Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/ff5b83-9c20-4d97-97c7-5a1d5584378d/1/GsJFbHD4qqU72JQP4j8Tz6Jw50g.mft
File: GsJFbHD4qqU72JQP4j8Tz6Jw50g.mft (raw, json)
Hash identifier: TDmTXQuZL+WZdaHia0Y9WlUzJIgecks1vMh1oaE+KqY=
Subject key identifier: B0:8C:CA:6E:0E:95:A2:80:D4:78:21:96:72:F2:B8:E9:E8:92:5F:5A
Authority key identifier: 1A:C2:45:6C:70:F8:AA:A5:3B:D8:94:0F:E2:3F:13:CF:A2:70:E7:48
Certificate issuer: /CN=1ac2456c70f8aaa53bd8940fe23f13cfa270e748
Certificate serial: 019CAD2269A4CE81B1C08FDCA07C0D4D83D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GsJFbHD4qqU72JQP4j8Tz6Jw50g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/ff5b83-9c20-4d97-97c7-5a1d5584378d/1/GsJFbHD4qqU72JQP4j8Tz6Jw50g.mft
Manifest number: 0BA7
Signing time: Mon 02 Mar 2026 06:00:39 +0000
Manifest this update: Mon 02 Mar 2026 06:00:39 +0000
Manifest next update: Tue 03 Mar 2026 06:00:39 +0000
Files and hashes: 1: GsJFbHD4qqU72JQP4j8Tz6Jw50g.crl (hash: xDbFiuHPLoawm37lc2mbrNPXwQsfyBOzIImDPMgWlGg=)
2: xyNMPOjdSXVrOkDnqACX6hpPikY.roa (hash: GWpndT2t/1Gpwi+SLRm0phgKLCkd6P4JAMgA+uJmCIQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/ff5b83-9c20-4d97-97c7-5a1d5584378d/1/GsJFbHD4qqU72JQP4j8Tz6Jw50g.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/ff5b83-9c20-4d97-97c7-5a1d5584378d/1/GsJFbHD4qqU72JQP4j8Tz6Jw50g.mft
rsync://rpki.ripe.net/repository/DEFAULT/GsJFbHD4qqU72JQP4j8Tz6Jw50g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:69:a4:ce:81:b1:c0:8f:dc:a0:7c:0d:4d:83:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ac2456c70f8aaa53bd8940fe23f13cfa270e748
Validity
Not Before: Mar 2 06:00:39 2026 GMT
Not After : Mar 3 06:00:39 2026 GMT
Subject: CN=b08cca6e0e95a280d478219672f2b8e9e8925f5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:34:e3:61:5e:f7:39:e3:2d:58:da:aa:7d:91:
7f:31:cb:29:03:74:03:37:ed:75:1e:7c:c4:80:74:
0f:a8:ce:2e:c0:86:91:2e:84:90:5c:73:80:23:04:
02:b4:0a:19:19:e3:65:70:ce:dd:7d:3e:1c:42:c7:
98:53:65:d3:2a:a9:ad:2b:9e:81:75:fb:7d:4b:67:
ef:36:1b:d4:17:c5:3d:8f:6a:ee:40:3e:10:46:6d:
e6:bc:b9:3d:b0:43:3b:0a:85:17:70:cc:c1:71:c3:
7b:86:f8:d2:c0:19:28:bf:a3:39:fa:b7:8e:59:b0:
36:8c:1c:92:14:2c:10:7b:a8:15:8a:52:12:04:35:
35:be:8a:e2:a7:df:c3:54:98:a7:e3:4b:c2:d5:b9:
21:d5:b4:fe:84:3d:de:46:40:45:57:5d:25:fd:1b:
ca:d1:4e:77:0b:96:f1:6a:21:3c:ba:dd:09:bf:49:
88:8c:4f:18:fd:f7:7f:ba:1a:06:ba:14:97:77:c9:
75:14:e4:09:e9:d0:ea:df:b9:47:f0:71:e6:31:a6:
1f:da:dd:63:e7:62:ef:28:70:b0:a4:6b:ce:4f:93:
6e:64:a9:5f:58:74:1c:ca:0a:82:ff:5e:c4:35:b1:
5e:54:6d:29:90:97:f0:36:f6:4e:f8:ce:f5:04:7e:
06:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:8C:CA:6E:0E:95:A2:80:D4:78:21:96:72:F2:B8:E9:E8:92:5F:5A
X509v3 Authority Key Identifier:
keyid:1A:C2:45:6C:70:F8:AA:A5:3B:D8:94:0F:E2:3F:13:CF:A2:70:E7:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GsJFbHD4qqU72JQP4j8Tz6Jw50g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/ff5b83-9c20-4d97-97c7-5a1d5584378d/1/GsJFbHD4qqU72JQP4j8Tz6Jw50g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/ff5b83-9c20-4d97-97c7-5a1d5584378d/1/GsJFbHD4qqU72JQP4j8Tz6Jw50g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:49:01:ab:04:27:2a:0b:4e:4f:06:3e:01:e2:25:75:67:ba:
6d:dd:c7:b5:24:90:2f:e3:a1:35:48:64:7f:d0:0d:13:08:d3:
ff:22:93:1d:01:85:ca:24:0e:75:6e:c4:33:11:87:93:e5:ff:
5d:5d:1b:56:9a:66:48:f9:37:12:ff:49:8b:91:2d:2e:43:d5:
fe:bb:34:51:8c:26:45:0a:3d:95:e6:9a:3e:39:c2:53:74:fa:
7c:6d:29:22:e7:c4:6b:58:9c:54:88:7b:71:ba:dc:53:90:65:
91:ce:a6:dd:8a:50:20:d6:e1:0a:fb:43:05:4c:88:28:87:4c:
d1:11:a1:3a:e7:73:04:36:ad:71:13:52:2e:0b:39:2c:59:46:
4b:5f:02:ab:c7:14:dc:61:07:b2:8d:d2:9d:c0:3d:7a:26:8a:
4a:d6:d5:5e:bc:4c:e9:c8:86:4e:17:07:4b:c2:02:64:40:a9:
e1:fc:15:8d:2a:ad:cb:9f:08:a8:97:47:8a:de:d8:69:9b:ca:
69:be:85:0c:64:6a:71:ed:f8:54:1d:e0:3a:c3:73:8a:55:29:
1d:04:af:58:5c:55:d2:27:51:15:21:42:40:fe:80:61:02:f4:
a8:35:af:39:49:0d:01:c5:ed:7f:06:3b:c0:23:79:7d:0a:fd:
a4:cc:6b:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytImmkzoGxwI/coHwNTYPWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhYzI0NTZjNzBmOGFhYTUzYmQ4OTQwZmUyM2YxM2NmYTI3
MGU3NDgwHhcNMjYwMzAyMDYwMDM5WhcNMjYwMzAzMDYwMDM5WjAzMTEwLwYDVQQD
EyhiMDhjY2E2ZTBlOTVhMjgwZDQ3ODIxOTY3MmYyYjhlOWU4OTI1ZjVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDTjYV73OeMtWNqqfZF/McspA3QD
N+11HnzEgHQPqM4uwIaRLoSQXHOAIwQCtAoZGeNlcM7dfT4cQseYU2XTKqmtK56B
dft9S2fvNhvUF8U9j2ruQD4QRm3mvLk9sEM7CoUXcMzBccN7hvjSwBkov6M5+reO
WbA2jBySFCwQe6gVilISBDU1vorip9/DVJin40vC1bkh1bT+hD3eRkBFV10l/RvK
0U53C5bxaiE8ut0Jv0mIjE8Y/fd/uhoGuhSXd8l1FOQJ6dDq37lH8HHmMaYf2t1j
52LvKHCwpGvOT5NuZKlfWHQcygqC/17ENbFeVG0pkJfwNvZO+M71BH4G5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLCMym4OlaKA1HghlnLyuOnokl9aMB8GA1UdIwQY
MBaAFBrCRWxw+KqlO9iUD+I/E8+icOdIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3NKRmJIRDRxcVU3MkpRUDRqOFR6Nkp3NTBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9mZjViODMtOWMyMC00ZDk3LTk3Yzct
NWExZDU1ODQzNzhkLzEvR3NKRmJIRDRxcVU3MkpRUDRqOFR6Nkp3NTBnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9mZjViODMtOWMyMC00ZDk3LTk3YzctNWExZDU1ODQzNzhk
LzEvR3NKRmJIRDRxcVU3MkpRUDRqOFR6Nkp3NTBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV0kBqwQn
KgtOTwY+AeIldWe6bd3HtSSQL+OhNUhkf9ANEwjT/yKTHQGFyiQOdW7EMxGHk+X/
XV0bVppmSPk3Ev9Ji5EtLkPV/rs0UYwmRQo9leaaPjnCU3T6fG0pIufEa1icVIh7
cbrcU5Blkc6m3YpQINbhCvtDBUyIKIdM0RGhOudzBDatcRNSLgs5LFlGS18Cq8cU
3GEHso3SncA9eiaKStbVXrxM6ciGThcHS8ICZECp4fwVjSqty58IqJdHit7YaZvK
ab6FDGRqce34VB3gOsNzilUpHQSvWFxV0idRFSFCQP6AYQL0qDWvOUkNAcXtfwY7
wCN5fQr9pMxrYQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:53:25 2026 by rpki-client