Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.mft
File: cG1kE0-qdGKTwDhO2sA3GVDzsiQ.mft (raw, json)
Hash identifier: XQyXCfcPpIqIEbE9IiXZmrs3Fk6qOl1J67Yj8U2xTdY=
Subject key identifier: 64:6D:5A:48:57:47:40:F8:6E:E3:0D:99:24:E1:25:AB:A4:DA:C6:B9
Authority key identifier: 70:6D:64:13:4F:AA:74:62:93:C0:38:4E:DA:C0:37:19:50:F3:B2:24
Certificate issuer: /CN=706d64134faa746293c0384edac0371950f3b224
Certificate serial: 019CAA5922E0AB8D92D669E7C321E1DC1128
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 17:01:34 +0000
Manifest this update: Sun 01 Mar 2026 17:01:34 +0000
Manifest next update: Mon 02 Mar 2026 17:01:34 +0000
Files and hashes: 1: 1LWZZOwIVksOEqA3t1p1E5yKrbk.roa (hash: OwPK45NthsXIz7j/9BbdI2UVojWHpISnd2scPcpKEVU=)
2: BU1_bDFU6vflOkzUwIXSHb0FY3g.roa (hash: Cc5Z9uPct4eSTXCrQaUv8nKSh9r+kgrw5uVAV3eQfow=)
3: RR77_TZWFm2zN09tkZTb-aJWQ-g.roa (hash: cAzRaMhGElLRCS7w5moSCJqvr37/rS0oJQ36ENwyvTc=)
4: cG1kE0-qdGKTwDhO2sA3GVDzsiQ.crl (hash: GO91QS+7O9Bh1R3ySiCWNiffm02rm/ir0bZA1EJeiYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:59:22:e0:ab:8d:92:d6:69:e7:c3:21:e1:dc:11:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=706d64134faa746293c0384edac0371950f3b224
Validity
Not Before: Mar 1 17:01:34 2026 GMT
Not After : Mar 2 17:01:34 2026 GMT
Subject: CN=646d5a48574740f86ee30d9924e125aba4dac6b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:0c:c0:2f:8f:db:48:ce:f7:5c:f0:1c:39:c0:
90:45:8e:f9:a3:9b:e0:a6:40:59:4d:c5:0a:6f:18:
c1:01:23:28:31:58:dc:a9:5b:88:89:3a:74:8e:4d:
8b:f3:56:86:b8:72:33:00:2b:d8:0b:a1:40:b6:f9:
36:70:43:48:15:83:18:ae:b3:50:ca:11:ae:88:bb:
94:b1:6d:35:50:b6:b0:aa:35:09:65:6a:1d:a1:1e:
d8:38:df:7b:08:57:f7:4f:82:01:b6:85:6c:5d:9d:
ec:f6:91:fe:c4:07:05:26:14:aa:46:c9:6e:87:db:
ae:ac:2f:96:a3:e4:df:ab:f2:ef:34:7f:08:9d:38:
1a:e2:ab:f3:4e:f7:72:7a:e9:d6:6f:ed:15:5a:5d:
0a:79:1d:15:e6:08:9a:25:1d:e0:ce:f8:ee:08:7b:
14:2d:15:49:b9:62:b6:15:b8:ec:87:e4:76:ba:67:
68:72:3a:2a:f6:9e:9d:de:56:b2:c7:cb:7b:27:57:
4b:55:69:31:7d:02:ee:32:8c:bf:e7:82:11:00:49:
5c:c4:92:b5:ee:f8:b7:62:d5:5e:6a:04:0a:fc:2f:
e7:5b:fe:0e:49:0f:22:0c:4a:21:ce:fb:94:8a:81:
ab:ac:9f:99:e6:5c:b8:24:8b:76:14:3b:19:14:13:
e2:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:6D:5A:48:57:47:40:F8:6E:E3:0D:99:24:E1:25:AB:A4:DA:C6:B9
X509v3 Authority Key Identifier:
keyid:70:6D:64:13:4F:AA:74:62:93:C0:38:4E:DA:C0:37:19:50:F3:B2:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:4e:57:c8:b9:84:1a:b1:1f:87:0f:a9:34:ce:18:77:42:65:
71:da:5f:35:a3:a8:10:70:bf:73:32:e8:78:57:2b:40:f7:5a:
26:2d:f1:61:fe:7f:2f:2b:14:94:8f:f8:a5:d6:d9:cd:06:eb:
4f:fd:ee:1b:f1:b0:a4:f5:39:73:24:8a:10:8f:69:5f:34:d2:
35:3d:fd:fa:4c:5b:76:56:a8:98:ab:37:d9:59:a0:62:72:4f:
60:e8:0e:eb:b0:0c:41:87:7a:dc:3a:14:bf:9d:99:03:47:98:
44:7a:3d:27:39:b8:ef:f2:6f:22:02:9d:fc:06:61:40:88:ac:
b1:5d:d5:c3:01:bb:92:74:4b:04:86:db:ee:dd:77:07:72:cc:
55:30:e5:7d:b8:53:61:ce:e9:f0:2a:59:18:d9:fe:84:c2:0c:
1a:91:eb:b8:a8:0b:12:4f:5a:7a:c6:78:25:70:3b:3b:bc:1a:
96:88:c5:3d:e3:e5:a5:72:33:c8:9e:31:70:73:6d:24:b2:40:
af:43:15:82:67:a0:de:4b:c5:66:93:06:32:f3:a6:5a:3d:58:
3c:bd:5d:82:31:4d:cb:eb:5e:4d:86:98:eb:52:81:d1:b7:f1:
f8:00:d0:f5:bf:f9:b5:fe:09:04:1b:13:61:89:a8:55:24:4c:
ed:ce:28:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqWSLgq42S1mnnwyHh3BEoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwNmQ2NDEzNGZhYTc0NjI5M2MwMzg0ZWRhYzAzNzE5NTBm
M2IyMjQwHhcNMjYwMzAxMTcwMTM0WhcNMjYwMzAyMTcwMTM0WjAzMTEwLwYDVQQD
Eyg2NDZkNWE0ODU3NDc0MGY4NmVlMzBkOTkyNGUxMjVhYmE0ZGFjNmI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9gzAL4/bSM73XPAcOcCQRY75o5vg
pkBZTcUKbxjBASMoMVjcqVuIiTp0jk2L81aGuHIzACvYC6FAtvk2cENIFYMYrrNQ
yhGuiLuUsW01ULawqjUJZWodoR7YON97CFf3T4IBtoVsXZ3s9pH+xAcFJhSqRslu
h9uurC+Wo+Tfq/LvNH8InTga4qvzTvdyeunWb+0VWl0KeR0V5giaJR3gzvjuCHsU
LRVJuWK2Fbjsh+R2umdocjoq9p6d3layx8t7J1dLVWkxfQLuMoy/54IRAElcxJK1
7vi3YtVeagQK/C/nW/4OSQ8iDEohzvuUioGrrJ+Z5ly4JIt2FDsZFBPiEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGRtWkhXR0D4buMNmSThJauk2sa5MB8GA1UdIwQY
MBaAFHBtZBNPqnRik8A4TtrANxlQ87IkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0cxa0UwLXFkR0tUd0RoTzJzQTNHVkR6c2lRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8zMjk4ZTMtOWE1MC00Y2ZiLTg0ZTYt
ZDEzN2FkZTE2NmQxLzEvY0cxa0UwLXFkR0tUd0RoTzJzQTNHVkR6c2lRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC8zMjk4ZTMtOWE1MC00Y2ZiLTg0ZTYtZDEzN2FkZTE2NmQx
LzEvY0cxa0UwLXFkR0tUd0RoTzJzQTNHVkR6c2lRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjU5XyLmE
GrEfhw+pNM4Yd0JlcdpfNaOoEHC/czLoeFcrQPdaJi3xYf5/LysUlI/4pdbZzQbr
T/3uG/GwpPU5cySKEI9pXzTSNT39+kxbdlaomKs32VmgYnJPYOgO67AMQYd63DoU
v52ZA0eYRHo9Jzm47/JvIgKd/AZhQIissV3VwwG7knRLBIbb7t13B3LMVTDlfbhT
Yc7p8CpZGNn+hMIMGpHruKgLEk9aesZ4JXA7O7walojFPePlpXIzyJ4xcHNtJLJA
r0MVgmeg3kvFZpMGMvOmWj1YPL1dgjFNy+teTYaY61KB0bfx+ADQ9b/5tf4JBBsT
YYmoVSRM7c4oJw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:30:25 2026 by rpki-client