Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/d23870-74c7-4a84-90ec-c32036750e36/1/GtTMzv5VxeIjqbMgW5OKPRyehtU.mft
File: GtTMzv5VxeIjqbMgW5OKPRyehtU.mft (raw, json)
Hash identifier: X7Rdz4mcD+OsWpo8bsGP+jUk/EXlUZGI8zeQmFpyNdQ=
Subject key identifier: FB:BA:4F:42:91:B5:64:62:E7:E0:DF:42:3F:EF:D9:BB:6D:81:7D:AB
Authority key identifier: 1A:D4:CC:CE:FE:55:C5:E2:23:A9:B3:20:5B:93:8A:3D:1C:9E:86:D5
Certificate issuer: /CN=1ad4cccefe55c5e223a9b3205b938a3d1c9e86d5
Certificate serial: 019D9AABE9D2415568D17B342073C450ADC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GtTMzv5VxeIjqbMgW5OKPRyehtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/d23870-74c7-4a84-90ec-c32036750e36/1/GtTMzv5VxeIjqbMgW5OKPRyehtU.mft
Manifest number: 15A3
Signing time: Fri 17 Apr 2026 09:00:50 +0000
Manifest this update: Fri 17 Apr 2026 09:00:50 +0000
Manifest next update: Sat 18 Apr 2026 09:00:50 +0000
Files and hashes: 1: GtTMzv5VxeIjqbMgW5OKPRyehtU.crl (hash: 4jWPJPaiUj+ChuPY//0Vmtyff91CN1xNy8EV3OGkHvE=)
2: k7oeIV7HgF0MdSr9wY7QH1nk1Po.roa (hash: H0UiWZoHXbQKY5PjSSEja9oJ63puQn0Ebtq8jzm98zU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/d23870-74c7-4a84-90ec-c32036750e36/1/GtTMzv5VxeIjqbMgW5OKPRyehtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/d23870-74c7-4a84-90ec-c32036750e36/1/GtTMzv5VxeIjqbMgW5OKPRyehtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/GtTMzv5VxeIjqbMgW5OKPRyehtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:e9:d2:41:55:68:d1:7b:34:20:73:c4:50:ad:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ad4cccefe55c5e223a9b3205b938a3d1c9e86d5
Validity
Not Before: Apr 17 09:00:50 2026 GMT
Not After : Apr 18 09:00:50 2026 GMT
Subject: CN=fbba4f4291b56462e7e0df423fefd9bb6d817dab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d4:94:de:68:ff:0b:65:a4:84:e5:3c:02:ce:
b4:3a:aa:83:94:a0:c3:b1:7b:19:62:ca:e7:f4:36:
fe:0e:58:ca:3c:71:01:13:df:76:fc:c6:6a:31:f3:
09:b7:d1:7e:94:09:c3:90:ac:a1:2d:8e:b9:d2:e8:
30:55:da:fd:3b:83:a0:ca:ed:ed:54:01:0d:41:f7:
23:93:7e:e5:3d:53:87:8b:7a:39:34:6b:95:84:32:
92:e0:c3:27:e6:b1:6e:cb:98:e0:53:38:06:48:bb:
0c:ed:1a:43:c3:f4:f0:2e:8f:6e:da:de:33:be:7d:
1c:38:0e:2e:75:10:70:8b:9a:c5:5a:8f:b4:25:14:
5b:d7:10:ab:de:bc:e8:f9:26:62:bd:b0:7f:25:1d:
b5:bd:39:ec:36:e4:fa:96:56:12:b9:cf:04:47:56:
0f:fe:56:e2:75:89:eb:b1:f1:8c:f3:72:c9:0f:fb:
73:f6:09:4e:0e:c8:72:c8:71:7d:0a:13:e2:9f:a3:
9b:7a:de:65:9d:85:bb:ab:15:73:05:63:7c:d8:39:
7e:66:d6:06:27:72:eb:5b:f9:b9:d1:e6:04:e9:ed:
b0:38:3c:0a:77:14:7b:2a:79:55:1d:50:6d:15:cb:
c7:e2:0c:9f:e7:9f:57:bc:7a:3c:98:f8:a5:bc:20:
61:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:BA:4F:42:91:B5:64:62:E7:E0:DF:42:3F:EF:D9:BB:6D:81:7D:AB
X509v3 Authority Key Identifier:
keyid:1A:D4:CC:CE:FE:55:C5:E2:23:A9:B3:20:5B:93:8A:3D:1C:9E:86:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GtTMzv5VxeIjqbMgW5OKPRyehtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d23870-74c7-4a84-90ec-c32036750e36/1/GtTMzv5VxeIjqbMgW5OKPRyehtU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d23870-74c7-4a84-90ec-c32036750e36/1/GtTMzv5VxeIjqbMgW5OKPRyehtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:4c:6c:d3:2a:e7:ea:55:2c:b8:d4:11:d3:77:fd:73:24:70:
5c:d0:db:44:3c:a0:9a:73:70:70:79:ec:b0:9c:d3:bb:d0:15:
70:a8:15:ce:9e:cc:26:9a:1c:b9:51:01:e0:32:b3:44:d3:6c:
ef:65:3c:fa:db:a7:87:5f:4a:47:11:fe:b5:a0:19:4a:ed:6e:
b4:6c:51:dd:4a:e3:1f:5d:6f:31:3f:bc:b7:9e:db:9e:bb:f6:
2e:70:12:36:d7:63:b4:2b:ee:8d:b2:8e:9a:b8:87:06:c6:ac:
3d:45:0a:c3:d3:59:03:a3:2f:8a:5f:6f:ba:8e:24:5a:bb:79:
83:35:b7:d2:7c:d4:e5:9a:fc:34:3b:af:59:e1:0f:57:f1:34:
a8:b6:cf:87:d0:66:dd:1b:17:74:32:d6:ce:1b:d8:f2:87:c2:
df:18:84:7a:d8:6a:a8:ea:68:3a:41:76:bb:f0:cc:ee:ab:42:
67:78:0e:b6:06:ae:2d:79:82:33:a2:24:2f:45:9b:94:dc:30:
aa:b5:03:a5:84:cb:73:44:46:e9:bd:eb:f9:ba:cb:9d:fc:bc:
a7:11:e4:21:09:73:7c:01:50:63:86:9d:4f:61:df:b3:91:84:
06:8c:9f:f6:28:97:95:cd:f1:95:6b:b8:41:ea:d1:9d:f8:e3:
1c:27:54:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aq+nSQVVo0Xs0IHPEUK3EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhZDRjY2NlZmU1NWM1ZTIyM2E5YjMyMDViOTM4YTNkMWM5
ZTg2ZDUwHhcNMjYwNDE3MDkwMDUwWhcNMjYwNDE4MDkwMDUwWjAzMTEwLwYDVQQD
EyhmYmJhNGY0MjkxYjU2NDYyZTdlMGRmNDIzZmVmZDliYjZkODE3ZGFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtdSU3mj/C2WkhOU8As60OqqDlKDD
sXsZYsrn9Db+DljKPHEBE992/MZqMfMJt9F+lAnDkKyhLY650ugwVdr9O4Ogyu3t
VAENQfcjk37lPVOHi3o5NGuVhDKS4MMn5rFuy5jgUzgGSLsM7RpDw/TwLo9u2t4z
vn0cOA4udRBwi5rFWo+0JRRb1xCr3rzo+SZivbB/JR21vTnsNuT6llYSuc8ER1YP
/lbidYnrsfGM83LJD/tz9glODshyyHF9ChPin6Obet5lnYW7qxVzBWN82Dl+ZtYG
J3LrW/m50eYE6e2wODwKdxR7KnlVHVBtFcvH4gyf559XvHo8mPilvCBhdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPu6T0KRtWRi5+DfQj/v2bttgX2rMB8GA1UdIwQY
MBaAFBrUzM7+VcXiI6mzIFuTij0cnobVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3RUTXp2NVZ4ZUlqcWJNZ1c1T0tQUnllaHRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9kMjM4NzAtNzRjNy00YTg0LTkwZWMt
YzMyMDM2NzUwZTM2LzEvR3RUTXp2NVZ4ZUlqcWJNZ1c1T0tQUnllaHRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi9kMjM4NzAtNzRjNy00YTg0LTkwZWMtYzMyMDM2NzUwZTM2
LzEvR3RUTXp2NVZ4ZUlqcWJNZ1c1T0tQUnllaHRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARUxs0yrn
6lUsuNQR03f9cyRwXNDbRDygmnNwcHnssJzTu9AVcKgVzp7MJpocuVEB4DKzRNNs
72U8+tunh19KRxH+taAZSu1utGxR3UrjH11vMT+8t57bnrv2LnASNtdjtCvujbKO
mriHBsasPUUKw9NZA6Mvil9vuo4kWrt5gzW30nzU5Zr8NDuvWeEPV/E0qLbPh9Bm
3RsXdDLWzhvY8ofC3xiEethqqOpoOkF2u/DM7qtCZ3gOtgauLXmCM6IkL0WblNww
qrUDpYTLc0RG6b3r+brLnfy8pxHkIQlzfAFQY4adT2Hfs5GEBoyf9iiXlc3xlWu4
QerRnfjjHCdUDg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 14:28:09 2026 by rpki-client