Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/69dc6a-e91e-4b3a-934a-b354b78cc969/1/gQbZlKEhklejzsntkc0Ym8PZOws.mft
File: gQbZlKEhklejzsntkc0Ym8PZOws.mft (raw, json)
Hash identifier: rvhbnkVaURFkpnR7Lj/fS7//Ph3C/l9l/4zcYyZKZoU=
Subject key identifier: B7:A1:12:8D:F2:16:04:09:EE:47:A5:B4:8E:46:39:45:DA:E1:A0:EE
Authority key identifier: 81:06:D9:94:A1:21:92:57:A3:CE:C9:ED:91:CD:18:9B:C3:D9:3B:0B
Certificate issuer: /CN=8106d994a1219257a3cec9ed91cd189bc3d93b0b
Certificate serial: 019CAAC67AC107465D4B0890AD173153905C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gQbZlKEhklejzsntkc0Ym8PZOws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/69dc6a-e91e-4b3a-934a-b354b78cc969/1/gQbZlKEhklejzsntkc0Ym8PZOws.mft
Manifest number: 184A
Signing time: Sun 01 Mar 2026 19:01:00 +0000
Manifest this update: Sun 01 Mar 2026 19:01:00 +0000
Manifest next update: Mon 02 Mar 2026 19:01:00 +0000
Files and hashes: 1: F2IHJrnPyRwbzKo1HP_xqBvLdvQ.roa (hash: FgszxDdrz1FfhJ+T4y5DQNjiDZnx4cEgXP5k1Bjw7eg=)
2: gQbZlKEhklejzsntkc0Ym8PZOws.crl (hash: s61k7nMqzC0SUw/Z659GYTkALgXav0lT6Ph2nia+Sc8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/69dc6a-e91e-4b3a-934a-b354b78cc969/1/gQbZlKEhklejzsntkc0Ym8PZOws.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/69dc6a-e91e-4b3a-934a-b354b78cc969/1/gQbZlKEhklejzsntkc0Ym8PZOws.mft
rsync://rpki.ripe.net/repository/DEFAULT/gQbZlKEhklejzsntkc0Ym8PZOws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:7a:c1:07:46:5d:4b:08:90:ad:17:31:53:90:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8106d994a1219257a3cec9ed91cd189bc3d93b0b
Validity
Not Before: Mar 1 19:01:00 2026 GMT
Not After : Mar 2 19:01:00 2026 GMT
Subject: CN=b7a1128df2160409ee47a5b48e463945dae1a0ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5f:a4:ab:8a:d7:bd:04:8c:3b:6d:17:a7:f8:
47:c2:a3:42:fe:e6:61:cc:00:1c:2e:93:25:53:2c:
d9:49:ed:67:33:60:35:a7:f7:2b:8f:50:21:bd:ea:
f9:76:03:c0:1b:5e:00:e8:1c:22:b9:d2:c6:95:b8:
c9:b1:23:44:87:84:8d:15:55:b2:02:48:52:cd:d6:
65:ae:a2:e8:f8:6c:ab:e9:f8:17:09:5c:07:84:ca:
83:d7:d3:ef:ca:f0:2d:b9:85:e5:8b:0f:07:1f:34:
65:d6:b7:71:21:61:76:29:aa:d4:ff:15:e0:3a:c4:
20:f4:b0:75:6c:08:62:69:03:b5:19:e6:9e:b8:30:
39:c8:b3:a3:ff:ff:20:7a:1e:d4:b9:af:94:3b:49:
77:c7:52:2e:90:2c:a7:48:e0:dc:c3:06:49:2f:1b:
5e:9e:83:1c:ac:90:8a:73:20:d3:f8:b8:86:1f:64:
7c:dc:ff:16:43:c7:3d:91:a1:06:87:05:d2:1e:86:
a0:35:00:d5:da:f7:03:4c:6c:20:66:c8:88:53:32:
35:59:bd:1e:ea:a7:18:f6:62:d6:5a:e6:ce:8c:4c:
d0:9c:60:96:a4:b6:be:8d:b5:26:c4:26:ba:49:6a:
f1:69:2d:59:72:4b:2b:3d:35:82:90:22:64:79:2b:
2b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:A1:12:8D:F2:16:04:09:EE:47:A5:B4:8E:46:39:45:DA:E1:A0:EE
X509v3 Authority Key Identifier:
keyid:81:06:D9:94:A1:21:92:57:A3:CE:C9:ED:91:CD:18:9B:C3:D9:3B:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQbZlKEhklejzsntkc0Ym8PZOws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/69dc6a-e91e-4b3a-934a-b354b78cc969/1/gQbZlKEhklejzsntkc0Ym8PZOws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/69dc6a-e91e-4b3a-934a-b354b78cc969/1/gQbZlKEhklejzsntkc0Ym8PZOws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:4e:d3:b5:3c:bf:9e:e6:45:a9:c1:81:4f:e2:c6:de:1e:5e:
4b:54:bc:9c:d8:a7:b2:38:1b:d1:5b:e9:4f:3d:d6:3c:54:72:
c4:55:44:0f:87:ed:e5:9e:f4:e6:d6:83:3c:16:95:ac:43:9f:
0b:33:0c:51:50:01:ca:1f:37:0a:4f:a0:c1:c0:9c:69:7e:84:
80:76:b4:19:1f:75:01:04:39:51:ad:8f:a2:19:af:29:6d:0d:
92:15:94:0a:9e:12:80:1e:bd:cd:ab:aa:ee:97:e8:e4:fd:ce:
45:91:e1:e6:b5:c7:0a:24:f4:3f:b2:a7:e8:9e:70:be:75:c3:
2d:c2:ee:9e:08:dd:d1:5a:00:9f:7e:84:2c:fe:18:6e:ea:21:
31:d2:e3:a1:29:35:b9:67:9d:d6:16:e2:cb:be:5d:bc:46:b0:
79:67:17:16:a9:0d:fc:dd:60:85:55:f3:06:96:d7:91:61:3d:
2d:64:4e:6e:64:7b:1a:a6:00:ed:dc:4a:77:10:7c:b1:92:59:
7f:72:7c:d5:01:19:bb:9b:0c:20:7e:17:24:46:e4:98:29:f9:
85:9e:a1:53:78:35:2d:f9:e8:ba:8a:50:dd:57:8d:13:74:7e:
25:a0:7a:60:1e:49:b1:1b:d2:de:e0:81:17:f9:bd:62:21:e3:
e8:17:3d:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqxnrBB0ZdSwiQrRcxU5BcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxMDZkOTk0YTEyMTkyNTdhM2NlYzllZDkxY2QxODliYzNk
OTNiMGIwHhcNMjYwMzAxMTkwMTAwWhcNMjYwMzAyMTkwMTAwWjAzMTEwLwYDVQQD
EyhiN2ExMTI4ZGYyMTYwNDA5ZWU0N2E1YjQ4ZTQ2Mzk0NWRhZTFhMGVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1+kq4rXvQSMO20Xp/hHwqNC/uZh
zAAcLpMlUyzZSe1nM2A1p/crj1Ahver5dgPAG14A6BwiudLGlbjJsSNEh4SNFVWy
AkhSzdZlrqLo+Gyr6fgXCVwHhMqD19PvyvAtuYXliw8HHzRl1rdxIWF2KarU/xXg
OsQg9LB1bAhiaQO1GeaeuDA5yLOj//8geh7Uua+UO0l3x1IukCynSODcwwZJLxte
noMcrJCKcyDT+LiGH2R83P8WQ8c9kaEGhwXSHoagNQDV2vcDTGwgZsiIUzI1Wb0e
6qcY9mLWWubOjEzQnGCWpLa+jbUmxCa6SWrxaS1ZcksrPTWCkCJkeSsr5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLehEo3yFgQJ7keltI5GOUXa4aDuMB8GA1UdIwQY
MBaAFIEG2ZShIZJXo87J7ZHNGJvD2TsLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1FiWmxLRWhrbGVqenNudGtjMFltOFBaT3dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy82OWRjNmEtZTkxZS00YjNhLTkzNGEt
YjM1NGI3OGNjOTY5LzEvZ1FiWmxLRWhrbGVqenNudGtjMFltOFBaT3dzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy82OWRjNmEtZTkxZS00YjNhLTkzNGEtYjM1NGI3OGNjOTY5
LzEvZ1FiWmxLRWhrbGVqenNudGtjMFltOFBaT3dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfU7TtTy/
nuZFqcGBT+LG3h5eS1S8nNinsjgb0VvpTz3WPFRyxFVED4ft5Z705taDPBaVrEOf
CzMMUVAByh83Ck+gwcCcaX6EgHa0GR91AQQ5Ua2PohmvKW0NkhWUCp4SgB69zauq
7pfo5P3ORZHh5rXHCiT0P7Kn6J5wvnXDLcLungjd0VoAn36ELP4YbuohMdLjoSk1
uWed1hbiy75dvEaweWcXFqkN/N1ghVXzBpbXkWE9LWRObmR7GqYA7dxKdxB8sZJZ
f3J81QEZu5sMIH4XJEbkmCn5hZ6hU3g1LfnouopQ3VeNE3R+JaB6YB5JsRvS3uCB
F/m9YiHj6Bc9nA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:19:10 2026 by rpki-client