Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/a52ad3-9313-4ad0-9259-3b527cb98685/1/GVBDpU5iM9IuVtt0yfeOLW0cl5Q.mft
File: GVBDpU5iM9IuVtt0yfeOLW0cl5Q.mft (raw, json)
Hash identifier: g4v9VvSb2SL9mgORIu/7UB1NeyKdkGYO9NMl1kPwUlY=
Subject key identifier: BB:20:66:2F:EC:C2:85:E3:13:1A:ED:17:AD:88:52:99:50:B2:62:D7
Authority key identifier: 19:50:43:A5:4E:62:33:D2:2E:56:DB:74:C9:F7:8E:2D:6D:1C:97:94
Certificate issuer: /CN=195043a54e6233d22e56db74c9f78e2d6d1c9794
Certificate serial: 019CADFE03F020A81918CF37616629D0297B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GVBDpU5iM9IuVtt0yfeOLW0cl5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/a52ad3-9313-4ad0-9259-3b527cb98685/1/GVBDpU5iM9IuVtt0yfeOLW0cl5Q.mft
Manifest number: 15B3
Signing time: Mon 02 Mar 2026 10:00:31 +0000
Manifest this update: Mon 02 Mar 2026 10:00:31 +0000
Manifest next update: Tue 03 Mar 2026 10:00:31 +0000
Files and hashes: 1: GVBDpU5iM9IuVtt0yfeOLW0cl5Q.crl (hash: yRXhFSSUguS85YVjKvweRhv0NdRk0512oJxRtWD3Y8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/a52ad3-9313-4ad0-9259-3b527cb98685/1/GVBDpU5iM9IuVtt0yfeOLW0cl5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/a52ad3-9313-4ad0-9259-3b527cb98685/1/GVBDpU5iM9IuVtt0yfeOLW0cl5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/GVBDpU5iM9IuVtt0yfeOLW0cl5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:03:f0:20:a8:19:18:cf:37:61:66:29:d0:29:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=195043a54e6233d22e56db74c9f78e2d6d1c9794
Validity
Not Before: Mar 2 10:00:31 2026 GMT
Not After : Mar 3 10:00:31 2026 GMT
Subject: CN=bb20662fecc285e3131aed17ad88529950b262d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:07:4c:02:17:05:4b:08:e7:4b:8c:0e:84:0a:
27:75:c1:dc:64:43:f0:91:6f:95:45:67:61:3c:64:
d1:a7:2b:f3:16:31:80:e7:91:ce:53:5c:38:81:6b:
72:8d:2b:08:58:7e:64:2b:da:e4:f6:91:c5:61:53:
cc:99:4a:b2:9b:ae:95:1b:91:6b:17:70:ad:b0:52:
f3:e7:89:e7:3e:ee:0b:34:2f:e7:4e:ba:57:55:46:
b4:2a:6a:3c:fc:7b:e9:28:ec:1f:14:73:77:48:4a:
02:2c:c9:2d:a8:7c:c9:5f:50:bc:af:90:03:09:d4:
0c:c5:64:e9:67:81:17:93:0c:ec:5e:d7:d6:c2:d4:
2d:be:28:e5:b2:15:c4:bc:65:57:2d:d4:b6:18:83:
66:84:f4:26:84:07:92:89:74:84:c9:89:fd:32:50:
df:20:cd:8e:f2:7b:76:21:d1:f8:8a:61:f9:e8:09:
fa:da:62:a5:a1:e6:e4:68:8b:9c:08:3e:e0:a5:09:
39:74:b2:7a:52:ea:9f:35:c4:14:59:62:ef:a4:55:
50:dc:fc:cc:5a:18:75:45:07:d3:77:c3:a2:be:8b:
a1:ad:21:42:6f:7d:c0:a7:41:d5:01:f8:1f:8c:68:
d7:49:64:b3:60:a8:e4:7a:4b:9c:5e:88:e7:5e:61:
35:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:20:66:2F:EC:C2:85:E3:13:1A:ED:17:AD:88:52:99:50:B2:62:D7
X509v3 Authority Key Identifier:
keyid:19:50:43:A5:4E:62:33:D2:2E:56:DB:74:C9:F7:8E:2D:6D:1C:97:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GVBDpU5iM9IuVtt0yfeOLW0cl5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/a52ad3-9313-4ad0-9259-3b527cb98685/1/GVBDpU5iM9IuVtt0yfeOLW0cl5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/a52ad3-9313-4ad0-9259-3b527cb98685/1/GVBDpU5iM9IuVtt0yfeOLW0cl5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:ce:99:0a:18:2b:81:e9:1c:5a:4b:26:84:f8:b4:80:6d:ae:
45:2c:b1:d7:b5:cf:ac:e8:69:90:ad:0e:fb:52:04:58:69:cb:
51:af:e1:4f:3a:26:f3:07:86:1e:a0:01:72:b2:c6:4c:a3:f5:
b9:1b:02:48:59:a0:3c:ee:49:6a:59:21:d4:ca:49:ff:70:ca:
ed:ab:b3:14:c6:4c:da:39:f0:e7:b0:58:ae:bc:d0:52:6d:27:
85:18:71:f5:02:83:38:9f:e6:4d:dd:1d:5e:cf:49:44:e1:b6:
6a:9a:f7:1f:ab:85:58:cc:c9:d1:41:e3:de:3c:97:19:d1:01:
bd:bd:4f:20:d7:0e:1b:57:ac:69:99:a5:08:e8:72:1d:cd:f5:
dd:d7:a1:f7:c9:da:b6:da:c6:f9:7c:f3:2a:c4:72:d0:25:e8:
25:8d:25:6a:c6:cd:7a:f4:e0:0d:c4:ce:34:06:c6:55:9e:89:
35:67:21:43:33:93:93:80:e4:8d:fb:e2:b6:ef:fe:75:6b:d8:
1f:86:ca:31:bf:93:2a:01:f5:f5:cd:d9:91:94:7a:3b:12:7e:
90:11:e3:cc:8c:76:ba:3a:fe:d1:09:d8:3d:39:fb:b1:1d:f1:
5b:04:79:39:75:aa:56:c2:45:c2:7d:3f:d7:19:27:b1:0e:25:
4e:a1:e5:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyt/gPwIKgZGM83YWYp0Cl7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5NTA0M2E1NGU2MjMzZDIyZTU2ZGI3NGM5Zjc4ZTJkNmQx
Yzk3OTQwHhcNMjYwMzAyMTAwMDMxWhcNMjYwMzAzMTAwMDMxWjAzMTEwLwYDVQQD
EyhiYjIwNjYyZmVjYzI4NWUzMTMxYWVkMTdhZDg4NTI5OTUwYjI2MmQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqgdMAhcFSwjnS4wOhAondcHcZEPw
kW+VRWdhPGTRpyvzFjGA55HOU1w4gWtyjSsIWH5kK9rk9pHFYVPMmUqym66VG5Fr
F3CtsFLz54nnPu4LNC/nTrpXVUa0Kmo8/HvpKOwfFHN3SEoCLMktqHzJX1C8r5AD
CdQMxWTpZ4EXkwzsXtfWwtQtvijlshXEvGVXLdS2GINmhPQmhAeSiXSEyYn9MlDf
IM2O8nt2IdH4imH56An62mKloebkaIucCD7gpQk5dLJ6UuqfNcQUWWLvpFVQ3PzM
Whh1RQfTd8OivouhrSFCb33Ap0HVAfgfjGjXSWSzYKjkekucXojnXmE1hwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLsgZi/swoXjExrtF62IUplQsmLXMB8GA1UdIwQY
MBaAFBlQQ6VOYjPSLlbbdMn3ji1tHJeUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1ZCRHBVNWlNOUl1VnR0MHlmZU9MVzBjbDVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9hNTJhZDMtOTMxMy00YWQwLTkyNTkt
M2I1MjdjYjk4Njg1LzEvR1ZCRHBVNWlNOUl1VnR0MHlmZU9MVzBjbDVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny9hNTJhZDMtOTMxMy00YWQwLTkyNTktM2I1MjdjYjk4Njg1
LzEvR1ZCRHBVNWlNOUl1VnR0MHlmZU9MVzBjbDVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQs6ZChgr
gekcWksmhPi0gG2uRSyx17XPrOhpkK0O+1IEWGnLUa/hTzom8weGHqABcrLGTKP1
uRsCSFmgPO5Jalkh1MpJ/3DK7auzFMZM2jnw57BYrrzQUm0nhRhx9QKDOJ/mTd0d
Xs9JROG2apr3H6uFWMzJ0UHj3jyXGdEBvb1PINcOG1esaZmlCOhyHc313deh98na
ttrG+XzzKsRy0CXoJY0lasbNevTgDcTONAbGVZ6JNWchQzOTk4Dkjfvitu/+dWvY
H4bKMb+TKgH19c3ZkZR6OxJ+kBHjzIx2ujr+0QnYPTn7sR3xWwR5OXWqVsJFwn0/
1xknsQ4lTqHlZw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:38:21 2026 by rpki-client