Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/4a293b-4c41-428c-9287-bd98b3e90e43/1/G9vEEUREgGUxPvC4LhzPeubqVyA.mft
File: G9vEEUREgGUxPvC4LhzPeubqVyA.mft (raw, json)
Hash identifier: LWD7rn2XGNg3sDpuLz1SuWlMC/IwdwOPvNdxDd5irls=
Subject key identifier: 79:F7:03:F0:47:DA:40:33:14:3C:9E:FC:91:74:DB:00:5D:60:BC:31
Authority key identifier: 1B:DB:C4:11:44:44:80:65:31:3E:F0:B8:2E:1C:CF:7A:E6:EA:57:20
Certificate issuer: /CN=1bdbc41144448065313ef0b82e1ccf7ae6ea5720
Certificate serial: 019CAAC70F588FF25AAB9A5DEC6A58999495
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G9vEEUREgGUxPvC4LhzPeubqVyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/4a293b-4c41-428c-9287-bd98b3e90e43/1/G9vEEUREgGUxPvC4LhzPeubqVyA.mft
Manifest number: 1848
Signing time: Sun 01 Mar 2026 19:01:38 +0000
Manifest this update: Sun 01 Mar 2026 19:01:38 +0000
Manifest next update: Mon 02 Mar 2026 19:01:38 +0000
Files and hashes: 1: G9vEEUREgGUxPvC4LhzPeubqVyA.crl (hash: wQjLGEP63yQBCFn6xpuNW6LdeVr4gTynShHunnuj/eQ=)
2: tXwPHcD7KOQpl4ubBwGZXMLcNGc.roa (hash: kHVmMcCLDSaK/L8IsfRUQoLqMYtr8aRP/Gpfi71r/IU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/4a293b-4c41-428c-9287-bd98b3e90e43/1/G9vEEUREgGUxPvC4LhzPeubqVyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/4a293b-4c41-428c-9287-bd98b3e90e43/1/G9vEEUREgGUxPvC4LhzPeubqVyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/G9vEEUREgGUxPvC4LhzPeubqVyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c7:0f:58:8f:f2:5a:ab:9a:5d:ec:6a:58:99:94:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bdbc41144448065313ef0b82e1ccf7ae6ea5720
Validity
Not Before: Mar 1 19:01:38 2026 GMT
Not After : Mar 2 19:01:38 2026 GMT
Subject: CN=79f703f047da4033143c9efc9174db005d60bc31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:25:53:ac:33:ff:a1:58:4a:d0:da:32:01:64:
3a:db:2d:ce:cc:b6:25:2b:db:5a:c1:72:1d:ed:33:
ca:14:bf:50:40:75:fe:4d:b3:12:9b:17:c0:17:d6:
4c:41:1a:31:8e:75:14:27:22:7a:09:88:80:df:80:
77:9a:df:e6:e3:2d:9a:9b:db:a4:a8:95:59:0f:9d:
03:e4:90:7e:16:90:ef:e2:8b:37:64:f0:68:0b:95:
2e:7f:55:65:43:eb:be:2f:2b:82:18:38:9e:d1:a3:
1e:36:05:b2:af:33:43:6d:ab:0b:51:35:c3:06:92:
54:91:68:c0:d9:6e:8d:14:ba:30:4a:ce:76:e1:bc:
db:67:62:f2:9d:c3:cb:a2:22:65:12:71:a3:d7:f7:
64:7b:4c:98:46:1d:76:a7:0e:47:00:fc:3b:c9:cd:
cf:46:7c:94:7e:9b:de:0d:c2:18:de:35:24:89:a5:
39:70:b7:ea:c1:d4:4d:83:ce:d3:c7:65:08:9b:ed:
24:f7:a9:77:f0:db:e1:09:11:49:f9:25:c4:44:f5:
ce:fd:e9:0f:20:c2:08:4b:99:34:bc:47:ce:c6:79:
7f:79:eb:0c:ee:21:c0:b6:13:90:4e:39:30:f9:e9:
be:f9:d6:43:58:05:3a:9b:63:c9:39:74:42:55:6d:
dc:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:F7:03:F0:47:DA:40:33:14:3C:9E:FC:91:74:DB:00:5D:60:BC:31
X509v3 Authority Key Identifier:
keyid:1B:DB:C4:11:44:44:80:65:31:3E:F0:B8:2E:1C:CF:7A:E6:EA:57:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G9vEEUREgGUxPvC4LhzPeubqVyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4a293b-4c41-428c-9287-bd98b3e90e43/1/G9vEEUREgGUxPvC4LhzPeubqVyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4a293b-4c41-428c-9287-bd98b3e90e43/1/G9vEEUREgGUxPvC4LhzPeubqVyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:b6:66:27:6c:95:ad:3f:bd:8e:5f:a8:a4:93:46:79:28:91:
f8:81:0e:39:d2:0a:b4:5d:cd:2a:71:3b:a1:a4:85:34:07:e2:
90:66:a8:f0:fe:0a:91:a7:da:76:d1:65:e7:91:a2:9b:42:c3:
2b:7b:c5:69:5a:06:94:37:1e:6a:28:d9:70:8f:9a:91:55:56:
10:d6:83:b4:8c:0a:4a:1d:48:ba:44:f8:db:be:59:5c:d9:21:
b4:e8:e5:0a:d8:9a:c8:5f:a5:85:ed:c6:d3:35:af:09:1c:0c:
cc:e3:ca:3d:61:fc:f5:d7:52:f1:d7:2c:4e:ff:16:49:a5:03:
35:78:0c:80:b2:f9:f6:86:d5:b7:69:c7:12:3a:a0:81:96:0a:
cc:48:ef:96:9a:c2:3e:c4:a9:87:d9:0f:b5:bf:e9:57:c6:c6:
8d:5f:7a:ce:94:3f:e3:fe:58:6d:70:0d:bd:6a:8e:26:2d:49:
3c:ad:92:e4:0a:3f:eb:f3:cc:38:ca:76:ca:c6:8b:fb:26:ad:
1d:70:0a:20:9b:33:ea:ab:64:11:a2:2c:f5:31:4c:e6:4a:79:
2b:d9:0f:e4:94:9b:c8:f3:4b:f8:c2:e9:da:ec:01:0a:ce:95:
d6:3e:7c:5d:5c:e5:42:0a:85:a0:a4:67:2f:dc:18:73:f9:c3:
5c:22:4d:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqxw9Yj/Jaq5pd7GpYmZSVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiZGJjNDExNDQ0NDgwNjUzMTNlZjBiODJlMWNjZjdhZTZl
YTU3MjAwHhcNMjYwMzAxMTkwMTM4WhcNMjYwMzAyMTkwMTM4WjAzMTEwLwYDVQQD
Eyg3OWY3MDNmMDQ3ZGE0MDMzMTQzYzllZmM5MTc0ZGIwMDVkNjBiYzMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmiVTrDP/oVhK0NoyAWQ62y3OzLYl
K9tawXId7TPKFL9QQHX+TbMSmxfAF9ZMQRoxjnUUJyJ6CYiA34B3mt/m4y2am9uk
qJVZD50D5JB+FpDv4os3ZPBoC5Uuf1VlQ+u+LyuCGDie0aMeNgWyrzNDbasLUTXD
BpJUkWjA2W6NFLowSs524bzbZ2LyncPLoiJlEnGj1/dke0yYRh12pw5HAPw7yc3P
RnyUfpveDcIY3jUkiaU5cLfqwdRNg87Tx2UIm+0k96l38NvhCRFJ+SXERPXO/ekP
IMIIS5k0vEfOxnl/eesM7iHAthOQTjkw+em++dZDWAU6m2PJOXRCVW3ckQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHn3A/BH2kAzFDye/JF02wBdYLwxMB8GA1UdIwQY
MBaAFBvbxBFERIBlMT7wuC4cz3rm6lcgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzl2RUVVUkVnR1V4UHZDNExoelBldWJxVnlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy80YTI5M2ItNGM0MS00MjhjLTkyODct
YmQ5OGIzZTkwZTQzLzEvRzl2RUVVUkVnR1V4UHZDNExoelBldWJxVnlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy80YTI5M2ItNGM0MS00MjhjLTkyODctYmQ5OGIzZTkwZTQz
LzEvRzl2RUVVUkVnR1V4UHZDNExoelBldWJxVnlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiLZmJ2yV
rT+9jl+opJNGeSiR+IEOOdIKtF3NKnE7oaSFNAfikGao8P4KkafadtFl55Gim0LD
K3vFaVoGlDceaijZcI+akVVWENaDtIwKSh1IukT4275ZXNkhtOjlCtiayF+lhe3G
0zWvCRwMzOPKPWH89ddS8dcsTv8WSaUDNXgMgLL59obVt2nHEjqggZYKzEjvlprC
PsSph9kPtb/pV8bGjV96zpQ/4/5YbXANvWqOJi1JPK2S5Ao/6/PMOMp2ysaL+yat
HXAKIJsz6qtkEaIs9TFM5kp5K9kP5JSbyPNL+MLp2uwBCs6V1j58XVzlQgqFoKRn
L9wYc/nDXCJNGw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:46:19 2026 by rpki-client