Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/ccc8c9-cc10-4ff9-acc0-84c65b193758/1/GiynpYOySXw2fp6G3rect6c3Wkc.mft
File: GiynpYOySXw2fp6G3rect6c3Wkc.mft (raw, json)
Hash identifier: 2iPhWAM6MlufJCl9NrhXMj/BkDKOORSFF+xDIftLVJc=
Subject key identifier: D0:2A:16:17:1A:9E:26:86:07:3E:B9:5F:65:A5:96:CB:F1:4A:DB:1E
Authority key identifier: 1A:2C:A7:A5:83:B2:49:7C:36:7E:9E:86:DE:B7:9C:B7:A7:37:5A:47
Certificate issuer: /CN=1a2ca7a583b2497c367e9e86deb79cb7a7375a47
Certificate serial: 019D329AA3C66789AC93CDC1B1BB4BFA04B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GiynpYOySXw2fp6G3rect6c3Wkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/ccc8c9-cc10-4ff9-acc0-84c65b193758/1/GiynpYOySXw2fp6G3rect6c3Wkc.mft
Manifest number: 0F24
Signing time: Sat 28 Mar 2026 04:01:28 +0000
Manifest this update: Sat 28 Mar 2026 04:01:28 +0000
Manifest next update: Sun 29 Mar 2026 04:01:28 +0000
Files and hashes: 1: 3J-wyv1f8o7fdt2XdhBrva-Zcak.roa (hash: 86oH9Lq+HOUCzXcyWvwU28zWZtGugPgDR4jwNJr9aV8=)
2: DeAgFNfIORWnBfFq7D10Rej2HAU.roa (hash: uoLF8CbxN4s+EXeDSpUnzOmVweCKadVLU7SCOTJVvmI=)
3: GiynpYOySXw2fp6G3rect6c3Wkc.crl (hash: nbIRP2LcK1g9FoIZ5ovnT48zIxmD8YHa1xWEBmKvHPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/ccc8c9-cc10-4ff9-acc0-84c65b193758/1/GiynpYOySXw2fp6G3rect6c3Wkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/ccc8c9-cc10-4ff9-acc0-84c65b193758/1/GiynpYOySXw2fp6G3rect6c3Wkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/GiynpYOySXw2fp6G3rect6c3Wkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:9a:a3:c6:67:89:ac:93:cd:c1:b1:bb:4b:fa:04:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a2ca7a583b2497c367e9e86deb79cb7a7375a47
Validity
Not Before: Mar 28 04:01:28 2026 GMT
Not After : Mar 29 04:01:28 2026 GMT
Subject: CN=d02a16171a9e2686073eb95f65a596cbf14adb1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:9c:1a:2a:b2:81:8a:d8:d5:8d:e9:b7:d6:b6:
89:41:2a:c0:1b:25:c9:d9:a4:7d:b8:6b:cd:d7:e6:
18:85:3d:23:35:ed:6f:93:59:05:82:db:7e:65:3e:
29:92:4f:74:e5:24:8a:22:be:ea:f8:07:9f:37:7e:
de:ff:92:58:1f:05:a5:cf:78:09:9c:1c:25:4a:9a:
33:fb:1d:6e:13:91:38:c3:ed:9e:cc:e6:12:c4:a2:
39:e9:e5:e0:b8:3c:f5:93:6c:31:03:f4:1f:b6:d4:
71:c1:ad:34:ff:a9:60:6d:b8:d7:93:77:4d:81:22:
8f:34:c8:b6:98:b8:5b:ef:6c:3f:4f:35:b3:94:14:
52:e1:93:86:ec:e5:6c:fd:e1:c7:72:9c:69:f1:f8:
35:f8:b7:c0:b0:c1:b7:41:ed:33:c2:33:85:32:d6:
9c:15:a9:cd:5b:69:0c:ab:61:2b:7b:44:ab:5a:5c:
3a:d3:97:fb:47:59:4b:4d:06:c1:ae:4f:64:8d:49:
17:75:bd:b6:8c:39:66:20:a2:81:6f:e9:2f:78:d0:
9a:5d:30:85:e9:b1:48:28:32:b5:ad:0e:84:c6:60:
15:82:af:0e:34:e8:d6:21:22:4d:e3:13:5a:2a:b1:
94:2b:e2:6d:b0:a6:bf:bd:cd:aa:eb:83:40:e0:cc:
78:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:2A:16:17:1A:9E:26:86:07:3E:B9:5F:65:A5:96:CB:F1:4A:DB:1E
X509v3 Authority Key Identifier:
keyid:1A:2C:A7:A5:83:B2:49:7C:36:7E:9E:86:DE:B7:9C:B7:A7:37:5A:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GiynpYOySXw2fp6G3rect6c3Wkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/ccc8c9-cc10-4ff9-acc0-84c65b193758/1/GiynpYOySXw2fp6G3rect6c3Wkc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/ccc8c9-cc10-4ff9-acc0-84c65b193758/1/GiynpYOySXw2fp6G3rect6c3Wkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:37:6f:dd:7d:9e:f2:e9:4a:62:41:ea:11:c4:7b:22:08:95:
0a:93:91:64:48:07:75:f3:29:71:61:b4:ac:12:5d:f4:8f:b7:
39:9d:c5:3c:14:76:01:2b:11:e7:43:d7:62:44:2f:fa:71:ca:
dc:11:5f:84:9c:ee:a2:e5:f6:a3:07:b3:e0:a9:39:64:cc:35:
4b:9a:85:97:76:b1:a9:64:59:8c:94:ef:d8:73:f1:79:04:6f:
a8:ce:1d:19:5c:66:c2:07:db:a4:48:77:70:23:28:73:d8:f6:
2d:ab:a7:89:a9:a5:b6:d7:01:de:00:7e:5d:e1:db:ac:e7:b7:
3e:78:b5:87:f3:67:f7:e6:d3:85:da:a5:9e:c4:ab:d6:08:37:
7f:32:a5:6d:c7:09:75:ee:64:ba:f5:0d:e3:ab:9e:86:30:5c:
ab:a5:3f:67:6c:7d:c6:89:4a:ba:6e:04:8f:f8:95:e8:25:7a:
08:0d:81:b5:a6:f2:1d:17:eb:55:87:54:29:b8:c4:12:5a:7a:
1f:f1:07:d7:ad:06:87:e5:77:25:c3:2f:bb:44:fe:21:3d:ae:
83:fe:0a:68:02:d1:5d:42:cb:49:d6:8f:fd:a5:54:8e:e9:a1:
b2:27:7b:b5:55:e0:be:dd:46:ab:98:8e:74:2d:6d:11:31:88:
1e:8b:ac:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ymqPGZ4msk83BsbtL+gS2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhMmNhN2E1ODNiMjQ5N2MzNjdlOWU4NmRlYjc5Y2I3YTcz
NzVhNDcwHhcNMjYwMzI4MDQwMTI4WhcNMjYwMzI5MDQwMTI4WjAzMTEwLwYDVQQD
EyhkMDJhMTYxNzFhOWUyNjg2MDczZWI5NWY2NWE1OTZjYmYxNGFkYjFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJwaKrKBitjVjem31raJQSrAGyXJ
2aR9uGvN1+YYhT0jNe1vk1kFgtt+ZT4pkk905SSKIr7q+AefN37e/5JYHwWlz3gJ
nBwlSpoz+x1uE5E4w+2ezOYSxKI56eXguDz1k2wxA/QfttRxwa00/6lgbbjXk3dN
gSKPNMi2mLhb72w/TzWzlBRS4ZOG7OVs/eHHcpxp8fg1+LfAsMG3Qe0zwjOFMtac
FanNW2kMq2Ere0SrWlw605f7R1lLTQbBrk9kjUkXdb22jDlmIKKBb+kveNCaXTCF
6bFIKDK1rQ6ExmAVgq8ONOjWISJN4xNaKrGUK+JtsKa/vc2q64NA4Mx4YwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNAqFhcaniaGBz65X2WllsvxStseMB8GA1UdIwQY
MBaAFBosp6WDskl8Nn6eht63nLenN1pHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2l5bnBZT3lTWHcyZnA2RzNyZWN0NmMzV2tjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9jY2M4YzktY2MxMC00ZmY5LWFjYzAt
ODRjNjViMTkzNzU4LzEvR2l5bnBZT3lTWHcyZnA2RzNyZWN0NmMzV2tjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny9jY2M4YzktY2MxMC00ZmY5LWFjYzAtODRjNjViMTkzNzU4
LzEvR2l5bnBZT3lTWHcyZnA2RzNyZWN0NmMzV2tjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACTdv3X2e
8ulKYkHqEcR7IgiVCpORZEgHdfMpcWG0rBJd9I+3OZ3FPBR2ASsR50PXYkQv+nHK
3BFfhJzuouX2owez4Kk5ZMw1S5qFl3axqWRZjJTv2HPxeQRvqM4dGVxmwgfbpEh3
cCMoc9j2LauniamlttcB3gB+XeHbrOe3Pni1h/Nn9+bThdqlnsSr1gg3fzKlbccJ
de5kuvUN46uehjBcq6U/Z2x9xolKum4Ej/iV6CV6CA2BtabyHRfrVYdUKbjEElp6
H/EH160Gh+V3JcMvu0T+IT2ug/4KaALRXULLSdaP/aVUjumhsid7tVXgvt1Gq5iO
dC1tETGIHousew==
-----END CERTIFICATE-----
Generated at Sat Mar 28 10:33:56 2026 by rpki-client