
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/958a2c-cef0-4bcc-99c2-321c9d66c847/1/g6BiUlKSop6X_moFW5vWCEp3GXc.mft
File: g6BiUlKSop6X_moFW5vWCEp3GXc.mft (raw, json)
Hash identifier: Kn1bMJ4wO0QmgcIxpBSi8PPawiKG4g+bXeoq8xJdBC8=
Subject key identifier: 5D:D9:56:22:29:31:C4:FE:92:7C:81:53:0B:66:62:05:41:7E:D9:78
Authority key identifier: 83:A0:62:52:52:92:A2:9E:97:FE:6A:05:5B:9B:D6:08:4A:77:19:77
Certificate issuer: /CN=83a062525292a29e97fe6a055b9bd6084a771977
Certificate serial: 019D27A94ECD8BB900C8C5C22A658C7EBAA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g6BiUlKSop6X_moFW5vWCEp3GXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/958a2c-cef0-4bcc-99c2-321c9d66c847/1/g6BiUlKSop6X_moFW5vWCEp3GXc.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 01:01:40 +0000
Manifest this update: Thu 26 Mar 2026 01:01:40 +0000
Manifest next update: Fri 27 Mar 2026 01:01:40 +0000
Files and hashes: 1: MFlCR2JXbFM0gvBh_dWTVgoL37E.roa (hash: yQHl3h+BIb30RJsHlvxFsia7sgue1T2fPrdJ6ihTuRE=)
2: g6BiUlKSop6X_moFW5vWCEp3GXc.crl (hash: gOiQX29/69BLNVIl4whIMVSWRD4oFljywrNsJNztK9A=)
3: ovEHIgoLlT5gFEr99b8QyIfy0Hw.roa (hash: iBbHmTmPmE2txWf3AwnVIHjDVj/1ExRukaV5Q59K53k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/958a2c-cef0-4bcc-99c2-321c9d66c847/1/g6BiUlKSop6X_moFW5vWCEp3GXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/958a2c-cef0-4bcc-99c2-321c9d66c847/1/g6BiUlKSop6X_moFW5vWCEp3GXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/g6BiUlKSop6X_moFW5vWCEp3GXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a9:4e:cd:8b:b9:00:c8:c5:c2:2a:65:8c:7e:ba:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83a062525292a29e97fe6a055b9bd6084a771977
Validity
Not Before: Mar 26 01:01:40 2026 GMT
Not After : Mar 27 01:01:40 2026 GMT
Subject: CN=5dd956222931c4fe927c81530b666205417ed978
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:43:1d:b3:13:f4:df:4c:ad:0d:d5:7d:e6:20:
1f:74:43:8e:d7:2d:99:e3:8a:d5:b8:bc:4d:c6:ef:
0a:d1:86:97:46:8c:56:c8:c0:b0:13:0c:3c:5b:96:
65:51:3a:d8:08:f1:22:fb:02:c6:f5:02:66:8a:00:
fd:c7:eb:d5:09:31:65:18:33:b5:7e:9e:63:74:1b:
00:74:cb:26:ad:c2:f0:1c:37:f1:25:a6:51:45:08:
43:77:32:44:d7:54:00:0a:f6:fa:8e:00:b2:7a:a2:
6f:4b:0c:48:84:31:92:a0:c8:49:8c:4f:6e:45:fe:
08:58:f8:07:62:ec:50:3b:6d:1f:c0:ed:40:2c:cf:
97:2c:2b:52:b6:6c:db:eb:8a:12:a1:b7:6a:fd:c9:
6a:14:dd:9e:4a:1b:9d:e8:d4:2b:18:93:57:b2:8f:
f5:6b:6c:d7:44:c5:7b:34:f1:6a:f9:16:21:40:f6:
0c:db:e4:be:b7:e9:91:16:d3:ab:3f:34:39:8b:ed:
63:2b:eb:a3:03:0a:20:00:60:31:6f:78:e4:48:8f:
dc:d6:7f:e2:ab:27:f0:dd:12:66:f6:aa:4e:c3:13:
b6:7a:bf:dd:fa:8d:7b:75:83:14:a4:08:28:42:67:
52:ea:73:5e:7d:d0:09:df:11:72:a1:7e:75:7f:32:
23:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:D9:56:22:29:31:C4:FE:92:7C:81:53:0B:66:62:05:41:7E:D9:78
X509v3 Authority Key Identifier:
keyid:83:A0:62:52:52:92:A2:9E:97:FE:6A:05:5B:9B:D6:08:4A:77:19:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g6BiUlKSop6X_moFW5vWCEp3GXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/958a2c-cef0-4bcc-99c2-321c9d66c847/1/g6BiUlKSop6X_moFW5vWCEp3GXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/958a2c-cef0-4bcc-99c2-321c9d66c847/1/g6BiUlKSop6X_moFW5vWCEp3GXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:74:1d:ed:f4:1e:4e:1b:32:e0:1e:b7:31:86:1e:43:ed:db:
10:0f:48:d3:9c:be:cc:3b:28:dc:26:fa:f8:85:90:0a:0c:59:
96:31:22:05:45:66:9f:8c:5f:a7:79:fa:2f:bf:2f:0c:dd:e8:
36:9d:47:4a:32:4a:b9:a7:a2:76:5f:07:4c:6a:03:a3:0a:46:
46:98:c8:36:69:62:53:e0:fb:3e:f8:39:c5:71:57:5a:b1:7f:
30:6c:81:93:36:ce:8c:f1:b9:2c:a8:a7:29:1b:1b:63:ea:97:
00:f8:ac:35:14:19:75:7e:da:43:a8:52:5c:70:ff:37:a6:d0:
15:1e:6a:98:e2:16:9d:70:f0:1b:77:21:8a:d0:3f:fb:5e:7b:
bf:cf:6d:d5:b6:91:26:19:40:5a:af:60:86:4e:2c:77:bc:31:
cf:28:15:31:c0:92:db:3c:32:17:9a:fb:84:28:26:15:23:49:
6b:20:4e:5b:13:90:eb:04:5a:46:ff:2c:77:2d:fa:99:90:6b:
b5:df:13:c4:1c:57:a9:f9:e1:07:62:e1:41:ae:9c:41:df:b5:
55:99:67:1f:a9:3b:98:a1:fd:95:43:2a:e4:07:2a:80:dd:35:
d1:fc:cf:c2:9c:df:6b:b8:45:cb:6d:cb:97:5c:46:46:98:49:
66:04:76:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nqU7Ni7kAyMXCKmWMfrqjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzYTA2MjUyNTI5MmEyOWU5N2ZlNmEwNTViOWJkNjA4NGE3
NzE5NzcwHhcNMjYwMzI2MDEwMTQwWhcNMjYwMzI3MDEwMTQwWjAzMTEwLwYDVQQD
Eyg1ZGQ5NTYyMjI5MzFjNGZlOTI3YzgxNTMwYjY2NjIwNTQxN2VkOTc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmUMdsxP030ytDdV95iAfdEOO1y2Z
44rVuLxNxu8K0YaXRoxWyMCwEww8W5ZlUTrYCPEi+wLG9QJmigD9x+vVCTFlGDO1
fp5jdBsAdMsmrcLwHDfxJaZRRQhDdzJE11QACvb6jgCyeqJvSwxIhDGSoMhJjE9u
Rf4IWPgHYuxQO20fwO1ALM+XLCtStmzb64oSobdq/clqFN2eShud6NQrGJNXso/1
a2zXRMV7NPFq+RYhQPYM2+S+t+mRFtOrPzQ5i+1jK+ujAwogAGAxb3jkSI/c1n/i
qyfw3RJm9qpOwxO2er/d+o17dYMUpAgoQmdS6nNefdAJ3xFyoX51fzIjSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF3ZViIpMcT+knyBUwtmYgVBftl4MB8GA1UdIwQY
MBaAFIOgYlJSkqKel/5qBVub1ghKdxl3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzZCaVVsS1NvcDZYX21vRlc1dldDRXAzR1hjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS85NThhMmMtY2VmMC00YmNjLTk5YzIt
MzIxYzlkNjZjODQ3LzEvZzZCaVVsS1NvcDZYX21vRlc1dldDRXAzR1hjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS85NThhMmMtY2VmMC00YmNjLTk5YzItMzIxYzlkNjZjODQ3
LzEvZzZCaVVsS1NvcDZYX21vRlc1dldDRXAzR1hjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu3Qd7fQe
Thsy4B63MYYeQ+3bEA9I05y+zDso3Cb6+IWQCgxZljEiBUVmn4xfp3n6L78vDN3o
Np1HSjJKuaeidl8HTGoDowpGRpjINmliU+D7Pvg5xXFXWrF/MGyBkzbOjPG5LKin
KRsbY+qXAPisNRQZdX7aQ6hSXHD/N6bQFR5qmOIWnXDwG3chitA/+157v89t1baR
JhlAWq9ghk4sd7wxzygVMcCS2zwyF5r7hCgmFSNJayBOWxOQ6wRaRv8sdy36mZBr
td8TxBxXqfnhB2LhQa6cQd+1VZlnH6k7mKH9lUMq5AcqgN010fzPwpzfa7hFy23L
l1xGRphJZgR27A==
-----END CERTIFICATE-----
Generated at Thu Mar 26 04:59:14 2026 by rpki-client