Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.mft
File: 0gsI5gdmjgYFAITuN5KKHAsDVJI.mft (raw, json)
Hash identifier: GXzam9ffqOntaUqKJXSuzRUwfS/YP42QPDylo7NJpSg=
Subject key identifier: FC:72:F4:E8:72:4D:D4:18:9E:8C:8E:F5:66:85:0F:44:FB:43:F5:24
Authority key identifier: D2:0B:08:E6:07:66:8E:06:05:00:84:EE:37:92:8A:1C:0B:03:54:92
Certificate issuer: /CN=d20b08e607668e06050084ee37928a1c0b035492
Certificate serial: 019D9A3EE9A806BDA2D64E813C70F4CA5E22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0gsI5gdmjgYFAITuN5KKHAsDVJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.mft
Manifest number: 05F1
Signing time: Fri 17 Apr 2026 07:01:47 +0000
Manifest this update: Fri 17 Apr 2026 07:01:47 +0000
Manifest next update: Sat 18 Apr 2026 07:01:47 +0000
Files and hashes: 1: 0gsI5gdmjgYFAITuN5KKHAsDVJI.crl (hash: X9Vh6w4SKfaVJAO5N/i/PAHd2SoyWsFktFWpKpgLi+Q=)
2: Gm-t-lh2E0gK3CSrIU-gJkije_Q.roa (hash: Ono4+T4YpgzQm0xFxMzJXZM1mWa8sfDRC5aPTIXlCxg=)
3: HOPT3iuIJW2Ca5RKaQZ_7H8DEUg.roa (hash: Z7lWxJ3V5i6LgJFHNccxxl1xQSA36VYmA9LTVT4CQFA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/0gsI5gdmjgYFAITuN5KKHAsDVJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:e9:a8:06:bd:a2:d6:4e:81:3c:70:f4:ca:5e:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d20b08e607668e06050084ee37928a1c0b035492
Validity
Not Before: Apr 17 07:01:47 2026 GMT
Not After : Apr 18 07:01:47 2026 GMT
Subject: CN=fc72f4e8724dd4189e8c8ef566850f44fb43f524
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:18:59:ba:83:a3:59:e2:53:96:84:84:aa:95:
dc:52:df:be:3d:fa:41:0f:54:cb:58:42:74:5b:bc:
2c:46:96:9d:7d:57:af:43:44:a6:2e:e8:9d:7c:3a:
62:8f:93:b3:09:eb:54:96:4e:3d:c6:22:34:28:fd:
42:5d:47:8d:9f:65:14:d1:f1:d9:48:20:dc:d5:1e:
04:61:53:4b:36:59:dc:4f:f4:0e:d7:70:eb:9e:2a:
ad:08:07:1f:e5:d6:2c:5f:83:32:b4:de:6c:c8:35:
79:82:71:80:95:ee:cd:a2:a5:c6:9a:8b:44:21:84:
45:c9:b4:63:de:29:9a:80:96:19:80:c0:e7:ab:0f:
4a:34:b6:cb:15:3a:ba:c9:29:31:83:1b:6d:a1:4c:
53:ec:2d:5b:f0:e4:1a:d4:56:4d:1e:6f:44:17:24:
b0:0c:0c:ed:a8:5a:bd:aa:94:1f:e3:89:20:38:a0:
af:40:52:01:2f:bf:45:ea:d4:3c:24:36:3e:51:30:
3c:b9:f5:ab:6a:62:e1:6c:e1:5a:73:54:bb:b7:6e:
f8:5f:99:46:09:2b:8c:b7:31:3d:c2:43:6e:2e:4e:
4b:5b:3b:bf:6f:aa:1b:ae:a6:68:aa:3f:5c:10:97:
ac:38:0a:8e:4f:6b:d6:d8:39:27:56:50:9f:60:4e:
a6:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:72:F4:E8:72:4D:D4:18:9E:8C:8E:F5:66:85:0F:44:FB:43:F5:24
X509v3 Authority Key Identifier:
keyid:D2:0B:08:E6:07:66:8E:06:05:00:84:EE:37:92:8A:1C:0B:03:54:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0gsI5gdmjgYFAITuN5KKHAsDVJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:df:3a:27:61:33:15:bb:14:7f:8e:5d:1a:5d:0b:2b:26:42:
c8:18:a6:c8:a8:4a:f4:bb:e5:12:67:2b:f8:46:b6:31:a6:c0:
d9:12:25:67:a3:cb:41:da:ac:71:ac:03:b0:45:a9:a5:57:1b:
04:50:cd:ad:0a:4c:8e:71:5b:f6:54:c5:22:3c:e0:57:e7:5a:
4d:fc:a0:da:10:46:6b:26:62:c4:0d:de:2e:25:9e:ab:cd:aa:
1d:a7:73:cb:2d:e3:e1:c0:dd:66:7b:d7:7b:c1:7c:bd:91:0c:
cc:fc:e1:b5:46:f9:70:18:ff:cb:87:1e:e9:16:c7:45:fd:ef:
f1:fd:58:10:69:97:e4:e9:70:30:d6:22:69:6b:8d:35:be:7b:
7b:93:79:c1:6e:eb:79:ac:e1:7e:9a:03:94:cd:0c:63:fe:cc:
a7:c7:6e:68:d7:2a:68:eb:cf:8f:fd:d4:5f:73:12:af:99:40:
0f:e0:4c:65:27:b7:94:c1:b2:b6:d7:ba:c3:2b:bf:6f:ed:17:
1e:c6:58:da:b2:8d:84:95:83:0a:95:a9:26:fc:25:ba:e4:1c:
97:9a:e9:e8:b3:2d:29:1c:3f:a9:b3:f5:e3:5e:b4:2c:6a:0e:
4c:70:c9:02:42:30:3e:f1:0b:35:9f:f0:78:43:e3:36:18:cb:
f3:30:52:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aPumoBr2i1k6BPHD0yl4iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyMGIwOGU2MDc2NjhlMDYwNTAwODRlZTM3OTI4YTFjMGIw
MzU0OTIwHhcNMjYwNDE3MDcwMTQ3WhcNMjYwNDE4MDcwMTQ3WjAzMTEwLwYDVQQD
EyhmYzcyZjRlODcyNGRkNDE4OWU4YzhlZjU2Njg1MGY0NGZiNDNmNTI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAixhZuoOjWeJTloSEqpXcUt++PfpB
D1TLWEJ0W7wsRpadfVevQ0SmLuidfDpij5OzCetUlk49xiI0KP1CXUeNn2UU0fHZ
SCDc1R4EYVNLNlncT/QO13DrniqtCAcf5dYsX4MytN5syDV5gnGAle7NoqXGmotE
IYRFybRj3imagJYZgMDnqw9KNLbLFTq6ySkxgxttoUxT7C1b8OQa1FZNHm9EFySw
DAztqFq9qpQf44kgOKCvQFIBL79F6tQ8JDY+UTA8ufWramLhbOFac1S7t274X5lG
CSuMtzE9wkNuLk5LWzu/b6obrqZoqj9cEJesOAqOT2vW2DknVlCfYE6mWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPxy9OhyTdQYnoyO9WaFD0T7Q/UkMB8GA1UdIwQY
MBaAFNILCOYHZo4GBQCE7jeSihwLA1SSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGdzSTVnZG1qZ1lGQUlUdU41S0tIQXNEVkpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC8yMTdhYWYtM2IzYi00ZDljLWEyY2Et
MDYyYzg4ODJiYTcxLzEvMGdzSTVnZG1qZ1lGQUlUdU41S0tIQXNEVkpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC8yMTdhYWYtM2IzYi00ZDljLWEyY2EtMDYyYzg4ODJiYTcx
LzEvMGdzSTVnZG1qZ1lGQUlUdU41S0tIQXNEVkpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo986J2Ez
FbsUf45dGl0LKyZCyBimyKhK9LvlEmcr+Ea2MabA2RIlZ6PLQdqscawDsEWppVcb
BFDNrQpMjnFb9lTFIjzgV+daTfyg2hBGayZixA3eLiWeq82qHadzyy3j4cDdZnvX
e8F8vZEMzPzhtUb5cBj/y4ce6RbHRf3v8f1YEGmX5OlwMNYiaWuNNb57e5N5wW7r
eazhfpoDlM0MY/7Mp8duaNcqaOvPj/3UX3MSr5lAD+BMZSe3lMGytte6wyu/b+0X
HsZY2rKNhJWDCpWpJvwluuQcl5rp6LMtKRw/qbP14160LGoOTHDJAkIwPvELNZ/w
eEPjNhjL8zBStQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:04:34 2026 by rpki-client