Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.mft
File: gNYIoUEYsajc3eu7QPluzUj4XHE.mft (raw, json)
Hash identifier: Za+t5dl615RK45xBvijbVs7TS18tAhHS6RV/IPSQ3wE=
Subject key identifier: 16:3E:F5:9A:77:97:9C:9D:33:96:2D:1F:A9:E9:66:6D:86:08:1B:FD
Authority key identifier: 80:D6:08:A1:41:18:B1:A8:DC:DD:EB:BB:40:F9:6E:CD:48:F8:5C:71
Certificate issuer: /CN=80d608a14118b1a8dcddebbb40f96ecd48f85c71
Certificate serial: 019CABD8F5C69FD970B650B7BE93C60E3F95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gNYIoUEYsajc3eu7QPluzUj4XHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 00:00:48 +0000
Manifest this update: Mon 02 Mar 2026 00:00:48 +0000
Manifest next update: Tue 03 Mar 2026 00:00:48 +0000
Files and hashes: 1: L4uFGOHvLEPXps89rmc7cieKnGo.roa (hash: WAylc2U6EehO6X6NFUAmv8+wiqpowHD6dwxbr/1OINk=)
2: Wcbt97rneJ6uhU8_PT27jnNgfLI.roa (hash: qSxCnXv18dyEf04PSc7gPJRKdfJ+AzYFyylZthUkbiA=)
3: gNYIoUEYsajc3eu7QPluzUj4XHE.crl (hash: FRD3vA9MfIvFro3L3X+5T7adc6voz+dcS2UVLcacwAE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/gNYIoUEYsajc3eu7QPluzUj4XHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d8:f5:c6:9f:d9:70:b6:50:b7:be:93:c6:0e:3f:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80d608a14118b1a8dcddebbb40f96ecd48f85c71
Validity
Not Before: Mar 2 00:00:48 2026 GMT
Not After : Mar 3 00:00:48 2026 GMT
Subject: CN=163ef59a77979c9d33962d1fa9e9666d86081bfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f3:8e:3f:12:3a:90:0c:f4:c3:1b:b3:14:2d:
16:7d:20:5d:30:9a:09:97:e5:45:ab:52:9c:d9:ce:
73:66:f4:0a:cf:1c:d6:61:15:99:24:d0:3d:08:91:
30:2a:e7:55:a8:a3:77:2b:e2:a8:55:8d:e2:b4:02:
f0:b8:2b:a1:00:6e:a3:51:98:fd:66:5a:6a:f9:5c:
f2:84:02:d0:16:71:16:f7:60:b3:15:88:3e:71:0d:
ab:96:10:62:54:0f:5e:ad:32:cf:f8:f1:cd:fb:df:
fa:4f:e0:0a:91:ba:78:8b:5e:44:08:e0:e0:f7:67:
65:35:a1:29:d6:1b:26:c7:87:c7:fe:cd:e9:86:9d:
77:fa:52:3f:03:cb:a6:76:52:19:32:56:c1:13:9e:
aa:fb:e2:2b:44:69:2f:4a:32:ce:72:15:05:06:7f:
74:cf:ad:58:65:29:ea:03:c6:55:27:61:fe:0c:98:
71:b8:89:42:fb:1b:bd:6a:41:db:86:a6:92:d2:9f:
68:dd:aa:a4:7f:ed:c1:26:62:98:39:4f:4f:d3:d0:
c4:89:44:1a:ad:9e:e0:f6:41:ff:42:64:e0:86:1d:
63:06:f1:ec:0c:62:c1:18:41:7a:1c:fc:e7:30:94:
17:2b:fc:07:a8:13:5f:4c:e9:41:2c:c1:64:d5:4b:
4f:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:3E:F5:9A:77:97:9C:9D:33:96:2D:1F:A9:E9:66:6D:86:08:1B:FD
X509v3 Authority Key Identifier:
keyid:80:D6:08:A1:41:18:B1:A8:DC:DD:EB:BB:40:F9:6E:CD:48:F8:5C:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gNYIoUEYsajc3eu7QPluzUj4XHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:27:40:ff:d6:6c:7b:3e:13:91:ed:63:10:82:7e:5e:55:49:
fe:54:69:dd:11:d7:9b:a6:fa:32:9f:b7:fe:f0:a2:a4:90:0b:
f8:6b:bf:85:43:7c:e7:93:bf:94:4a:df:9d:c2:67:cb:7e:68:
2b:8b:43:5c:07:eb:e5:16:1b:5e:2b:de:57:81:03:de:cc:87:
53:6b:f2:be:1a:7d:1a:2d:e4:cb:47:72:0a:31:c8:22:e1:90:
dd:ed:4c:23:3e:f4:69:12:1a:39:db:15:d5:03:53:ee:f3:26:
a2:18:e5:d1:ad:a2:a9:0e:00:8f:b3:16:d3:2a:49:e6:05:36:
dc:c2:18:a7:bd:14:25:6e:63:77:28:0e:4d:3a:30:16:c6:c4:
02:99:eb:62:8a:b5:a8:4a:12:13:8b:a6:10:46:c7:fb:83:71:
ba:81:cb:3e:be:6f:9b:c0:3c:74:09:e3:98:f1:ed:73:f2:ce:
b9:42:92:57:80:0b:60:47:50:6f:10:5c:4b:1c:71:67:0f:a1:
d2:df:7b:e5:15:e1:79:e6:27:94:82:83:2e:8b:e7:1a:9f:2d:
5e:d8:3f:66:f0:8c:23:0f:18:d2:22:81:25:cf:16:81:ca:c0:
32:25:74:dd:e2:e1:b9:c4:ca:97:10:a2:af:d1:c4:69:20:72:
e1:53:02:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2PXGn9lwtlC3vpPGDj+VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwZDYwOGExNDExOGIxYThkY2RkZWJiYjQwZjk2ZWNkNDhm
ODVjNzEwHhcNMjYwMzAyMDAwMDQ4WhcNMjYwMzAzMDAwMDQ4WjAzMTEwLwYDVQQD
EygxNjNlZjU5YTc3OTc5YzlkMzM5NjJkMWZhOWU5NjY2ZDg2MDgxYmZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfOOPxI6kAz0wxuzFC0WfSBdMJoJ
l+VFq1Kc2c5zZvQKzxzWYRWZJNA9CJEwKudVqKN3K+KoVY3itALwuCuhAG6jUZj9
Zlpq+VzyhALQFnEW92CzFYg+cQ2rlhBiVA9erTLP+PHN+9/6T+AKkbp4i15ECODg
92dlNaEp1hsmx4fH/s3php13+lI/A8umdlIZMlbBE56q++IrRGkvSjLOchUFBn90
z61YZSnqA8ZVJ2H+DJhxuIlC+xu9akHbhqaS0p9o3aqkf+3BJmKYOU9P09DEiUQa
rZ7g9kH/QmTghh1jBvHsDGLBGEF6HPznMJQXK/wHqBNfTOlBLMFk1UtPVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBY+9Zp3l5ydM5YtH6npZm2GCBv9MB8GA1UdIwQY
MBaAFIDWCKFBGLGo3N3ru0D5bs1I+FxxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ05ZSW9VRVlzYWpjM2V1N1FQbHV6VWo0WEhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8wMTIxMzAtODEwMy00YzI1LTkzYmEt
OTkyOGRkM2YyZjgyLzEvZ05ZSW9VRVlzYWpjM2V1N1FQbHV6VWo0WEhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi8wMTIxMzAtODEwMy00YzI1LTkzYmEtOTkyOGRkM2YyZjgy
LzEvZ05ZSW9VRVlzYWpjM2V1N1FQbHV6VWo0WEhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABSdA/9Zs
ez4Tke1jEIJ+XlVJ/lRp3RHXm6b6Mp+3/vCipJAL+Gu/hUN855O/lErfncJny35o
K4tDXAfr5RYbXiveV4ED3syHU2vyvhp9Gi3ky0dyCjHIIuGQ3e1MIz70aRIaOdsV
1QNT7vMmohjl0a2iqQ4Aj7MW0ypJ5gU23MIYp70UJW5jdygOTTowFsbEApnrYoq1
qEoSE4umEEbH+4NxuoHLPr5vm8A8dAnjmPHtc/LOuUKSV4ALYEdQbxBcSxxxZw+h
0t975RXheeYnlIKDLovnGp8tXtg/ZvCMIw8Y0iKBJc8WgcrAMiV03eLhucTKlxCi
r9HEaSBy4VMCdQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:52:43 2026 by rpki-client