Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/958a2c-cef0-4bcc-99c2-321c9d66c847/1/g6BiUlKSop6X_moFW5vWCEp3GXc.mft
File: g6BiUlKSop6X_moFW5vWCEp3GXc.mft (raw, json)
Hash identifier: Dsc+JQYfhXSMhjeCvcLXQPpjg9WHUfndZAJf0FffVMo=
Subject key identifier: EA:2B:2A:AF:7C:71:58:D4:83:02:07:A4:A5:E7:AC:9B:6F:13:5D:70
Authority key identifier: 83:A0:62:52:52:92:A2:9E:97:FE:6A:05:5B:9B:D6:08:4A:77:19:77
Certificate issuer: /CN=83a062525292a29e97fe6a055b9bd6084a771977
Certificate serial: 019D97AADC97859C0A7B2E2C055E6B8D2381
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g6BiUlKSop6X_moFW5vWCEp3GXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/958a2c-cef0-4bcc-99c2-321c9d66c847/1/g6BiUlKSop6X_moFW5vWCEp3GXc.mft
Manifest number: 18C1
Signing time: Thu 16 Apr 2026 19:00:50 +0000
Manifest this update: Thu 16 Apr 2026 19:00:50 +0000
Manifest next update: Fri 17 Apr 2026 19:00:50 +0000
Files and hashes: 1: MFlCR2JXbFM0gvBh_dWTVgoL37E.roa (hash: yQHl3h+BIb30RJsHlvxFsia7sgue1T2fPrdJ6ihTuRE=)
2: g6BiUlKSop6X_moFW5vWCEp3GXc.crl (hash: HOxl/h9CkYlfSUabLT132UBGzU06AK0TdtnEptqxutM=)
3: ovEHIgoLlT5gFEr99b8QyIfy0Hw.roa (hash: iBbHmTmPmE2txWf3AwnVIHjDVj/1ExRukaV5Q59K53k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/958a2c-cef0-4bcc-99c2-321c9d66c847/1/g6BiUlKSop6X_moFW5vWCEp3GXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/958a2c-cef0-4bcc-99c2-321c9d66c847/1/g6BiUlKSop6X_moFW5vWCEp3GXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/g6BiUlKSop6X_moFW5vWCEp3GXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 19:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:aa:dc:97:85:9c:0a:7b:2e:2c:05:5e:6b:8d:23:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83a062525292a29e97fe6a055b9bd6084a771977
Validity
Not Before: Apr 16 19:00:50 2026 GMT
Not After : Apr 17 19:00:50 2026 GMT
Subject: CN=ea2b2aaf7c7158d4830207a4a5e7ac9b6f135d70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0f:8f:55:69:a9:eb:13:1d:43:7e:65:2d:74:
d5:4c:bd:d4:d2:78:85:ce:d0:f8:80:14:65:21:93:
69:f6:cd:81:e0:b9:db:6c:38:6e:29:db:fc:df:e2:
75:e9:b1:fc:75:58:05:86:5b:d9:c4:bd:25:67:3a:
5d:b9:38:1a:8c:19:79:69:fe:d1:61:35:97:8d:11:
75:ac:52:25:9f:13:6f:cb:1e:30:a7:87:cc:05:3f:
79:fc:5f:f3:66:56:23:bd:f9:ff:72:6f:c3:dc:31:
88:a9:4f:eb:f2:aa:72:fa:94:03:72:9f:9d:e3:88:
15:60:c9:b5:e7:7b:a4:5a:45:3e:65:53:2b:fa:ef:
a2:2d:64:d8:77:89:0a:d7:b4:32:3b:38:de:4e:28:
e9:c2:76:e3:47:08:e4:7a:7e:29:22:15:68:bc:04:
ce:a2:15:b8:d3:41:1c:6d:40:f9:20:38:70:49:26:
f9:a2:a4:f8:e2:5b:6b:fb:e0:2b:43:b7:d4:ca:cd:
29:77:b8:86:8e:2c:94:df:21:3b:81:10:cc:b9:21:
62:1c:80:94:76:12:e9:86:81:4b:13:82:e2:6c:db:
d9:81:e2:71:96:40:0a:da:ec:1a:6c:e3:9c:df:02:
6c:96:16:63:7c:d2:8a:34:8c:90:6c:c6:50:9c:d5:
a9:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:2B:2A:AF:7C:71:58:D4:83:02:07:A4:A5:E7:AC:9B:6F:13:5D:70
X509v3 Authority Key Identifier:
keyid:83:A0:62:52:52:92:A2:9E:97:FE:6A:05:5B:9B:D6:08:4A:77:19:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g6BiUlKSop6X_moFW5vWCEp3GXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/958a2c-cef0-4bcc-99c2-321c9d66c847/1/g6BiUlKSop6X_moFW5vWCEp3GXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/958a2c-cef0-4bcc-99c2-321c9d66c847/1/g6BiUlKSop6X_moFW5vWCEp3GXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:45:b3:e2:93:7b:cd:28:ee:8a:97:59:b0:d7:21:ba:cc:07:
07:6f:fd:ff:74:ee:c7:c5:60:0f:7d:e6:8a:0b:d6:a7:26:12:
4a:d3:4a:be:a9:64:35:48:5c:5b:6d:49:3d:92:d7:b0:72:89:
d5:c5:83:5d:64:54:a4:f8:0b:d8:a5:11:e2:63:c4:79:cd:ee:
37:d0:35:7c:90:00:45:83:1a:8a:fb:c4:54:01:a3:cd:62:81:
3f:c5:8f:8f:48:e5:a0:c4:8f:0d:ab:5f:66:1e:fd:10:9d:13:
d0:12:79:79:a6:9d:70:02:c7:8f:52:ca:3e:71:0d:b4:19:48:
ee:04:cd:35:ac:3a:5b:de:08:7b:c0:c3:11:1f:21:94:2a:b6:
17:f7:0f:90:f6:2d:58:23:13:67:58:da:d4:16:97:21:3d:27:
41:15:40:17:c6:9a:9b:bf:1a:f4:21:b1:ad:4e:4b:95:58:1c:
2c:27:2f:ef:4b:21:84:1e:14:5b:85:11:b1:9d:8d:35:10:8b:
b6:09:25:12:a0:16:67:2f:dc:07:3a:fd:24:22:80:45:34:bb:
f2:4a:47:f4:6d:66:10:1f:64:09:7f:4e:0a:aa:f1:43:5a:d2:
e7:21:cc:50:6d:e4:da:df:d6:d6:d7:de:da:e2:9e:8d:16:67:
f9:97:e3:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2XqtyXhZwKey4sBV5rjSOBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzYTA2MjUyNTI5MmEyOWU5N2ZlNmEwNTViOWJkNjA4NGE3
NzE5NzcwHhcNMjYwNDE2MTkwMDUwWhcNMjYwNDE3MTkwMDUwWjAzMTEwLwYDVQQD
EyhlYTJiMmFhZjdjNzE1OGQ0ODMwMjA3YTRhNWU3YWM5YjZmMTM1ZDcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQ+PVWmp6xMdQ35lLXTVTL3U0niF
ztD4gBRlIZNp9s2B4LnbbDhuKdv83+J16bH8dVgFhlvZxL0lZzpduTgajBl5af7R
YTWXjRF1rFIlnxNvyx4wp4fMBT95/F/zZlYjvfn/cm/D3DGIqU/r8qpy+pQDcp+d
44gVYMm153ukWkU+ZVMr+u+iLWTYd4kK17QyOzjeTijpwnbjRwjken4pIhVovATO
ohW400EcbUD5IDhwSSb5oqT44ltr++ArQ7fUys0pd7iGjiyU3yE7gRDMuSFiHICU
dhLphoFLE4LibNvZgeJxlkAK2uwabOOc3wJslhZjfNKKNIyQbMZQnNWp3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOorKq98cVjUgwIHpKXnrJtvE11wMB8GA1UdIwQY
MBaAFIOgYlJSkqKel/5qBVub1ghKdxl3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzZCaVVsS1NvcDZYX21vRlc1dldDRXAzR1hjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS85NThhMmMtY2VmMC00YmNjLTk5YzIt
MzIxYzlkNjZjODQ3LzEvZzZCaVVsS1NvcDZYX21vRlc1dldDRXAzR1hjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS85NThhMmMtY2VmMC00YmNjLTk5YzItMzIxYzlkNjZjODQ3
LzEvZzZCaVVsS1NvcDZYX21vRlc1dldDRXAzR1hjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGkWz4pN7
zSjuipdZsNchuswHB2/9/3Tux8VgD33migvWpyYSStNKvqlkNUhcW21JPZLXsHKJ
1cWDXWRUpPgL2KUR4mPEec3uN9A1fJAARYMaivvEVAGjzWKBP8WPj0jloMSPDatf
Zh79EJ0T0BJ5eaadcALHj1LKPnENtBlI7gTNNaw6W94Ie8DDER8hlCq2F/cPkPYt
WCMTZ1ja1BaXIT0nQRVAF8aam78a9CGxrU5LlVgcLCcv70shhB4UW4URsZ2NNRCL
tgklEqAWZy/cBzr9JCKARTS78kpH9G1mEB9kCX9OCqrxQ1rS5yHMUG3k2t/W1tfe
2uKejRZn+Zfj9w==
-----END CERTIFICATE-----
Generated at Fri Apr 17 04:49:27 2026 by rpki-client