Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/83cf01-6cca-48d1-9cbf-5ac6fdfdc0cc/1/G23wvAk_KYsENSLr1O3hl5MIGik.mft
File: G23wvAk_KYsENSLr1O3hl5MIGik.mft (raw, json)
Hash identifier: 34kwV1wkbwITh8AEqKx9MwMRqwI1/yPUCgT72LlJFE4=
Subject key identifier: 39:F8:F1:7E:29:79:0A:93:12:60:57:43:33:F1:11:A1:57:70:AC:BE
Authority key identifier: 1B:6D:F0:BC:09:3F:29:8B:04:35:22:EB:D4:ED:E1:97:93:08:1A:29
Certificate issuer: /CN=1b6df0bc093f298b043522ebd4ede19793081a29
Certificate serial: 019D26CD31E5E0F54D429A6D1270E3D2C90A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G23wvAk_KYsENSLr1O3hl5MIGik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/83cf01-6cca-48d1-9cbf-5ac6fdfdc0cc/1/G23wvAk_KYsENSLr1O3hl5MIGik.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 21:01:14 +0000
Manifest this update: Wed 25 Mar 2026 21:01:14 +0000
Manifest next update: Thu 26 Mar 2026 21:01:14 +0000
Files and hashes: 1: G-ycgm7YOR-sZa0cDT0Ey0HKpRQ.roa (hash: Rd+BM6THTi6+A/aDOIt4oFEHGR29dEm5uWS1GE/mueU=)
2: G23wvAk_KYsENSLr1O3hl5MIGik.crl (hash: PqyDG0gKUStTb9m+dCEu646AlEBUpHFhb4jXe2wm3TI=)
3: QfmRg80ICP0Wk2irMKs9YP6N-6U.roa (hash: wg6LRoWXAbVsyyU2ZxflvOEDF09pfNJqXiMahee/sYk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/83cf01-6cca-48d1-9cbf-5ac6fdfdc0cc/1/G23wvAk_KYsENSLr1O3hl5MIGik.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/83cf01-6cca-48d1-9cbf-5ac6fdfdc0cc/1/G23wvAk_KYsENSLr1O3hl5MIGik.mft
rsync://rpki.ripe.net/repository/DEFAULT/G23wvAk_KYsENSLr1O3hl5MIGik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:31:e5:e0:f5:4d:42:9a:6d:12:70:e3:d2:c9:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b6df0bc093f298b043522ebd4ede19793081a29
Validity
Not Before: Mar 25 21:01:14 2026 GMT
Not After : Mar 26 21:01:14 2026 GMT
Subject: CN=39f8f17e29790a931260574333f111a15770acbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:7c:e4:87:82:34:f1:52:69:90:7a:b2:2d:51:
3f:7c:fe:df:45:db:4a:f1:69:a8:e5:8b:2d:0b:3c:
73:8f:53:d2:f4:28:52:15:6a:9a:16:30:19:2c:8e:
20:16:3b:d4:f7:e3:2f:64:4e:63:0e:1d:f3:ce:9c:
44:ff:45:93:ec:36:c2:6c:a0:b0:d8:ac:e9:db:a4:
f3:44:d5:3f:0a:34:7f:14:d5:35:39:00:75:5e:c1:
8a:fa:c7:26:71:7f:e5:f1:e8:72:dd:fb:ae:fc:d3:
ad:ef:90:c4:a7:cb:ce:dd:64:34:26:38:b4:59:ec:
09:cf:d9:c9:90:c9:09:44:90:ed:51:18:39:7a:82:
1f:24:5f:a5:3f:a3:35:78:eb:17:b1:83:9e:23:ac:
ed:ce:65:0d:ae:2e:ee:ce:7b:85:e4:80:4a:29:73:
0a:c1:03:7b:5a:e1:ab:16:b9:49:26:4c:18:a1:f9:
fc:9e:d3:c9:69:e6:3b:34:74:24:39:f7:ce:df:b0:
12:0a:10:1e:0f:c4:2c:f6:42:b6:f2:ea:b1:cf:45:
03:e9:e3:87:50:11:9a:3b:1e:ee:a5:75:ee:69:ec:
03:db:96:6d:63:f4:14:c3:db:78:b1:50:ee:ea:ea:
7a:32:37:d1:6c:d1:e9:ef:17:9d:b8:19:27:fa:70:
f6:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:F8:F1:7E:29:79:0A:93:12:60:57:43:33:F1:11:A1:57:70:AC:BE
X509v3 Authority Key Identifier:
keyid:1B:6D:F0:BC:09:3F:29:8B:04:35:22:EB:D4:ED:E1:97:93:08:1A:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G23wvAk_KYsENSLr1O3hl5MIGik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/83cf01-6cca-48d1-9cbf-5ac6fdfdc0cc/1/G23wvAk_KYsENSLr1O3hl5MIGik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/83cf01-6cca-48d1-9cbf-5ac6fdfdc0cc/1/G23wvAk_KYsENSLr1O3hl5MIGik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:ca:5a:b7:04:e2:66:8a:2e:b3:f4:3f:48:df:84:43:d2:7a:
5c:5f:4b:b2:7c:b1:9e:79:e1:53:44:60:32:5f:f4:79:dd:d6:
d8:53:79:c3:8f:20:89:e7:b3:af:7b:44:6a:6c:49:b7:25:99:
37:9c:4e:a3:70:bf:d0:48:0b:b4:84:70:4b:a1:2f:3e:8d:db:
8b:01:ab:5c:ec:37:58:16:88:c9:dc:36:dd:cc:c4:e4:4e:7d:
09:f4:9a:ba:75:3f:ca:7f:26:3e:a2:d6:ed:88:62:97:62:db:
ba:84:e1:1d:1a:f3:18:07:a4:ff:dc:a5:0c:f6:41:06:1a:e3:
c7:25:b9:ad:ca:cb:83:19:3b:fc:be:45:a1:27:f1:a2:e0:08:
c8:31:7c:68:a6:7f:fd:df:d1:bb:14:45:3d:1b:81:fb:e9:dc:
05:ab:8d:2d:18:82:b5:0d:cb:b7:d3:b6:7d:21:54:4d:ac:96:
6c:00:e1:26:3d:e8:1c:2b:95:f4:bd:d4:48:34:a0:4b:4f:19:
44:1a:6c:45:4d:0e:45:e5:25:84:7d:07:55:13:5d:2b:9c:d2:
35:43:78:40:5c:bd:e6:37:40:01:27:39:64:88:cf:7b:63:72:
35:90:39:be:82:d7:42:98:04:1d:8e:55:63:bd:ff:ad:65:fe:
ee:09:ac:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mzTHl4PVNQpptEnDj0skKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiNmRmMGJjMDkzZjI5OGIwNDM1MjJlYmQ0ZWRlMTk3OTMw
ODFhMjkwHhcNMjYwMzI1MjEwMTE0WhcNMjYwMzI2MjEwMTE0WjAzMTEwLwYDVQQD
EygzOWY4ZjE3ZTI5NzkwYTkzMTI2MDU3NDMzM2YxMTFhMTU3NzBhY2JlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3nzkh4I08VJpkHqyLVE/fP7fRdtK
8Wmo5YstCzxzj1PS9ChSFWqaFjAZLI4gFjvU9+MvZE5jDh3zzpxE/0WT7DbCbKCw
2Kzp26TzRNU/CjR/FNU1OQB1XsGK+scmcX/l8ehy3fuu/NOt75DEp8vO3WQ0Jji0
WewJz9nJkMkJRJDtURg5eoIfJF+lP6M1eOsXsYOeI6ztzmUNri7uznuF5IBKKXMK
wQN7WuGrFrlJJkwYofn8ntPJaeY7NHQkOffO37ASChAeD8Qs9kK28uqxz0UD6eOH
UBGaOx7upXXuaewD25ZtY/QUw9t4sVDu6up6MjfRbNHp7xeduBkn+nD2vwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDn48X4peQqTEmBXQzPxEaFXcKy+MB8GA1UdIwQY
MBaAFBtt8LwJPymLBDUi69Tt4ZeTCBopMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzIzd3ZBa19LWXNFTlNMcjFPM2hsNU1JR2lrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC84M2NmMDEtNmNjYS00OGQxLTljYmYt
NWFjNmZkZmRjMGNjLzEvRzIzd3ZBa19LWXNFTlNMcjFPM2hsNU1JR2lrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC84M2NmMDEtNmNjYS00OGQxLTljYmYtNWFjNmZkZmRjMGNj
LzEvRzIzd3ZBa19LWXNFTlNMcjFPM2hsNU1JR2lrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAspatwTi
Zoous/Q/SN+EQ9J6XF9LsnyxnnnhU0RgMl/0ed3W2FN5w48gieezr3tEamxJtyWZ
N5xOo3C/0EgLtIRwS6EvPo3biwGrXOw3WBaIydw23czE5E59CfSaunU/yn8mPqLW
7Yhil2LbuoThHRrzGAek/9ylDPZBBhrjxyW5rcrLgxk7/L5FoSfxouAIyDF8aKZ/
/d/RuxRFPRuB++ncBauNLRiCtQ3Lt9O2fSFUTayWbADhJj3oHCuV9L3USDSgS08Z
RBpsRU0OReUlhH0HVRNdK5zSNUN4QFy95jdAASc5ZIjPe2NyNZA5voLXQpgEHY5V
Y73/rWX+7gms2w==
-----END CERTIFICATE-----
Generated at Thu Mar 26 04:55:38 2026 by rpki-client