Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/68195e-9902-4958-a507-fda9cdc90fe3/1/GhSy7j_ZgZQB2sukPsCsIAspWcA.mft
File: GhSy7j_ZgZQB2sukPsCsIAspWcA.mft (raw, json)
Hash identifier: i72NOCAFIMXGfgfusLinmw0G5I2ibxHbc8iGGOawELk=
Subject key identifier: 4A:92:DD:45:F7:A8:4A:DC:66:0B:FE:A5:E9:0C:C1:3D:C3:F3:F2:44
Authority key identifier: 1A:14:B2:EE:3F:D9:81:94:01:DA:CB:A4:3E:C0:AC:20:0B:29:59:C0
Certificate issuer: /CN=1a14b2ee3fd9819401dacba43ec0ac200b2959c0
Certificate serial: 019CAAC685FA22B4A97E785799C3FAA94110
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GhSy7j_ZgZQB2sukPsCsIAspWcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/68195e-9902-4958-a507-fda9cdc90fe3/1/GhSy7j_ZgZQB2sukPsCsIAspWcA.mft
Manifest number: 0921
Signing time: Sun 01 Mar 2026 19:01:02 +0000
Manifest this update: Sun 01 Mar 2026 19:01:02 +0000
Manifest next update: Mon 02 Mar 2026 19:01:02 +0000
Files and hashes: 1: GhSy7j_ZgZQB2sukPsCsIAspWcA.crl (hash: MkMoq0kWdDqJWV6LTHfqE9ShehxTSEjq5pAZQzwyjvs=)
2: Op0Xld0AvV9D-Gn5dQ7yl5fha9k.roa (hash: w+2GDqO3QQPP7xUHnZq2EDl7NnG4Qd4Bmp0KetYUXf0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/68195e-9902-4958-a507-fda9cdc90fe3/1/GhSy7j_ZgZQB2sukPsCsIAspWcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/68195e-9902-4958-a507-fda9cdc90fe3/1/GhSy7j_ZgZQB2sukPsCsIAspWcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GhSy7j_ZgZQB2sukPsCsIAspWcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:85:fa:22:b4:a9:7e:78:57:99:c3:fa:a9:41:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a14b2ee3fd9819401dacba43ec0ac200b2959c0
Validity
Not Before: Mar 1 19:01:02 2026 GMT
Not After : Mar 2 19:01:02 2026 GMT
Subject: CN=4a92dd45f7a84adc660bfea5e90cc13dc3f3f244
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:e2:3e:04:07:4e:77:74:12:29:bb:ad:82:a7:
71:08:58:dd:81:22:76:e9:7e:d6:9e:07:fd:7e:f0:
06:23:45:fc:8e:40:5d:f4:9d:87:f9:79:d6:c5:7b:
b3:9b:2f:fa:67:62:01:31:fc:b7:0b:36:9e:17:92:
18:65:4f:54:13:22:14:90:a6:67:a0:40:37:e9:18:
e5:29:0a:e0:fa:1b:81:32:d7:2f:03:ed:5b:ef:1c:
6e:d8:1d:f5:05:98:53:3c:0c:95:7c:40:8f:fc:df:
35:89:54:2c:6d:33:7d:16:d9:24:46:86:c1:84:38:
99:76:02:ee:4b:00:f4:55:9e:38:7f:98:8e:d8:c6:
46:28:91:03:9e:6d:4b:c8:07:24:d0:72:7e:28:8c:
25:62:7d:6f:4f:10:9e:97:a5:47:e4:a1:52:f2:66:
cc:1f:b7:3d:bc:42:91:b8:de:9e:44:cf:1c:44:f2:
db:44:dc:bd:c1:d9:e4:6a:f1:c7:3d:f0:59:72:d4:
80:99:32:99:f0:93:3b:1e:b2:c7:9a:ab:50:49:95:
16:b2:da:ba:46:d8:19:22:07:6e:68:81:5a:ea:b6:
7b:8d:10:89:eb:e4:12:8c:d8:ba:46:4d:43:8b:dd:
24:90:53:4c:f4:79:70:b4:31:27:e1:fa:2d:55:f8:
64:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:92:DD:45:F7:A8:4A:DC:66:0B:FE:A5:E9:0C:C1:3D:C3:F3:F2:44
X509v3 Authority Key Identifier:
keyid:1A:14:B2:EE:3F:D9:81:94:01:DA:CB:A4:3E:C0:AC:20:0B:29:59:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GhSy7j_ZgZQB2sukPsCsIAspWcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/68195e-9902-4958-a507-fda9cdc90fe3/1/GhSy7j_ZgZQB2sukPsCsIAspWcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/68195e-9902-4958-a507-fda9cdc90fe3/1/GhSy7j_ZgZQB2sukPsCsIAspWcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:f8:2e:ba:c8:38:b6:94:19:e3:75:73:99:5a:6d:92:74:c0:
7e:df:ec:ae:a7:93:5a:07:a7:c0:ec:40:26:db:9c:37:3c:46:
30:11:ee:21:e6:fc:91:db:38:8d:f2:0f:71:31:44:70:f8:c6:
53:23:e6:fa:7f:85:f2:7b:04:e2:2c:63:b9:4a:a9:fa:0d:e6:
64:6b:ab:f8:14:0f:6d:43:48:c8:70:51:1e:b0:d7:80:d6:65:
52:d6:05:af:50:8b:02:c9:d5:35:74:55:22:3f:fd:c4:34:fa:
11:56:fe:35:5d:22:00:ed:16:69:4b:9a:f4:25:88:51:da:f7:
89:d6:d4:e2:ab:71:c7:c8:71:f3:fc:5f:f1:fc:f8:7a:59:1e:
fe:d7:f4:cd:2f:31:14:6e:ce:4a:72:19:7a:27:67:28:7e:0e:
1b:74:47:38:02:61:9b:b4:44:c8:b5:39:0e:80:5e:43:bf:2e:
a3:3c:f3:b1:93:d6:b1:d0:1f:81:6c:a5:4d:4b:00:0c:03:be:
c3:63:56:fc:ac:ec:cb:cc:40:cd:51:ae:b4:fc:4e:af:0f:58:
be:05:81:de:9a:36:b8:d8:36:98:ac:ba:f5:98:ee:9f:62:18:
5d:ab:f9:fa:14:d1:36:82:d1:67:f6:6f:00:48:27:18:d2:2e:
8d:e0:05:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqxoX6IrSpfnhXmcP6qUEQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhMTRiMmVlM2ZkOTgxOTQwMWRhY2JhNDNlYzBhYzIwMGIy
OTU5YzAwHhcNMjYwMzAxMTkwMTAyWhcNMjYwMzAyMTkwMTAyWjAzMTEwLwYDVQQD
Eyg0YTkyZGQ0NWY3YTg0YWRjNjYwYmZlYTVlOTBjYzEzZGMzZjNmMjQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhOI+BAdOd3QSKbutgqdxCFjdgSJ2
6X7Wngf9fvAGI0X8jkBd9J2H+XnWxXuzmy/6Z2IBMfy3CzaeF5IYZU9UEyIUkKZn
oEA36RjlKQrg+huBMtcvA+1b7xxu2B31BZhTPAyVfECP/N81iVQsbTN9FtkkRobB
hDiZdgLuSwD0VZ44f5iO2MZGKJEDnm1LyAck0HJ+KIwlYn1vTxCel6VH5KFS8mbM
H7c9vEKRuN6eRM8cRPLbRNy9wdnkavHHPfBZctSAmTKZ8JM7HrLHmqtQSZUWstq6
RtgZIgduaIFa6rZ7jRCJ6+QSjNi6Rk1Di90kkFNM9HlwtDEn4fotVfhklwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEqS3UX3qErcZgv+pekMwT3D8/JEMB8GA1UdIwQY
MBaAFBoUsu4/2YGUAdrLpD7ArCALKVnAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2hTeTdqX1pnWlFCMnN1a1BzQ3NJQXNwV2NBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi82ODE5NWUtOTkwMi00OTU4LWE1MDct
ZmRhOWNkYzkwZmUzLzEvR2hTeTdqX1pnWlFCMnN1a1BzQ3NJQXNwV2NBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi82ODE5NWUtOTkwMi00OTU4LWE1MDctZmRhOWNkYzkwZmUz
LzEvR2hTeTdqX1pnWlFCMnN1a1BzQ3NJQXNwV2NBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE/guusg4
tpQZ43VzmVptknTAft/srqeTWgenwOxAJtucNzxGMBHuIeb8kds4jfIPcTFEcPjG
UyPm+n+F8nsE4ixjuUqp+g3mZGur+BQPbUNIyHBRHrDXgNZlUtYFr1CLAsnVNXRV
Ij/9xDT6EVb+NV0iAO0WaUua9CWIUdr3idbU4qtxx8hx8/xf8fz4elke/tf0zS8x
FG7OSnIZeidnKH4OG3RHOAJhm7REyLU5DoBeQ78uozzzsZPWsdAfgWylTUsADAO+
w2NW/Kzsy8xAzVGutPxOrw9YvgWB3po2uNg2mKy69Zjun2IYXav5+hTRNoLRZ/Zv
AEgnGNIujeAFhg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:46:17 2026 by rpki-client