Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/5bc134-5625-4eb1-9f70-f9fedbf63272/1/gvWThvzeWW90WQde3qTXTBmwHKI.mft
File: gvWThvzeWW90WQde3qTXTBmwHKI.mft (raw, json)
Hash identifier: 80Rwatqv2bO933rTA/2Q8HwCbTOqIZt/f7jTwsQaRnY=
Subject key identifier: EF:70:6F:3F:74:78:60:18:EF:FA:59:E2:70:CD:A1:D1:9B:16:25:EB
Authority key identifier: 82:F5:93:86:FC:DE:59:6F:74:59:07:5E:DE:A4:D7:4C:19:B0:1C:A2
Certificate issuer: /CN=82f59386fcde596f7459075edea4d74c19b01ca2
Certificate serial: 019CAD22C0EC55C44505E95949C1D50339EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gvWThvzeWW90WQde3qTXTBmwHKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/5bc134-5625-4eb1-9f70-f9fedbf63272/1/gvWThvzeWW90WQde3qTXTBmwHKI.mft
Manifest number: 0AE6
Signing time: Mon 02 Mar 2026 06:01:01 +0000
Manifest this update: Mon 02 Mar 2026 06:01:01 +0000
Manifest next update: Tue 03 Mar 2026 06:01:01 +0000
Files and hashes: 1: gvWThvzeWW90WQde3qTXTBmwHKI.crl (hash: r7XvRefxXUjIXnCS14AbrxUc/+5+cgdVo9T/0HoB1HM=)
2: oNme18aqaGDrD5K5b2ZaxV8XqFA.roa (hash: jX5vfMnloLvbY3zgwIk6xP963slmPBqIZT69KIJCHjk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/5bc134-5625-4eb1-9f70-f9fedbf63272/1/gvWThvzeWW90WQde3qTXTBmwHKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/5bc134-5625-4eb1-9f70-f9fedbf63272/1/gvWThvzeWW90WQde3qTXTBmwHKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/gvWThvzeWW90WQde3qTXTBmwHKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:c0:ec:55:c4:45:05:e9:59:49:c1:d5:03:39:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82f59386fcde596f7459075edea4d74c19b01ca2
Validity
Not Before: Mar 2 06:01:01 2026 GMT
Not After : Mar 3 06:01:01 2026 GMT
Subject: CN=ef706f3f74786018effa59e270cda1d19b1625eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d8:11:c3:5c:18:c4:fd:fe:1a:3c:d8:66:00:
e1:ea:70:93:24:72:f0:9e:a5:83:6d:2d:fa:4e:9d:
19:06:f2:55:0d:c4:b9:ce:ca:95:e7:5b:e5:6e:9a:
60:9c:2e:d7:b7:33:3c:fb:11:7c:f5:8b:73:3e:b7:
a1:0f:c4:ad:2a:b5:d2:aa:98:d4:e6:a4:00:21:de:
91:44:37:7b:fd:ba:04:b1:f3:cc:8e:f6:17:7d:0e:
0a:e8:c9:41:13:89:26:c3:dd:87:ed:d4:06:b5:06:
d6:21:e6:65:de:e8:3e:21:36:8f:65:ea:5f:a7:06:
c8:2d:81:21:aa:85:75:1c:22:95:5f:00:01:d9:77:
82:f9:85:36:97:b0:34:13:4e:6b:ce:74:54:2a:a8:
8a:a7:7b:e3:e8:8c:06:8f:77:26:fa:2b:66:eb:f2:
27:46:8e:dd:ff:4b:20:32:ec:dc:b7:74:f0:19:4d:
81:ce:b3:de:d4:10:ea:8b:7d:70:ff:8e:4a:06:78:
d0:a8:f8:c6:1f:1f:e2:56:14:15:59:58:c5:73:a6:
c4:31:fb:e6:4a:19:80:32:ec:ea:40:92:b0:98:ed:
5c:a3:30:87:0e:65:e1:ac:9f:ec:f6:18:62:95:ed:
e4:09:8d:92:a7:6d:a6:af:bb:31:fd:55:6f:98:7e:
d2:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:70:6F:3F:74:78:60:18:EF:FA:59:E2:70:CD:A1:D1:9B:16:25:EB
X509v3 Authority Key Identifier:
keyid:82:F5:93:86:FC:DE:59:6F:74:59:07:5E:DE:A4:D7:4C:19:B0:1C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gvWThvzeWW90WQde3qTXTBmwHKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/5bc134-5625-4eb1-9f70-f9fedbf63272/1/gvWThvzeWW90WQde3qTXTBmwHKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/5bc134-5625-4eb1-9f70-f9fedbf63272/1/gvWThvzeWW90WQde3qTXTBmwHKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:7d:0e:a0:02:48:65:36:05:86:67:71:f4:ca:7d:5a:34:b8:
33:fd:5c:2d:2f:39:b2:75:87:9b:6e:18:25:4c:af:72:e4:af:
bd:51:86:4c:28:27:9a:a4:a4:32:01:5f:03:77:0d:fe:28:d2:
6b:16:9c:4e:88:0e:a8:f3:88:ea:94:cb:6c:2b:34:95:38:a6:
22:67:3d:2c:5a:50:3e:a4:9a:68:08:47:af:75:96:a9:f4:a7:
71:65:37:08:4f:12:6a:ae:ec:9c:9e:99:d2:e7:02:88:eb:72:
aa:a4:63:cd:0e:7f:97:9a:19:1a:d5:f2:6d:73:be:0b:54:2a:
e8:28:70:32:f7:b3:b9:f7:de:28:ca:3d:cb:38:e1:ec:46:f9:
bb:4a:da:4b:05:39:bc:2e:0c:25:1d:05:0a:75:eb:ca:8f:91:
a8:dd:68:2c:a3:10:65:07:97:b6:8c:1b:fc:d0:6e:65:16:f4:
b5:4f:ae:cc:8d:b5:47:70:0a:e5:9c:54:b7:57:0c:8d:84:8d:
26:5e:2d:4c:32:91:da:ac:a5:f2:48:33:9f:9c:f4:dd:34:83:
9b:22:e4:52:2a:91:63:2f:66:67:6a:4b:5a:0f:84:0a:cc:04:
18:29:12:ed:18:1b:61:7b:a2:71:e0:9b:95:47:54:a9:4c:67:
ce:4a:a5:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytIsDsVcRFBelZScHVAznsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyZjU5Mzg2ZmNkZTU5NmY3NDU5MDc1ZWRlYTRkNzRjMTli
MDFjYTIwHhcNMjYwMzAyMDYwMTAxWhcNMjYwMzAzMDYwMTAxWjAzMTEwLwYDVQQD
EyhlZjcwNmYzZjc0Nzg2MDE4ZWZmYTU5ZTI3MGNkYTFkMTliMTYyNWViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtdgRw1wYxP3+GjzYZgDh6nCTJHLw
nqWDbS36Tp0ZBvJVDcS5zsqV51vlbppgnC7XtzM8+xF89YtzPrehD8StKrXSqpjU
5qQAId6RRDd7/boEsfPMjvYXfQ4K6MlBE4kmw92H7dQGtQbWIeZl3ug+ITaPZepf
pwbILYEhqoV1HCKVXwAB2XeC+YU2l7A0E05rznRUKqiKp3vj6IwGj3cm+itm6/In
Ro7d/0sgMuzct3TwGU2BzrPe1BDqi31w/45KBnjQqPjGHx/iVhQVWVjFc6bEMfvm
ShmAMuzqQJKwmO1cozCHDmXhrJ/s9hhile3kCY2Sp22mr7sx/VVvmH7SrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO9wbz90eGAY7/pZ4nDNodGbFiXrMB8GA1UdIwQY
MBaAFIL1k4b83llvdFkHXt6k10wZsByiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3ZXVGh2emVXVzkwV1FkZTNxVFhUQm13SEtJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC81YmMxMzQtNTYyNS00ZWIxLTlmNzAt
ZjlmZWRiZjYzMjcyLzEvZ3ZXVGh2emVXVzkwV1FkZTNxVFhUQm13SEtJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC81YmMxMzQtNTYyNS00ZWIxLTlmNzAtZjlmZWRiZjYzMjcy
LzEvZ3ZXVGh2emVXVzkwV1FkZTNxVFhUQm13SEtJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh30OoAJI
ZTYFhmdx9Mp9WjS4M/1cLS85snWHm24YJUyvcuSvvVGGTCgnmqSkMgFfA3cN/ijS
axacTogOqPOI6pTLbCs0lTimImc9LFpQPqSaaAhHr3WWqfSncWU3CE8Saq7snJ6Z
0ucCiOtyqqRjzQ5/l5oZGtXybXO+C1Qq6ChwMvezuffeKMo9yzjh7Eb5u0raSwU5
vC4MJR0FCnXryo+RqN1oLKMQZQeXtowb/NBuZRb0tU+uzI21R3AK5ZxUt1cMjYSN
Jl4tTDKR2qyl8kgzn5z03TSDmyLkUiqRYy9mZ2pLWg+ECswEGCkS7RgbYXuiceCb
lUdUqUxnzkqlow==
-----END CERTIFICATE-----
Generated at Mon Mar 2 17:15:27 2026 by rpki-client