Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/99b535-c42b-4e01-8793-722294783e9e/1/G3jb8-hZWC_R7aLy3N5UIilRRvE.mft
File: G3jb8-hZWC_R7aLy3N5UIilRRvE.mft (raw, json)
Hash identifier: ZxXeKboqmWr/6GoYV+yLPyylnAsTwAyC3lpfpD10F6I=
Subject key identifier: 9D:86:DC:79:89:B0:70:61:46:05:C8:20:CA:F4:A0:7C:D6:AC:D4:4B
Authority key identifier: 1B:78:DB:F3:E8:59:58:2F:D1:ED:A2:F2:DC:DE:54:22:29:51:46:F1
Certificate issuer: /CN=1b78dbf3e859582fd1eda2f2dcde5422295146f1
Certificate serial: 019D265FBD79ECED3B39E2491D3F0C567687
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G3jb8-hZWC_R7aLy3N5UIilRRvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/99b535-c42b-4e01-8793-722294783e9e/1/G3jb8-hZWC_R7aLy3N5UIilRRvE.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 19:01:41 +0000
Manifest this update: Wed 25 Mar 2026 19:01:41 +0000
Manifest next update: Thu 26 Mar 2026 19:01:41 +0000
Files and hashes: 1: G3jb8-hZWC_R7aLy3N5UIilRRvE.crl (hash: OxUFhEnCCTsQPal8gaBVMlToBQCjRL3ggMyWGUNd0yU=)
2: a_j0083lOlqZLjjJqW5npMU2K1c.roa (hash: faxoEGXKDneOWfMQo/aCLuHRodBLAUIu/JQekys4GcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/99b535-c42b-4e01-8793-722294783e9e/1/G3jb8-hZWC_R7aLy3N5UIilRRvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/99b535-c42b-4e01-8793-722294783e9e/1/G3jb8-hZWC_R7aLy3N5UIilRRvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/G3jb8-hZWC_R7aLy3N5UIilRRvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:bd:79:ec:ed:3b:39:e2:49:1d:3f:0c:56:76:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b78dbf3e859582fd1eda2f2dcde5422295146f1
Validity
Not Before: Mar 25 19:01:41 2026 GMT
Not After : Mar 26 19:01:41 2026 GMT
Subject: CN=9d86dc7989b070614605c820caf4a07cd6acd44b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:1c:98:ba:b6:98:0d:1e:a7:bd:db:5b:f9:e6:
ad:4b:4c:a8:35:7b:e0:ef:90:36:fa:49:46:c2:c7:
15:20:ed:4d:0e:50:d2:f7:c4:73:5c:47:34:9b:9f:
27:2d:ce:76:9a:fd:a7:a2:54:4b:ad:ed:d4:90:01:
49:62:f0:7d:1f:e0:be:72:85:e5:46:ac:ff:4f:fa:
1f:6e:d2:ed:48:09:0c:06:f9:26:0f:72:ba:20:4c:
19:60:37:48:f7:33:6a:0b:a5:dd:38:69:be:7b:9f:
21:74:ec:b6:26:12:e0:bf:f3:24:36:12:2a:45:a6:
a4:e6:4c:92:a4:87:15:0e:49:50:1d:28:b9:40:3b:
1e:90:81:a0:30:34:2b:52:67:f0:0e:82:44:9b:11:
f9:40:9b:46:48:28:1d:f7:57:72:98:c2:b9:8d:86:
22:cc:1f:b9:56:c6:99:02:89:ff:d5:1d:06:f4:85:
8e:9b:6e:cb:cb:99:9c:5c:83:fc:f4:fe:bd:70:8d:
f5:07:3f:76:fb:d3:b0:53:b3:11:8f:47:dc:ef:22:
42:a6:b4:90:6d:19:3b:62:32:94:96:8d:3f:ea:3a:
a9:9d:c4:7e:c0:86:c9:82:1c:50:4d:82:6b:ef:01:
ee:22:19:44:04:ac:13:fa:0f:1f:6c:15:8b:2a:ba:
d2:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:86:DC:79:89:B0:70:61:46:05:C8:20:CA:F4:A0:7C:D6:AC:D4:4B
X509v3 Authority Key Identifier:
keyid:1B:78:DB:F3:E8:59:58:2F:D1:ED:A2:F2:DC:DE:54:22:29:51:46:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G3jb8-hZWC_R7aLy3N5UIilRRvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/99b535-c42b-4e01-8793-722294783e9e/1/G3jb8-hZWC_R7aLy3N5UIilRRvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/99b535-c42b-4e01-8793-722294783e9e/1/G3jb8-hZWC_R7aLy3N5UIilRRvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:46:e0:b6:07:9c:1c:03:86:ab:11:5e:ba:db:50:08:68:f4:
81:19:d0:19:c3:40:14:02:5b:68:76:7f:cd:cc:54:86:a2:05:
d7:80:7f:8b:5d:14:a3:b4:09:fe:46:34:29:ee:89:77:e2:42:
80:cf:cf:1d:9b:d6:f9:47:11:8c:f5:05:5d:54:df:02:f7:eb:
7e:f3:f0:b3:af:7f:af:21:f4:ed:2b:70:32:ad:d7:32:5d:cd:
44:f1:fb:cb:81:25:94:50:19:b7:0e:5f:f1:ec:61:e6:d7:03:
b6:db:d7:ec:21:45:dd:5b:80:2c:f1:c2:32:31:d0:d0:a6:24:
81:0c:12:dc:ec:3e:bc:d7:04:28:98:18:c5:1d:e0:33:17:ab:
a7:88:f0:90:d1:57:78:8b:8e:dc:6c:5c:62:35:ed:d9:47:bb:
c7:50:2f:4f:51:f7:bc:23:42:4d:0e:38:84:04:4e:27:d7:d1:
ee:63:61:a9:bb:3c:72:5f:d0:1e:5a:5e:e7:b6:bd:2a:fe:49:
76:08:77:08:69:2f:94:31:43:9f:90:d6:11:80:28:88:a6:be:
b7:bc:f0:07:93:95:a0:19:76:89:df:2c:20:74:01:f1:1c:ec:
f2:12:24:11:7a:f8:96:5f:03:3d:94:fe:4b:7a:55:b4:b3:bb:
ab:ca:d8:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mX7157O07OeJJHT8MVnaHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiNzhkYmYzZTg1OTU4MmZkMWVkYTJmMmRjZGU1NDIyMjk1
MTQ2ZjEwHhcNMjYwMzI1MTkwMTQxWhcNMjYwMzI2MTkwMTQxWjAzMTEwLwYDVQQD
Eyg5ZDg2ZGM3OTg5YjA3MDYxNDYwNWM4MjBjYWY0YTA3Y2Q2YWNkNDRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvByYuraYDR6nvdtb+eatS0yoNXvg
75A2+klGwscVIO1NDlDS98RzXEc0m58nLc52mv2nolRLre3UkAFJYvB9H+C+coXl
Rqz/T/ofbtLtSAkMBvkmD3K6IEwZYDdI9zNqC6XdOGm+e58hdOy2JhLgv/MkNhIq
Raak5kySpIcVDklQHSi5QDsekIGgMDQrUmfwDoJEmxH5QJtGSCgd91dymMK5jYYi
zB+5VsaZAon/1R0G9IWOm27Ly5mcXIP89P69cI31Bz92+9OwU7MRj0fc7yJCprSQ
bRk7YjKUlo0/6jqpncR+wIbJghxQTYJr7wHuIhlEBKwT+g8fbBWLKrrSwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ2G3HmJsHBhRgXIIMr0oHzWrNRLMB8GA1UdIwQY
MBaAFBt42/PoWVgv0e2i8tzeVCIpUUbxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzNqYjgtaFpXQ19SN2FMeTNONVVJaWxSUnZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC85OWI1MzUtYzQyYi00ZTAxLTg3OTMt
NzIyMjk0NzgzZTllLzEvRzNqYjgtaFpXQ19SN2FMeTNONVVJaWxSUnZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC85OWI1MzUtYzQyYi00ZTAxLTg3OTMtNzIyMjk0NzgzZTll
LzEvRzNqYjgtaFpXQ19SN2FMeTNONVVJaWxSUnZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAkbgtgec
HAOGqxFeuttQCGj0gRnQGcNAFAJbaHZ/zcxUhqIF14B/i10Uo7QJ/kY0Ke6Jd+JC
gM/PHZvW+UcRjPUFXVTfAvfrfvPws69/ryH07StwMq3XMl3NRPH7y4EllFAZtw5f
8exh5tcDttvX7CFF3VuALPHCMjHQ0KYkgQwS3Ow+vNcEKJgYxR3gMxerp4jwkNFX
eIuO3GxcYjXt2Ue7x1AvT1H3vCNCTQ44hAROJ9fR7mNhqbs8cl/QHlpe57a9Kv5J
dgh3CGkvlDFDn5DWEYAoiKa+t7zwB5OVoBl2id8sIHQB8Rzs8hIkEXr4ll8DPZT+
S3pVtLO7q8rY3g==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:43 2026 by rpki-client