Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/1b7d08-92f9-4ed1-b78e-033042e88d18/1/gdTqRN6eWaF8ki9uBBcTu8SvCjM.mft
File: gdTqRN6eWaF8ki9uBBcTu8SvCjM.mft (raw, json)
Hash identifier: 9emC+DNUpnqmeXaDld4+2CeXdK9hpi29kU55swmW5KA=
Subject key identifier: B6:DF:40:99:36:78:74:17:13:0F:5D:9B:49:82:D6:35:8F:4A:D0:1D
Authority key identifier: 81:D4:EA:44:DE:9E:59:A1:7C:92:2F:6E:04:17:13:BB:C4:AF:0A:33
Certificate issuer: /CN=81d4ea44de9e59a17c922f6e041713bbc4af0a33
Certificate serial: 019CAE34F01D2B8739405F18320953DA0154
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gdTqRN6eWaF8ki9uBBcTu8SvCjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/1b7d08-92f9-4ed1-b78e-033042e88d18/1/gdTqRN6eWaF8ki9uBBcTu8SvCjM.mft
Manifest number: 067E
Signing time: Mon 02 Mar 2026 11:00:30 +0000
Manifest this update: Mon 02 Mar 2026 11:00:30 +0000
Manifest next update: Tue 03 Mar 2026 11:00:30 +0000
Files and hashes: 1: gdTqRN6eWaF8ki9uBBcTu8SvCjM.crl (hash: v6c5NVDsftQfyeTw9wbWgOeb71zxZ6Szw/TRVv2PAkQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/1b7d08-92f9-4ed1-b78e-033042e88d18/1/gdTqRN6eWaF8ki9uBBcTu8SvCjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/1b7d08-92f9-4ed1-b78e-033042e88d18/1/gdTqRN6eWaF8ki9uBBcTu8SvCjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/gdTqRN6eWaF8ki9uBBcTu8SvCjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 11:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:34:f0:1d:2b:87:39:40:5f:18:32:09:53:da:01:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81d4ea44de9e59a17c922f6e041713bbc4af0a33
Validity
Not Before: Mar 2 11:00:30 2026 GMT
Not After : Mar 3 11:00:30 2026 GMT
Subject: CN=b6df409936787417130f5d9b4982d6358f4ad01d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:fe:4e:a7:61:fe:0c:eb:71:8f:a9:14:f9:ac:
a5:34:4e:af:7f:d0:6b:cb:04:b9:d5:5f:8f:df:2f:
0d:2c:0f:8a:9b:a3:2f:02:6e:30:c0:8c:2a:8b:6a:
d8:de:74:4f:5a:65:f1:7a:d1:e1:dc:53:b3:bf:d2:
76:98:99:c6:b2:b2:5d:14:94:b4:5d:ed:69:e7:a8:
ed:20:6c:41:2e:1d:31:05:05:0e:d9:70:b6:07:9a:
bb:7e:3d:dd:6e:94:5a:45:c7:38:7f:11:78:3a:69:
7b:7b:f3:d3:6a:5f:89:52:77:97:fb:52:32:d8:8b:
05:85:85:4d:33:76:de:90:5a:c1:4e:d3:3b:ab:fd:
08:0b:2f:f4:44:12:d5:83:f7:8e:2b:7d:ea:24:96:
00:a1:64:94:c9:21:72:5e:f6:3f:f4:bc:8a:ee:52:
fe:40:5a:bf:2f:b1:35:27:d2:7e:b3:3a:dd:b6:55:
a0:93:c8:6a:49:7c:b8:9e:01:b8:19:be:e9:4f:cf:
d8:b0:e2:92:56:65:0f:16:fb:04:6e:1f:70:d4:29:
93:d4:f9:34:3c:44:b0:95:30:26:d4:57:4b:43:9e:
74:b4:2e:de:cb:85:5f:e0:cb:06:3d:25:4b:6c:a1:
b8:22:93:06:95:3f:e3:af:e6:c2:7f:1f:e4:83:c8:
ed:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:DF:40:99:36:78:74:17:13:0F:5D:9B:49:82:D6:35:8F:4A:D0:1D
X509v3 Authority Key Identifier:
keyid:81:D4:EA:44:DE:9E:59:A1:7C:92:2F:6E:04:17:13:BB:C4:AF:0A:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gdTqRN6eWaF8ki9uBBcTu8SvCjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/1b7d08-92f9-4ed1-b78e-033042e88d18/1/gdTqRN6eWaF8ki9uBBcTu8SvCjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/1b7d08-92f9-4ed1-b78e-033042e88d18/1/gdTqRN6eWaF8ki9uBBcTu8SvCjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:3b:9f:61:a7:c8:5f:15:63:c5:f0:bb:ec:f8:ff:48:31:ea:
dc:f4:8b:d4:2f:fb:ae:ca:2b:3c:8a:dc:ef:3c:10:2e:4d:f5:
cb:eb:da:87:06:55:b7:6a:b2:c5:17:f0:78:4f:74:56:b4:6d:
38:0e:3a:95:46:9a:01:e7:0e:da:43:5f:7c:9b:13:ca:04:7b:
12:63:ab:52:22:c0:fe:e8:99:73:98:02:f9:ad:5a:3c:7f:34:
84:e6:c1:3f:93:7b:d0:11:61:a7:9d:44:50:f4:86:6f:fa:2e:
24:c1:ce:f4:f0:14:b7:9c:fe:85:cb:39:e7:5a:2f:39:fb:ce:
af:84:44:80:e5:de:49:8a:b5:eb:22:01:b1:c9:24:7a:a4:86:
db:47:fa:a0:73:1c:39:9c:15:dc:40:6e:0f:71:0e:40:87:92:
6e:71:e3:82:d0:99:e8:eb:e6:c7:ec:46:90:5c:5e:c3:2f:b4:
91:71:96:35:f3:bc:8a:71:16:3e:e0:94:72:f9:d4:e6:e5:a4:
aa:c5:a2:e3:d6:a7:fd:4f:9e:92:b6:2b:ba:9c:8f:fc:2a:57:
03:7e:9d:8e:91:bc:2e:fa:65:41:6c:a6:27:cd:a5:aa:b4:6e:
48:8e:8c:bd:8b:4e:f5:66:eb:8d:ab:ff:85:de:f7:17:17:9b:
97:5c:2e:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyuNPAdK4c5QF8YMglT2gFUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxZDRlYTQ0ZGU5ZTU5YTE3YzkyMmY2ZTA0MTcxM2JiYzRh
ZjBhMzMwHhcNMjYwMzAyMTEwMDMwWhcNMjYwMzAzMTEwMDMwWjAzMTEwLwYDVQQD
EyhiNmRmNDA5OTM2Nzg3NDE3MTMwZjVkOWI0OTgyZDYzNThmNGFkMDFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/5Op2H+DOtxj6kU+aylNE6vf9Br
ywS51V+P3y8NLA+Km6MvAm4wwIwqi2rY3nRPWmXxetHh3FOzv9J2mJnGsrJdFJS0
Xe1p56jtIGxBLh0xBQUO2XC2B5q7fj3dbpRaRcc4fxF4Oml7e/PTal+JUneX+1Iy
2IsFhYVNM3bekFrBTtM7q/0ICy/0RBLVg/eOK33qJJYAoWSUySFyXvY/9LyK7lL+
QFq/L7E1J9J+szrdtlWgk8hqSXy4ngG4Gb7pT8/YsOKSVmUPFvsEbh9w1CmT1Pk0
PESwlTAm1FdLQ550tC7ey4Vf4MsGPSVLbKG4IpMGlT/jr+bCfx/kg8jtUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLbfQJk2eHQXEw9dm0mC1jWPStAdMB8GA1UdIwQY
MBaAFIHU6kTenlmhfJIvbgQXE7vErwozMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2RUcVJONmVXYUY4a2k5dUJCY1R1OFN2Q2pNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC8xYjdkMDgtOTJmOS00ZWQxLWI3OGUt
MDMzMDQyZTg4ZDE4LzEvZ2RUcVJONmVXYUY4a2k5dUJCY1R1OFN2Q2pNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC8xYjdkMDgtOTJmOS00ZWQxLWI3OGUtMDMzMDQyZTg4ZDE4
LzEvZ2RUcVJONmVXYUY4a2k5dUJCY1R1OFN2Q2pNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVDufYafI
XxVjxfC77Pj/SDHq3PSL1C/7rsorPIrc7zwQLk31y+vahwZVt2qyxRfweE90VrRt
OA46lUaaAecO2kNffJsTygR7EmOrUiLA/uiZc5gC+a1aPH80hObBP5N70BFhp51E
UPSGb/ouJMHO9PAUt5z+hcs551ovOfvOr4REgOXeSYq16yIBsckkeqSG20f6oHMc
OZwV3EBuD3EOQIeSbnHjgtCZ6Ovmx+xGkFxewy+0kXGWNfO8inEWPuCUcvnU5uWk
qsWi49an/U+ekrYrupyP/CpXA36djpG8LvplQWymJ82lqrRuSI6MvYtO9Wbrjav/
hd73Fxebl1wuPg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 18:08:30 2026 by rpki-client