Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/54274b-61cb-4686-ab8a-4cf8cf4ff6cd/1/GvzYfmH5F2XCwQAgQUG1lNMsey4.mft
File: GvzYfmH5F2XCwQAgQUG1lNMsey4.mft (raw, json)
Hash identifier: tSeH3Lf7PU+vjVk4oxK04hu/JNy11/cWiGJmoCYDrBQ=
Subject key identifier: B8:67:88:9E:E4:E7:9A:6D:65:5F:A1:27:2A:E3:AB:81:19:06:17:BA
Authority key identifier: 1A:FC:D8:7E:61:F9:17:65:C2:C1:00:20:41:41:B5:94:D3:2C:7B:2E
Certificate issuer: /CN=1afcd87e61f91765c2c100204141b594d32c7b2e
Certificate serial: 019CAF10FBFBD263A0B5A5663E5EF845AC17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GvzYfmH5F2XCwQAgQUG1lNMsey4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/54274b-61cb-4686-ab8a-4cf8cf4ff6cd/1/GvzYfmH5F2XCwQAgQUG1lNMsey4.mft
Manifest number: 0371
Signing time: Mon 02 Mar 2026 15:00:51 +0000
Manifest this update: Mon 02 Mar 2026 15:00:51 +0000
Manifest next update: Tue 03 Mar 2026 15:00:51 +0000
Files and hashes: 1: GvzYfmH5F2XCwQAgQUG1lNMsey4.crl (hash: C7tzDV2fW4JH75xRUy++tr8Y2/3bG9Powgbad9QpF6w=)
2: tW75xisNBw44jYns_Y3WtNvzf4M.roa (hash: 1hevvajdIYdR4n3mWoJRqh1PcCq2VWdl5U2HS1l2lMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/54274b-61cb-4686-ab8a-4cf8cf4ff6cd/1/GvzYfmH5F2XCwQAgQUG1lNMsey4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/54274b-61cb-4686-ab8a-4cf8cf4ff6cd/1/GvzYfmH5F2XCwQAgQUG1lNMsey4.mft
rsync://rpki.ripe.net/repository/DEFAULT/GvzYfmH5F2XCwQAgQUG1lNMsey4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:10:fb:fb:d2:63:a0:b5:a5:66:3e:5e:f8:45:ac:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1afcd87e61f91765c2c100204141b594d32c7b2e
Validity
Not Before: Mar 2 15:00:51 2026 GMT
Not After : Mar 3 15:00:51 2026 GMT
Subject: CN=b867889ee4e79a6d655fa1272ae3ab81190617ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:eb:0f:6f:a1:af:32:77:4c:03:7b:0c:de:3b:
65:cd:ed:50:75:1f:22:0b:3f:0d:da:10:97:d5:d2:
f5:a5:c5:b3:bc:13:87:e1:8f:83:dd:c9:27:85:1f:
20:6b:f7:3e:41:9f:bc:cc:22:17:3e:49:bd:4b:97:
48:9d:07:0a:82:7b:b3:2e:31:2d:23:a6:7f:25:3a:
f1:3a:d3:95:f3:77:30:e8:fd:39:99:fa:db:d9:e7:
bc:bc:07:2b:8f:55:f2:a5:62:81:a6:cb:8a:8f:5a:
17:b2:ce:fc:45:37:15:78:ba:92:68:ad:90:80:0a:
1a:f7:b8:c1:48:a0:dd:88:6c:99:c0:49:5d:80:7e:
f5:d7:68:4e:2d:22:e6:53:60:39:93:47:ee:68:ed:
48:16:4a:38:e7:31:99:29:62:ef:80:7d:06:92:ce:
e1:97:0d:b8:d0:b0:48:61:02:5b:0c:38:8d:9e:16:
0a:37:2b:82:a7:44:c8:d3:c6:54:2c:0a:dd:18:a3:
5a:20:19:a8:9c:96:9e:1b:c8:36:99:21:41:c8:46:
f0:eb:47:8a:59:3a:ef:30:4c:c0:a1:5b:6b:2e:19:
ef:32:5a:f3:65:63:ff:b6:e2:a7:c0:95:b1:53:55:
07:a0:88:a0:4a:39:8c:a5:ec:8e:ce:a7:92:4e:70:
60:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:67:88:9E:E4:E7:9A:6D:65:5F:A1:27:2A:E3:AB:81:19:06:17:BA
X509v3 Authority Key Identifier:
keyid:1A:FC:D8:7E:61:F9:17:65:C2:C1:00:20:41:41:B5:94:D3:2C:7B:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GvzYfmH5F2XCwQAgQUG1lNMsey4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/54274b-61cb-4686-ab8a-4cf8cf4ff6cd/1/GvzYfmH5F2XCwQAgQUG1lNMsey4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/54274b-61cb-4686-ab8a-4cf8cf4ff6cd/1/GvzYfmH5F2XCwQAgQUG1lNMsey4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:2b:ad:35:c2:4d:80:84:f1:02:b8:bc:0c:eb:0b:3c:cb:54:
18:b8:ca:a1:51:27:e8:f8:f5:80:d8:a5:25:fe:59:25:a0:bf:
80:51:94:8e:3a:66:4c:d4:66:67:0d:4c:78:1c:49:f8:5e:61:
a3:dc:a6:c0:72:c3:c9:50:3a:e2:a4:e8:b5:6d:50:4d:d1:5c:
30:10:3e:a2:2f:c7:b5:f3:f1:e3:79:e0:1a:8a:31:9c:c5:1b:
9a:b3:29:60:bb:b4:8b:c7:7a:a8:c1:7c:4b:c1:b6:14:21:24:
82:3a:e7:96:5a:01:ba:24:bf:7b:bd:16:eb:4f:a9:f1:f8:36:
3d:2f:44:50:90:e8:c4:bf:00:35:b1:8d:12:b2:d5:83:6a:8c:
ab:61:37:8b:76:74:3c:f5:4c:7f:6b:c1:c7:24:f3:25:eb:ba:
cc:3c:48:11:fb:24:11:27:51:49:4e:b5:1b:4b:f1:79:d0:c4:
3e:5b:90:ab:35:3c:dd:b8:22:cb:69:e6:5d:b3:c8:fb:81:b0:
b4:79:1b:56:97:95:cc:c5:6f:83:d9:3b:f2:2a:90:02:21:cf:
2a:70:53:0f:55:5b:40:a7:40:73:d1:0d:06:86:7e:c1:b2:7c:
a2:02:d4:25:ed:ac:43:b0:22:b7:54:61:12:ea:df:ce:10:7b:
4a:9e:d3:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyvEPv70mOgtaVmPl74RawXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhZmNkODdlNjFmOTE3NjVjMmMxMDAyMDQxNDFiNTk0ZDMy
YzdiMmUwHhcNMjYwMzAyMTUwMDUxWhcNMjYwMzAzMTUwMDUxWjAzMTEwLwYDVQQD
EyhiODY3ODg5ZWU0ZTc5YTZkNjU1ZmExMjcyYWUzYWI4MTE5MDYxN2JhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArusPb6GvMndMA3sM3jtlze1QdR8i
Cz8N2hCX1dL1pcWzvBOH4Y+D3cknhR8ga/c+QZ+8zCIXPkm9S5dInQcKgnuzLjEt
I6Z/JTrxOtOV83cw6P05mfrb2ee8vAcrj1XypWKBpsuKj1oXss78RTcVeLqSaK2Q
gAoa97jBSKDdiGyZwEldgH7112hOLSLmU2A5k0fuaO1IFko45zGZKWLvgH0Gks7h
lw240LBIYQJbDDiNnhYKNyuCp0TI08ZULArdGKNaIBmonJaeG8g2mSFByEbw60eK
WTrvMEzAoVtrLhnvMlrzZWP/tuKnwJWxU1UHoIigSjmMpeyOzqeSTnBg5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLhniJ7k55ptZV+hJyrjq4EZBhe6MB8GA1UdIwQY
MBaAFBr82H5h+RdlwsEAIEFBtZTTLHsuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3Z6WWZtSDVGMlhDd1FBZ1FVRzFsTk1zZXk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS81NDI3NGItNjFjYi00Njg2LWFiOGEt
NGNmOGNmNGZmNmNkLzEvR3Z6WWZtSDVGMlhDd1FBZ1FVRzFsTk1zZXk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS81NDI3NGItNjFjYi00Njg2LWFiOGEtNGNmOGNmNGZmNmNk
LzEvR3Z6WWZtSDVGMlhDd1FBZ1FVRzFsTk1zZXk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdiutNcJN
gITxAri8DOsLPMtUGLjKoVEn6Pj1gNilJf5ZJaC/gFGUjjpmTNRmZw1MeBxJ+F5h
o9ymwHLDyVA64qTotW1QTdFcMBA+oi/HtfPx43ngGooxnMUbmrMpYLu0i8d6qMF8
S8G2FCEkgjrnlloBuiS/e70W60+p8fg2PS9EUJDoxL8ANbGNErLVg2qMq2E3i3Z0
PPVMf2vBxyTzJeu6zDxIEfskESdRSU61G0vxedDEPluQqzU83bgiy2nmXbPI+4Gw
tHkbVpeVzMVvg9k78iqQAiHPKnBTD1VbQKdAc9ENBoZ+wbJ8ogLUJe2sQ7Ait1Rh
EurfzhB7Sp7TRQ==
-----END CERTIFICATE-----
Generated at Tue Mar 3 00:58:18 2026 by rpki-client