Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/06970a-2866-489d-b71a-84e6cd2232ac/1/_GpMWV8LLdBaH-Zyh8E84OvICts.mft
File: _GpMWV8LLdBaH-Zyh8E84OvICts.mft (raw, json)
Hash identifier: 3E/b75xwM/mlDipeJ09BT1Ec0RO2K7sdV8FehB38moM=
Subject key identifier: BF:6C:C4:98:AA:05:9D:3D:50:C0:08:F9:1F:81:80:2A:71:D9:D1:93
Authority key identifier: FC:6A:4C:59:5F:0B:2D:D0:5A:1F:E6:72:87:C1:3C:E0:EB:C8:0A:DB
Certificate issuer: /CN=fc6a4c595f0b2dd05a1fe67287c13ce0ebc80adb
Certificate serial: 019CABD9FF69F184039463654ED93DA943EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_GpMWV8LLdBaH-Zyh8E84OvICts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/06970a-2866-489d-b71a-84e6cd2232ac/1/_GpMWV8LLdBaH-Zyh8E84OvICts.mft
Manifest number: 1847
Signing time: Mon 02 Mar 2026 00:01:56 +0000
Manifest this update: Mon 02 Mar 2026 00:01:56 +0000
Manifest next update: Tue 03 Mar 2026 00:01:56 +0000
Files and hashes: 1: NLoNNi5CjHst33m7ywBlAPo2j9g.roa (hash: fKsxjWS8XzZz8fe3QPRIR0J9BUvOdRhlN77VHIREw+U=)
2: _GpMWV8LLdBaH-Zyh8E84OvICts.crl (hash: seHoZ5/sQfYOsn6vUNh9q3jmFxkIz+RZyDikoBsQUHE=)
3: ieUGguqrKvcNhkrMXAP72jx_K8Q.roa (hash: FH+hfr4zdjk2044475wgvLS1qj40hiexUTsIxUjhke0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/06970a-2866-489d-b71a-84e6cd2232ac/1/_GpMWV8LLdBaH-Zyh8E84OvICts.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/06970a-2866-489d-b71a-84e6cd2232ac/1/_GpMWV8LLdBaH-Zyh8E84OvICts.mft
rsync://rpki.ripe.net/repository/DEFAULT/_GpMWV8LLdBaH-Zyh8E84OvICts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:ff:69:f1:84:03:94:63:65:4e:d9:3d:a9:43:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc6a4c595f0b2dd05a1fe67287c13ce0ebc80adb
Validity
Not Before: Mar 2 00:01:56 2026 GMT
Not After : Mar 3 00:01:56 2026 GMT
Subject: CN=bf6cc498aa059d3d50c008f91f81802a71d9d193
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f5:d7:6a:4f:24:de:2e:cb:d9:af:58:91:99:
f9:ab:88:1e:60:d6:a7:be:1a:45:37:03:2b:8b:33:
2e:cb:cc:4a:8d:a8:03:e6:eb:fd:35:18:fa:b8:6c:
11:3e:87:09:cb:00:f0:ee:dd:b2:7d:06:01:0e:e2:
53:6c:d3:46:ce:b2:3f:84:91:06:57:2c:22:26:08:
05:f7:5d:b6:6d:6b:89:82:5b:c6:b5:12:d5:7e:54:
b0:43:bb:74:1f:93:70:24:19:f4:75:c2:ff:5b:e1:
f6:71:c6:4f:34:f3:28:86:e2:c6:4b:63:f9:08:3a:
d4:e4:f6:25:8f:92:ad:51:31:95:6f:9d:cf:d9:06:
e9:34:cb:9e:1c:24:98:18:1c:d7:17:20:ca:ee:03:
74:6b:af:0a:9b:d0:4d:13:97:75:f0:ae:f5:23:3f:
02:e1:74:da:ee:9e:d1:48:3f:f5:6a:fe:8e:5f:25:
51:d1:78:f8:c9:31:9b:3b:bf:e2:3b:c5:04:f9:c9:
62:30:06:5a:96:41:e7:69:83:5f:e5:07:2a:51:fc:
83:a8:dc:f0:7d:61:46:8c:45:5c:50:9d:fb:44:54:
a0:f3:ef:79:cc:f7:c2:a1:36:aa:1f:7e:f3:48:ea:
f4:89:83:5c:a7:89:c8:d5:96:d0:bd:69:16:c9:87:
fc:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:6C:C4:98:AA:05:9D:3D:50:C0:08:F9:1F:81:80:2A:71:D9:D1:93
X509v3 Authority Key Identifier:
keyid:FC:6A:4C:59:5F:0B:2D:D0:5A:1F:E6:72:87:C1:3C:E0:EB:C8:0A:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_GpMWV8LLdBaH-Zyh8E84OvICts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/06970a-2866-489d-b71a-84e6cd2232ac/1/_GpMWV8LLdBaH-Zyh8E84OvICts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/06970a-2866-489d-b71a-84e6cd2232ac/1/_GpMWV8LLdBaH-Zyh8E84OvICts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:06:5e:61:fb:4e:35:70:99:92:61:f3:9e:82:1f:54:e3:f1:
da:3f:11:24:e7:ed:d4:82:46:35:48:52:0f:d1:5c:f1:9f:6f:
9c:80:13:ae:2c:52:0c:57:27:c9:42:03:b9:d0:b1:b0:a2:79:
b9:5a:93:0c:af:a9:f5:79:48:7b:80:85:0d:90:64:0b:e4:7d:
59:ab:ff:26:fc:c6:c4:78:3e:1a:99:9c:a3:2f:ad:46:d0:d2:
ad:17:b7:3d:1d:88:cf:ad:69:79:8d:40:95:53:ae:30:a7:28:
a7:0e:89:dc:e3:e6:32:99:72:33:1e:99:6f:1f:53:de:16:11:
a6:94:20:fb:48:09:a1:f9:2e:4d:10:35:dc:e3:fd:af:54:c7:
af:6b:31:cd:47:a2:5e:c2:91:6c:77:65:42:ca:53:82:de:f5:
30:dc:b7:3d:96:02:8c:63:41:99:9f:49:a8:b5:35:a9:7e:0a:
3b:55:9d:fd:59:80:81:88:14:24:c9:14:ae:62:da:c2:1a:c6:
a1:e6:51:ae:11:6b:72:0a:50:1d:17:ba:00:97:d8:11:5e:71:
79:90:f5:bf:0a:0c:0f:55:01:79:c9:c4:ad:dc:46:4f:e6:cf:
f5:82:41:3d:b1:37:50:e0:6f:e6:80:09:35:41:91:97:23:65:
4f:d4:30:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2f9p8YQDlGNlTtk9qUPsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjNmE0YzU5NWYwYjJkZDA1YTFmZTY3Mjg3YzEzY2UwZWJj
ODBhZGIwHhcNMjYwMzAyMDAwMTU2WhcNMjYwMzAzMDAwMTU2WjAzMTEwLwYDVQQD
EyhiZjZjYzQ5OGFhMDU5ZDNkNTBjMDA4ZjkxZjgxODAyYTcxZDlkMTkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/XXak8k3i7L2a9YkZn5q4geYNan
vhpFNwMrizMuy8xKjagD5uv9NRj6uGwRPocJywDw7t2yfQYBDuJTbNNGzrI/hJEG
VywiJggF9122bWuJglvGtRLVflSwQ7t0H5NwJBn0dcL/W+H2ccZPNPMohuLGS2P5
CDrU5PYlj5KtUTGVb53P2QbpNMueHCSYGBzXFyDK7gN0a68Km9BNE5d18K71Iz8C
4XTa7p7RSD/1av6OXyVR0Xj4yTGbO7/iO8UE+cliMAZalkHnaYNf5QcqUfyDqNzw
fWFGjEVcUJ37RFSg8+95zPfCoTaqH37zSOr0iYNcp4nI1ZbQvWkWyYf8+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL9sxJiqBZ09UMAI+R+BgCpx2dGTMB8GA1UdIwQY
MBaAFPxqTFlfCy3QWh/mcofBPODryArbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0dwTVdWOExMZEJhSC1aeWg4RTg0T3ZJQ3RzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8wNjk3MGEtMjg2Ni00ODlkLWI3MWEt
ODRlNmNkMjIzMmFjLzEvX0dwTVdWOExMZEJhSC1aeWg4RTg0T3ZJQ3RzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi8wNjk3MGEtMjg2Ni00ODlkLWI3MWEtODRlNmNkMjIzMmFj
LzEvX0dwTVdWOExMZEJhSC1aeWg4RTg0T3ZJQ3RzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASQZeYftO
NXCZkmHznoIfVOPx2j8RJOft1IJGNUhSD9Fc8Z9vnIATrixSDFcnyUIDudCxsKJ5
uVqTDK+p9XlIe4CFDZBkC+R9Wav/JvzGxHg+Gpmcoy+tRtDSrRe3PR2Iz61peY1A
lVOuMKcopw6J3OPmMplyMx6Zbx9T3hYRppQg+0gJofkuTRA13OP9r1THr2sxzUei
XsKRbHdlQspTgt71MNy3PZYCjGNBmZ9JqLU1qX4KO1Wd/VmAgYgUJMkUrmLawhrG
oeZRrhFrcgpQHRe6AJfYEV5xeZD1vwoMD1UBecnErdxGT+bP9YJBPbE3UOBv5oAJ
NUGRlyNlT9QwJg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:41:55 2026 by rpki-client