
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/b582c1-f9c2-4c58-a201-dad18d5b2a3c/1/GcG7P7E2q_QHoKUaSgdlF0_99HQ.mft
File: GcG7P7E2q_QHoKUaSgdlF0_99HQ.mft (raw, json)
Hash identifier: trkGV/MFjHkryR2zyiUYvJRDVlFLp7lXxZLUdUInXtE=
Subject key identifier: DA:CB:2F:87:D6:11:6D:6C:7C:29:61:2C:73:32:EF:AF:C5:C6:E2:5C
Authority key identifier: 19:C1:BB:3F:B1:36:AB:F4:07:A0:A5:1A:4A:07:65:17:4F:FD:F4:74
Certificate issuer: /CN=19c1bb3fb136abf407a0a51a4a0765174ffdf474
Certificate serial: 019CAAC6CEBD62E6F854EFA55A19034A42BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GcG7P7E2q_QHoKUaSgdlF0_99HQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/b582c1-f9c2-4c58-a201-dad18d5b2a3c/1/GcG7P7E2q_QHoKUaSgdlF0_99HQ.mft
Manifest number: 0CF1
Signing time: Sun 01 Mar 2026 19:01:21 +0000
Manifest this update: Sun 01 Mar 2026 19:01:21 +0000
Manifest next update: Mon 02 Mar 2026 19:01:21 +0000
Files and hashes: 1: GcG7P7E2q_QHoKUaSgdlF0_99HQ.crl (hash: hZi3NT3MqinxWd+PmAfLuyawSBHAhdJyzDMz7S6l3no=)
2: bsIvknt5fmmAnWdhXsBu-Ue2-v0.roa (hash: n3XIzhJt5VMAiTGqI1g3v5Vdsn00DFS2DY6O4jjQGxI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/b582c1-f9c2-4c58-a201-dad18d5b2a3c/1/GcG7P7E2q_QHoKUaSgdlF0_99HQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/b582c1-f9c2-4c58-a201-dad18d5b2a3c/1/GcG7P7E2q_QHoKUaSgdlF0_99HQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/GcG7P7E2q_QHoKUaSgdlF0_99HQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:ce:bd:62:e6:f8:54:ef:a5:5a:19:03:4a:42:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19c1bb3fb136abf407a0a51a4a0765174ffdf474
Validity
Not Before: Mar 1 19:01:21 2026 GMT
Not After : Mar 2 19:01:21 2026 GMT
Subject: CN=dacb2f87d6116d6c7c29612c7332efafc5c6e25c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ce:41:e1:b3:8e:f0:86:ea:2d:a6:2a:2e:61:
65:3a:52:97:5b:3c:c0:bd:bf:8f:98:c0:97:59:1e:
75:73:db:1b:10:c8:73:bb:5a:aa:b8:3c:9a:7b:a8:
61:32:b8:1a:55:53:24:e8:70:cf:9d:39:58:d4:ad:
9a:20:ba:79:2c:28:00:74:0a:5c:f2:12:af:e1:b8:
f5:80:1e:73:92:c7:07:03:04:3c:37:96:4b:81:6d:
76:1d:5d:9a:e6:29:a5:4f:7e:fc:90:89:04:28:43:
37:04:3e:eb:1c:46:6f:33:94:47:58:2d:c7:60:0f:
80:52:06:f2:e9:59:aa:b6:c1:1e:0c:ee:c2:cd:3a:
2e:f9:40:ff:a4:fc:92:b8:6d:28:45:80:41:f5:3d:
69:13:a0:28:84:0e:3f:66:3a:d7:5c:94:23:78:11:
9e:dc:e8:5f:cb:49:13:64:d3:48:27:00:3c:44:6e:
28:50:1b:f8:5d:5e:6d:7f:5d:2b:32:64:10:5e:6e:
80:f9:f9:81:fb:77:c0:18:71:dd:39:88:e7:7f:27:
4a:ea:18:ef:a9:ee:6a:b5:9a:5f:f4:75:f3:fa:d5:
5b:f4:4c:0e:7a:39:6b:1f:01:93:24:14:59:b8:46:
bf:82:92:e0:6c:6e:c6:29:06:e4:fa:0a:b8:5d:cf:
10:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:CB:2F:87:D6:11:6D:6C:7C:29:61:2C:73:32:EF:AF:C5:C6:E2:5C
X509v3 Authority Key Identifier:
keyid:19:C1:BB:3F:B1:36:AB:F4:07:A0:A5:1A:4A:07:65:17:4F:FD:F4:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GcG7P7E2q_QHoKUaSgdlF0_99HQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/b582c1-f9c2-4c58-a201-dad18d5b2a3c/1/GcG7P7E2q_QHoKUaSgdlF0_99HQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/b582c1-f9c2-4c58-a201-dad18d5b2a3c/1/GcG7P7E2q_QHoKUaSgdlF0_99HQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:1c:ac:e0:8f:d8:34:e9:5a:cd:2f:d9:1d:43:7f:11:fb:2b:
3c:a2:f4:d0:e6:d5:b1:9a:90:5b:fb:16:78:be:c3:f1:56:a0:
2f:85:df:0e:f5:e3:d9:5d:d8:4b:f1:7d:64:61:6a:00:ed:91:
d5:60:91:c5:91:e0:80:d6:5b:7a:ed:a4:0b:4a:89:95:d1:bb:
52:a0:cc:0a:f3:5d:c3:a6:1c:cb:69:20:b0:f1:35:2f:32:22:
4c:a0:5e:7d:02:ae:b1:2d:f6:39:68:1c:38:0d:e8:ab:c2:d9:
a9:00:db:46:ce:d1:bf:97:42:d3:ec:3d:8c:d3:52:f2:a9:e5:
e4:b8:ba:7d:b7:06:95:ff:f5:fc:3c:fa:2a:cc:9d:95:cb:bb:
89:1d:a9:dd:22:39:be:81:b7:43:c2:08:11:8c:71:7d:3e:e8:
03:b9:4f:f4:2c:4b:59:91:f9:8c:49:ee:bb:7a:d3:de:0a:cb:
6d:71:3f:70:f5:a7:86:42:d6:b0:e3:00:eb:e7:da:9f:81:6d:
98:1e:b1:7c:7c:67:73:41:f8:98:40:ee:5d:9a:5d:75:c5:de:
39:0a:f8:e1:5a:3d:9c:f9:1a:36:69:2f:46:2a:d6:4a:bf:90:
f1:38:f5:14:e9:4a:0c:c4:13:bc:d7:43:25:01:1b:dc:d5:af:
d3:22:eb:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqxs69Yub4VO+lWhkDSkK7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5YzFiYjNmYjEzNmFiZjQwN2EwYTUxYTRhMDc2NTE3NGZm
ZGY0NzQwHhcNMjYwMzAxMTkwMTIxWhcNMjYwMzAyMTkwMTIxWjAzMTEwLwYDVQQD
EyhkYWNiMmY4N2Q2MTE2ZDZjN2MyOTYxMmM3MzMyZWZhZmM1YzZlMjVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkM5B4bOO8IbqLaYqLmFlOlKXWzzA
vb+PmMCXWR51c9sbEMhzu1qquDyae6hhMrgaVVMk6HDPnTlY1K2aILp5LCgAdApc
8hKv4bj1gB5zkscHAwQ8N5ZLgW12HV2a5imlT378kIkEKEM3BD7rHEZvM5RHWC3H
YA+AUgby6VmqtsEeDO7CzTou+UD/pPySuG0oRYBB9T1pE6AohA4/ZjrXXJQjeBGe
3Ohfy0kTZNNIJwA8RG4oUBv4XV5tf10rMmQQXm6A+fmB+3fAGHHdOYjnfydK6hjv
qe5qtZpf9HXz+tVb9EwOejlrHwGTJBRZuEa/gpLgbG7GKQbk+gq4Xc8QeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNrLL4fWEW1sfClhLHMy76/FxuJcMB8GA1UdIwQY
MBaAFBnBuz+xNqv0B6ClGkoHZRdP/fR0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2NHN1A3RTJxX1FIb0tVYVNnZGxGMF85OUhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9iNTgyYzEtZjljMi00YzU4LWEyMDEt
ZGFkMThkNWIyYTNjLzEvR2NHN1A3RTJxX1FIb0tVYVNnZGxGMF85OUhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy9iNTgyYzEtZjljMi00YzU4LWEyMDEtZGFkMThkNWIyYTNj
LzEvR2NHN1A3RTJxX1FIb0tVYVNnZGxGMF85OUhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMxys4I/Y
NOlazS/ZHUN/EfsrPKL00ObVsZqQW/sWeL7D8VagL4XfDvXj2V3YS/F9ZGFqAO2R
1WCRxZHggNZbeu2kC0qJldG7UqDMCvNdw6Ycy2kgsPE1LzIiTKBefQKusS32OWgc
OA3oq8LZqQDbRs7Rv5dC0+w9jNNS8qnl5Li6fbcGlf/1/Dz6Ksydlcu7iR2p3SI5
voG3Q8IIEYxxfT7oA7lP9CxLWZH5jEnuu3rT3grLbXE/cPWnhkLWsOMA6+fan4Ft
mB6xfHxnc0H4mEDuXZpddcXeOQr44Vo9nPkaNmkvRirWSr+Q8Tj1FOlKDMQTvNdD
JQEb3NWv0yLr7Q==
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:56:31 2026 by rpki-client