Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.mft
File: G87kBAWu-22hejQO7xWc6cTRgyI.mft (raw, json)
Hash identifier: j4HS8VrydKsR41E7P7/pYcAiUH+W8MniyQ0hGYQCb34=
Subject key identifier: 34:A2:91:F9:57:14:E1:AE:B0:4C:88:B8:DB:5E:B4:84:FB:E4:B9:70
Authority key identifier: 1B:CE:E4:04:05:AE:FB:6D:A1:7A:34:0E:EF:15:9C:E9:C4:D1:83:22
Certificate issuer: /CN=1bcee40405aefb6da17a340eef159ce9c4d18322
Certificate serial: 019CAE34FEA38E4D99C77429D1E2A14420F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G87kBAWu-22hejQO7xWc6cTRgyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.mft
Manifest number: 1560
Signing time: Mon 02 Mar 2026 11:00:34 +0000
Manifest this update: Mon 02 Mar 2026 11:00:34 +0000
Manifest next update: Tue 03 Mar 2026 11:00:34 +0000
Files and hashes: 1: 1-6iaGXxnmZAQPnrgq_8F_icO1g4.roa (hash: 0E9/yZaAdb1/Mv9Vi0wA6mVdKYXwLD+kDlf9BylOAkE=)
2: G87kBAWu-22hejQO7xWc6cTRgyI.crl (hash: HXDu0zzKUG624KXsF1HqSAXznffJbk1f77jpVhRn5OU=)
3: cDH3zRFxxa5MCdHGhfO_X-DrZiY.roa (hash: XO1nhE/daEhAYwuXZgOrEgjLVoR1QTpbhv4y3qZNEo0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/G87kBAWu-22hejQO7xWc6cTRgyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 11:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:34:fe:a3:8e:4d:99:c7:74:29:d1:e2:a1:44:20:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bcee40405aefb6da17a340eef159ce9c4d18322
Validity
Not Before: Mar 2 11:00:34 2026 GMT
Not After : Mar 3 11:00:34 2026 GMT
Subject: CN=34a291f95714e1aeb04c88b8db5eb484fbe4b970
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7d:df:a3:03:3f:1c:be:8f:2d:7f:2a:67:32:
31:f7:33:ee:81:66:43:51:1d:4e:3f:94:c8:12:7e:
ea:5f:d2:00:ea:fc:e5:55:ba:40:d3:be:ff:ce:10:
1c:7c:00:1f:20:f3:0e:1d:74:4c:80:a9:f2:4f:34:
6a:d7:82:66:32:40:f8:b6:c2:2b:d6:17:e0:cd:6d:
65:32:ad:8b:ae:f1:a8:83:3c:59:c8:64:aa:5c:36:
13:72:04:9b:c3:74:52:51:dc:41:60:c8:9a:7f:af:
17:6e:b7:b0:78:75:9e:5c:0b:63:a2:96:d5:f7:1e:
86:de:95:33:1d:3a:8e:ad:c9:51:27:43:11:9a:b8:
d2:2e:87:3d:6e:0f:2f:73:b9:b2:5e:a8:d1:a4:78:
64:75:86:fe:2f:4d:2d:fb:f9:18:97:15:99:7c:35:
68:d2:71:17:39:c5:4d:d7:43:55:0d:1c:2d:27:53:
76:9d:83:ba:af:24:02:00:9a:57:7f:7e:73:db:01:
96:03:ec:9c:b6:f2:d0:99:c0:f8:64:44:3e:13:b0:
6e:e9:77:53:61:8a:38:4f:32:3a:60:19:12:55:c5:
07:c7:5c:b4:6e:53:67:eb:c1:f4:28:7a:84:5a:9b:
c8:9f:57:92:bc:b6:6b:83:e8:e0:d6:0d:ec:53:25:
a4:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:A2:91:F9:57:14:E1:AE:B0:4C:88:B8:DB:5E:B4:84:FB:E4:B9:70
X509v3 Authority Key Identifier:
keyid:1B:CE:E4:04:05:AE:FB:6D:A1:7A:34:0E:EF:15:9C:E9:C4:D1:83:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G87kBAWu-22hejQO7xWc6cTRgyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:ec:95:e2:bc:d6:53:b8:5b:79:7d:9c:b0:84:8c:4b:43:d0:
a1:58:41:c1:0b:ce:38:d4:c7:9c:ec:d5:12:02:84:84:f4:31:
8a:76:c9:ca:06:1a:50:6f:75:a2:b0:cc:15:16:70:15:7e:ce:
6f:fc:6b:fa:74:fa:d0:a3:6d:03:ad:74:61:c1:a0:10:a6:47:
84:f6:db:73:80:96:e7:86:92:06:57:99:05:4a:bc:1f:5f:67:
41:3f:08:43:a0:fc:13:d7:ae:0d:c7:25:cf:46:f8:93:54:e0:
ee:3e:54:7d:d6:e6:5b:5c:99:0b:56:a5:a1:44:f8:0e:54:05:
c3:87:d7:a9:68:03:c4:d7:85:86:eb:44:c1:dc:e0:a3:82:e6:
bf:af:a0:12:34:6e:62:1c:71:b1:5c:c7:4b:fa:c1:13:f2:ea:
2f:c1:bd:54:a4:1a:76:89:f0:40:8a:9a:60:07:59:6b:47:52:
62:cf:e9:fb:a6:9e:73:74:22:90:36:24:bd:25:66:e4:50:0a:
e6:5f:f2:8c:66:6b:29:72:17:45:64:e1:f8:21:3e:09:25:da:
7e:6f:f3:19:74:20:db:c6:ae:f9:74:d1:42:b7:72:8a:c0:ed:
3f:a5:17:26:ee:c5:0f:13:06:54:4f:29:0a:3a:f6:ba:87:47:
26:e4:07:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyuNP6jjk2Zx3Qp0eKhRCD5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiY2VlNDA0MDVhZWZiNmRhMTdhMzQwZWVmMTU5Y2U5YzRk
MTgzMjIwHhcNMjYwMzAyMTEwMDM0WhcNMjYwMzAzMTEwMDM0WjAzMTEwLwYDVQQD
EygzNGEyOTFmOTU3MTRlMWFlYjA0Yzg4YjhkYjVlYjQ4NGZiZTRiOTcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq33fowM/HL6PLX8qZzIx9zPugWZD
UR1OP5TIEn7qX9IA6vzlVbpA077/zhAcfAAfIPMOHXRMgKnyTzRq14JmMkD4tsIr
1hfgzW1lMq2LrvGogzxZyGSqXDYTcgSbw3RSUdxBYMiaf68XbreweHWeXAtjopbV
9x6G3pUzHTqOrclRJ0MRmrjSLoc9bg8vc7myXqjRpHhkdYb+L00t+/kYlxWZfDVo
0nEXOcVN10NVDRwtJ1N2nYO6ryQCAJpXf35z2wGWA+yctvLQmcD4ZEQ+E7Bu6XdT
YYo4TzI6YBkSVcUHx1y0blNn68H0KHqEWpvIn1eSvLZrg+jg1g3sUyWkdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDSikflXFOGusEyIuNtetIT75LlwMB8GA1UdIwQY
MBaAFBvO5AQFrvttoXo0Du8VnOnE0YMiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzg3a0JBV3UtMjJoZWpRTzd4V2M2Y1RSZ3lJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9hZjg5ZDgtOGMzNS00YzhjLWIxNWQt
N2U0NmFkNzQ4NDg0LzEvRzg3a0JBV3UtMjJoZWpRTzd4V2M2Y1RSZ3lJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9hZjg5ZDgtOGMzNS00YzhjLWIxNWQtN2U0NmFkNzQ4NDg0
LzEvRzg3a0JBV3UtMjJoZWpRTzd4V2M2Y1RSZ3lJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACOyV4rzW
U7hbeX2csISMS0PQoVhBwQvOONTHnOzVEgKEhPQxinbJygYaUG91orDMFRZwFX7O
b/xr+nT60KNtA610YcGgEKZHhPbbc4CW54aSBleZBUq8H19nQT8IQ6D8E9euDccl
z0b4k1Tg7j5UfdbmW1yZC1aloUT4DlQFw4fXqWgDxNeFhutEwdzgo4Lmv6+gEjRu
YhxxsVzHS/rBE/LqL8G9VKQadonwQIqaYAdZa0dSYs/p+6aec3QikDYkvSVm5FAK
5l/yjGZrKXIXRWTh+CE+CSXafm/zGXQg28au+XTRQrdyisDtP6UXJu7FDxMGVE8p
Cjr2uodHJuQHLQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 20:37:59 2026 by rpki-client