Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/1e7b02-889b-4a53-a509-8ab5eb558473/1/G-vTPUzUVGXvpQ-qgk-4EsQXOic.mft
File: G-vTPUzUVGXvpQ-qgk-4EsQXOic.mft (raw, json)
Hash identifier: An70LrKAp3Hs06EIRBDMMZdmL/CSJerfPpgXZBidMW0=
Subject key identifier: FC:AD:12:41:A7:5F:4E:47:0A:A3:E5:6D:1A:B6:DD:91:B1:E9:9A:88
Authority key identifier: 1B:EB:D3:3D:4C:D4:54:65:EF:A5:0F:AA:82:4F:B8:12:C4:17:3A:27
Certificate issuer: /CN=1bebd33d4cd45465efa50faa824fb812c4173a27
Certificate serial: 019EC480D089E1231D03FEFAB45D7960B204
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-vTPUzUVGXvpQ-qgk-4EsQXOic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/1e7b02-889b-4a53-a509-8ab5eb558473/1/G-vTPUzUVGXvpQ-qgk-4EsQXOic.mft
Manifest number: 18EF
Signing time: Sun 14 Jun 2026 05:00:36 +0000
Manifest this update: Sun 14 Jun 2026 05:00:36 +0000
Manifest next update: Mon 15 Jun 2026 05:00:36 +0000
Files and hashes: 1: G-vTPUzUVGXvpQ-qgk-4EsQXOic.crl (hash: AvUFyWNFgtVhV12MM5mgpzaGfinXxJZ/KSsnswKXp+I=)
2: eIPNgPUYQZlq-n_9mt6Q4q91rPk.roa (hash: DizOEdr2TMu6P8YAoF1vtJ1S55eopXRESZDog/i+PLg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/1e7b02-889b-4a53-a509-8ab5eb558473/1/G-vTPUzUVGXvpQ-qgk-4EsQXOic.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/1e7b02-889b-4a53-a509-8ab5eb558473/1/G-vTPUzUVGXvpQ-qgk-4EsQXOic.mft
rsync://rpki.ripe.net/repository/DEFAULT/G-vTPUzUVGXvpQ-qgk-4EsQXOic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 15 Jun 2026 02:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c4:80:d0:89:e1:23:1d:03:fe:fa:b4:5d:79:60:b2:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bebd33d4cd45465efa50faa824fb812c4173a27
Validity
Not Before: Jun 14 05:00:36 2026 GMT
Not After : Jun 15 05:00:36 2026 GMT
Subject: CN=fcad1241a75f4e470aa3e56d1ab6dd91b1e99a88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8f:04:82:e9:09:02:e0:91:01:fb:61:3d:ae:
86:c2:a0:8b:c3:a0:3b:ed:eb:a7:6f:90:58:de:f7:
fb:28:f7:a5:7b:d8:52:85:7c:c7:60:33:c6:e2:d5:
f2:0e:a2:fd:34:52:dd:59:14:21:a4:fa:be:c8:4a:
85:6b:ee:a8:d0:3b:8f:8e:48:37:1f:94:b0:9d:4d:
68:a5:9b:9c:7f:aa:db:77:61:fb:21:b0:8f:fe:19:
a4:5f:07:13:e9:48:1b:5f:02:6a:86:85:50:e5:11:
67:ff:37:1e:34:9d:55:6e:7e:1f:21:99:18:32:58:
61:7c:68:50:d7:48:8b:32:ee:ef:4e:8a:a6:f3:79:
c1:e6:ca:f1:b4:8d:f9:c2:dd:42:02:53:40:96:80:
0d:9c:7a:b7:87:98:fc:b5:4d:bb:84:d0:72:47:ee:
16:65:b6:03:aa:f4:1a:e2:00:13:51:d5:93:bc:c3:
8e:74:c3:ab:dc:e0:23:c5:f3:57:d8:4d:1f:3a:b9:
03:21:b9:5f:de:ce:dc:c3:e4:64:43:80:b7:de:3d:
d4:77:65:56:58:6c:0c:4c:27:6a:84:51:b9:1e:65:
1e:e0:6c:7c:55:a4:19:85:14:f0:a5:23:84:af:71:
74:3b:2b:5e:4a:9c:a3:cf:36:09:38:de:1a:d0:72:
0f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:AD:12:41:A7:5F:4E:47:0A:A3:E5:6D:1A:B6:DD:91:B1:E9:9A:88
X509v3 Authority Key Identifier:
keyid:1B:EB:D3:3D:4C:D4:54:65:EF:A5:0F:AA:82:4F:B8:12:C4:17:3A:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-vTPUzUVGXvpQ-qgk-4EsQXOic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/1e7b02-889b-4a53-a509-8ab5eb558473/1/G-vTPUzUVGXvpQ-qgk-4EsQXOic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/1e7b02-889b-4a53-a509-8ab5eb558473/1/G-vTPUzUVGXvpQ-qgk-4EsQXOic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:2b:9e:05:f8:73:73:05:25:53:22:43:a8:59:ab:32:c9:10:
e2:c8:44:da:65:28:8a:0f:f7:02:f7:3d:6d:be:d9:75:63:ce:
6c:f5:ee:ec:2e:fa:b8:57:b2:20:5f:e3:81:f9:a4:df:ae:d8:
73:80:c6:64:dd:67:2e:ee:54:2e:5a:5a:70:5a:24:87:30:1a:
c7:12:a7:a4:7a:5b:45:79:6b:e3:38:d5:8b:b6:79:54:d4:22:
c2:3b:b6:5a:5f:f0:48:8e:bf:6e:e8:72:3d:76:45:25:5a:9c:
d2:b8:f5:c0:e1:92:34:4c:3f:3c:7c:33:51:f7:e3:75:34:50:
e7:81:aa:b3:e3:a8:cd:04:b0:a0:02:1f:f1:3d:98:0a:59:1a:
18:51:ac:3c:ad:0e:43:06:bf:21:ae:98:4f:e8:26:eb:11:d5:
64:84:24:d1:59:14:c5:2a:1c:8d:9e:bb:19:55:b7:a0:6d:b4:
a9:73:f4:29:3f:43:fa:84:6b:5c:b6:b5:50:e6:74:43:e1:73:
dd:c6:19:9a:2c:43:f0:d0:68:69:dd:85:6b:c3:0c:4f:fd:27:
af:51:6d:66:6c:62:0e:e3:a4:0a:22:16:d5:73:b6:38:5e:8b:
4e:dd:05:d0:02:ee:4f:cb:f7:48:b8:46:e7:58:9e:44:5e:30:
70:f9:64:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7EgNCJ4SMdA/76tF15YLIEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiZWJkMzNkNGNkNDU0NjVlZmE1MGZhYTgyNGZiODEyYzQx
NzNhMjcwHhcNMjYwNjE0MDUwMDM2WhcNMjYwNjE1MDUwMDM2WjAzMTEwLwYDVQQD
EyhmY2FkMTI0MWE3NWY0ZTQ3MGFhM2U1NmQxYWI2ZGQ5MWIxZTk5YTg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvI8EgukJAuCRAfthPa6GwqCLw6A7
7eunb5BY3vf7KPele9hShXzHYDPG4tXyDqL9NFLdWRQhpPq+yEqFa+6o0DuPjkg3
H5SwnU1opZucf6rbd2H7IbCP/hmkXwcT6UgbXwJqhoVQ5RFn/zceNJ1Vbn4fIZkY
MlhhfGhQ10iLMu7vToqm83nB5srxtI35wt1CAlNAloANnHq3h5j8tU27hNByR+4W
ZbYDqvQa4gATUdWTvMOOdMOr3OAjxfNX2E0fOrkDIblf3s7cw+RkQ4C33j3Ud2VW
WGwMTCdqhFG5HmUe4Gx8VaQZhRTwpSOEr3F0OyteSpyjzzYJON4a0HIP3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPytEkGnX05HCqPlbRq23ZGx6ZqIMB8GA1UdIwQY
MBaAFBvr0z1M1FRl76UPqoJPuBLEFzonMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRy12VFBVelVWR1h2cFEtcWdrLTRFc1FYT2ljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8xZTdiMDItODg5Yi00YTUzLWE1MDkt
OGFiNWViNTU4NDczLzEvRy12VFBVelVWR1h2cFEtcWdrLTRFc1FYT2ljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi8xZTdiMDItODg5Yi00YTUzLWE1MDktOGFiNWViNTU4NDcz
LzEvRy12VFBVelVWR1h2cFEtcWdrLTRFc1FYT2ljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkSueBfhz
cwUlUyJDqFmrMskQ4shE2mUoig/3Avc9bb7ZdWPObPXu7C76uFeyIF/jgfmk367Y
c4DGZN1nLu5ULlpacFokhzAaxxKnpHpbRXlr4zjVi7Z5VNQiwju2Wl/wSI6/buhy
PXZFJVqc0rj1wOGSNEw/PHwzUffjdTRQ54Gqs+OozQSwoAIf8T2YClkaGFGsPK0O
Qwa/Ia6YT+gm6xHVZIQk0VkUxSocjZ67GVW3oG20qXP0KT9D+oRrXLa1UOZ0Q+Fz
3cYZmixD8NBoad2Fa8MMT/0nr1FtZmxiDuOkCiIW1XO2OF6LTt0F0ALuT8v3SLhG
51ieRF4wcPlkfA==
-----END CERTIFICATE-----
Generated at Sun Jun 14 08:25:27 2026 by rpki-client