Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/4a293b-4c41-428c-9287-bd98b3e90e43/1/G9vEEUREgGUxPvC4LhzPeubqVyA.mft
File: G9vEEUREgGUxPvC4LhzPeubqVyA.mft (raw, json)
Hash identifier: cyNGqb6itBekBbjGYvkPxK0AEU5mkt1h249WWgRXga0=
Subject key identifier: E3:9D:7C:6C:E2:97:98:3B:78:71:62:17:80:BA:36:A2:FF:39:E6:E7
Authority key identifier: 1B:DB:C4:11:44:44:80:65:31:3E:F0:B8:2E:1C:CF:7A:E6:EA:57:20
Certificate issuer: /CN=1bdbc41144448065313ef0b82e1ccf7ae6ea5720
Certificate serial: 019D265F9FAF418D02C1587FA211F10370E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G9vEEUREgGUxPvC4LhzPeubqVyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/4a293b-4c41-428c-9287-bd98b3e90e43/1/G9vEEUREgGUxPvC4LhzPeubqVyA.mft
Manifest number: 1888
Signing time: Wed 25 Mar 2026 19:01:34 +0000
Manifest this update: Wed 25 Mar 2026 19:01:34 +0000
Manifest next update: Thu 26 Mar 2026 19:01:34 +0000
Files and hashes: 1: G9vEEUREgGUxPvC4LhzPeubqVyA.crl (hash: iDLAq9RLAdHz4Iizj3poqYLJEQxX4lbeBq9WTREGXME=)
2: tXwPHcD7KOQpl4ubBwGZXMLcNGc.roa (hash: kHVmMcCLDSaK/L8IsfRUQoLqMYtr8aRP/Gpfi71r/IU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/4a293b-4c41-428c-9287-bd98b3e90e43/1/G9vEEUREgGUxPvC4LhzPeubqVyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/4a293b-4c41-428c-9287-bd98b3e90e43/1/G9vEEUREgGUxPvC4LhzPeubqVyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/G9vEEUREgGUxPvC4LhzPeubqVyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:9f:af:41:8d:02:c1:58:7f:a2:11:f1:03:70:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bdbc41144448065313ef0b82e1ccf7ae6ea5720
Validity
Not Before: Mar 25 19:01:34 2026 GMT
Not After : Mar 26 19:01:34 2026 GMT
Subject: CN=e39d7c6ce297983b7871621780ba36a2ff39e6e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:fb:a8:5d:46:c2:06:d9:33:db:14:c3:ea:c8:
a8:cf:16:6e:7f:78:ed:35:c8:90:95:d0:10:ee:19:
fb:74:44:40:5c:9f:ea:3e:fd:78:67:18:b9:8b:60:
15:b6:b2:ae:0a:83:38:7e:b2:36:48:57:a9:eb:fe:
e1:0d:2d:99:16:37:fd:f4:65:cc:1e:9d:ea:22:bb:
cf:5f:c8:d5:8c:78:16:a4:8b:50:db:42:f1:3a:82:
db:5f:6b:48:5d:97:1f:1c:26:8d:8d:4f:17:c2:f6:
46:c2:8a:85:82:1f:23:8e:aa:23:3e:4d:d1:09:80:
92:b7:c3:6a:ea:7e:0d:0f:31:58:43:12:0c:5c:5b:
9d:73:5c:d8:22:28:d5:9e:07:bc:19:c7:7f:dc:5a:
fe:73:bb:fe:9d:bb:5d:04:2c:9a:51:e4:2c:ac:ca:
25:84:6a:53:9f:7c:56:20:ec:ed:e7:fe:9f:57:4a:
69:27:08:a9:66:9a:83:59:ce:2b:52:f0:88:4b:82:
08:d3:16:77:a7:12:9c:60:8a:46:63:1c:a7:e2:5a:
1f:b3:57:7e:4d:17:97:32:be:92:5b:1a:76:8d:7a:
51:a9:86:20:b7:3e:97:f3:4e:8d:36:7e:00:b3:ae:
f8:7d:59:02:f4:63:75:fb:e0:1b:3f:6c:fa:34:78:
37:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:9D:7C:6C:E2:97:98:3B:78:71:62:17:80:BA:36:A2:FF:39:E6:E7
X509v3 Authority Key Identifier:
keyid:1B:DB:C4:11:44:44:80:65:31:3E:F0:B8:2E:1C:CF:7A:E6:EA:57:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G9vEEUREgGUxPvC4LhzPeubqVyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4a293b-4c41-428c-9287-bd98b3e90e43/1/G9vEEUREgGUxPvC4LhzPeubqVyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4a293b-4c41-428c-9287-bd98b3e90e43/1/G9vEEUREgGUxPvC4LhzPeubqVyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:2c:4a:06:fc:fb:83:29:2b:18:37:d8:16:7a:af:e4:e2:5a:
fd:39:f5:08:87:40:0f:67:ac:98:c7:3f:b2:dc:16:94:02:50:
98:10:af:9d:3a:46:ca:99:f7:6c:0b:14:04:0a:cd:10:7f:cc:
60:25:fe:3d:25:ef:cc:7f:06:53:33:1c:7a:0a:f0:81:ef:ab:
cd:c8:e9:c7:e7:53:8f:bc:de:08:ec:a2:52:6f:a3:85:f0:dc:
45:a1:a6:9b:10:56:e1:19:93:9e:86:bc:bc:1c:ed:35:3a:25:
b2:ea:14:a7:d8:e0:0d:87:1a:83:fc:69:7d:1f:f0:82:3b:2a:
0f:4e:ce:25:9c:36:75:c3:de:b1:67:8a:76:1a:88:34:40:25:
40:9b:de:f0:42:2a:7e:20:2e:4e:70:2d:14:56:77:d0:90:21:
04:e8:74:2a:f0:c4:48:8e:f2:5a:fa:f9:6c:34:e0:7e:1d:bf:
3a:e7:b9:09:45:15:ef:2d:f1:56:a3:d6:ec:9f:07:9b:78:0f:
9d:99:71:3f:e4:32:12:8b:85:04:45:fe:77:ab:b6:63:be:98:
03:f3:98:5c:14:6d:0b:6b:a0:c2:0b:8d:d7:06:cb:d8:20:df:
6f:91:d9:55:14:61:c7:70:05:3c:e8:d4:aa:e4:94:10:c5:44:
b0:72:d3:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mX5+vQY0CwVh/ohHxA3DgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiZGJjNDExNDQ0NDgwNjUzMTNlZjBiODJlMWNjZjdhZTZl
YTU3MjAwHhcNMjYwMzI1MTkwMTM0WhcNMjYwMzI2MTkwMTM0WjAzMTEwLwYDVQQD
EyhlMzlkN2M2Y2UyOTc5ODNiNzg3MTYyMTc4MGJhMzZhMmZmMzllNmU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0fuoXUbCBtkz2xTD6siozxZuf3jt
NciQldAQ7hn7dERAXJ/qPv14Zxi5i2AVtrKuCoM4frI2SFep6/7hDS2ZFjf99GXM
Hp3qIrvPX8jVjHgWpItQ20LxOoLbX2tIXZcfHCaNjU8XwvZGwoqFgh8jjqojPk3R
CYCSt8Nq6n4NDzFYQxIMXFudc1zYIijVnge8Gcd/3Fr+c7v+nbtdBCyaUeQsrMol
hGpTn3xWIOzt5/6fV0ppJwipZpqDWc4rUvCIS4II0xZ3pxKcYIpGYxyn4lofs1d+
TReXMr6SWxp2jXpRqYYgtz6X806NNn4As674fVkC9GN1++AbP2z6NHg3cQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOOdfGzil5g7eHFiF4C6NqL/OebnMB8GA1UdIwQY
MBaAFBvbxBFERIBlMT7wuC4cz3rm6lcgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzl2RUVVUkVnR1V4UHZDNExoelBldWJxVnlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy80YTI5M2ItNGM0MS00MjhjLTkyODct
YmQ5OGIzZTkwZTQzLzEvRzl2RUVVUkVnR1V4UHZDNExoelBldWJxVnlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy80YTI5M2ItNGM0MS00MjhjLTkyODctYmQ5OGIzZTkwZTQz
LzEvRzl2RUVVUkVnR1V4UHZDNExoelBldWJxVnlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAICxKBvz7
gykrGDfYFnqv5OJa/Tn1CIdAD2esmMc/stwWlAJQmBCvnTpGypn3bAsUBArNEH/M
YCX+PSXvzH8GUzMcegrwge+rzcjpx+dTj7zeCOyiUm+jhfDcRaGmmxBW4RmTnoa8
vBztNTolsuoUp9jgDYcag/xpfR/wgjsqD07OJZw2dcPesWeKdhqINEAlQJve8EIq
fiAuTnAtFFZ30JAhBOh0KvDESI7yWvr5bDTgfh2/Oue5CUUV7y3xVqPW7J8Hm3gP
nZlxP+QyEouFBEX+d6u2Y76YA/OYXBRtC2ugwguN1wbL2CDfb5HZVRRhx3AFPOjU
quSUEMVEsHLTwg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:40:28 2026 by rpki-client