Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/964179-c5e8-48c0-8b69-1492a571c1f3/1/gIBkPxusC6RJkhdbr7bFlTxz3iw.mft
File: gIBkPxusC6RJkhdbr7bFlTxz3iw.mft (raw, json)
Hash identifier: wArX7CFdNPzZ0hdMdyD2IrJ0crME5vpU5iKPF2WEtBc=
Subject key identifier: A8:B8:85:33:DE:07:F2:80:1E:16:0B:0D:90:83:B4:6B:4D:2F:C6:D0
Authority key identifier: 80:80:64:3F:1B:AC:0B:A4:49:92:17:5B:AF:B6:C5:95:3C:73:DE:2C
Certificate issuer: /CN=8080643f1bac0ba44992175bafb6c5953c73de2c
Certificate serial: 019D26285ACF4FCA3C54ACD543D851B872F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gIBkPxusC6RJkhdbr7bFlTxz3iw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/964179-c5e8-48c0-8b69-1492a571c1f3/1/gIBkPxusC6RJkhdbr7bFlTxz3iw.mft
Manifest number: 0145
Signing time: Wed 25 Mar 2026 18:01:11 +0000
Manifest this update: Wed 25 Mar 2026 18:01:11 +0000
Manifest next update: Thu 26 Mar 2026 18:01:11 +0000
Files and hashes: 1: gIBkPxusC6RJkhdbr7bFlTxz3iw.crl (hash: Rsuh3aV+N+G0pXLDgalm6vZ+7l9L+InwqAIxW90uPiY=)
2: yeVF8Df3VPcnjSBNmqzoVDfx_BA.asa (hash: q/aLmgYWUuh1D94V+T+v2Y5wHbMtBtOfdm/5xzlYGS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/964179-c5e8-48c0-8b69-1492a571c1f3/1/gIBkPxusC6RJkhdbr7bFlTxz3iw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/964179-c5e8-48c0-8b69-1492a571c1f3/1/gIBkPxusC6RJkhdbr7bFlTxz3iw.mft
rsync://rpki.ripe.net/repository/DEFAULT/gIBkPxusC6RJkhdbr7bFlTxz3iw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:5a:cf:4f:ca:3c:54:ac:d5:43:d8:51:b8:72:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8080643f1bac0ba44992175bafb6c5953c73de2c
Validity
Not Before: Mar 25 18:01:11 2026 GMT
Not After : Mar 26 18:01:11 2026 GMT
Subject: CN=a8b88533de07f2801e160b0d9083b46b4d2fc6d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:43:c8:18:a1:88:56:11:c3:b1:98:2e:c6:1b:
62:51:6a:35:71:cc:86:be:69:cf:fd:3c:02:d1:15:
8a:56:23:16:f1:82:31:6b:31:a3:14:01:2e:e1:8e:
c1:f7:5c:9e:7a:2a:9f:ca:f5:01:42:65:94:ed:50:
64:cb:36:b9:d6:52:c4:4d:c5:aa:96:3a:4a:b6:0d:
b3:e2:70:d7:a9:e5:2a:b1:81:ae:a1:26:ca:f5:b3:
2e:cf:a0:b5:84:17:18:2e:2d:e0:48:33:77:1d:d7:
00:57:bb:56:76:d0:9d:f6:8e:38:9a:2b:f8:eb:dc:
d1:6f:86:a0:dc:4d:eb:7d:36:52:77:e3:a6:98:a5:
03:6a:ab:f5:da:f8:0a:5b:f9:6b:d7:22:da:a5:3f:
24:44:3a:5c:30:15:57:0a:e9:02:08:87:44:93:9a:
19:58:70:bc:7a:08:62:df:3c:0a:50:a3:18:11:e5:
26:04:3f:06:fc:e7:71:ae:af:8f:a0:d7:d6:6e:57:
bd:f4:6a:68:17:66:f7:bc:d3:c3:0b:f7:33:df:d9:
6a:5b:3f:6a:d0:f2:54:a7:66:75:a5:70:a4:b5:ad:
63:f6:65:1e:26:b6:89:2a:95:c2:2e:01:4d:29:e9:
40:ad:26:ec:32:e9:a2:5a:00:ee:e3:ba:9a:5f:1b:
52:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:B8:85:33:DE:07:F2:80:1E:16:0B:0D:90:83:B4:6B:4D:2F:C6:D0
X509v3 Authority Key Identifier:
keyid:80:80:64:3F:1B:AC:0B:A4:49:92:17:5B:AF:B6:C5:95:3C:73:DE:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gIBkPxusC6RJkhdbr7bFlTxz3iw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/964179-c5e8-48c0-8b69-1492a571c1f3/1/gIBkPxusC6RJkhdbr7bFlTxz3iw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/964179-c5e8-48c0-8b69-1492a571c1f3/1/gIBkPxusC6RJkhdbr7bFlTxz3iw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:2b:24:7e:4d:3b:bc:f9:c3:fc:d2:ba:3f:62:28:c2:f6:31:
f2:86:d0:bf:b8:ee:75:53:e2:32:94:b5:d4:b2:e5:b3:02:cc:
d5:78:7f:13:d5:b0:14:40:39:b9:af:7b:32:75:ca:4d:c9:90:
1b:bd:a3:96:c2:b7:2e:9d:51:7c:2d:39:31:53:61:cc:1d:1e:
42:28:ff:52:a3:6f:2c:0d:92:dc:c9:84:81:c3:70:ad:8b:07:
15:01:e8:de:57:e4:05:61:1b:39:2a:50:f7:2a:55:b4:6e:5b:
7e:86:7f:46:26:a6:b5:63:a7:a8:8a:d2:5e:8a:64:bb:55:23:
e4:ac:af:84:36:8a:8e:ff:5e:df:47:65:c5:69:13:8e:70:5c:
6b:02:02:4d:33:3e:09:c2:31:c8:b4:e8:d7:4f:9f:0a:c5:1d:
46:8e:48:e3:81:7f:bb:94:40:bb:dc:82:19:ce:ea:e2:ce:ca:
8c:78:4d:b0:4e:6d:90:81:9d:d6:66:8a:8c:dc:5e:a2:97:4d:
88:85:37:7a:ce:62:ef:66:d4:3b:30:ae:51:b3:4a:33:0d:dc:
cd:70:4c:43:44:ad:08:44:d9:e3:85:c1:a0:11:58:58:3d:a3:
2d:10:25:85:5b:ad:49:bb:3c:d1:d7:39:29:d5:b0:35:33:f6:
52:73:00:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mKFrPT8o8VKzVQ9hRuHL3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwODA2NDNmMWJhYzBiYTQ0OTkyMTc1YmFmYjZjNTk1M2M3
M2RlMmMwHhcNMjYwMzI1MTgwMTExWhcNMjYwMzI2MTgwMTExWjAzMTEwLwYDVQQD
EyhhOGI4ODUzM2RlMDdmMjgwMWUxNjBiMGQ5MDgzYjQ2YjRkMmZjNmQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUPIGKGIVhHDsZguxhtiUWo1ccyG
vmnP/TwC0RWKViMW8YIxazGjFAEu4Y7B91yeeiqfyvUBQmWU7VBkyza51lLETcWq
ljpKtg2z4nDXqeUqsYGuoSbK9bMuz6C1hBcYLi3gSDN3HdcAV7tWdtCd9o44miv4
69zRb4ag3E3rfTZSd+OmmKUDaqv12vgKW/lr1yLapT8kRDpcMBVXCukCCIdEk5oZ
WHC8eghi3zwKUKMYEeUmBD8G/Odxrq+PoNfWble99GpoF2b3vNPDC/cz39lqWz9q
0PJUp2Z1pXCkta1j9mUeJraJKpXCLgFNKelArSbsMumiWgDu47qaXxtS/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKi4hTPeB/KAHhYLDZCDtGtNL8bQMB8GA1UdIwQY
MBaAFICAZD8brAukSZIXW6+2xZU8c94sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ0lCa1B4dXNDNlJKa2hkYnI3YkZsVHh6M2l3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi85NjQxNzktYzVlOC00OGMwLThiNjkt
MTQ5MmE1NzFjMWYzLzEvZ0lCa1B4dXNDNlJKa2hkYnI3YkZsVHh6M2l3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi85NjQxNzktYzVlOC00OGMwLThiNjktMTQ5MmE1NzFjMWYz
LzEvZ0lCa1B4dXNDNlJKa2hkYnI3YkZsVHh6M2l3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAyskfk07
vPnD/NK6P2IowvYx8obQv7judVPiMpS11LLlswLM1Xh/E9WwFEA5ua97MnXKTcmQ
G72jlsK3Lp1RfC05MVNhzB0eQij/UqNvLA2S3MmEgcNwrYsHFQHo3lfkBWEbOSpQ
9ypVtG5bfoZ/RiamtWOnqIrSXopku1Uj5KyvhDaKjv9e30dlxWkTjnBcawICTTM+
CcIxyLTo10+fCsUdRo5I44F/u5RAu9yCGc7q4s7KjHhNsE5tkIGd1maKjNxeopdN
iIU3es5i72bUOzCuUbNKMw3czXBMQ0StCETZ44XBoBFYWD2jLRAlhVutSbs80dc5
KdWwNTP2UnMATA==
-----END CERTIFICATE-----
Generated at Wed Mar 25 22:46:53 2026 by rpki-client