Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.mft
File: G2RtQs6J1Ak-Ssknp_I283pRq-I.mft (raw, json)
Hash identifier: CdA0CjcGk3O/jEYy7sgoW7jwb875zKKuCXzlioxf8A8=
Subject key identifier: 65:92:22:31:B9:75:97:B1:E3:5B:1A:07:A6:93:BD:E4:99:71:C0:90
Authority key identifier: 1B:64:6D:42:CE:89:D4:09:3E:4A:C9:27:A7:F2:36:F3:7A:51:AB:E2
Certificate issuer: /CN=1b646d42ce89d4093e4ac927a7f236f37a51abe2
Certificate serial: 019D984FE663728FB41203F5ADF31F3AA624
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G2RtQs6J1Ak-Ssknp_I283pRq-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.mft
Manifest number: 10E8
Signing time: Thu 16 Apr 2026 22:01:06 +0000
Manifest this update: Thu 16 Apr 2026 22:01:06 +0000
Manifest next update: Fri 17 Apr 2026 22:01:06 +0000
Files and hashes: 1: G2RtQs6J1Ak-Ssknp_I283pRq-I.crl (hash: /2y5sCWf5VLI3EGXzEUaLedmpHhXdiZlsyxIusF49QA=)
2: buasPl807dGAfqgw1urBhY4Km5w.roa (hash: PQav8NXXwoaYuBOPi54S+Cjky9Sn3BtCmVplgakM7xk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/G2RtQs6J1Ak-Ssknp_I283pRq-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:4f:e6:63:72:8f:b4:12:03:f5:ad:f3:1f:3a:a6:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b646d42ce89d4093e4ac927a7f236f37a51abe2
Validity
Not Before: Apr 16 22:01:06 2026 GMT
Not After : Apr 17 22:01:06 2026 GMT
Subject: CN=65922231b97597b1e35b1a07a693bde49971c090
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:60:4a:52:1f:5f:3e:96:4c:42:f4:ae:8c:ca:
61:7e:8c:b6:c9:8f:84:ba:35:9c:a5:73:30:db:24:
e0:dd:7f:dd:d9:2e:66:0a:cf:f0:de:c5:17:fe:10:
98:91:ac:d1:98:15:97:75:65:7b:e6:c9:0b:8c:10:
57:03:c7:a1:5c:4c:92:7b:a7:7d:a2:7f:0b:1e:1d:
7e:26:c1:43:a4:af:bd:41:61:86:82:3e:a2:c9:0c:
88:08:25:92:54:2e:7a:27:63:1f:92:3f:66:75:78:
bf:6a:33:76:86:26:9a:5e:57:68:82:e3:9f:bb:67:
53:36:38:84:8d:fc:22:d4:50:6f:86:f0:6a:5a:46:
d5:ef:4b:8e:31:25:a1:c6:cc:89:ac:5e:fa:cc:be:
a3:f8:39:d0:06:0c:eb:52:fd:de:32:fa:8e:69:9e:
88:8e:f2:a2:b5:88:4d:ce:b2:8e:83:da:f4:0f:da:
90:1b:db:56:ec:bd:7d:5c:0c:8e:46:22:ca:8d:4b:
e3:21:7d:ca:93:6b:6c:1c:cb:0d:a0:a4:a8:5c:ae:
a1:9b:31:5e:51:0a:77:69:0e:25:0e:78:37:62:54:
d2:8f:9e:f3:b8:c0:63:1b:54:e7:f2:33:30:dc:62:
b2:73:37:c8:8e:22:95:5b:3c:04:f5:fb:fb:ec:1b:
9d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:92:22:31:B9:75:97:B1:E3:5B:1A:07:A6:93:BD:E4:99:71:C0:90
X509v3 Authority Key Identifier:
keyid:1B:64:6D:42:CE:89:D4:09:3E:4A:C9:27:A7:F2:36:F3:7A:51:AB:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2RtQs6J1Ak-Ssknp_I283pRq-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:22:cc:0c:72:d8:1e:d3:af:fb:f3:a2:e5:30:14:f3:0b:d2:
d1:d6:ef:cf:2a:6c:e7:fd:65:19:66:08:01:f1:6b:71:b1:9b:
47:e0:8d:3b:6f:e7:17:94:50:54:68:e9:12:c9:cb:99:f9:10:
8f:bc:24:57:4d:20:20:ea:81:f2:58:2f:32:cc:c1:fc:87:71:
77:f6:33:4c:fe:53:43:fb:dc:a7:da:1e:9f:58:c7:ef:6a:da:
7a:99:87:8b:b2:25:d6:25:cc:9f:4b:cb:66:c8:44:f7:82:42:
96:49:b4:b9:a5:60:1d:67:5a:4f:5e:3c:cf:1f:44:79:c2:04:
02:b0:10:95:af:93:76:1e:d8:4d:9e:0f:36:ad:3e:fb:17:52:
87:97:4c:14:23:bc:10:5c:3d:75:48:29:8b:24:7b:27:60:fa:
f9:13:4d:a3:ac:b6:0c:10:5f:a9:74:3d:87:b8:17:c8:98:81:
86:f1:64:41:2b:c1:30:95:0e:64:e6:b4:49:44:7d:47:41:2a:
8e:bb:ec:60:f6:87:57:2a:2c:9d:9d:d9:30:ea:e0:a3:7c:74:
bd:1c:16:a4:1d:6c:70:85:df:22:18:ec:d0:d9:2c:63:1e:6c:
b7:e9:a2:7f:e3:b2:40:6e:94:ec:58:49:42:ca:17:8a:a8:29:
d8:f1:cb:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YT+Zjco+0EgP1rfMfOqYkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiNjQ2ZDQyY2U4OWQ0MDkzZTRhYzkyN2E3ZjIzNmYzN2E1
MWFiZTIwHhcNMjYwNDE2MjIwMTA2WhcNMjYwNDE3MjIwMTA2WjAzMTEwLwYDVQQD
Eyg2NTkyMjIzMWI5NzU5N2IxZTM1YjFhMDdhNjkzYmRlNDk5NzFjMDkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2BKUh9fPpZMQvSujMphfoy2yY+E
ujWcpXMw2yTg3X/d2S5mCs/w3sUX/hCYkazRmBWXdWV75skLjBBXA8ehXEySe6d9
on8LHh1+JsFDpK+9QWGGgj6iyQyICCWSVC56J2Mfkj9mdXi/ajN2hiaaXldoguOf
u2dTNjiEjfwi1FBvhvBqWkbV70uOMSWhxsyJrF76zL6j+DnQBgzrUv3eMvqOaZ6I
jvKitYhNzrKOg9r0D9qQG9tW7L19XAyORiLKjUvjIX3Kk2tsHMsNoKSoXK6hmzFe
UQp3aQ4lDng3YlTSj57zuMBjG1Tn8jMw3GKyczfIjiKVWzwE9fv77Bud8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGWSIjG5dZex41saB6aTveSZccCQMB8GA1UdIwQY
MBaAFBtkbULOidQJPkrJJ6fyNvN6UaviMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzJSdFFzNkoxQWstU3NrbnBfSTI4M3BScS1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9kZjFiY2MtMDIwMC00NmNiLWE5MzMt
NjYzNDBiYmZmMGI5LzEvRzJSdFFzNkoxQWstU3NrbnBfSTI4M3BScS1JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS9kZjFiY2MtMDIwMC00NmNiLWE5MzMtNjYzNDBiYmZmMGI5
LzEvRzJSdFFzNkoxQWstU3NrbnBfSTI4M3BScS1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXyLMDHLY
HtOv+/Oi5TAU8wvS0dbvzyps5/1lGWYIAfFrcbGbR+CNO2/nF5RQVGjpEsnLmfkQ
j7wkV00gIOqB8lgvMszB/Idxd/YzTP5TQ/vcp9oen1jH72raepmHi7Il1iXMn0vL
ZshE94JClkm0uaVgHWdaT148zx9EecIEArAQla+Tdh7YTZ4PNq0++xdSh5dMFCO8
EFw9dUgpiyR7J2D6+RNNo6y2DBBfqXQ9h7gXyJiBhvFkQSvBMJUOZOa0SUR9R0Eq
jrvsYPaHVyosnZ3ZMOrgo3x0vRwWpB1scIXfIhjs0NksYx5st+mif+OyQG6U7FhJ
QsoXiqgp2PHLgg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:19:30 2026 by rpki-client