Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/1972a2-3b6f-4316-ab7e-a0bcc912d735/1/G-o-mbuw3aeAhCGaYTSS5ebZtFo.mft
File: G-o-mbuw3aeAhCGaYTSS5ebZtFo.mft (raw, json)
Hash identifier: i7F5vZVflc1M94UoXwvHHrLod5duy8I1qOou4/e2Kzc=
Subject key identifier: 38:9B:16:CF:6F:E8:F0:49:22:3D:86:5D:9A:4A:94:92:51:F4:85:40
Authority key identifier: 1B:EA:3E:99:BB:B0:DD:A7:80:84:21:9A:61:34:92:E5:E6:D9:B4:5A
Certificate issuer: /CN=1bea3e99bbb0dda78084219a613492e5e6d9b45a
Certificate serial: 019CABA1DBFECE81490C6B7C40FB5C485A7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-o-mbuw3aeAhCGaYTSS5ebZtFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/1972a2-3b6f-4316-ab7e-a0bcc912d735/1/G-o-mbuw3aeAhCGaYTSS5ebZtFo.mft
Manifest number: 02FC
Signing time: Sun 01 Mar 2026 23:00:37 +0000
Manifest this update: Sun 01 Mar 2026 23:00:37 +0000
Manifest next update: Mon 02 Mar 2026 23:00:37 +0000
Files and hashes: 1: G-o-mbuw3aeAhCGaYTSS5ebZtFo.crl (hash: Vnd5VRKaeT4c5IG3qfMZjixRPpRoG8Z58EH46x8IY90=)
2: gKtJxrK81I9Dyc2P943nU7n_NFg.roa (hash: FbX29T2UzXYU9Jzwc1cwk5IktOA+UziqBTJuxuNpfOg=)
3: mNtB-xH-QhdKLqJsjGj6xp9WKiw.roa (hash: hEJab2DxVlPrR69lL6u2AYQEme1levJMaPuY085myQg=)
4: rgz-y7ThQzU-4VqCfX9Ota3d-p0.roa (hash: piFE9GnT4z5N6g/l0DAbRB4nCDUBJdWgytzAmBqGihU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/1972a2-3b6f-4316-ab7e-a0bcc912d735/1/G-o-mbuw3aeAhCGaYTSS5ebZtFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/1972a2-3b6f-4316-ab7e-a0bcc912d735/1/G-o-mbuw3aeAhCGaYTSS5ebZtFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/G-o-mbuw3aeAhCGaYTSS5ebZtFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a1:db:fe:ce:81:49:0c:6b:7c:40:fb:5c:48:5a:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bea3e99bbb0dda78084219a613492e5e6d9b45a
Validity
Not Before: Mar 1 23:00:37 2026 GMT
Not After : Mar 2 23:00:37 2026 GMT
Subject: CN=389b16cf6fe8f049223d865d9a4a949251f48540
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:6f:3e:e7:83:c6:77:ae:d4:21:b3:c8:6f:27:
d8:88:43:1a:c7:8b:62:b9:d9:cd:5c:a9:38:30:36:
0e:cb:56:ef:13:37:10:80:d5:f3:53:8f:e7:42:c9:
3b:db:a6:bf:44:0a:03:11:4c:97:2a:27:98:86:6e:
8f:15:b2:73:bb:f4:86:dc:b9:40:94:63:4f:ce:d4:
87:8f:40:e7:3f:09:2a:fd:c5:64:11:69:3b:4a:35:
08:cf:31:80:04:fc:aa:22:f2:42:40:fe:42:57:ec:
14:a3:53:be:f3:c7:98:49:e3:d1:90:26:82:13:82:
14:cf:7f:58:7c:34:2e:34:a6:f6:e8:9e:e6:d3:d0:
81:55:f2:7c:76:1b:42:bd:14:15:d6:24:b7:ac:35:
38:55:65:44:cb:0c:3a:5f:38:0a:59:ca:ba:1b:99:
b3:25:25:90:8f:00:82:fd:99:08:b8:29:a6:c3:63:
77:a5:2c:e1:8b:14:1d:11:4d:2f:cc:37:02:d8:8f:
06:d1:c0:49:21:7f:cb:b9:cb:e5:d6:43:4a:46:55:
64:4a:7d:d2:83:c3:cf:df:6b:fd:bc:7e:22:e9:6e:
56:9e:17:90:fd:86:fc:81:2d:ca:c2:44:94:16:6e:
df:07:97:6f:5e:67:c9:84:e8:86:8e:06:e1:99:f5:
10:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:9B:16:CF:6F:E8:F0:49:22:3D:86:5D:9A:4A:94:92:51:F4:85:40
X509v3 Authority Key Identifier:
keyid:1B:EA:3E:99:BB:B0:DD:A7:80:84:21:9A:61:34:92:E5:E6:D9:B4:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-o-mbuw3aeAhCGaYTSS5ebZtFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/1972a2-3b6f-4316-ab7e-a0bcc912d735/1/G-o-mbuw3aeAhCGaYTSS5ebZtFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/1972a2-3b6f-4316-ab7e-a0bcc912d735/1/G-o-mbuw3aeAhCGaYTSS5ebZtFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:e2:26:64:37:d6:83:41:4b:e3:19:23:5c:95:5b:8e:de:75:
c9:88:7c:71:28:b1:04:54:2c:83:1c:83:79:57:19:39:a5:cc:
e4:b7:3b:64:ff:49:30:a9:1b:c8:5a:f3:b7:67:8b:fa:02:c8:
b8:13:77:98:14:49:a4:f6:94:f1:9a:e2:5d:71:10:68:3c:eb:
86:37:66:d5:f4:5d:c1:00:3f:6a:94:cb:92:08:7d:9c:c1:cb:
4b:60:f0:26:2e:a8:c8:5d:ab:a8:2d:23:03:da:b6:53:43:7d:
f0:27:85:a9:f8:88:48:cb:be:f2:6c:75:10:d2:36:8c:48:06:
3b:12:05:5e:c5:da:aa:67:06:2c:d7:b5:55:75:f8:49:7e:83:
07:2b:7d:bd:23:35:d3:c4:74:a2:b1:10:4f:16:12:42:d9:3a:
d0:f6:2f:0d:2e:63:3e:71:f7:d7:52:1a:82:2a:b0:88:74:8a:
2c:b7:03:e6:a6:ff:a6:40:80:d9:69:70:d2:be:01:75:34:71:
ac:ec:8b:2e:d5:37:d9:8b:9d:2d:20:75:60:5d:5c:e7:8f:2f:
11:2d:bc:95:96:93:15:df:8f:ed:1f:3b:5c:7a:63:c5:6c:95:
f6:a6:89:0a:cb:44:d5:af:01:9d:1f:10:e4:c0:67:04:89:b6:
33:20:43:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrodv+zoFJDGt8QPtcSFp6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiZWEzZTk5YmJiMGRkYTc4MDg0MjE5YTYxMzQ5MmU1ZTZk
OWI0NWEwHhcNMjYwMzAxMjMwMDM3WhcNMjYwMzAyMjMwMDM3WjAzMTEwLwYDVQQD
EygzODliMTZjZjZmZThmMDQ5MjIzZDg2NWQ5YTRhOTQ5MjUxZjQ4NTQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2G8+54PGd67UIbPIbyfYiEMax4ti
udnNXKk4MDYOy1bvEzcQgNXzU4/nQsk726a/RAoDEUyXKieYhm6PFbJzu/SG3LlA
lGNPztSHj0DnPwkq/cVkEWk7SjUIzzGABPyqIvJCQP5CV+wUo1O+88eYSePRkCaC
E4IUz39YfDQuNKb26J7m09CBVfJ8dhtCvRQV1iS3rDU4VWVEyww6XzgKWcq6G5mz
JSWQjwCC/ZkIuCmmw2N3pSzhixQdEU0vzDcC2I8G0cBJIX/Lucvl1kNKRlVkSn3S
g8PP32v9vH4i6W5WnheQ/Yb8gS3KwkSUFm7fB5dvXmfJhOiGjgbhmfUQrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDibFs9v6PBJIj2GXZpKlJJR9IVAMB8GA1UdIwQY
MBaAFBvqPpm7sN2ngIQhmmE0kuXm2bRaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRy1vLW1idXczYWVBaENHYVlUU1M1ZWJadEZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8xOTcyYTItM2I2Zi00MzE2LWFiN2Ut
YTBiY2M5MTJkNzM1LzEvRy1vLW1idXczYWVBaENHYVlUU1M1ZWJadEZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC8xOTcyYTItM2I2Zi00MzE2LWFiN2UtYTBiY2M5MTJkNzM1
LzEvRy1vLW1idXczYWVBaENHYVlUU1M1ZWJadEZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAruImZDfW
g0FL4xkjXJVbjt51yYh8cSixBFQsgxyDeVcZOaXM5Lc7ZP9JMKkbyFrzt2eL+gLI
uBN3mBRJpPaU8ZriXXEQaDzrhjdm1fRdwQA/apTLkgh9nMHLS2DwJi6oyF2rqC0j
A9q2U0N98CeFqfiISMu+8mx1ENI2jEgGOxIFXsXaqmcGLNe1VXX4SX6DByt9vSM1
08R0orEQTxYSQtk60PYvDS5jPnH311IagiqwiHSKLLcD5qb/pkCA2Wlw0r4BdTRx
rOyLLtU32YudLSB1YF1c548vES28lZaTFd+P7R87XHpjxWyV9qaJCstE1a8BnR8Q
5MBnBIm2MyBDeA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:59:19 2026 by rpki-client