Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/ed3edb-d275-47c9-be7f-c4367592ae8a/1/g2RqtwYhSO24-ptgqDHIJA3KuAQ.mft
File: g2RqtwYhSO24-ptgqDHIJA3KuAQ.mft (raw, json)
Hash identifier: tyLrCSMo35smSwNL2TDtMUUt1Db8OQYg5BMCNsDVwyg=
Subject key identifier: 43:A4:F4:38:0A:CF:90:80:C3:8B:59:BF:DF:71:E8:77:85:8D:BB:06
Authority key identifier: 83:64:6A:B7:06:21:48:ED:B8:FA:9B:60:A8:31:C8:24:0D:CA:B8:04
Certificate issuer: /CN=83646ab7062148edb8fa9b60a831c8240dcab804
Certificate serial: 019CAC7E2A4C5BA94EA8D23987A0D6F6F78C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g2RqtwYhSO24-ptgqDHIJA3KuAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/ed3edb-d275-47c9-be7f-c4367592ae8a/1/g2RqtwYhSO24-ptgqDHIJA3KuAQ.mft
Manifest number: 0F1D
Signing time: Mon 02 Mar 2026 03:01:14 +0000
Manifest this update: Mon 02 Mar 2026 03:01:14 +0000
Manifest next update: Tue 03 Mar 2026 03:01:14 +0000
Files and hashes: 1: 77kfN6wOfaolUHGNqDj3LGpTo5w.roa (hash: UKDV0ljQgSgXrQFAq0g5SC1urVlROAhWOWoTZWtshBw=)
2: g2RqtwYhSO24-ptgqDHIJA3KuAQ.crl (hash: yEfSvPUqt7MrhEtPuvY9JmSWXRibslgXwQC4A3kzc/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/ed3edb-d275-47c9-be7f-c4367592ae8a/1/g2RqtwYhSO24-ptgqDHIJA3KuAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/ed3edb-d275-47c9-be7f-c4367592ae8a/1/g2RqtwYhSO24-ptgqDHIJA3KuAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/g2RqtwYhSO24-ptgqDHIJA3KuAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:2a:4c:5b:a9:4e:a8:d2:39:87:a0:d6:f6:f7:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83646ab7062148edb8fa9b60a831c8240dcab804
Validity
Not Before: Mar 2 03:01:14 2026 GMT
Not After : Mar 3 03:01:14 2026 GMT
Subject: CN=43a4f4380acf9080c38b59bfdf71e877858dbb06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:bb:cf:c3:e6:23:1e:c7:3d:b1:9c:d0:23:f0:
56:0d:a9:57:b3:3f:d7:2d:2a:48:21:7f:0b:64:61:
19:38:02:bd:7a:ab:2c:b1:76:10:a0:be:d5:92:cf:
3b:7f:96:ea:66:b4:09:e9:2c:5f:1a:99:9e:9e:0b:
98:49:ee:8e:bc:75:77:d7:14:4c:71:2a:63:cb:47:
c2:f6:9a:2f:6f:8a:6f:f5:a0:51:4c:c5:34:69:f6:
47:69:86:99:90:fe:a8:d1:50:f3:aa:ec:c7:4f:32:
14:8e:b5:97:e0:a5:48:d1:6d:64:05:12:b6:c1:ca:
f0:1b:36:ae:63:06:cf:a2:93:23:0d:5d:10:02:a5:
33:ff:d6:e4:ff:62:04:4b:d6:53:7a:48:35:be:36:
01:05:84:ba:ce:40:b1:aa:9e:d5:71:a0:86:f2:69:
5a:73:3b:3d:57:06:89:67:68:da:47:d0:fe:f1:4d:
e5:9c:29:e8:db:77:1b:40:63:30:23:dd:16:57:40:
7f:d7:4e:6a:be:a7:09:b2:96:a1:3a:48:4c:cf:a7:
6b:84:aa:41:37:19:33:ea:e2:ef:5b:75:08:da:fa:
d7:1a:22:cf:73:69:57:4b:98:05:4f:fc:99:bf:f3:
f9:05:25:47:fd:3f:f5:df:95:b0:d5:8c:63:dd:96:
ba:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:A4:F4:38:0A:CF:90:80:C3:8B:59:BF:DF:71:E8:77:85:8D:BB:06
X509v3 Authority Key Identifier:
keyid:83:64:6A:B7:06:21:48:ED:B8:FA:9B:60:A8:31:C8:24:0D:CA:B8:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2RqtwYhSO24-ptgqDHIJA3KuAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/ed3edb-d275-47c9-be7f-c4367592ae8a/1/g2RqtwYhSO24-ptgqDHIJA3KuAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/ed3edb-d275-47c9-be7f-c4367592ae8a/1/g2RqtwYhSO24-ptgqDHIJA3KuAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:b8:ed:30:bc:5b:99:7d:a7:c6:54:ff:19:8b:5e:4e:1a:66:
a5:9a:a0:63:54:44:3a:db:2c:23:bf:c8:0b:fb:3e:35:f0:45:
35:e6:77:04:9a:9a:a8:f5:8f:a0:b7:3f:3b:e6:d4:d7:45:aa:
fb:c6:c2:ba:51:41:69:c3:30:24:23:65:56:50:72:c9:00:0d:
09:ee:78:41:1e:32:9d:fb:38:93:d4:25:30:f0:41:57:85:f0:
16:69:eb:3f:ad:83:8a:c6:1e:d1:41:67:d6:0e:74:93:fb:73:
b8:5d:01:85:f5:50:06:d3:36:18:74:8c:83:c0:36:55:37:2f:
5d:29:bd:8e:bf:c5:e7:cd:a9:b0:2f:7f:89:21:f0:e6:63:06:
20:94:80:22:bf:7b:92:80:23:90:56:d9:3c:c0:a9:0a:40:ee:
c9:b9:74:d3:37:ae:93:bc:0a:f9:46:3c:df:f4:7d:b9:a0:5b:
1b:eb:74:a2:bf:b0:8c:7c:30:f5:81:7b:46:11:86:6e:90:98:
67:69:19:f4:fb:23:b2:eb:00:9d:f2:77:fd:0a:f2:8e:8a:c6:
16:0c:33:2b:12:39:a6:73:87:cd:45:f3:54:c7:bd:72:5d:7c:
c1:73:89:b8:4c:51:6b:25:7a:5e:90:af:3d:f9:96:33:b6:e8:
d3:db:93:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysfipMW6lOqNI5h6DW9veMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzNjQ2YWI3MDYyMTQ4ZWRiOGZhOWI2MGE4MzFjODI0MGRj
YWI4MDQwHhcNMjYwMzAyMDMwMTE0WhcNMjYwMzAzMDMwMTE0WjAzMTEwLwYDVQQD
Eyg0M2E0ZjQzODBhY2Y5MDgwYzM4YjU5YmZkZjcxZTg3Nzg1OGRiYjA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubvPw+YjHsc9sZzQI/BWDalXsz/X
LSpIIX8LZGEZOAK9eqsssXYQoL7Vks87f5bqZrQJ6SxfGpmenguYSe6OvHV31xRM
cSpjy0fC9povb4pv9aBRTMU0afZHaYaZkP6o0VDzquzHTzIUjrWX4KVI0W1kBRK2
wcrwGzauYwbPopMjDV0QAqUz/9bk/2IES9ZTekg1vjYBBYS6zkCxqp7VcaCG8mla
czs9VwaJZ2jaR9D+8U3lnCno23cbQGMwI90WV0B/105qvqcJspahOkhMz6drhKpB
Nxkz6uLvW3UI2vrXGiLPc2lXS5gFT/yZv/P5BSVH/T/135Ww1Yxj3Za6/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEOk9DgKz5CAw4tZv99x6HeFjbsGMB8GA1UdIwQY
MBaAFINkarcGIUjtuPqbYKgxyCQNyrgEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzJScXR3WWhTTzI0LXB0Z3FESElKQTNLdUFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9lZDNlZGItZDI3NS00N2M5LWJlN2Yt
YzQzNjc1OTJhZThhLzEvZzJScXR3WWhTTzI0LXB0Z3FESElKQTNLdUFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi9lZDNlZGItZDI3NS00N2M5LWJlN2YtYzQzNjc1OTJhZThh
LzEvZzJScXR3WWhTTzI0LXB0Z3FESElKQTNLdUFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZbjtMLxb
mX2nxlT/GYteThpmpZqgY1REOtssI7/IC/s+NfBFNeZ3BJqaqPWPoLc/O+bU10Wq
+8bCulFBacMwJCNlVlByyQANCe54QR4ynfs4k9QlMPBBV4XwFmnrP62DisYe0UFn
1g50k/tzuF0BhfVQBtM2GHSMg8A2VTcvXSm9jr/F582psC9/iSHw5mMGIJSAIr97
koAjkFbZPMCpCkDuybl00zeuk7wK+UY83/R9uaBbG+t0or+wjHww9YF7RhGGbpCY
Z2kZ9PsjsusAnfJ3/QryjorGFgwzKxI5pnOHzUXzVMe9cl18wXOJuExRayV6XpCv
PfmWM7bo09uT+w==
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:14:29 2026 by rpki-client