Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/32e925-6fe6-4b26-a498-75304f9f5c24/1/GfXgS2VV8eLJLXpBrBBqdd6pKKI.mft
File: GfXgS2VV8eLJLXpBrBBqdd6pKKI.mft (raw, json)
Hash identifier: zWOAaNF3DWH+GDnbG8nJWmI8DRcZq3DkhEhxWVQR8n0=
Subject key identifier: E9:1E:C7:4C:B6:23:8D:24:5B:0B:6F:8E:8E:8D:CE:FC:C7:D5:31:D8
Authority key identifier: 19:F5:E0:4B:65:55:F1:E2:C9:2D:7A:41:AC:10:6A:75:DE:A9:28:A2
Certificate issuer: /CN=19f5e04b6555f1e2c92d7a41ac106a75dea928a2
Certificate serial: 019CACB4BD73E5230D1C0EFC3CEF0D207CEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GfXgS2VV8eLJLXpBrBBqdd6pKKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/32e925-6fe6-4b26-a498-75304f9f5c24/1/GfXgS2VV8eLJLXpBrBBqdd6pKKI.mft
Manifest number: 16E7
Signing time: Mon 02 Mar 2026 04:00:51 +0000
Manifest this update: Mon 02 Mar 2026 04:00:51 +0000
Manifest next update: Tue 03 Mar 2026 04:00:51 +0000
Files and hashes: 1: GfXgS2VV8eLJLXpBrBBqdd6pKKI.crl (hash: 3JIdx71n7xdyga417wMsSbGzF22rcNvxy+xfoEjfzk8=)
2: ddzzutA4t5_bTS59x-ViP0VnX0A.roa (hash: LM9NwYw2Z3ZadyCbFgStTauj7LtTwJI2w9ItE8haIGA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/32e925-6fe6-4b26-a498-75304f9f5c24/1/GfXgS2VV8eLJLXpBrBBqdd6pKKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/32e925-6fe6-4b26-a498-75304f9f5c24/1/GfXgS2VV8eLJLXpBrBBqdd6pKKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/GfXgS2VV8eLJLXpBrBBqdd6pKKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:bd:73:e5:23:0d:1c:0e:fc:3c:ef:0d:20:7c:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19f5e04b6555f1e2c92d7a41ac106a75dea928a2
Validity
Not Before: Mar 2 04:00:51 2026 GMT
Not After : Mar 3 04:00:51 2026 GMT
Subject: CN=e91ec74cb6238d245b0b6f8e8e8dcefcc7d531d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:79:f2:c5:6c:6d:83:2f:d5:f8:b4:57:14:a9:
5d:17:dd:58:ee:ff:86:a5:21:41:86:a6:e4:92:5e:
47:d6:0e:7c:43:7b:46:65:74:49:19:9b:0b:36:ef:
d2:9e:98:f4:2f:be:60:55:d5:fe:a9:68:49:6c:b3:
fe:43:b9:0d:b5:9c:ec:35:9a:38:55:94:88:05:1b:
27:c6:c7:89:38:e0:7d:87:24:2f:b7:2c:38:fb:60:
af:d9:b0:4b:5d:12:3c:a1:a7:6a:3a:55:68:20:d6:
c8:b6:0e:76:23:47:3b:f4:f0:51:18:e4:70:8c:7d:
f2:22:45:13:cc:3d:41:1f:9f:0f:bb:c5:16:63:60:
40:96:40:59:2d:3b:0a:88:0a:9c:83:ad:f6:b9:09:
3a:1e:f2:1d:08:17:fb:e3:26:2f:f6:1c:e1:3b:af:
6b:e7:e7:f5:f4:20:cf:9e:fa:40:74:44:24:37:25:
62:f1:b3:d7:b3:8b:2a:1b:8d:0f:ec:20:c6:28:cf:
b8:c9:84:58:76:80:88:96:72:81:de:d8:5c:96:3c:
36:a9:63:ef:56:b2:8b:17:6c:2b:d6:e4:87:00:4d:
48:b5:15:46:72:81:a0:12:f8:bb:67:b9:2c:1f:11:
f4:a2:14:7e:e7:29:b2:ca:a1:28:93:4a:de:97:2a:
1a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:1E:C7:4C:B6:23:8D:24:5B:0B:6F:8E:8E:8D:CE:FC:C7:D5:31:D8
X509v3 Authority Key Identifier:
keyid:19:F5:E0:4B:65:55:F1:E2:C9:2D:7A:41:AC:10:6A:75:DE:A9:28:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GfXgS2VV8eLJLXpBrBBqdd6pKKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/32e925-6fe6-4b26-a498-75304f9f5c24/1/GfXgS2VV8eLJLXpBrBBqdd6pKKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/32e925-6fe6-4b26-a498-75304f9f5c24/1/GfXgS2VV8eLJLXpBrBBqdd6pKKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:82:cb:01:c6:60:b4:c0:ec:35:a0:77:a4:0c:24:09:5a:9c:
dc:d2:85:13:86:88:e1:c0:d0:33:74:c1:d2:fe:19:db:1d:28:
90:7b:6b:dc:9d:fe:67:80:96:dc:cc:6a:fb:84:98:2e:ee:8d:
45:1a:79:f4:22:fb:b3:94:02:7a:3a:4c:dd:ce:21:40:c3:4e:
cf:b0:6c:58:45:e1:1a:02:54:da:6c:40:1e:ad:3c:76:47:b2:
10:b4:79:85:ec:8d:ae:e7:b8:6a:e4:b8:3a:d0:16:29:af:3c:
bc:30:87:c1:26:85:44:21:3f:59:d4:25:52:ef:e4:e1:6a:c7:
d3:7a:ba:73:3c:46:64:31:c6:cd:9d:34:3d:c8:c4:92:64:96:
ed:c5:43:d9:1b:f3:ea:90:15:6d:53:08:c8:fd:c2:de:ab:eb:
8d:f2:28:aa:3b:60:36:0f:af:f3:b8:0b:06:b0:a6:91:52:6d:
a1:9b:d4:0e:8e:6c:29:73:f3:85:0f:ee:44:69:5f:d7:6e:e6:
f7:e0:37:dc:f7:4b:f0:4b:9c:c5:99:ab:da:ca:8a:06:70:aa:
ec:dd:08:59:11:b8:58:94:bf:6f:e1:1d:da:17:f4:d6:ab:bc:
66:78:08:f8:c9:c0:23:83:f3:7f:29:d5:83:bf:33:19:86:65:
e5:a1:d9:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZystL1z5SMNHA78PO8NIHzsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5ZjVlMDRiNjU1NWYxZTJjOTJkN2E0MWFjMTA2YTc1ZGVh
OTI4YTIwHhcNMjYwMzAyMDQwMDUxWhcNMjYwMzAzMDQwMDUxWjAzMTEwLwYDVQQD
EyhlOTFlYzc0Y2I2MjM4ZDI0NWIwYjZmOGU4ZThkY2VmY2M3ZDUzMWQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1HnyxWxtgy/V+LRXFKldF91Y7v+G
pSFBhqbkkl5H1g58Q3tGZXRJGZsLNu/Snpj0L75gVdX+qWhJbLP+Q7kNtZzsNZo4
VZSIBRsnxseJOOB9hyQvtyw4+2Cv2bBLXRI8oadqOlVoINbItg52I0c79PBRGORw
jH3yIkUTzD1BH58Pu8UWY2BAlkBZLTsKiAqcg632uQk6HvIdCBf74yYv9hzhO69r
5+f19CDPnvpAdEQkNyVi8bPXs4sqG40P7CDGKM+4yYRYdoCIlnKB3thcljw2qWPv
VrKLF2wr1uSHAE1ItRVGcoGgEvi7Z7ksHxH0ohR+5ymyyqEok0relyoaVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOkex0y2I40kWwtvjo6NzvzH1THYMB8GA1UdIwQY
MBaAFBn14EtlVfHiyS16QawQanXeqSiiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2ZYZ1MyVlY4ZUxKTFhwQnJCQnFkZDZwS0tJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi8zMmU5MjUtNmZlNi00YjI2LWE0OTgt
NzUzMDRmOWY1YzI0LzEvR2ZYZ1MyVlY4ZUxKTFhwQnJCQnFkZDZwS0tJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi8zMmU5MjUtNmZlNi00YjI2LWE0OTgtNzUzMDRmOWY1YzI0
LzEvR2ZYZ1MyVlY4ZUxKTFhwQnJCQnFkZDZwS0tJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANILLAcZg
tMDsNaB3pAwkCVqc3NKFE4aI4cDQM3TB0v4Z2x0okHtr3J3+Z4CW3Mxq+4SYLu6N
RRp59CL7s5QCejpM3c4hQMNOz7BsWEXhGgJU2mxAHq08dkeyELR5heyNrue4auS4
OtAWKa88vDCHwSaFRCE/WdQlUu/k4WrH03q6czxGZDHGzZ00PcjEkmSW7cVD2Rvz
6pAVbVMIyP3C3qvrjfIoqjtgNg+v87gLBrCmkVJtoZvUDo5sKXPzhQ/uRGlf127m
9+A33PdL8EucxZmr2sqKBnCq7N0IWRG4WJS/b+Ed2hf01qu8ZngI+MnAI4PzfynV
g78zGYZl5aHZ2Q==
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:37:49 2026 by rpki-client