Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/d6c15a-3dff-44d7-a538-a951f200f652/1/GimypF3gE2_qu_rkuqcBcqqGYZs.mft
File: GimypF3gE2_qu_rkuqcBcqqGYZs.mft (raw, json)
Hash identifier: 8VpUiDwTFw01Hupgv+GmAfy8dU8/OHmEYqnRA2oQcGI=
Subject key identifier: 82:E1:F6:FE:54:25:0A:03:D3:7D:E6:60:5F:88:E1:CF:46:A7:3F:B1
Authority key identifier: 1A:29:B2:A4:5D:E0:13:6F:EA:BB:FA:E4:BA:A7:01:72:AA:86:61:9B
Certificate issuer: /CN=1a29b2a45de0136feabbfae4baa70172aa86619b
Certificate serial: 019CAC7DF1AA5FE3498629D64FB1FBEC744B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GimypF3gE2_qu_rkuqcBcqqGYZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/d6c15a-3dff-44d7-a538-a951f200f652/1/GimypF3gE2_qu_rkuqcBcqqGYZs.mft
Manifest number: 184A
Signing time: Mon 02 Mar 2026 03:01:00 +0000
Manifest this update: Mon 02 Mar 2026 03:01:00 +0000
Manifest next update: Tue 03 Mar 2026 03:01:00 +0000
Files and hashes: 1: GimypF3gE2_qu_rkuqcBcqqGYZs.crl (hash: 1oXzu9T7ExhQbQRlkwABod7l067Hq994oh1ZUaMH+oc=)
2: _LIMNGBB_bM1l_RNh7Jn1ke8Z1Q.roa (hash: Y1Vdc4Bk2253+dyiXjTYX2rbKWMSURyUVb6exyc6X4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/d6c15a-3dff-44d7-a538-a951f200f652/1/GimypF3gE2_qu_rkuqcBcqqGYZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/d6c15a-3dff-44d7-a538-a951f200f652/1/GimypF3gE2_qu_rkuqcBcqqGYZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/GimypF3gE2_qu_rkuqcBcqqGYZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7d:f1:aa:5f:e3:49:86:29:d6:4f:b1:fb:ec:74:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a29b2a45de0136feabbfae4baa70172aa86619b
Validity
Not Before: Mar 2 03:01:00 2026 GMT
Not After : Mar 3 03:01:00 2026 GMT
Subject: CN=82e1f6fe54250a03d37de6605f88e1cf46a73fb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8f:f9:d5:24:10:98:a3:d1:ec:20:b8:43:03:
7b:cf:39:98:07:3e:0f:51:c5:be:00:21:47:67:39:
c5:da:21:34:0e:07:a3:07:db:b8:0f:b2:b9:a4:9b:
d5:9a:ab:9a:37:ec:6c:77:ba:cc:a3:54:1a:20:7a:
cb:05:7e:25:0b:bf:ee:a2:3a:60:36:87:73:e8:53:
74:f5:ca:02:b6:a3:1e:7f:19:c0:06:de:dd:12:fa:
9b:b9:63:39:46:69:23:7a:57:23:97:d8:f8:3f:d0:
d5:5d:0a:58:af:50:1a:62:cf:0d:13:11:bb:10:af:
81:6d:ea:6e:1d:ca:bc:f5:6b:52:39:c7:b4:89:5d:
b2:93:ce:c3:84:d4:bb:6c:10:2c:bb:64:e3:bb:73:
4b:07:8d:be:26:38:f4:57:a0:6d:42:af:76:fe:83:
73:27:4d:5f:84:e6:9e:44:6d:c9:37:d3:01:90:ae:
49:d4:d9:ea:df:ad:7e:24:bd:32:26:16:de:64:65:
64:fe:ef:bc:08:04:6d:27:bf:36:fc:30:bc:1f:0d:
5d:47:86:77:df:59:7f:e3:3a:d7:ea:4a:ba:eb:ba:
0b:c3:3c:bb:33:5f:c3:a5:d1:27:dc:bd:32:1c:a8:
53:39:00:92:1f:97:a3:02:32:20:2f:a2:fc:5c:7a:
09:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:E1:F6:FE:54:25:0A:03:D3:7D:E6:60:5F:88:E1:CF:46:A7:3F:B1
X509v3 Authority Key Identifier:
keyid:1A:29:B2:A4:5D:E0:13:6F:EA:BB:FA:E4:BA:A7:01:72:AA:86:61:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GimypF3gE2_qu_rkuqcBcqqGYZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d6c15a-3dff-44d7-a538-a951f200f652/1/GimypF3gE2_qu_rkuqcBcqqGYZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d6c15a-3dff-44d7-a538-a951f200f652/1/GimypF3gE2_qu_rkuqcBcqqGYZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:4a:f5:52:d0:6b:eb:05:13:e0:3e:f4:0e:15:c8:99:09:02:
4c:71:1f:bc:b0:0a:8b:7c:82:ba:b0:f5:98:ae:1c:a5:8a:25:
05:13:b1:41:23:7f:3d:58:47:14:9b:2e:64:83:c8:2b:79:af:
12:b8:44:65:cf:60:8e:c7:e4:26:75:3c:38:85:a5:04:51:b3:
6d:76:77:82:60:83:3f:ff:1f:27:5b:ab:6d:08:24:8c:71:95:
02:af:e7:3e:81:26:1a:35:b2:57:d4:32:d2:9b:c6:29:2c:0f:
c3:18:f3:2f:a9:59:ad:03:6d:45:7f:3f:fd:25:72:63:61:a7:
9e:36:75:be:b8:14:99:cb:e2:5d:6c:7f:3f:66:cd:cf:96:36:
c2:ad:27:84:f9:d5:a1:45:1f:3b:04:8d:13:64:0a:5c:7d:92:
b1:8c:65:01:40:7a:c7:13:0b:3c:62:17:72:5f:97:90:72:80:
20:21:b4:f7:5e:7e:fa:09:df:d5:9e:2b:7e:47:ef:e1:04:e7:
83:47:03:16:33:e5:f9:5a:37:99:bc:4e:a9:61:72:de:2b:69:
30:8c:8b:a0:95:c1:4d:ca:08:59:3a:6c:39:61:91:ed:f4:6a:
83:2c:ed:d4:e9:e4:4e:6b:b9:eb:7c:b7:c6:88:cf:42:a7:98:
23:85:f6:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysffGqX+NJhinWT7H77HRLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhMjliMmE0NWRlMDEzNmZlYWJiZmFlNGJhYTcwMTcyYWE4
NjYxOWIwHhcNMjYwMzAyMDMwMTAwWhcNMjYwMzAzMDMwMTAwWjAzMTEwLwYDVQQD
Eyg4MmUxZjZmZTU0MjUwYTAzZDM3ZGU2NjA1Zjg4ZTFjZjQ2YTczZmIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsI/51SQQmKPR7CC4QwN7zzmYBz4P
UcW+ACFHZznF2iE0DgejB9u4D7K5pJvVmquaN+xsd7rMo1QaIHrLBX4lC7/uojpg
Nodz6FN09coCtqMefxnABt7dEvqbuWM5Rmkjelcjl9j4P9DVXQpYr1AaYs8NExG7
EK+BbepuHcq89WtSOce0iV2yk87DhNS7bBAsu2Tju3NLB42+Jjj0V6BtQq92/oNz
J01fhOaeRG3JN9MBkK5J1Nnq361+JL0yJhbeZGVk/u+8CARtJ782/DC8Hw1dR4Z3
31l/4zrX6kq667oLwzy7M1/DpdEn3L0yHKhTOQCSH5ejAjIgL6L8XHoJKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFILh9v5UJQoD033mYF+I4c9Gpz+xMB8GA1UdIwQY
MBaAFBopsqRd4BNv6rv65LqnAXKqhmGbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2lteXBGM2dFMl9xdV9ya3VxY0JjcXFHWVpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9kNmMxNWEtM2RmZi00NGQ3LWE1Mzgt
YTk1MWYyMDBmNjUyLzEvR2lteXBGM2dFMl9xdV9ya3VxY0JjcXFHWVpzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My9kNmMxNWEtM2RmZi00NGQ3LWE1MzgtYTk1MWYyMDBmNjUy
LzEvR2lteXBGM2dFMl9xdV9ya3VxY0JjcXFHWVpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0Er1UtBr
6wUT4D70DhXImQkCTHEfvLAKi3yCurD1mK4cpYolBROxQSN/PVhHFJsuZIPIK3mv
ErhEZc9gjsfkJnU8OIWlBFGzbXZ3gmCDP/8fJ1urbQgkjHGVAq/nPoEmGjWyV9Qy
0pvGKSwPwxjzL6lZrQNtRX8//SVyY2GnnjZ1vrgUmcviXWx/P2bNz5Y2wq0nhPnV
oUUfOwSNE2QKXH2SsYxlAUB6xxMLPGIXcl+XkHKAICG0915++gnf1Z4rfkfv4QTn
g0cDFjPl+Vo3mbxOqWFy3itpMIyLoJXBTcoIWTpsOWGR7fRqgyzt1OnkTmu563y3
xojPQqeYI4X2TQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:48:46 2026 by rpki-client