Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/dff2c6-d87c-4d65-a256-1c8225d407b5/1/GMpt4aSKToxbivHq6bXoC_z5LEU.mft
File: GMpt4aSKToxbivHq6bXoC_z5LEU.mft (raw, json)
Hash identifier: JMgwJwxu3EySKEbZk0mu1fOqIoKGtfBfKpEVgNmIxGI=
Subject key identifier: 48:28:66:1B:50:37:49:F9:F2:4E:30:F4:17:40:02:BB:A2:47:9A:FC
Authority key identifier: 18:CA:6D:E1:A4:8A:4E:8C:5B:8A:F1:EA:E9:B5:E8:0B:FC:F9:2C:45
Certificate issuer: /CN=18ca6de1a48a4e8c5b8af1eae9b5e80bfcf92c45
Certificate serial: 019CAAC66AC4EC956C803699C17B2FD8BDA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GMpt4aSKToxbivHq6bXoC_z5LEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/dff2c6-d87c-4d65-a256-1c8225d407b5/1/GMpt4aSKToxbivHq6bXoC_z5LEU.mft
Manifest number: 073A
Signing time: Sun 01 Mar 2026 19:00:56 +0000
Manifest this update: Sun 01 Mar 2026 19:00:56 +0000
Manifest next update: Mon 02 Mar 2026 19:00:56 +0000
Files and hashes: 1: GMpt4aSKToxbivHq6bXoC_z5LEU.crl (hash: Y1egJgzPC7Alz+R6KTkvYl1AAcX6W3OWWiOHsjg003c=)
2: nZoO22NOlzzLttq20LfxDoJMdQg.roa (hash: s7xmgKi+9ZabhreTnecVdCUPnnVuLBbgQA+8atVMyO4=)
3: o0mi1ecW1qDQy0JOYUzQEq3UCno.roa (hash: hV2jBoTpFaaL+UTs/7eomqtU5upO4Ya9tPbfPL2XyYU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/dff2c6-d87c-4d65-a256-1c8225d407b5/1/GMpt4aSKToxbivHq6bXoC_z5LEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/dff2c6-d87c-4d65-a256-1c8225d407b5/1/GMpt4aSKToxbivHq6bXoC_z5LEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/GMpt4aSKToxbivHq6bXoC_z5LEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:6a:c4:ec:95:6c:80:36:99:c1:7b:2f:d8:bd:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18ca6de1a48a4e8c5b8af1eae9b5e80bfcf92c45
Validity
Not Before: Mar 1 19:00:56 2026 GMT
Not After : Mar 2 19:00:56 2026 GMT
Subject: CN=4828661b503749f9f24e30f4174002bba2479afc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e5:04:cc:c1:86:af:d0:ff:56:34:26:ec:b9:
8b:15:4f:0f:0c:39:c7:36:6b:2e:95:2c:39:6b:8a:
a7:58:e5:37:62:e0:07:65:b8:72:e7:7f:92:57:56:
2d:1c:cb:0d:dc:ca:14:7b:da:16:48:a1:a4:1d:09:
71:b6:23:07:d3:25:74:80:47:d0:00:d0:0b:59:3b:
09:c3:4d:c4:5c:ff:c0:51:f2:11:99:2a:48:04:97:
e7:6b:ec:b7:b4:f8:1f:0f:80:47:58:b5:89:06:5c:
a9:61:81:60:39:f5:9c:9d:ca:f5:63:49:ea:33:b0:
96:78:f2:6c:b8:78:10:01:40:ed:5c:17:72:e0:8c:
f0:15:5d:6f:ae:5b:ab:5b:ef:24:e1:bf:f7:ca:14:
31:5c:55:96:89:be:0d:9f:3e:3f:9a:60:10:4a:fe:
d4:a0:81:a9:1c:21:0c:e2:3b:be:00:b8:40:48:70:
2c:55:61:45:55:ab:99:3b:9b:8c:c8:84:06:8c:94:
31:d1:bf:55:10:72:49:89:12:7d:9b:c0:ef:f2:32:
b9:88:49:3a:fc:04:ae:62:79:49:98:23:20:f5:e6:
b8:ca:9d:8b:45:55:3a:b5:5a:39:81:8d:69:1b:cf:
0a:a1:b4:cb:e0:59:56:45:7f:63:fa:de:6c:ff:13:
69:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:28:66:1B:50:37:49:F9:F2:4E:30:F4:17:40:02:BB:A2:47:9A:FC
X509v3 Authority Key Identifier:
keyid:18:CA:6D:E1:A4:8A:4E:8C:5B:8A:F1:EA:E9:B5:E8:0B:FC:F9:2C:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GMpt4aSKToxbivHq6bXoC_z5LEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dff2c6-d87c-4d65-a256-1c8225d407b5/1/GMpt4aSKToxbivHq6bXoC_z5LEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dff2c6-d87c-4d65-a256-1c8225d407b5/1/GMpt4aSKToxbivHq6bXoC_z5LEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:56:2b:b7:0f:08:e1:97:d8:95:75:7d:dd:af:02:42:05:ab:
92:91:ae:d5:0d:51:aa:3e:ff:fd:b2:7c:f8:2f:ed:77:e8:5b:
bb:e3:f7:17:0a:1d:94:a5:7b:cf:7c:08:fa:89:3d:bf:2d:7d:
2a:59:ba:bf:1c:71:e0:11:81:b8:90:05:c8:68:c2:73:8d:88:
0f:9e:7b:c0:7a:34:2d:c4:8f:c5:8f:b5:18:56:4c:e1:1a:bc:
59:65:50:4b:64:2f:b0:a3:35:c6:ab:1a:aa:0f:f4:f1:9b:4a:
7a:5b:b9:d4:c5:bd:b8:68:14:d7:b6:e9:5d:08:85:22:ec:8a:
11:f0:3e:f5:75:d8:74:ea:67:77:fb:b7:c7:b6:19:a5:cb:ad:
f9:df:6a:0b:f0:45:20:66:a3:72:e3:64:7d:95:20:39:f8:a4:
e0:68:fc:e2:c4:e1:42:19:7d:7a:a5:4f:cd:44:41:19:98:de:
ba:fb:34:13:80:81:b9:c0:34:8c:14:97:33:2c:07:fc:17:51:
71:e3:32:52:c9:d7:a6:48:e3:eb:76:b7:d3:e3:7f:72:fa:2f:
6b:13:cb:16:82:16:75:fd:3b:43:1e:a3:a4:e1:27:d0:4b:60:
24:58:9f:24:46:d8:0f:a4:75:98:c8:96:2c:49:d2:3f:8f:04:
52:36:04:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqxmrE7JVsgDaZwXsv2L2nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4Y2E2ZGUxYTQ4YTRlOGM1YjhhZjFlYWU5YjVlODBiZmNm
OTJjNDUwHhcNMjYwMzAxMTkwMDU2WhcNMjYwMzAyMTkwMDU2WjAzMTEwLwYDVQQD
Eyg0ODI4NjYxYjUwMzc0OWY5ZjI0ZTMwZjQxNzQwMDJiYmEyNDc5YWZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvuUEzMGGr9D/VjQm7LmLFU8PDDnH
NmsulSw5a4qnWOU3YuAHZbhy53+SV1YtHMsN3MoUe9oWSKGkHQlxtiMH0yV0gEfQ
ANALWTsJw03EXP/AUfIRmSpIBJfna+y3tPgfD4BHWLWJBlypYYFgOfWcncr1Y0nq
M7CWePJsuHgQAUDtXBdy4IzwFV1vrlurW+8k4b/3yhQxXFWWib4Nnz4/mmAQSv7U
oIGpHCEM4ju+ALhASHAsVWFFVauZO5uMyIQGjJQx0b9VEHJJiRJ9m8Dv8jK5iEk6
/ASuYnlJmCMg9ea4yp2LRVU6tVo5gY1pG88KobTL4FlWRX9j+t5s/xNpYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEgoZhtQN0n58k4w9BdAAruiR5r8MB8GA1UdIwQY
MBaAFBjKbeGkik6MW4rx6um16Av8+SxFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR01wdDRhU0tUb3hiaXZIcTZiWG9DX3o1TEVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9kZmYyYzYtZDg3Yy00ZDY1LWEyNTYt
MWM4MjI1ZDQwN2I1LzEvR01wdDRhU0tUb3hiaXZIcTZiWG9DX3o1TEVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC9kZmYyYzYtZDg3Yy00ZDY1LWEyNTYtMWM4MjI1ZDQwN2I1
LzEvR01wdDRhU0tUb3hiaXZIcTZiWG9DX3o1TEVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ1Yrtw8I
4ZfYlXV93a8CQgWrkpGu1Q1Rqj7//bJ8+C/td+hbu+P3FwodlKV7z3wI+ok9vy19
Klm6vxxx4BGBuJAFyGjCc42ID557wHo0LcSPxY+1GFZM4Rq8WWVQS2QvsKM1xqsa
qg/08ZtKelu51MW9uGgU17bpXQiFIuyKEfA+9XXYdOpnd/u3x7YZpcut+d9qC/BF
IGajcuNkfZUgOfik4Gj84sThQhl9eqVPzURBGZjeuvs0E4CBucA0jBSXMywH/BdR
ceMyUsnXpkjj63a30+N/cvovaxPLFoIWdf07Qx6jpOEn0EtgJFifJEbYD6R1mMiW
LEnSP48EUjYEGw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:29:01 2026 by rpki-client