Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/0f3c61-02df-4af7-b93f-07f74c019732/1/GaQ9gWV6PDjBUN5VeX8ce18MLrs.mft
File: GaQ9gWV6PDjBUN5VeX8ce18MLrs.mft (raw, json)
Hash identifier: 3XVE5YLDAdu6ePTFKheA5x+M88GlGBhU1zkwRw3IFYo=
Subject key identifier: 4B:6B:53:D7:77:46:B9:E6:B7:86:C7:90:4A:0F:32:14:3F:34:D3:F9
Authority key identifier: 19:A4:3D:81:65:7A:3C:38:C1:50:DE:55:79:7F:1C:7B:5F:0C:2E:BB
Certificate issuer: /CN=19a43d81657a3c38c150de55797f1c7b5f0c2ebb
Certificate serial: 019CABD99F37CF5905B13E3E3EFD12B96D0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GaQ9gWV6PDjBUN5VeX8ce18MLrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/0f3c61-02df-4af7-b93f-07f74c019732/1/GaQ9gWV6PDjBUN5VeX8ce18MLrs.mft
Manifest number: 1744
Signing time: Mon 02 Mar 2026 00:01:31 +0000
Manifest this update: Mon 02 Mar 2026 00:01:31 +0000
Manifest next update: Tue 03 Mar 2026 00:01:31 +0000
Files and hashes: 1: GaQ9gWV6PDjBUN5VeX8ce18MLrs.crl (hash: hPAfGM5QFEZZCuVIkIinKGjGcdcRWUuTMVgfe7ppFbc=)
2: K0GZfO50qL-CkzTgvj6rdikY-es.roa (hash: 4i1E6RRA2bP05oORMGF0rgiNltnM9ErpRc53Lr5MThI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/0f3c61-02df-4af7-b93f-07f74c019732/1/GaQ9gWV6PDjBUN5VeX8ce18MLrs.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/0f3c61-02df-4af7-b93f-07f74c019732/1/GaQ9gWV6PDjBUN5VeX8ce18MLrs.mft
rsync://rpki.ripe.net/repository/DEFAULT/GaQ9gWV6PDjBUN5VeX8ce18MLrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:9f:37:cf:59:05:b1:3e:3e:3e:fd:12:b9:6d:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19a43d81657a3c38c150de55797f1c7b5f0c2ebb
Validity
Not Before: Mar 2 00:01:31 2026 GMT
Not After : Mar 3 00:01:31 2026 GMT
Subject: CN=4b6b53d77746b9e6b786c7904a0f32143f34d3f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ff:67:ab:c9:34:d5:0f:ad:98:b4:e0:3f:68:
3d:c4:d7:99:34:38:66:7e:4c:22:9a:4a:1d:23:9b:
40:d3:e4:6c:a2:a4:be:fe:51:f5:20:d0:14:94:53:
90:b8:75:4f:58:29:be:c2:2a:5d:b9:fe:86:43:ff:
ec:ef:5c:75:82:ae:01:b5:7c:2f:10:0a:a9:fa:53:
c3:3e:5e:86:a9:35:38:ba:60:6b:33:92:a0:f6:e0:
82:09:6f:58:f6:49:a6:f5:5f:15:ca:c3:01:eb:38:
ef:9d:a5:d4:23:b4:ba:91:40:ef:ae:ac:9e:e1:5f:
94:9f:6b:00:48:af:63:ec:b0:b8:6c:74:e7:bf:46:
2a:2a:5e:60:d3:10:70:89:70:fc:fa:9d:3a:1a:e1:
a5:17:d0:d6:1b:3e:83:ed:51:9f:d9:8e:f1:05:5c:
75:2a:81:99:66:70:00:21:db:17:d5:f2:66:3c:dd:
75:ad:86:3b:6b:05:20:ce:1d:e9:6a:73:bf:26:71:
d0:05:d1:60:c5:a1:9f:87:49:d5:b3:59:47:37:72:
c3:84:88:32:48:c0:b6:9a:55:47:1c:b2:b5:83:83:
75:e3:55:ba:71:3b:11:5b:02:dd:a1:4f:12:18:82:
6c:c5:cc:66:ac:e9:a9:25:2a:24:8d:14:4e:3a:be:
7b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:6B:53:D7:77:46:B9:E6:B7:86:C7:90:4A:0F:32:14:3F:34:D3:F9
X509v3 Authority Key Identifier:
keyid:19:A4:3D:81:65:7A:3C:38:C1:50:DE:55:79:7F:1C:7B:5F:0C:2E:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GaQ9gWV6PDjBUN5VeX8ce18MLrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/0f3c61-02df-4af7-b93f-07f74c019732/1/GaQ9gWV6PDjBUN5VeX8ce18MLrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/0f3c61-02df-4af7-b93f-07f74c019732/1/GaQ9gWV6PDjBUN5VeX8ce18MLrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:aa:ea:e8:4a:e6:11:15:de:74:82:25:43:21:e3:6a:31:20:
af:06:52:20:2b:08:6d:a9:8e:35:8d:8c:7e:9d:2b:b2:4e:3f:
cc:cc:2b:f4:43:fe:c4:7b:b6:ea:08:1b:92:5b:08:af:1d:24:
54:e6:5c:ef:57:4f:2e:ac:56:b9:e0:95:13:c4:42:0f:60:5e:
a8:17:49:0f:ad:0d:9b:a2:df:2a:69:4b:ff:23:83:cf:f0:6a:
bc:ca:f6:7c:05:ec:82:50:c7:57:00:85:16:52:2c:5c:8a:2d:
de:2e:d0:2f:c0:74:ec:55:3d:a0:34:fd:b6:54:5d:36:8a:83:
0b:d5:0c:b0:20:4e:d2:96:fb:36:93:91:ce:53:f7:51:69:6c:
70:d9:90:2c:ec:66:f4:86:6b:e9:9b:4b:ea:4a:c6:a3:8a:10:
6d:9b:0f:7e:94:5c:cb:ed:db:b9:3d:93:08:8b:32:16:06:f0:
fb:cf:a5:c4:1f:ea:ce:08:ac:fb:ad:d4:5d:28:28:d9:73:37:
55:78:5c:f4:3b:db:17:15:4c:23:b5:12:0e:a5:d9:4f:09:6c:
bc:61:21:0c:46:1f:d7:ae:66:c2:70:b7:19:8c:28:c3:bc:37:
d2:73:e8:a6:d0:07:6c:06:7f:6c:09:23:80:cb:3a:8b:42:1b:
91:91:56:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2Z83z1kFsT4+Pv0SuW0OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5YTQzZDgxNjU3YTNjMzhjMTUwZGU1NTc5N2YxYzdiNWYw
YzJlYmIwHhcNMjYwMzAyMDAwMTMxWhcNMjYwMzAzMDAwMTMxWjAzMTEwLwYDVQQD
Eyg0YjZiNTNkNzc3NDZiOWU2Yjc4NmM3OTA0YTBmMzIxNDNmMzRkM2Y5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/9nq8k01Q+tmLTgP2g9xNeZNDhm
fkwimkodI5tA0+RsoqS+/lH1INAUlFOQuHVPWCm+wipduf6GQ//s71x1gq4BtXwv
EAqp+lPDPl6GqTU4umBrM5Kg9uCCCW9Y9kmm9V8VysMB6zjvnaXUI7S6kUDvrqye
4V+Un2sASK9j7LC4bHTnv0YqKl5g0xBwiXD8+p06GuGlF9DWGz6D7VGf2Y7xBVx1
KoGZZnAAIdsX1fJmPN11rYY7awUgzh3panO/JnHQBdFgxaGfh0nVs1lHN3LDhIgy
SMC2mlVHHLK1g4N141W6cTsRWwLdoU8SGIJsxcxmrOmpJSokjRROOr572QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEtrU9d3Rrnmt4bHkEoPMhQ/NNP5MB8GA1UdIwQY
MBaAFBmkPYFlejw4wVDeVXl/HHtfDC67MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2FROWdXVjZQRGpCVU41VmVYOGNlMThNTHJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC8wZjNjNjEtMDJkZi00YWY3LWI5M2Yt
MDdmNzRjMDE5NzMyLzEvR2FROWdXVjZQRGpCVU41VmVYOGNlMThNTHJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC8wZjNjNjEtMDJkZi00YWY3LWI5M2YtMDdmNzRjMDE5NzMy
LzEvR2FROWdXVjZQRGpCVU41VmVYOGNlMThNTHJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPqrq6Erm
ERXedIIlQyHjajEgrwZSICsIbamONY2Mfp0rsk4/zMwr9EP+xHu26ggbklsIrx0k
VOZc71dPLqxWueCVE8RCD2BeqBdJD60Nm6LfKmlL/yODz/BqvMr2fAXsglDHVwCF
FlIsXIot3i7QL8B07FU9oDT9tlRdNoqDC9UMsCBO0pb7NpORzlP3UWlscNmQLOxm
9IZr6ZtL6krGo4oQbZsPfpRcy+3buT2TCIsyFgbw+8+lxB/qzgis+63UXSgo2XM3
VXhc9DvbFxVMI7USDqXZTwlsvGEhDEYf165mwnC3GYwow7w30nPoptAHbAZ/bAkj
gMs6i0IbkZFW4g==
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:02:44 2026 by rpki-client