Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/4749b7-ce5e-4621-9877-2fca69d0fdec/1/G-M896bQ8ZNjv_0qby6fxHJ5Afw.mft
File: G-M896bQ8ZNjv_0qby6fxHJ5Afw.mft (raw, json)
Hash identifier: B+dYqo6f2a/Azzci+kXLI+gf3LU+TPgSjU6a3TAF1RQ=
Subject key identifier: A5:1D:98:ED:7E:C2:E6:D1:D5:7F:58:73:10:A7:42:44:B7:EC:1D:D9
Authority key identifier: 1B:E3:3C:F7:A6:D0:F1:93:63:BF:FD:2A:6F:2E:9F:C4:72:79:01:FC
Certificate issuer: /CN=1be33cf7a6d0f19363bffd2a6f2e9fc4727901fc
Certificate serial: 019D284E16C419D7ACD0592C11E2B9DE0E7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-M896bQ8ZNjv_0qby6fxHJ5Afw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/4749b7-ce5e-4621-9877-2fca69d0fdec/1/G-M896bQ8ZNjv_0qby6fxHJ5Afw.mft
Manifest number: 11BD
Signing time: Thu 26 Mar 2026 04:01:39 +0000
Manifest this update: Thu 26 Mar 2026 04:01:39 +0000
Manifest next update: Fri 27 Mar 2026 04:01:39 +0000
Files and hashes: 1: G-M896bQ8ZNjv_0qby6fxHJ5Afw.crl (hash: GFUeoqjnyLipNdlJTsM9wJkPzzes19JpYChrYab+jQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/4749b7-ce5e-4621-9877-2fca69d0fdec/1/G-M896bQ8ZNjv_0qby6fxHJ5Afw.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/4749b7-ce5e-4621-9877-2fca69d0fdec/1/G-M896bQ8ZNjv_0qby6fxHJ5Afw.mft
rsync://rpki.ripe.net/repository/DEFAULT/G-M896bQ8ZNjv_0qby6fxHJ5Afw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:16:c4:19:d7:ac:d0:59:2c:11:e2:b9:de:0e:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1be33cf7a6d0f19363bffd2a6f2e9fc4727901fc
Validity
Not Before: Mar 26 04:01:39 2026 GMT
Not After : Mar 27 04:01:39 2026 GMT
Subject: CN=a51d98ed7ec2e6d1d57f587310a74244b7ec1dd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:7f:1a:17:96:b3:12:a8:13:6c:ce:23:79:0d:
6f:ab:22:b0:92:4c:4f:80:df:50:24:ff:8e:78:57:
31:08:73:a6:3a:86:c4:28:7c:fc:d9:a9:15:6d:93:
9b:0d:28:d0:f4:e5:42:b5:dd:67:ad:52:52:8e:75:
8f:5e:7c:53:79:83:6b:bb:36:5e:c9:8c:c3:36:c5:
82:c9:50:6b:3b:35:30:b8:3f:1f:1c:67:61:cc:b2:
05:95:84:2a:54:92:87:b7:7d:cc:07:df:4e:45:ea:
bc:ad:96:07:55:7c:73:ea:9d:57:8c:5e:30:a7:ec:
a6:ee:84:a0:85:c7:96:66:46:c5:96:b7:4b:19:9b:
12:0a:31:39:b7:79:0d:cd:18:25:ba:97:18:61:fe:
8a:eb:84:5e:8b:a5:63:3d:48:7f:eb:24:9a:96:49:
1c:6d:7f:2b:d4:6e:61:7b:ca:35:70:15:e2:81:3e:
1d:64:73:ff:d3:40:c1:c0:31:cd:48:60:19:87:b1:
21:d8:b6:db:9a:24:0b:1f:a1:8d:50:9c:2b:fa:a3:
f7:c7:94:43:bb:b8:9b:90:a2:b8:6d:2d:04:94:83:
1d:8b:2e:f4:0d:f2:46:71:84:fb:26:7b:86:81:f3:
d7:29:39:41:c2:b2:b1:4e:61:9f:a1:61:87:66:9b:
22:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:1D:98:ED:7E:C2:E6:D1:D5:7F:58:73:10:A7:42:44:B7:EC:1D:D9
X509v3 Authority Key Identifier:
keyid:1B:E3:3C:F7:A6:D0:F1:93:63:BF:FD:2A:6F:2E:9F:C4:72:79:01:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-M896bQ8ZNjv_0qby6fxHJ5Afw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4749b7-ce5e-4621-9877-2fca69d0fdec/1/G-M896bQ8ZNjv_0qby6fxHJ5Afw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4749b7-ce5e-4621-9877-2fca69d0fdec/1/G-M896bQ8ZNjv_0qby6fxHJ5Afw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:f7:de:76:e7:a7:cd:ab:2c:d0:fa:69:0b:70:c7:fb:b7:79:
58:6e:ec:0e:80:6b:71:36:b0:16:87:07:17:ef:b2:99:4d:d7:
09:52:a2:5b:97:b7:82:85:13:10:e6:41:c8:9c:96:7d:e6:9d:
c6:dd:1c:55:58:52:76:ad:ef:78:d7:7d:a6:e0:d4:d5:16:21:
43:06:9a:55:74:c5:d1:41:6a:2a:39:a1:38:29:25:52:c6:40:
4e:dc:0d:38:71:b1:67:57:f3:f7:87:f2:ec:ab:4f:98:33:1b:
7e:ce:d9:7a:2c:e1:30:61:ee:a5:c7:0a:c4:ae:e4:78:81:9a:
18:6e:a8:69:41:52:73:e3:f0:2f:0f:42:d2:4e:f8:bc:b0:af:
c9:91:cb:53:03:10:c5:e5:b3:7b:b3:f7:b2:d9:db:43:a5:40:
c8:9b:7f:d5:56:cb:21:ae:d3:d3:da:4a:3b:0c:ec:82:2a:23:
f3:f6:53:49:6f:63:4d:2a:c3:f6:a5:59:b9:94:1d:58:27:41:
a6:9a:20:22:e8:e4:3d:ae:c4:0f:81:1e:9c:cf:0c:21:fa:54:
e6:2c:fa:a2:16:6f:b0:8c:19:83:92:4c:4a:5b:88:2b:9d:ea:
96:72:fd:07:aa:eb:96:3e:41:b1:06:dc:c6:d3:1b:56:1d:d5:
b9:c5:cf:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oThbEGdes0FksEeK53g59MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiZTMzY2Y3YTZkMGYxOTM2M2JmZmQyYTZmMmU5ZmM0NzI3
OTAxZmMwHhcNMjYwMzI2MDQwMTM5WhcNMjYwMzI3MDQwMTM5WjAzMTEwLwYDVQQD
EyhhNTFkOThlZDdlYzJlNmQxZDU3ZjU4NzMxMGE3NDI0NGI3ZWMxZGQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA338aF5azEqgTbM4jeQ1vqyKwkkxP
gN9QJP+OeFcxCHOmOobEKHz82akVbZObDSjQ9OVCtd1nrVJSjnWPXnxTeYNruzZe
yYzDNsWCyVBrOzUwuD8fHGdhzLIFlYQqVJKHt33MB99OReq8rZYHVXxz6p1XjF4w
p+ym7oSghceWZkbFlrdLGZsSCjE5t3kNzRglupcYYf6K64Rei6VjPUh/6ySalkkc
bX8r1G5he8o1cBXigT4dZHP/00DBwDHNSGAZh7Eh2LbbmiQLH6GNUJwr+qP3x5RD
u7ibkKK4bS0ElIMdiy70DfJGcYT7JnuGgfPXKTlBwrKxTmGfoWGHZpsiSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKUdmO1+wubR1X9YcxCnQkS37B3ZMB8GA1UdIwQY
MBaAFBvjPPem0PGTY7/9Km8un8RyeQH8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRy1NODk2YlE4Wk5qdl8wcWJ5NmZ4SEo1QWZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC80NzQ5YjctY2U1ZS00NjIxLTk4Nzct
MmZjYTY5ZDBmZGVjLzEvRy1NODk2YlE4Wk5qdl8wcWJ5NmZ4SEo1QWZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC80NzQ5YjctY2U1ZS00NjIxLTk4NzctMmZjYTY5ZDBmZGVj
LzEvRy1NODk2YlE4Wk5qdl8wcWJ5NmZ4SEo1QWZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUvfeduen
zass0PppC3DH+7d5WG7sDoBrcTawFocHF++ymU3XCVKiW5e3goUTEOZByJyWfead
xt0cVVhSdq3veNd9puDU1RYhQwaaVXTF0UFqKjmhOCklUsZATtwNOHGxZ1fz94fy
7KtPmDMbfs7ZeizhMGHupccKxK7keIGaGG6oaUFSc+PwLw9C0k74vLCvyZHLUwMQ
xeWze7P3stnbQ6VAyJt/1VbLIa7T09pKOwzsgioj8/ZTSW9jTSrD9qVZuZQdWCdB
ppogIujkPa7ED4EenM8MIfpU5iz6ohZvsIwZg5JMSluIK53qlnL9B6rrlj5BsQbc
xtMbVh3VucXPeg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:18:52 2026 by rpki-client