Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/b88532-9974-4612-94c4-5e0777b04049/1/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.mft
File: GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.mft (raw, json)
Hash identifier: JPS1SzIFc2w0syj3DNkEp7DA2HhMBmiv2DgDljHZVqU=
Subject key identifier: 21:42:18:A9:F0:4C:7F:5D:05:45:C1:FC:34:32:A0:93:54:D3:2C:D9
Authority key identifier: 18:8E:D4:88:4F:11:19:39:CA:6C:7F:0F:34:B2:79:2B:39:B9:34:23
Certificate issuer: /CN=188ed4884f111939ca6c7f0f34b2792b39b93423
Certificate serial: 019E1F4827E89320D2D08B44E3ECB1E9E9D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/b88532-9974-4612-94c4-5e0777b04049/1/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.mft
Manifest number: 1899
Signing time: Wed 13 May 2026 03:01:22 +0000
Manifest this update: Wed 13 May 2026 03:01:22 +0000
Manifest next update: Thu 14 May 2026 03:01:22 +0000
Files and hashes: 1: 6LC4FnmLLsng6HVU2xR3jbERaDc.roa (hash: LpXh0JZ4HonUdcN7azN27CT2g+jjECs6HIXpWyOrLLQ=)
2: GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.crl (hash: QoEiBH8Lk5OXHrFUyKMc55RWfHggNbA0Rm24Ele8N6s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/b88532-9974-4612-94c4-5e0777b04049/1/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/b88532-9974-4612-94c4-5e0777b04049/1/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.mft
rsync://rpki.ripe.net/repository/DEFAULT/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 03:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:48:27:e8:93:20:d2:d0:8b:44:e3:ec:b1:e9:e9:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=188ed4884f111939ca6c7f0f34b2792b39b93423
Validity
Not Before: May 13 03:01:22 2026 GMT
Not After : May 14 03:01:22 2026 GMT
Subject: CN=214218a9f04c7f5d0545c1fc3432a09354d32cd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d7:d2:4b:8c:7b:af:c1:3b:de:ad:07:a9:b4:
cd:25:28:6c:86:a4:f3:f0:40:db:ed:4a:9e:b9:56:
88:03:64:ee:cd:27:8e:26:7f:a4:f9:0a:88:a1:b4:
53:e5:06:80:13:05:11:02:a3:da:83:cf:33:a9:4b:
ca:88:53:b6:7a:66:c7:4c:8f:81:32:00:3a:91:a9:
45:51:72:d7:ca:f1:7a:8b:38:3e:a8:d3:8b:fe:01:
a3:4c:48:77:ec:4a:8f:0b:4b:cd:5c:4c:ef:18:de:
ee:4a:0c:49:b4:73:6f:f0:98:e2:07:b3:bb:97:ca:
0d:04:de:2d:8d:65:64:ec:48:53:63:88:c6:23:ce:
f2:ac:5b:14:6f:05:83:2a:b3:34:98:ee:18:65:14:
0d:9b:a4:27:8a:c9:a2:a4:05:e9:7a:2d:5d:1e:47:
9b:1c:c4:e3:3a:6d:01:00:52:6d:e0:e6:6a:3c:af:
90:c0:07:52:fd:54:37:24:5a:3d:90:20:59:07:e4:
88:ec:29:e3:86:28:ff:d9:0e:b7:8d:66:5b:05:28:
4f:ed:99:40:a6:2e:e8:77:b4:cf:3f:ae:82:8c:29:
14:c0:dc:76:ae:f1:4e:56:43:b0:c8:50:e0:63:81:
f9:3e:5c:4e:fe:7b:9c:9c:e5:18:88:0b:93:a8:33:
85:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:42:18:A9:F0:4C:7F:5D:05:45:C1:FC:34:32:A0:93:54:D3:2C:D9
X509v3 Authority Key Identifier:
keyid:18:8E:D4:88:4F:11:19:39:CA:6C:7F:0F:34:B2:79:2B:39:B9:34:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b88532-9974-4612-94c4-5e0777b04049/1/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b88532-9974-4612-94c4-5e0777b04049/1/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:66:85:25:0d:b3:e8:11:bb:49:e3:bf:a3:c9:e3:e6:a1:0d:
a8:57:96:ea:e5:3d:bd:4f:c3:37:46:ae:66:15:c8:f0:4f:2c:
7a:0f:cd:cc:ba:e3:45:eb:14:4d:a5:cb:fd:f2:1a:5c:f8:e4:
1e:ce:2c:6f:dd:ff:80:44:5b:81:c3:7d:f7:58:66:27:ce:74:
a8:8e:9c:f7:88:07:0c:41:08:22:86:5c:ab:3a:95:33:4d:18:
10:c2:d8:71:24:e4:4b:ff:cd:73:fa:d5:04:5e:a1:f1:f8:a1:
0d:65:25:e3:4e:c9:e8:67:c6:a1:5d:9a:7a:77:4e:82:82:ec:
16:f9:b2:47:95:db:a3:26:13:27:22:06:3e:e9:76:73:2d:ed:
44:21:38:97:9b:b5:20:2e:7e:40:59:d8:e4:7e:0a:99:2d:44:
a9:50:0d:cb:47:b1:be:0e:4c:cc:91:59:d9:fd:2c:a1:4d:4f:
6b:53:b4:7d:1f:2c:82:58:ba:3a:32:0c:db:cd:17:77:be:27:
36:a0:6e:86:9c:1f:28:e8:f0:53:91:69:8b:1f:76:fe:de:99:
ce:0f:b2:f1:ed:26:56:8f:6a:4a:2e:bf:7f:34:0a:16:1f:91:
33:9f:bd:32:05:07:3b:b8:77:b1:bd:6c:57:63:69:01:1c:2a:
46:6f:3f:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4fSCfokyDS0ItE4+yx6enUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4OGVkNDg4NGYxMTE5MzljYTZjN2YwZjM0YjI3OTJiMzli
OTM0MjMwHhcNMjYwNTEzMDMwMTIyWhcNMjYwNTE0MDMwMTIyWjAzMTEwLwYDVQQD
EygyMTQyMThhOWYwNGM3ZjVkMDU0NWMxZmMzNDMyYTA5MzU0ZDMyY2Q5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyNfSS4x7r8E73q0HqbTNJShshqTz
8EDb7UqeuVaIA2TuzSeOJn+k+QqIobRT5QaAEwURAqPag88zqUvKiFO2embHTI+B
MgA6kalFUXLXyvF6izg+qNOL/gGjTEh37EqPC0vNXEzvGN7uSgxJtHNv8JjiB7O7
l8oNBN4tjWVk7EhTY4jGI87yrFsUbwWDKrM0mO4YZRQNm6QnismipAXpei1dHkeb
HMTjOm0BAFJt4OZqPK+QwAdS/VQ3JFo9kCBZB+SI7Cnjhij/2Q63jWZbBShP7ZlA
pi7od7TPP66CjCkUwNx2rvFOVkOwyFDgY4H5PlxO/nucnOUYiAuTqDOFmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCFCGKnwTH9dBUXB/DQyoJNU0yzZMB8GA1UdIwQY
MBaAFBiO1IhPERk5ymx/DzSyeSs5uTQjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0k3VWlFOFJHVG5LYkg4UE5MSjVLem01TkNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9iODg1MzItOTk3NC00NjEyLTk0YzQt
NWUwNzc3YjA0MDQ5LzEvR0k3VWlFOFJHVG5LYkg4UE5MSjVLem01TkNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy9iODg1MzItOTk3NC00NjEyLTk0YzQtNWUwNzc3YjA0MDQ5
LzEvR0k3VWlFOFJHVG5LYkg4UE5MSjVLem01TkNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARWaFJQ2z
6BG7SeO/o8nj5qENqFeW6uU9vU/DN0auZhXI8E8seg/NzLrjResUTaXL/fIaXPjk
Hs4sb93/gERbgcN991hmJ850qI6c94gHDEEIIoZcqzqVM00YEMLYcSTkS//Nc/rV
BF6h8fihDWUl407J6GfGoV2aendOgoLsFvmyR5XboyYTJyIGPul2cy3tRCE4l5u1
IC5+QFnY5H4KmS1EqVANy0exvg5MzJFZ2f0soU1Pa1O0fR8sgli6OjIM280Xd74n
NqBuhpwfKOjwU5Fpix92/t6Zzg+y8e0mVo9qSi6/fzQKFh+RM5+9MgUHO7h3sb1s
V2NpARwqRm8/Fg==
-----END CERTIFICATE-----
Generated at Wed May 13 12:27:55 2026 by rpki-client