Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/06da0b-45fa-4bc9-9717-4001369ba11f/1/G3NaOdmSptxEu-c6TZm-PIQvqWg.mft
File: G3NaOdmSptxEu-c6TZm-PIQvqWg.mft (raw, json)
Hash identifier: 480h+u0jC8Gik8SJ0JtiKrsnQ9m8uZde7LTefCZNEjI=
Subject key identifier: E6:26:60:B3:B7:64:C3:D8:3F:A3:15:5E:5A:C5:28:39:18:DF:33:2A
Authority key identifier: 1B:73:5A:39:D9:92:A6:DC:44:BB:E7:3A:4D:99:BE:3C:84:2F:A9:68
Certificate issuer: /CN=1b735a39d992a6dc44bbe73a4d99be3c842fa968
Certificate serial: 019D273AAF95680666314E6777DD68AF8DF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G3NaOdmSptxEu-c6TZm-PIQvqWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/06da0b-45fa-4bc9-9717-4001369ba11f/1/G3NaOdmSptxEu-c6TZm-PIQvqWg.mft
Manifest number: 0615
Signing time: Wed 25 Mar 2026 23:00:50 +0000
Manifest this update: Wed 25 Mar 2026 23:00:50 +0000
Manifest next update: Thu 26 Mar 2026 23:00:50 +0000
Files and hashes: 1: G3NaOdmSptxEu-c6TZm-PIQvqWg.crl (hash: cnneHuzUC/+Dq8mG4PdNuU1tXVdmk6P8SzgCuCpYqMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/06da0b-45fa-4bc9-9717-4001369ba11f/1/G3NaOdmSptxEu-c6TZm-PIQvqWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/06da0b-45fa-4bc9-9717-4001369ba11f/1/G3NaOdmSptxEu-c6TZm-PIQvqWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/G3NaOdmSptxEu-c6TZm-PIQvqWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:af:95:68:06:66:31:4e:67:77:dd:68:af:8d:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b735a39d992a6dc44bbe73a4d99be3c842fa968
Validity
Not Before: Mar 25 23:00:50 2026 GMT
Not After : Mar 26 23:00:50 2026 GMT
Subject: CN=e62660b3b764c3d83fa3155e5ac5283918df332a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:7e:14:8f:10:41:a3:96:ef:74:31:53:76:a3:
ba:b2:ec:01:a5:6d:ba:bd:e3:6d:a5:8a:b5:a1:d4:
5a:bb:20:df:87:c7:33:45:e7:2a:b6:0e:fd:81:f8:
6c:3a:c2:a7:ba:5e:9f:81:e4:97:1f:22:b6:94:bf:
1a:10:e9:79:4a:1f:5e:b7:f8:6d:15:b3:3d:53:43:
64:28:43:d4:d3:a0:a5:9d:a1:d5:be:e2:21:71:52:
58:03:5a:78:fb:83:bd:9b:89:8a:a2:1a:5d:c3:57:
51:c4:6b:e1:ef:70:40:8d:f9:3f:5e:56:f8:ee:59:
1e:f5:97:d5:7b:94:9a:f6:29:fa:1d:41:59:ab:21:
6f:92:99:f6:cb:f4:94:bf:70:9d:2f:26:71:c4:21:
31:d7:35:fb:b8:67:b6:b3:73:7c:32:b9:a1:89:e7:
61:75:23:78:c1:a9:5b:4b:7e:90:88:04:e3:32:e2:
9b:58:a2:34:7f:6a:21:f3:20:b8:3f:95:b4:30:5e:
c5:af:17:5a:e8:54:0c:57:4a:00:2b:1b:3e:cb:51:
a0:6e:c8:cd:1f:db:36:33:9d:a4:0b:5f:e3:0c:fb:
99:c1:56:2d:12:83:ab:0c:83:40:08:9a:ea:c3:04:
21:48:4d:16:34:ed:4d:07:76:b4:24:db:88:57:90:
c6:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:26:60:B3:B7:64:C3:D8:3F:A3:15:5E:5A:C5:28:39:18:DF:33:2A
X509v3 Authority Key Identifier:
keyid:1B:73:5A:39:D9:92:A6:DC:44:BB:E7:3A:4D:99:BE:3C:84:2F:A9:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G3NaOdmSptxEu-c6TZm-PIQvqWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/06da0b-45fa-4bc9-9717-4001369ba11f/1/G3NaOdmSptxEu-c6TZm-PIQvqWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/06da0b-45fa-4bc9-9717-4001369ba11f/1/G3NaOdmSptxEu-c6TZm-PIQvqWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:46:33:81:06:9b:0b:81:25:bd:64:06:dc:7f:1f:10:4d:77:
b2:a2:c6:36:bb:f8:6a:ff:1b:81:52:f6:7a:94:90:a1:99:7d:
06:3b:37:97:cd:38:ab:6e:f0:fc:74:2f:79:b9:95:fe:29:f8:
12:d4:da:fd:0d:9d:2c:a0:34:af:2b:9b:08:c6:21:f6:0c:eb:
e3:7a:23:ac:8d:8e:6b:39:c4:4f:d2:42:ce:7b:08:65:c3:71:
c4:34:3f:0d:04:50:c3:d4:cf:1d:bc:8f:85:d3:1f:60:29:2d:
b1:d5:57:cb:3a:ac:4b:66:99:cf:4e:78:bc:d1:30:82:2b:75:
9a:5a:d2:ac:73:29:78:dc:71:38:cf:d1:6c:54:c4:12:72:2b:
9f:e2:64:78:0a:19:ac:ca:3c:fb:f0:4e:f7:95:29:b9:f9:03:
3b:98:b9:0c:d7:b4:b0:47:c3:93:d9:26:96:d4:85:51:83:27:
e0:a6:c6:29:4b:06:89:55:2c:bc:85:aa:db:01:18:13:92:a8:
b0:4f:c2:69:54:9d:58:1c:9b:0f:2c:29:10:97:76:48:a0:58:
54:6a:1f:c9:36:4a:8a:79:28:67:21:9b:7e:b5:28:cf:7e:ce:
cd:3c:8c:3f:1d:c0:1f:67:7a:25:19:d5:a6:e4:06:a0:68:9d:
42:2b:e5:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nOq+VaAZmMU5nd91or43xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiNzM1YTM5ZDk5MmE2ZGM0NGJiZTczYTRkOTliZTNjODQy
ZmE5NjgwHhcNMjYwMzI1MjMwMDUwWhcNMjYwMzI2MjMwMDUwWjAzMTEwLwYDVQQD
EyhlNjI2NjBiM2I3NjRjM2Q4M2ZhMzE1NWU1YWM1MjgzOTE4ZGYzMzJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAon4UjxBBo5bvdDFTdqO6suwBpW26
veNtpYq1odRauyDfh8czRecqtg79gfhsOsKnul6fgeSXHyK2lL8aEOl5Sh9et/ht
FbM9U0NkKEPU06ClnaHVvuIhcVJYA1p4+4O9m4mKohpdw1dRxGvh73BAjfk/Xlb4
7lke9ZfVe5Sa9in6HUFZqyFvkpn2y/SUv3CdLyZxxCEx1zX7uGe2s3N8Mrmhiedh
dSN4walbS36QiATjMuKbWKI0f2oh8yC4P5W0MF7Frxda6FQMV0oAKxs+y1GgbsjN
H9s2M52kC1/jDPuZwVYtEoOrDINACJrqwwQhSE0WNO1NB3a0JNuIV5DGPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOYmYLO3ZMPYP6MVXlrFKDkY3zMqMB8GA1UdIwQY
MBaAFBtzWjnZkqbcRLvnOk2ZvjyEL6loMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzNOYU9kbVNwdHhFdS1jNlRabS1QSVF2cVdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy8wNmRhMGItNDVmYS00YmM5LTk3MTct
NDAwMTM2OWJhMTFmLzEvRzNOYU9kbVNwdHhFdS1jNlRabS1QSVF2cVdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy8wNmRhMGItNDVmYS00YmM5LTk3MTctNDAwMTM2OWJhMTFm
LzEvRzNOYU9kbVNwdHhFdS1jNlRabS1QSVF2cVdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFEYzgQab
C4ElvWQG3H8fEE13sqLGNrv4av8bgVL2epSQoZl9Bjs3l804q27w/HQvebmV/in4
EtTa/Q2dLKA0ryubCMYh9gzr43ojrI2OaznET9JCznsIZcNxxDQ/DQRQw9TPHbyP
hdMfYCktsdVXyzqsS2aZz054vNEwgit1mlrSrHMpeNxxOM/RbFTEEnIrn+JkeAoZ
rMo8+/BO95UpufkDO5i5DNe0sEfDk9kmltSFUYMn4KbGKUsGiVUsvIWq2wEYE5Ko
sE/CaVSdWBybDywpEJd2SKBYVGofyTZKinkoZyGbfrUoz37OzTyMPx3AH2d6JRnV
puQGoGidQivlHg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:54:50 2026 by rpki-client