:3e:02:
d9:92:76:a4:fc:f4:77:bc:fe:e5:1e:a1:c0:b7:30:f8:22:dd:
07:bf:4f:6b:7a:03:2c:4f:e0:dc:06:2f:94:7f:46:ce:50:91:
73:3d:ac:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0zB7bRciFw4MM/8OlgdsaVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiNjIzZGJhNjJiODU3Y2E3M2Q4YTgwYTExOTkwZjcxZTA0
ZTdkYjYwHhcNMjYwMzI4MDYwMDM2WhcNMjYwMzI5MDYwMDM2WjAzMTEwLwYDVQQD
Eyg5OGZkMTkwYmE2YzM1NGE2NjIyM2NhMjhjOTU2YjViMWY3OTA0NzhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7skgeY004GNzN4xQPmd0q29vIXUi
1kBsYpS8ZqIpK/kVIs5qkfS3IudjL8ePp72XT4I/6t2JSy4dxTWFGcIXIrVhBYr2
jUV2LdHFSQjnKMvXkP6uxmB1gonDYhN1m0Rb+uFCzMkG9OZXNv2d0kw6TAwB27a8
LX7DGZtsgKNv5W+NfOPgLJQ8zNv1WERpIuXKUqoS9kngE/vQ/NrD4jR2xK4s1G+D
hMEx6lYOmXrGwvsXuQ9VmJjotZgSI4YLNcq9KI3YuD7zNFao3Y2IxOWVZxP2g2tH
+HxqwNUFQcydoVmFaQxnTtwh7zw4res74UwMERxfCA7ddBragZ2ssMxd9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJj9GQumw1SmYiPKKMlWtbH3kEeMMB8GA1UdIwQY
MBaAFBtiPbpiuFfKc9ioChGZD3HgTn22MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzJJOXVtSzRWOHB6MktnS0Vaa1BjZUJPZmJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8wYTBlNGQtNGU3NS00OWE1LWJkMGMt
MWE1Yzc2MzU1ODhiLzEvRzJJOXVtSzRWOHB6MktnS0Vaa1BjZUJPZmJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC8wYTBlNGQtNGU3NS00OWE1LWJkMGMtMWE1Yzc2MzU1ODhi
LzEvRzJJOXVtSzRWOHB6MktnS0Vaa1BjZUJPZmJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZRIameoB
neEao+QxeXLrQwctwxHrZycrgHL++ZGbv6IJRMb1AFQFzlglPIszXc+BlNXVF7Zi
U3iCsaz4Jcbt5JS5rBSAfUwtF4ZkU9k7gSBjFt3A9RaxFnt6Fwy0MvSC4MXGUPXP
RIt94Z3F8iHulCd+V/O16OBr7ulPvtsmkn9+AcAMRXWRYsrkhPbCoI7x/dJoRTN7
+JrFISTjHmZaXDCGzN964kiH/9OMTLXFmlsg2DIKIU10ZRP/Gggv5XhCLxg6oL3P
iB7T6PbbajbQ+92Ru+lAzz4C2ZJ2pPz0d7z+5R6hwLcw+CLdB79Pa3oDLE/g3AYv
lH9GzlCRcz2sBg==
-----END CERTIFICATE-----
Generated at Sat Mar 28 09:36:32 2026 by rpki-client