Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/6a2946-f0a4-4e85-930e-d4edf16e0978/1/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.mft
File: G9ugE2Vbm7DKooXXXBQsHuMPiFQ.mft (raw, json)
Hash identifier: v4tUY5haL4BLwmyTfSBxHqlHDR9AYglLMOeceNFXYfc=
Subject key identifier: DE:EA:0B:77:D1:FF:D8:54:B3:E0:96:38:0F:A7:42:85:E8:D6:A3:59
Authority key identifier: 1B:DB:A0:13:65:5B:9B:B0:CA:A2:85:D7:5C:14:2C:1E:E3:0F:88:54
Certificate issuer: /CN=1bdba013655b9bb0caa285d75c142c1ee30f8854
Certificate serial: 019CABD98DF169C9536195701DB40ED17D9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/6a2946-f0a4-4e85-930e-d4edf16e0978/1/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.mft
Manifest number: 1720
Signing time: Mon 02 Mar 2026 00:01:27 +0000
Manifest this update: Mon 02 Mar 2026 00:01:27 +0000
Manifest next update: Tue 03 Mar 2026 00:01:27 +0000
Files and hashes: 1: G9ugE2Vbm7DKooXXXBQsHuMPiFQ.crl (hash: GajuwUvM/6MhF3dhC8uvfWWYGu/21JaIyyDQM8ZaUBE=)
2: GUn5C0R9BrAYfoyxCLwgJiIfUm4.roa (hash: TE3GqYvgyMZRi3G5/sygxcPRG4YEuD9ufDzYPZfPI5U=)
3: esdDEmlA_vp-DUa3L78lRMSFDrg.roa (hash: 89EU1646sjMts7fuWu8bk/NpsMoyPAALSAlqPCHzEdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/6a2946-f0a4-4e85-930e-d4edf16e0978/1/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/6a2946-f0a4-4e85-930e-d4edf16e0978/1/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:8d:f1:69:c9:53:61:95:70:1d:b4:0e:d1:7d:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bdba013655b9bb0caa285d75c142c1ee30f8854
Validity
Not Before: Mar 2 00:01:27 2026 GMT
Not After : Mar 3 00:01:27 2026 GMT
Subject: CN=deea0b77d1ffd854b3e096380fa74285e8d6a359
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:08:fd:9b:63:a8:7b:68:8a:64:7a:34:a3:16:
13:84:9a:07:54:14:e6:55:1a:3b:cc:de:fc:7e:23:
0f:41:b0:e6:96:e6:c3:92:09:e5:1c:f9:1b:fc:06:
38:d1:da:d2:d8:7b:1a:0d:03:01:7a:8c:2c:a5:80:
44:ef:80:69:df:ab:ca:0e:34:90:a3:80:95:24:9a:
41:04:29:6e:5d:ce:7b:93:3d:01:0f:a7:cc:2e:06:
49:c3:a1:00:91:73:33:69:b8:5b:89:28:cd:7f:e7:
04:e3:82:e5:c8:75:4e:bb:7e:f2:3d:9d:f8:b3:cd:
7e:e0:f1:0d:3a:a3:ba:3f:aa:26:11:ba:64:fd:1f:
9b:23:81:66:7a:14:55:a7:16:f8:43:d7:93:b8:dd:
ce:88:04:04:1b:0c:74:3a:c5:4d:e8:33:17:7c:bc:
06:7a:ad:28:84:be:a3:cd:46:16:e2:a2:6f:59:23:
ae:8c:14:d7:85:00:83:70:f2:f8:06:02:fe:96:4f:
83:23:30:c1:f4:bd:3f:84:35:89:03:e7:73:f4:a7:
7a:53:fa:e4:f9:71:d0:61:78:ba:ef:2f:0a:de:fc:
9c:38:bc:42:34:e8:bf:e4:41:30:64:41:6b:09:9c:
e9:57:94:ea:08:0f:b0:8a:2b:af:a2:ce:fe:92:b7:
d1:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:EA:0B:77:D1:FF:D8:54:B3:E0:96:38:0F:A7:42:85:E8:D6:A3:59
X509v3 Authority Key Identifier:
keyid:1B:DB:A0:13:65:5B:9B:B0:CA:A2:85:D7:5C:14:2C:1E:E3:0F:88:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/6a2946-f0a4-4e85-930e-d4edf16e0978/1/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/6a2946-f0a4-4e85-930e-d4edf16e0978/1/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:b5:70:3a:ab:f1:9a:58:46:df:75:3b:18:69:c2:44:be:bd:
8e:17:1b:d5:79:79:ad:68:9a:92:55:87:9a:df:33:87:82:4c:
02:55:28:0a:34:6d:5f:ae:89:60:7d:44:16:ec:d5:5d:9e:9c:
9e:18:49:3c:bf:0c:0e:26:c7:c5:11:00:f3:97:f6:c9:0f:dc:
07:6b:78:c1:8a:f4:4b:93:ee:b4:d2:45:ba:2a:e6:fd:98:0d:
b7:b4:35:3b:2a:78:4c:6b:70:2a:6c:d8:27:45:a3:b0:0f:c4:
8a:f2:c7:11:95:c3:55:66:45:65:25:24:72:58:cd:53:6c:76:
88:7a:2e:8e:fd:03:6c:e3:e5:7d:ac:db:f2:a7:9a:3b:48:21:
b8:80:20:4a:f1:93:c8:05:f4:64:60:c3:ff:16:b6:2d:71:02:
10:68:e5:48:44:da:f5:74:8a:69:89:04:23:dd:2f:96:4d:b7:
c7:07:6e:c1:02:3b:9b:e5:90:28:0e:dd:d3:94:17:5e:35:04:
94:5b:95:ed:ae:ef:a9:5d:b9:1b:e2:f7:64:21:f7:c3:c1:28:
52:25:e9:25:35:4e:b0:e6:d4:f3:a2:ba:2b:b8:1a:a4:ad:83:
3d:5a:17:39:15:bf:6f:ea:40:dc:c5:9c:5b:ab:bd:8e:3b:cf:
3b:3e:2d:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2Y3xaclTYZVwHbQO0X2cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiZGJhMDEzNjU1YjliYjBjYWEyODVkNzVjMTQyYzFlZTMw
Zjg4NTQwHhcNMjYwMzAyMDAwMTI3WhcNMjYwMzAzMDAwMTI3WjAzMTEwLwYDVQQD
EyhkZWVhMGI3N2QxZmZkODU0YjNlMDk2MzgwZmE3NDI4NWU4ZDZhMzU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Qj9m2Ooe2iKZHo0oxYThJoHVBTm
VRo7zN78fiMPQbDmlubDkgnlHPkb/AY40drS2HsaDQMBeowspYBE74Bp36vKDjSQ
o4CVJJpBBCluXc57kz0BD6fMLgZJw6EAkXMzabhbiSjNf+cE44LlyHVOu37yPZ34
s81+4PENOqO6P6omEbpk/R+bI4FmehRVpxb4Q9eTuN3OiAQEGwx0OsVN6DMXfLwG
eq0ohL6jzUYW4qJvWSOujBTXhQCDcPL4BgL+lk+DIzDB9L0/hDWJA+dz9Kd6U/rk
+XHQYXi67y8K3vycOLxCNOi/5EEwZEFrCZzpV5TqCA+wiiuvos7+krfR9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN7qC3fR/9hUs+CWOA+nQoXo1qNZMB8GA1UdIwQY
MBaAFBvboBNlW5uwyqKF11wULB7jD4hUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzl1Z0UyVmJtN0RLb29YWFhCUXNIdU1QaUZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi82YTI5NDYtZjBhNC00ZTg1LTkzMGUt
ZDRlZGYxNmUwOTc4LzEvRzl1Z0UyVmJtN0RLb29YWFhCUXNIdU1QaUZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi82YTI5NDYtZjBhNC00ZTg1LTkzMGUtZDRlZGYxNmUwOTc4
LzEvRzl1Z0UyVmJtN0RLb29YWFhCUXNIdU1QaUZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXbVwOqvx
mlhG33U7GGnCRL69jhcb1Xl5rWiaklWHmt8zh4JMAlUoCjRtX66JYH1EFuzVXZ6c
nhhJPL8MDibHxREA85f2yQ/cB2t4wYr0S5PutNJFuirm/ZgNt7Q1Oyp4TGtwKmzY
J0WjsA/EivLHEZXDVWZFZSUkcljNU2x2iHoujv0DbOPlfazb8qeaO0ghuIAgSvGT
yAX0ZGDD/xa2LXECEGjlSETa9XSKaYkEI90vlk23xwduwQI7m+WQKA7d05QXXjUE
lFuV7a7vqV25G+L3ZCH3w8EoUiXpJTVOsObU86K6K7gapK2DPVoXORW/b+pA3MWc
W6u9jjvPOz4tAg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:51:56 2026 by rpki-client