Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/a8df58-eabc-45d4-9437-b57616136ab6/1/g_2WfGwZoxt-OOnlycqPoN49YUk.mft
File: g_2WfGwZoxt-OOnlycqPoN49YUk.mft (raw, json)
Hash identifier: 1JowNfQPcIs/fqEJDu4LF6pClQUmRExb1gl6iCiqE4I=
Subject key identifier: B6:16:56:DB:A9:70:BD:CF:7B:99:07:5A:5E:AC:F0:64:AA:73:16:F3
Authority key identifier: 83:FD:96:7C:6C:19:A3:1B:7E:38:E9:E5:C9:CA:8F:A0:DE:3D:61:49
Certificate issuer: /CN=83fd967c6c19a31b7e38e9e5c9ca8fa0de3d6149
Certificate serial: 019D25F140F89938E7B947445037645F6016
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g_2WfGwZoxt-OOnlycqPoN49YUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/a8df58-eabc-45d4-9437-b57616136ab6/1/g_2WfGwZoxt-OOnlycqPoN49YUk.mft
Manifest number: 1401
Signing time: Wed 25 Mar 2026 17:01:00 +0000
Manifest this update: Wed 25 Mar 2026 17:01:00 +0000
Manifest next update: Thu 26 Mar 2026 17:01:00 +0000
Files and hashes: 1: c28eAYv0rrRe6_MausaY2by0884.roa (hash: Oxg9SozDO0QIj1rDPvskXO8gNt2LP5JL6/sMnFmtWaM=)
2: g_2WfGwZoxt-OOnlycqPoN49YUk.crl (hash: 0RKLMmZESy4oJkLi6m8jMwPTZu0qn15+qH5zf1LP3HQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/a8df58-eabc-45d4-9437-b57616136ab6/1/g_2WfGwZoxt-OOnlycqPoN49YUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/a8df58-eabc-45d4-9437-b57616136ab6/1/g_2WfGwZoxt-OOnlycqPoN49YUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/g_2WfGwZoxt-OOnlycqPoN49YUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:40:f8:99:38:e7:b9:47:44:50:37:64:5f:60:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83fd967c6c19a31b7e38e9e5c9ca8fa0de3d6149
Validity
Not Before: Mar 25 17:01:00 2026 GMT
Not After : Mar 26 17:01:00 2026 GMT
Subject: CN=b61656dba970bdcf7b99075a5eacf064aa7316f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:bc:78:f7:05:f7:89:87:eb:8f:90:9d:45:c1:
94:e9:dd:6f:d7:f7:e6:8f:e6:e0:6b:f1:a0:be:20:
85:10:f9:48:dd:4d:c0:59:82:04:bd:39:08:71:93:
e8:cf:3f:af:ee:ed:04:91:e1:64:ca:fd:f0:3e:bd:
55:be:45:5d:76:63:0c:a1:91:d8:15:9d:a8:fd:e6:
0a:ea:87:0a:9b:78:7d:dd:d1:88:b5:28:13:ca:c9:
c9:fe:08:2e:61:b9:c4:2e:92:7a:0e:44:90:ba:58:
25:3b:cf:3c:90:10:58:20:55:2b:62:13:c3:49:6d:
d7:bf:ea:58:5f:b6:2e:de:37:a8:8b:2f:1e:fb:a2:
2c:34:8d:3c:96:36:88:10:7f:09:96:88:cb:81:2f:
20:ea:b4:72:f7:ab:10:75:5f:91:ce:1d:71:c2:7c:
8c:de:53:94:aa:7d:92:28:3e:ec:a2:31:38:5b:84:
20:11:f8:a2:7a:2e:50:46:34:7e:53:a0:24:f6:9d:
29:cf:df:65:d5:50:4d:5a:38:70:06:93:cd:71:f6:
75:e9:f9:52:8c:68:13:63:f7:80:b0:f7:99:38:c0:
8c:f6:de:88:7f:59:71:e9:bd:78:04:0d:b4:4a:42:
f8:37:ef:c4:e8:0e:d8:21:24:c3:31:65:a3:f8:2a:
79:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:16:56:DB:A9:70:BD:CF:7B:99:07:5A:5E:AC:F0:64:AA:73:16:F3
X509v3 Authority Key Identifier:
keyid:83:FD:96:7C:6C:19:A3:1B:7E:38:E9:E5:C9:CA:8F:A0:DE:3D:61:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g_2WfGwZoxt-OOnlycqPoN49YUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/a8df58-eabc-45d4-9437-b57616136ab6/1/g_2WfGwZoxt-OOnlycqPoN49YUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/a8df58-eabc-45d4-9437-b57616136ab6/1/g_2WfGwZoxt-OOnlycqPoN49YUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:02:34:6a:da:b7:7f:e1:56:48:0a:bc:3f:b8:b9:b1:e6:bf:
c0:34:8d:17:17:3a:e9:0d:2f:01:b9:7f:b1:25:0b:dd:e6:9d:
eb:87:18:02:13:9e:ba:d9:a4:0d:c9:c6:bc:4c:d4:74:3b:bf:
85:02:ac:44:62:4c:3c:71:77:8d:17:e1:80:c7:83:df:22:e6:
62:13:81:1f:8d:81:45:50:c9:2a:8b:7b:86:69:38:f7:a3:18:
57:37:da:91:2b:1b:1b:f1:c2:ad:6c:89:2c:73:d1:b3:2d:3f:
c7:b0:9a:f2:61:da:c6:5c:10:43:a5:6b:c1:d0:be:d9:f7:00:
87:82:b0:e0:e4:64:8a:4f:61:c5:ce:9a:a1:32:6f:0e:19:f2:
b4:2a:c6:61:0c:43:de:b2:2f:24:1f:42:14:5b:cd:92:f8:0b:
4d:dc:0b:15:4b:ff:58:c6:eb:d2:6f:70:ac:63:7f:a9:8c:57:
e0:8a:b0:46:51:b3:ba:78:58:14:f0:47:cb:c0:3e:69:d0:87:
b2:0a:e8:2c:50:62:77:0d:ef:a4:2e:3b:1a:49:0a:39:1e:03:
92:69:d5:4b:7c:e8:33:c7:04:7c:9a:0e:8c:cd:46:f2:8d:5a:
04:40:7d:2f:44:53:b5:ae:a0:2f:aa:9b:65:1c:c5:d3:63:3b:
e8:46:ce:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0l8UD4mTjnuUdEUDdkX2AWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzZmQ5NjdjNmMxOWEzMWI3ZTM4ZTllNWM5Y2E4ZmEwZGUz
ZDYxNDkwHhcNMjYwMzI1MTcwMTAwWhcNMjYwMzI2MTcwMTAwWjAzMTEwLwYDVQQD
EyhiNjE2NTZkYmE5NzBiZGNmN2I5OTA3NWE1ZWFjZjA2NGFhNzMxNmYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArbx49wX3iYfrj5CdRcGU6d1v1/fm
j+bga/GgviCFEPlI3U3AWYIEvTkIcZPozz+v7u0EkeFkyv3wPr1VvkVddmMMoZHY
FZ2o/eYK6ocKm3h93dGItSgTysnJ/gguYbnELpJ6DkSQulglO888kBBYIFUrYhPD
SW3Xv+pYX7Yu3jeoiy8e+6IsNI08ljaIEH8JlojLgS8g6rRy96sQdV+Rzh1xwnyM
3lOUqn2SKD7sojE4W4QgEfiiei5QRjR+U6Ak9p0pz99l1VBNWjhwBpPNcfZ16flS
jGgTY/eAsPeZOMCM9t6If1lx6b14BA20SkL4N+/E6A7YISTDMWWj+Cp52QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLYWVtupcL3Pe5kHWl6s8GSqcxbzMB8GA1UdIwQY
MBaAFIP9lnxsGaMbfjjp5cnKj6DePWFJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ18yV2ZHd1pveHQtT09ubHljcVBvTjQ5WVVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi9hOGRmNTgtZWFiYy00NWQ0LTk0Mzct
YjU3NjE2MTM2YWI2LzEvZ18yV2ZHd1pveHQtT09ubHljcVBvTjQ5WVVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi9hOGRmNTgtZWFiYy00NWQ0LTk0MzctYjU3NjE2MTM2YWI2
LzEvZ18yV2ZHd1pveHQtT09ubHljcVBvTjQ5WVVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAewI0atq3
f+FWSAq8P7i5sea/wDSNFxc66Q0vAbl/sSUL3ead64cYAhOeutmkDcnGvEzUdDu/
hQKsRGJMPHF3jRfhgMeD3yLmYhOBH42BRVDJKot7hmk496MYVzfakSsbG/HCrWyJ
LHPRsy0/x7Ca8mHaxlwQQ6VrwdC+2fcAh4Kw4ORkik9hxc6aoTJvDhnytCrGYQxD
3rIvJB9CFFvNkvgLTdwLFUv/WMbr0m9wrGN/qYxX4IqwRlGzunhYFPBHy8A+adCH
sgroLFBidw3vpC47GkkKOR4DkmnVS3zoM8cEfJoOjM1G8o1aBEB9L0RTta6gL6qb
ZRzF02M76EbOXw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:23:51 2026 by rpki-client