Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.mft
File: G2RtQs6J1Ak-Ssknp_I283pRq-I.mft (raw, json)
Hash identifier: lVkH4Dv7Lba3PEydf1GkQQMnQRtjwV+ahUZ2aWHoy1Y=
Subject key identifier: 49:EB:2C:D8:8E:89:73:6F:D8:22:A0:FF:43:65:56:48:6B:64:22:0D
Authority key identifier: 1B:64:6D:42:CE:89:D4:09:3E:4A:C9:27:A7:F2:36:F3:7A:51:AB:E2
Certificate issuer: /CN=1b646d42ce89d4093e4ac927a7f236f37a51abe2
Certificate serial: 01A0E24FF3E16696A7A4F594CBF7EB00AF36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G2RtQs6J1Ak-Ssknp_I283pRq-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.mft
Manifest number: 129C
Signing time: Sun 27 Sep 2026 10:01:25 +0000
Manifest this update: Sun 27 Sep 2026 10:01:25 +0000
Manifest next update: Mon 28 Sep 2026 10:01:25 +0000
Files and hashes: 1: G2RtQs6J1Ak-Ssknp_I283pRq-I.crl (hash: xFoVPvfG0E6M4qmmMnarfoHlHkO8/QChOVrksUIj8s8=)
2: buasPl807dGAfqgw1urBhY4Km5w.roa (hash: PQav8NXXwoaYuBOPi54S+Cjky9Sn3BtCmVplgakM7xk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/G2RtQs6J1Ak-Ssknp_I283pRq-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e2:4f:f3:e1:66:96:a7:a4:f5:94:cb:f7:eb:00:af:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b646d42ce89d4093e4ac927a7f236f37a51abe2
Validity
Not Before: Sep 27 10:01:25 2026 GMT
Not After : Sep 28 10:01:25 2026 GMT
Subject: CN=49eb2cd88e89736fd822a0ff436556486b64220d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:0e:22:e2:8f:b9:ac:bc:d5:bc:8f:a5:bc:29:
39:fe:3e:3d:bb:e8:9d:a9:b6:d8:d9:fe:9f:4e:60:
45:57:2c:4f:75:f4:01:76:5d:10:a1:5c:e7:9b:f4:
8a:3a:41:15:e7:c8:0d:b9:48:d7:f0:f4:a3:61:de:
f8:a8:f6:67:4f:5c:eb:87:dd:63:d4:e9:c1:fd:e5:
43:49:7e:6b:e5:66:6a:77:b4:ff:b7:dd:58:df:03:
b4:30:48:5f:2e:77:ad:2c:cf:fc:f8:c1:d6:25:39:
e3:16:a9:78:34:5e:a5:03:cc:8b:c3:7a:67:19:53:
11:43:db:84:c8:76:d2:23:f6:e7:b8:39:a5:ff:f4:
15:95:06:40:e7:f8:94:fd:bd:c1:89:67:62:2c:dc:
62:14:df:d6:45:9e:e3:f9:59:55:33:3f:c1:0d:11:
9b:87:92:14:79:b4:2b:7f:1a:ed:15:e0:d3:91:81:
62:68:c9:5d:55:4f:19:c2:d0:18:a1:86:c8:aa:5d:
df:3a:8c:73:84:60:a0:f5:ed:7e:25:04:df:81:ff:
5a:57:bd:a9:82:4b:58:4d:b0:16:4f:5e:cf:c9:cf:
28:58:87:2e:dd:49:c1:0b:ee:ef:58:8b:ca:e1:77:
ba:69:60:a2:b4:f6:38:33:1f:89:8d:32:f0:7c:31:
6e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:EB:2C:D8:8E:89:73:6F:D8:22:A0:FF:43:65:56:48:6B:64:22:0D
X509v3 Authority Key Identifier:
keyid:1B:64:6D:42:CE:89:D4:09:3E:4A:C9:27:A7:F2:36:F3:7A:51:AB:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2RtQs6J1Ak-Ssknp_I283pRq-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:ec:ae:ca:b4:95:c9:f0:8b:09:95:f1:2a:40:39:5b:77:99:
fe:7b:38:12:b7:4b:a6:e2:6a:94:b3:6a:13:f8:64:9d:96:ae:
c6:ba:d8:4e:00:7e:00:8a:81:12:8a:94:e3:f6:86:4f:30:4e:
1d:8b:28:49:9b:94:71:3a:63:86:7e:01:1d:6b:50:f5:62:86:
c7:a8:b2:79:d7:ee:ef:53:03:74:0e:07:ed:cf:34:6e:19:7d:
29:f1:1c:53:1a:22:0a:89:ad:6e:a2:93:63:fa:a1:6f:7a:7a:
7e:f0:5d:b9:a6:b1:f7:c6:eb:1e:77:35:2c:c7:c5:99:d0:84:
b6:54:14:04:08:a1:8d:ce:9c:80:c3:5d:27:b4:67:43:2b:c2:
47:85:d6:07:a3:8a:c4:f4:9f:44:15:ed:78:5c:b4:4d:a9:5b:
8e:9f:0e:7a:bb:ee:0b:19:4c:05:47:e4:36:19:bb:22:9e:c2:
87:f5:4f:d3:81:95:86:7c:5f:d5:ad:cd:3c:eb:5d:cd:e7:f8:
26:e0:05:2e:50:5e:ca:bf:48:85:de:fe:b3:a8:06:68:a9:4a:
0d:e3:7f:bc:de:60:79:21:8b:2c:e0:9b:9a:61:25:6f:e5:3d:
0d:62:71:b8:7b:b2:bd:3e:e1:56:c7:15:dd:b3:be:40:1d:db:
b4:33:d1:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDiT/PhZpanpPWUy/frAK82MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiNjQ2ZDQyY2U4OWQ0MDkzZTRhYzkyN2E3ZjIzNmYzN2E1
MWFiZTIwHhcNMjYwOTI3MTAwMTI1WhcNMjYwOTI4MTAwMTI1WjAzMTEwLwYDVQQD
Eyg0OWViMmNkODhlODk3MzZmZDgyMmEwZmY0MzY1NTY0ODZiNjQyMjBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Q4i4o+5rLzVvI+lvCk5/j49u+id
qbbY2f6fTmBFVyxPdfQBdl0QoVznm/SKOkEV58gNuUjX8PSjYd74qPZnT1zrh91j
1OnB/eVDSX5r5WZqd7T/t91Y3wO0MEhfLnetLM/8+MHWJTnjFql4NF6lA8yLw3pn
GVMRQ9uEyHbSI/bnuDml//QVlQZA5/iU/b3BiWdiLNxiFN/WRZ7j+VlVMz/BDRGb
h5IUebQrfxrtFeDTkYFiaMldVU8ZwtAYoYbIql3fOoxzhGCg9e1+JQTfgf9aV72p
gktYTbAWT17Pyc8oWIcu3UnBC+7vWIvK4Xe6aWCitPY4Mx+JjTLwfDFuBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEnrLNiOiXNv2CKg/0NlVkhrZCINMB8GA1UdIwQY
MBaAFBtkbULOidQJPkrJJ6fyNvN6UaviMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzJSdFFzNkoxQWstU3NrbnBfSTI4M3BScS1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9kZjFiY2MtMDIwMC00NmNiLWE5MzMt
NjYzNDBiYmZmMGI5LzEvRzJSdFFzNkoxQWstU3NrbnBfSTI4M3BScS1JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS9kZjFiY2MtMDIwMC00NmNiLWE5MzMtNjYzNDBiYmZmMGI5
LzEvRzJSdFFzNkoxQWstU3NrbnBfSTI4M3BScS1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACeyuyrSV
yfCLCZXxKkA5W3eZ/ns4ErdLpuJqlLNqE/hknZauxrrYTgB+AIqBEoqU4/aGTzBO
HYsoSZuUcTpjhn4BHWtQ9WKGx6iyedfu71MDdA4H7c80bhl9KfEcUxoiComtbqKT
Y/qhb3p6fvBduaax98brHnc1LMfFmdCEtlQUBAihjc6cgMNdJ7RnQyvCR4XWB6OK
xPSfRBXteFy0Talbjp8OervuCxlMBUfkNhm7Ip7Ch/VP04GVhnxf1a3NPOtdzef4
JuAFLlBeyr9Ihd7+s6gGaKlKDeN/vN5geSGLLOCbmmElb+U9DWJxuHuyvT7hVscV
3bO+QB3btDPRRw==
-----END CERTIFICATE-----
Generated at Sun Sep 27 14:11:31 2026 by rpki-client