Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/1491bf-84ad-48a3-a619-577da12e3648/1/gnfY854_j7Zjj3CDq58WwEfQ02Q.mft
File: gnfY854_j7Zjj3CDq58WwEfQ02Q.mft (raw, json)
Hash identifier: 36cMlk/CSJyF4QAqqzsDR2KCUlhvyVq34gcvBZ28J8c=
Subject key identifier: 06:0F:4F:0E:87:64:58:E0:CD:CC:B8:89:2D:B1:0B:E5:BA:C3:EE:10
Authority key identifier: 82:77:D8:F3:9E:3F:8F:B6:63:8F:70:83:AB:9F:16:C0:47:D0:D3:64
Certificate issuer: /CN=8277d8f39e3f8fb6638f7083ab9f16c047d0d364
Certificate serial: 019CAC4762DF09CC952DF3B52F70D274B8E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnfY854_j7Zjj3CDq58WwEfQ02Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/1491bf-84ad-48a3-a619-577da12e3648/1/gnfY854_j7Zjj3CDq58WwEfQ02Q.mft
Manifest number: 1326
Signing time: Mon 02 Mar 2026 02:01:25 +0000
Manifest this update: Mon 02 Mar 2026 02:01:25 +0000
Manifest next update: Tue 03 Mar 2026 02:01:25 +0000
Files and hashes: 1: ZWEjcdwIM9EyAELpOcIP5A4AjN8.roa (hash: rVWcxdUR4t77+j89visuW0FsrMuy3PkstpLbGV2iT0Y=)
2: gnfY854_j7Zjj3CDq58WwEfQ02Q.crl (hash: CJgCuTTkLREJgrSnvSm0lcqZUizOlT2BKzyhq4s3e3E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/1491bf-84ad-48a3-a619-577da12e3648/1/gnfY854_j7Zjj3CDq58WwEfQ02Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/1491bf-84ad-48a3-a619-577da12e3648/1/gnfY854_j7Zjj3CDq58WwEfQ02Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/gnfY854_j7Zjj3CDq58WwEfQ02Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:62:df:09:cc:95:2d:f3:b5:2f:70:d2:74:b8:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8277d8f39e3f8fb6638f7083ab9f16c047d0d364
Validity
Not Before: Mar 2 02:01:25 2026 GMT
Not After : Mar 3 02:01:25 2026 GMT
Subject: CN=060f4f0e876458e0cdccb8892db10be5bac3ee10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:cf:52:3c:ca:8b:60:1e:cf:6c:29:ea:05:d0:
64:78:50:b8:a8:20:5c:84:c7:2c:7a:6b:ee:73:1a:
af:85:a4:45:1b:f9:7c:b7:46:79:00:2a:c5:68:53:
04:8a:2f:ac:67:50:34:8f:50:41:34:07:49:65:0e:
88:54:45:91:e8:6b:ac:e2:cc:21:97:a0:5a:6e:3f:
a8:3b:7c:c5:0e:e0:ba:38:01:da:80:16:6d:c9:31:
20:2b:5b:e5:2a:8a:e3:08:22:c0:72:bc:ec:02:9f:
dd:b0:55:09:60:11:b7:77:1e:60:56:7a:9f:ed:11:
9a:2c:77:21:5a:28:1f:ea:fd:95:e4:f4:4d:f6:e1:
ed:df:0d:5f:b9:cb:63:a1:ce:fd:ad:04:9c:98:9f:
4b:a2:44:6c:7c:ab:f6:33:dc:7c:ab:ef:55:a5:fa:
cc:2e:3d:83:f9:e0:cf:65:b5:52:d0:e3:03:78:8d:
7d:0c:c8:07:60:bc:89:15:bb:a4:fc:88:ee:e6:e9:
0d:a3:5c:6f:ab:a8:83:57:d2:c0:c0:09:0a:28:c9:
32:6c:0f:f2:11:16:8f:a7:a6:af:1f:c1:e6:08:50:
a2:35:65:8d:86:b7:45:93:51:e6:8c:6c:62:40:b1:
42:8f:18:1e:2a:bd:6f:d9:d3:80:bd:7a:1b:ce:b9:
b0:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:0F:4F:0E:87:64:58:E0:CD:CC:B8:89:2D:B1:0B:E5:BA:C3:EE:10
X509v3 Authority Key Identifier:
keyid:82:77:D8:F3:9E:3F:8F:B6:63:8F:70:83:AB:9F:16:C0:47:D0:D3:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnfY854_j7Zjj3CDq58WwEfQ02Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/1491bf-84ad-48a3-a619-577da12e3648/1/gnfY854_j7Zjj3CDq58WwEfQ02Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/1491bf-84ad-48a3-a619-577da12e3648/1/gnfY854_j7Zjj3CDq58WwEfQ02Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:c7:5f:f7:ff:bf:e7:ce:8b:55:44:28:01:30:bc:9f:ec:d2:
da:cc:18:36:44:4e:66:19:e4:70:b0:37:1a:c5:f5:d3:0c:26:
8c:0e:f5:1c:28:2e:b5:52:e6:6b:75:36:68:bf:38:e7:04:49:
d3:92:e7:54:16:3d:62:98:4b:5c:13:5a:d9:07:11:04:dd:04:
b4:ac:1e:c2:09:6b:b8:d0:fa:67:3f:b5:34:32:73:48:79:1e:
48:29:c5:f2:7c:a4:95:24:6f:fa:2d:62:ce:79:cf:64:3b:c1:
67:c4:c6:d1:ea:53:06:a1:86:7f:6e:76:5d:02:b7:cd:c4:89:
23:9e:bf:16:d3:22:9e:76:8c:7a:cc:2e:c9:f0:e9:36:e0:4f:
19:2b:09:3a:e7:c3:51:ca:12:cb:c8:0a:27:7f:65:26:10:d1:
bf:66:52:10:37:27:e9:fc:43:b1:8b:e5:9a:89:8f:ca:27:7f:
08:fd:52:4f:8c:62:75:b7:ce:ec:0d:8f:65:fa:6d:39:d2:b8:
dd:69:4e:88:83:38:2f:93:61:18:d7:ae:a4:f1:78:74:78:c9:
46:24:c7:bb:d9:f7:e7:50:4d:3b:20:7a:66:f8:bb:d3:f4:1d:
7d:65:c3:8b:31:48:93:e0:6c:a2:d3:ee:4a:29:92:95:23:2b:
9d:39:54:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysR2LfCcyVLfO1L3DSdLjlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyNzdkOGYzOWUzZjhmYjY2MzhmNzA4M2FiOWYxNmMwNDdk
MGQzNjQwHhcNMjYwMzAyMDIwMTI1WhcNMjYwMzAzMDIwMTI1WjAzMTEwLwYDVQQD
EygwNjBmNGYwZTg3NjQ1OGUwY2RjY2I4ODkyZGIxMGJlNWJhYzNlZTEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmc9SPMqLYB7PbCnqBdBkeFC4qCBc
hMcsemvucxqvhaRFG/l8t0Z5ACrFaFMEii+sZ1A0j1BBNAdJZQ6IVEWR6Gus4swh
l6Babj+oO3zFDuC6OAHagBZtyTEgK1vlKorjCCLAcrzsAp/dsFUJYBG3dx5gVnqf
7RGaLHchWigf6v2V5PRN9uHt3w1fuctjoc79rQScmJ9LokRsfKv2M9x8q+9VpfrM
Lj2D+eDPZbVS0OMDeI19DMgHYLyJFbuk/Iju5ukNo1xvq6iDV9LAwAkKKMkybA/y
ERaPp6avH8HmCFCiNWWNhrdFk1HmjGxiQLFCjxgeKr1v2dOAvXobzrmwoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAYPTw6HZFjgzcy4iS2xC+W6w+4QMB8GA1UdIwQY
MBaAFIJ32POeP4+2Y49wg6ufFsBH0NNkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ25mWTg1NF9qN1pqajNDRHE1OFd3RWZRMDJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8xNDkxYmYtODRhZC00OGEzLWE2MTkt
NTc3ZGExMmUzNjQ4LzEvZ25mWTg1NF9qN1pqajNDRHE1OFd3RWZRMDJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC8xNDkxYmYtODRhZC00OGEzLWE2MTktNTc3ZGExMmUzNjQ4
LzEvZ25mWTg1NF9qN1pqajNDRHE1OFd3RWZRMDJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi8df9/+/
586LVUQoATC8n+zS2swYNkROZhnkcLA3GsX10wwmjA71HCgutVLma3U2aL845wRJ
05LnVBY9YphLXBNa2QcRBN0EtKwewglruND6Zz+1NDJzSHkeSCnF8nyklSRv+i1i
znnPZDvBZ8TG0epTBqGGf252XQK3zcSJI56/FtMinnaMeswuyfDpNuBPGSsJOufD
UcoSy8gKJ39lJhDRv2ZSEDcn6fxDsYvlmomPyid/CP1ST4xidbfO7A2PZfptOdK4
3WlOiIM4L5NhGNeupPF4dHjJRiTHu9n351BNOyB6Zvi70/QdfWXDizFIk+BsotPu
SimSlSMrnTlUhA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:22:15 2026 by rpki-client