Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/59a43f-881a-48ed-9c3e-82c085a92777/1/GmoUE8yJZe6SQWtgWfkLGHeMizg.mft
File: GmoUE8yJZe6SQWtgWfkLGHeMizg.mft (raw, json)
Hash identifier: gBkOGz1nkMPVbrmv0VmFBO3pePRD4B+gTzo2FAVUTXo=
Subject key identifier: CD:35:80:A2:12:32:6A:21:48:26:8C:A9:6D:1A:F1:29:8A:CC:68:4C
Authority key identifier: 1A:6A:14:13:CC:89:65:EE:92:41:6B:60:59:F9:0B:18:77:8C:8B:38
Certificate issuer: /CN=1a6a1413cc8965ee92416b6059f90b18778c8b38
Certificate serial: 019CACB5239BA878B47928C83CF57EA7E5BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GmoUE8yJZe6SQWtgWfkLGHeMizg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/59a43f-881a-48ed-9c3e-82c085a92777/1/GmoUE8yJZe6SQWtgWfkLGHeMizg.mft
Manifest number: 11A5
Signing time: Mon 02 Mar 2026 04:01:18 +0000
Manifest this update: Mon 02 Mar 2026 04:01:18 +0000
Manifest next update: Tue 03 Mar 2026 04:01:18 +0000
Files and hashes: 1: 6-OKgajr9v823pHOsspSDLg9nr0.roa (hash: NwM+C7ZC5FzvcWLiIPRWkD1+69dXcTrTBwmQOx+Eypo=)
2: GmoUE8yJZe6SQWtgWfkLGHeMizg.crl (hash: yzwwAUQeEB1UjFxp/Ey03V1vfKpV+OjWZt3j4eh5hOw=)
3: Rir5qUdiM3zzTUT-Xkj3rqlToCI.roa (hash: AEK9ReBz0aDKpQLz2sCl8uFxNfkDOQwbvwIUAoemDV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/59a43f-881a-48ed-9c3e-82c085a92777/1/GmoUE8yJZe6SQWtgWfkLGHeMizg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/59a43f-881a-48ed-9c3e-82c085a92777/1/GmoUE8yJZe6SQWtgWfkLGHeMizg.mft
rsync://rpki.ripe.net/repository/DEFAULT/GmoUE8yJZe6SQWtgWfkLGHeMizg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b5:23:9b:a8:78:b4:79:28:c8:3c:f5:7e:a7:e5:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a6a1413cc8965ee92416b6059f90b18778c8b38
Validity
Not Before: Mar 2 04:01:18 2026 GMT
Not After : Mar 3 04:01:18 2026 GMT
Subject: CN=cd3580a212326a2148268ca96d1af1298acc684c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:6b:da:8b:9a:a7:87:ad:69:f0:2d:39:0f:cf:
74:2b:2a:8f:04:66:24:57:aa:9d:96:49:94:e0:13:
f7:3b:b0:a5:17:87:b6:32:6f:6b:95:54:fa:e6:6c:
67:fa:e5:d9:83:31:01:fe:46:06:a4:79:ba:e4:ce:
c9:40:e8:fe:26:c3:59:20:ef:78:75:42:33:0f:d7:
f5:0f:a9:02:bb:92:4e:96:da:6a:4d:f0:27:2e:2d:
45:d8:5c:97:6e:e3:1b:8f:cd:36:52:a8:aa:f3:a6:
c3:81:10:0c:d4:b3:57:1b:38:58:a1:77:fc:2e:72:
e8:e8:4f:be:3c:c6:e2:d5:d7:1c:18:0c:84:86:dd:
8f:98:6c:c9:ca:69:31:81:51:01:ff:e2:26:6a:fd:
80:97:4a:47:6b:6e:66:d5:66:20:3a:6e:dd:7b:fd:
1b:82:b6:b4:09:5f:45:3c:c0:72:99:05:87:f3:c4:
ec:f2:a8:e2:ed:75:c5:be:e9:4d:4d:14:10:ab:83:
4f:83:24:3f:29:a7:05:c8:0b:09:38:b5:ac:7b:5b:
b7:87:8f:0b:23:c3:8f:41:a0:fa:2e:21:53:02:b6:
f7:06:59:0f:0d:cf:b9:09:0c:48:bd:7d:c8:85:db:
ad:d7:9e:85:99:84:c5:7b:78:85:cb:02:6d:5b:f4:
18:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:35:80:A2:12:32:6A:21:48:26:8C:A9:6D:1A:F1:29:8A:CC:68:4C
X509v3 Authority Key Identifier:
keyid:1A:6A:14:13:CC:89:65:EE:92:41:6B:60:59:F9:0B:18:77:8C:8B:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GmoUE8yJZe6SQWtgWfkLGHeMizg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/59a43f-881a-48ed-9c3e-82c085a92777/1/GmoUE8yJZe6SQWtgWfkLGHeMizg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/59a43f-881a-48ed-9c3e-82c085a92777/1/GmoUE8yJZe6SQWtgWfkLGHeMizg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:74:65:01:b7:a8:2d:73:09:03:b3:f5:2f:22:63:cb:bc:9c:
b2:35:6a:82:56:54:95:af:86:0c:c1:c6:07:72:d6:b2:88:30:
b0:94:93:50:c1:75:b4:57:01:4a:77:d2:b0:3d:3e:ec:73:ba:
e5:5a:63:94:c7:fa:67:97:b6:96:31:be:5e:e6:03:4e:17:ab:
97:bc:c2:55:49:5b:13:83:4b:09:e6:d5:43:ad:4d:c8:ee:53:
f6:7e:ef:8a:43:96:3d:d0:a7:3d:54:4f:f7:1b:33:71:bd:f2:
8d:df:50:9a:ae:f9:f3:4b:9b:83:72:54:04:e9:89:fd:bf:92:
5c:62:94:ec:28:bd:c0:4c:ef:db:67:ca:aa:5e:8b:68:0d:ca:
26:54:af:27:05:a9:d4:3a:06:d1:92:d9:32:fa:06:fe:96:8f:
ce:55:81:f0:97:c7:15:fe:3e:32:2a:7c:a4:51:4c:f1:e1:6d:
f1:37:b5:4d:05:78:44:6b:10:06:b7:cd:24:d2:49:c6:79:34:
b5:d3:3b:e8:92:49:b5:ce:9b:fd:39:96:59:06:c9:e7:08:1f:
0d:9b:de:32:a6:0c:16:d9:5d:3c:7d:fd:84:42:17:8c:55:61:
78:7f:e9:f7:d1:83:8d:04:96:8f:98:11:05:59:ae:29:56:46:
05:ca:50:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZystSObqHi0eSjIPPV+p+W7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhNmExNDEzY2M4OTY1ZWU5MjQxNmI2MDU5ZjkwYjE4Nzc4
YzhiMzgwHhcNMjYwMzAyMDQwMTE4WhcNMjYwMzAzMDQwMTE4WjAzMTEwLwYDVQQD
EyhjZDM1ODBhMjEyMzI2YTIxNDgyNjhjYTk2ZDFhZjEyOThhY2M2ODRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw2vai5qnh61p8C05D890KyqPBGYk
V6qdlkmU4BP3O7ClF4e2Mm9rlVT65mxn+uXZgzEB/kYGpHm65M7JQOj+JsNZIO94
dUIzD9f1D6kCu5JOltpqTfAnLi1F2FyXbuMbj802Uqiq86bDgRAM1LNXGzhYoXf8
LnLo6E++PMbi1dccGAyEht2PmGzJymkxgVEB/+Imav2Al0pHa25m1WYgOm7de/0b
gra0CV9FPMBymQWH88Ts8qji7XXFvulNTRQQq4NPgyQ/KacFyAsJOLWse1u3h48L
I8OPQaD6LiFTArb3BlkPDc+5CQxIvX3Ihdut156FmYTFe3iFywJtW/QYAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM01gKISMmohSCaMqW0a8SmKzGhMMB8GA1UdIwQY
MBaAFBpqFBPMiWXukkFrYFn5Cxh3jIs4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR21vVUU4eUpaZTZTUVd0Z1dma0xHSGVNaXpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC81OWE0M2YtODgxYS00OGVkLTljM2Ut
ODJjMDg1YTkyNzc3LzEvR21vVUU4eUpaZTZTUVd0Z1dma0xHSGVNaXpnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC81OWE0M2YtODgxYS00OGVkLTljM2UtODJjMDg1YTkyNzc3
LzEvR21vVUU4eUpaZTZTUVd0Z1dma0xHSGVNaXpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT3RlAbeo
LXMJA7P1LyJjy7ycsjVqglZUla+GDMHGB3LWsogwsJSTUMF1tFcBSnfSsD0+7HO6
5VpjlMf6Z5e2ljG+XuYDTherl7zCVUlbE4NLCebVQ61NyO5T9n7vikOWPdCnPVRP
9xszcb3yjd9Qmq7580ubg3JUBOmJ/b+SXGKU7Ci9wEzv22fKql6LaA3KJlSvJwWp
1DoG0ZLZMvoG/paPzlWB8JfHFf4+Mip8pFFM8eFt8Te1TQV4RGsQBrfNJNJJxnk0
tdM76JJJtc6b/TmWWQbJ5wgfDZveMqYMFtldPH39hEIXjFVheH/p99GDjQSWj5gR
BVmuKVZGBcpQqg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:39:16 2026 by rpki-client