Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.mft
File: G87kBAWu-22hejQO7xWc6cTRgyI.mft (raw, json)
Hash identifier: 70uEy9lEh32P2ZG435ugHc1L8R6pBAVu62dYZTPsn9M=
Subject key identifier: 50:EF:58:EA:13:4E:A5:AE:6D:AF:1F:26:E2:D0:B0:C3:83:76:2C:20
Authority key identifier: 1B:CE:E4:04:05:AE:FB:6D:A1:7A:34:0E:EF:15:9C:E9:C4:D1:83:22
Certificate issuer: /CN=1bcee40405aefb6da17a340eef159ce9c4d18322
Certificate serial: 019CAC4779B0D700A6171F70970F9901B74A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G87kBAWu-22hejQO7xWc6cTRgyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.mft
Manifest number: 155F
Signing time: Mon 02 Mar 2026 02:01:31 +0000
Manifest this update: Mon 02 Mar 2026 02:01:31 +0000
Manifest next update: Tue 03 Mar 2026 02:01:31 +0000
Files and hashes: 1: 1-6iaGXxnmZAQPnrgq_8F_icO1g4.roa (hash: 0E9/yZaAdb1/Mv9Vi0wA6mVdKYXwLD+kDlf9BylOAkE=)
2: G87kBAWu-22hejQO7xWc6cTRgyI.crl (hash: QOe4HL/miH0n5svRJcd3ABziRi4Z/N7VciL+UDSIeNc=)
3: cDH3zRFxxa5MCdHGhfO_X-DrZiY.roa (hash: XO1nhE/daEhAYwuXZgOrEgjLVoR1QTpbhv4y3qZNEo0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/G87kBAWu-22hejQO7xWc6cTRgyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 02:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:79:b0:d7:00:a6:17:1f:70:97:0f:99:01:b7:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bcee40405aefb6da17a340eef159ce9c4d18322
Validity
Not Before: Mar 2 02:01:31 2026 GMT
Not After : Mar 3 02:01:31 2026 GMT
Subject: CN=50ef58ea134ea5ae6daf1f26e2d0b0c383762c20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:91:e5:82:2d:23:33:57:d2:9d:1b:6f:08:14:
49:23:5c:9e:70:ea:a8:79:76:44:c8:3f:98:72:3a:
03:d5:97:36:7e:09:46:7a:33:07:6d:1f:68:ec:aa:
23:40:b4:11:c4:5d:e7:77:77:07:ff:12:5f:95:09:
1b:6e:cc:78:44:76:af:7c:0f:7a:b4:a4:e3:89:aa:
9d:36:ed:45:65:7b:01:ec:85:ed:eb:55:83:77:fa:
92:e8:c1:78:5f:90:ad:df:0c:cc:4b:78:03:19:f4:
74:21:37:2c:7e:55:4d:64:aa:6c:97:62:82:ba:7d:
60:99:41:d1:56:16:14:45:78:35:76:2e:9e:89:b6:
ae:b6:c7:5e:71:17:25:6b:12:1b:49:1f:e8:49:a0:
21:97:f7:39:8e:57:38:c8:25:f9:65:d0:f2:c7:61:
d3:ab:5f:16:90:cc:6c:41:6b:db:5e:95:78:b5:21:
a3:c6:3e:6f:ee:e9:76:ba:6c:ea:bd:9a:d1:ce:a1:
b5:bf:69:e6:4d:50:16:2b:90:4d:67:e4:af:c1:37:
b8:4e:f2:3d:ed:e9:f6:f5:88:21:fc:6d:4c:64:79:
69:ca:d4:3e:96:92:af:70:93:2e:3f:88:e5:ea:4d:
55:30:c6:c1:00:e8:27:7e:09:fd:30:30:d7:1a:16:
17:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:EF:58:EA:13:4E:A5:AE:6D:AF:1F:26:E2:D0:B0:C3:83:76:2C:20
X509v3 Authority Key Identifier:
keyid:1B:CE:E4:04:05:AE:FB:6D:A1:7A:34:0E:EF:15:9C:E9:C4:D1:83:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G87kBAWu-22hejQO7xWc6cTRgyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:cd:b3:a9:90:13:76:49:ca:34:0d:27:0d:d4:52:50:0d:bd:
8d:5f:4b:e6:5c:66:51:15:f7:1c:44:68:54:04:18:d2:f2:0c:
b7:96:1b:79:9c:44:0c:1b:fc:72:4d:d3:76:68:11:7a:37:9e:
05:fd:54:ff:36:fd:6f:43:8e:0b:8c:ff:5b:2f:c7:ca:45:83:
f0:5f:8b:59:27:69:db:41:53:99:04:75:5c:cb:b2:47:da:10:
7b:c4:99:06:2a:7f:9a:65:f9:04:e7:5b:36:08:63:6d:ac:47:
e5:b2:b3:4c:98:09:05:f4:c4:6a:68:d3:8c:4d:fb:50:4f:f7:
22:39:6e:e3:8f:71:49:41:38:ca:d8:36:08:b6:70:e5:0b:2b:
2a:d1:43:5a:b1:c2:c2:11:e9:e5:1d:03:e5:02:60:cd:15:ea:
38:c4:ff:49:f6:e2:41:c9:23:b5:86:62:07:76:aa:51:82:62:
14:60:a1:92:5d:71:ac:66:49:55:8d:02:ed:07:d7:c1:2f:f8:
27:3e:c6:fb:01:8a:04:91:3d:dc:1b:11:34:17:6e:18:3f:60:
23:83:e7:a9:e5:08:41:9d:69:36:6b:f1:b9:07:59:cf:e7:70:
04:ca:1c:12:32:af:2f:a4:86:d7:05:7d:11:68:13:12:d9:16:
01:d2:d6:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysR3mw1wCmFx9wlw+ZAbdKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiY2VlNDA0MDVhZWZiNmRhMTdhMzQwZWVmMTU5Y2U5YzRk
MTgzMjIwHhcNMjYwMzAyMDIwMTMxWhcNMjYwMzAzMDIwMTMxWjAzMTEwLwYDVQQD
Eyg1MGVmNThlYTEzNGVhNWFlNmRhZjFmMjZlMmQwYjBjMzgzNzYyYzIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5JHlgi0jM1fSnRtvCBRJI1yecOqo
eXZEyD+YcjoD1Zc2fglGejMHbR9o7KojQLQRxF3nd3cH/xJflQkbbsx4RHavfA96
tKTjiaqdNu1FZXsB7IXt61WDd/qS6MF4X5Ct3wzMS3gDGfR0ITcsflVNZKpsl2KC
un1gmUHRVhYURXg1di6eibautsdecRclaxIbSR/oSaAhl/c5jlc4yCX5ZdDyx2HT
q18WkMxsQWvbXpV4tSGjxj5v7ul2umzqvZrRzqG1v2nmTVAWK5BNZ+SvwTe4TvI9
7en29Ygh/G1MZHlpytQ+lpKvcJMuP4jl6k1VMMbBAOgnfgn9MDDXGhYXtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFDvWOoTTqWuba8fJuLQsMODdiwgMB8GA1UdIwQY
MBaAFBvO5AQFrvttoXo0Du8VnOnE0YMiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzg3a0JBV3UtMjJoZWpRTzd4V2M2Y1RSZ3lJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9hZjg5ZDgtOGMzNS00YzhjLWIxNWQt
N2U0NmFkNzQ4NDg0LzEvRzg3a0JBV3UtMjJoZWpRTzd4V2M2Y1RSZ3lJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9hZjg5ZDgtOGMzNS00YzhjLWIxNWQtN2U0NmFkNzQ4NDg0
LzEvRzg3a0JBV3UtMjJoZWpRTzd4V2M2Y1RSZ3lJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKs2zqZAT
dknKNA0nDdRSUA29jV9L5lxmURX3HERoVAQY0vIMt5YbeZxEDBv8ck3TdmgRejee
Bf1U/zb9b0OOC4z/Wy/HykWD8F+LWSdp20FTmQR1XMuyR9oQe8SZBip/mmX5BOdb
NghjbaxH5bKzTJgJBfTEamjTjE37UE/3Ijlu449xSUE4ytg2CLZw5QsrKtFDWrHC
whHp5R0D5QJgzRXqOMT/SfbiQckjtYZiB3aqUYJiFGChkl1xrGZJVY0C7QfXwS/4
Jz7G+wGKBJE93BsRNBduGD9gI4PnqeUIQZ1pNmvxuQdZz+dwBMocEjKvL6SG1wV9
EWgTEtkWAdLWzA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:52:14 2026 by rpki-client