Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b5ff66-807d-4bf1-abe9-a3b4c900241f/1/gMAorQ5g1-qJFLE8OlPY8IkWAxU.mft
File: gMAorQ5g1-qJFLE8OlPY8IkWAxU.mft (raw, json)
Hash identifier: OJ8dRnPzBx54oRcTJ6nWfvLWFAWLMCzau9nGCIUAFOc=
Subject key identifier: C7:92:1D:46:99:06:66:80:C3:BF:61:61:CC:30:55:39:C8:E7:D1:B1
Authority key identifier: 80:C0:28:AD:0E:60:D7:EA:89:14:B1:3C:3A:53:D8:F0:89:16:03:15
Certificate issuer: /CN=80c028ad0e60d7ea8914b13c3a53d8f089160315
Certificate serial: 019CAB344522022C1F259699F573A9E59A6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gMAorQ5g1-qJFLE8OlPY8IkWAxU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/b5ff66-807d-4bf1-abe9-a3b4c900241f/1/gMAorQ5g1-qJFLE8OlPY8IkWAxU.mft
Manifest number: 0F57
Signing time: Sun 01 Mar 2026 21:00:55 +0000
Manifest this update: Sun 01 Mar 2026 21:00:55 +0000
Manifest next update: Mon 02 Mar 2026 21:00:55 +0000
Files and hashes: 1: BP2iTGyVFjoJIRdw7NDIH2tQQA8.roa (hash: P0fFfmYNK2It6Tl9zJcGnv6bBKn+rvutapJMqLPRBXA=)
2: gMAorQ5g1-qJFLE8OlPY8IkWAxU.crl (hash: n/eINbOtaZWEnruaaMlG2LVLqwOSPPri6/WH9n4P1CU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/b5ff66-807d-4bf1-abe9-a3b4c900241f/1/gMAorQ5g1-qJFLE8OlPY8IkWAxU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/b5ff66-807d-4bf1-abe9-a3b4c900241f/1/gMAorQ5g1-qJFLE8OlPY8IkWAxU.mft
rsync://rpki.ripe.net/repository/DEFAULT/gMAorQ5g1-qJFLE8OlPY8IkWAxU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:45:22:02:2c:1f:25:96:99:f5:73:a9:e5:9a:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80c028ad0e60d7ea8914b13c3a53d8f089160315
Validity
Not Before: Mar 1 21:00:55 2026 GMT
Not After : Mar 2 21:00:55 2026 GMT
Subject: CN=c7921d4699066680c3bf6161cc305539c8e7d1b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:bb:f6:e4:24:c8:fd:9d:f5:e3:68:6a:ba:19:
98:6a:43:97:1c:45:0e:77:d7:d9:91:3a:67:c2:73:
9f:4e:fe:37:4a:dd:83:42:b6:1a:41:08:4f:90:48:
ce:19:ce:4d:1e:4e:f4:6d:da:fa:30:f6:e2:64:40:
85:c0:e4:5a:0a:a2:66:3f:93:69:7c:f6:f8:86:24:
16:ab:85:3c:12:ae:6a:fb:e8:7d:c1:c4:74:52:07:
cc:a4:57:7b:65:ce:e8:f8:eb:a9:78:5d:6c:68:53:
5d:d5:de:51:b0:62:5b:f2:74:3c:9d:1f:7c:db:56:
47:8b:cc:e2:27:87:b0:e1:3f:2d:d4:4e:aa:37:09:
2c:11:02:e6:a0:32:ec:c6:4c:08:8e:f9:ec:85:8b:
1c:9c:11:d2:c1:12:b5:45:35:4b:22:3f:1a:c5:b6:
1c:a6:47:fc:77:28:af:4e:07:b0:3b:b5:79:43:3f:
9d:a5:5f:f3:f9:04:1c:6e:2f:69:4d:96:78:e0:5a:
b5:d0:dc:75:e4:fb:bb:b7:59:65:74:ba:8f:a0:07:
8c:0d:96:ed:7a:2a:27:9c:74:49:85:95:9c:96:54:
dc:05:93:c0:df:0e:52:cb:75:8c:8d:1f:60:9e:4f:
bd:0d:7e:8f:8a:84:35:e7:46:5c:bf:19:b8:5a:20:
e2:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:92:1D:46:99:06:66:80:C3:BF:61:61:CC:30:55:39:C8:E7:D1:B1
X509v3 Authority Key Identifier:
keyid:80:C0:28:AD:0E:60:D7:EA:89:14:B1:3C:3A:53:D8:F0:89:16:03:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gMAorQ5g1-qJFLE8OlPY8IkWAxU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b5ff66-807d-4bf1-abe9-a3b4c900241f/1/gMAorQ5g1-qJFLE8OlPY8IkWAxU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b5ff66-807d-4bf1-abe9-a3b4c900241f/1/gMAorQ5g1-qJFLE8OlPY8IkWAxU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:36:a7:b6:3d:0a:a0:cf:f8:d2:61:13:e6:49:d6:30:23:9f:
76:22:9c:c1:90:68:d0:9d:dd:aa:d0:43:7f:5f:bd:75:1e:1f:
a7:ff:8a:0d:55:68:ff:4e:1f:6e:fa:ae:11:26:a6:c6:68:2d:
39:53:c8:5d:59:da:ec:cf:6e:6e:ed:0f:58:c1:5a:4c:74:7e:
7a:de:18:bf:82:bf:22:dd:94:c8:79:6f:3b:04:42:6b:40:4d:
59:3f:91:6e:01:79:86:c4:5f:50:c0:58:9d:3a:b8:89:b4:30:
55:ca:29:bd:93:4d:fe:dd:44:ef:10:f4:74:6e:d6:d8:6f:78:
10:68:74:f8:bd:22:8e:1c:3b:c4:62:65:67:59:a9:e9:3d:81:
b7:5d:6a:3b:e8:fe:53:15:7a:96:f0:96:d1:d0:24:5a:4b:eb:
b1:29:45:99:93:b1:9b:13:e5:b0:a5:6f:ee:c6:71:a7:82:83:
b3:9b:34:54:6c:d1:d1:ec:c3:18:94:37:63:31:db:81:61:45:
a7:82:07:c6:60:45:4f:2e:18:a4:81:0b:2b:39:71:61:01:1d:
1b:b5:c7:23:c4:b4:f1:5b:46:92:21:e1:a8:b0:af:02:ae:20:
b4:ca:e8:56:b7:01:ee:4c:39:0c:95:80:c2:04:6d:c5:d8:9d:
83:04:85:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrNEUiAiwfJZaZ9XOp5ZpvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwYzAyOGFkMGU2MGQ3ZWE4OTE0YjEzYzNhNTNkOGYwODkx
NjAzMTUwHhcNMjYwMzAxMjEwMDU1WhcNMjYwMzAyMjEwMDU1WjAzMTEwLwYDVQQD
EyhjNzkyMWQ0Njk5MDY2NjgwYzNiZjYxNjFjYzMwNTUzOWM4ZTdkMWIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Lv25CTI/Z3142hquhmYakOXHEUO
d9fZkTpnwnOfTv43St2DQrYaQQhPkEjOGc5NHk70bdr6MPbiZECFwORaCqJmP5Np
fPb4hiQWq4U8Eq5q++h9wcR0UgfMpFd7Zc7o+OupeF1saFNd1d5RsGJb8nQ8nR98
21ZHi8ziJ4ew4T8t1E6qNwksEQLmoDLsxkwIjvnshYscnBHSwRK1RTVLIj8axbYc
pkf8dyivTgewO7V5Qz+dpV/z+QQcbi9pTZZ44Fq10Nx15Pu7t1lldLqPoAeMDZbt
eionnHRJhZWcllTcBZPA3w5Sy3WMjR9gnk+9DX6PioQ150Zcvxm4WiDi7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMeSHUaZBmaAw79hYcwwVTnI59GxMB8GA1UdIwQY
MBaAFIDAKK0OYNfqiRSxPDpT2PCJFgMVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ01Bb3JRNWcxLXFKRkxFOE9sUFk4SWtXQXhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9iNWZmNjYtODA3ZC00YmYxLWFiZTkt
YTNiNGM5MDAyNDFmLzEvZ01Bb3JRNWcxLXFKRkxFOE9sUFk4SWtXQXhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS9iNWZmNjYtODA3ZC00YmYxLWFiZTktYTNiNGM5MDAyNDFm
LzEvZ01Bb3JRNWcxLXFKRkxFOE9sUFk4SWtXQXhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPDantj0K
oM/40mET5knWMCOfdiKcwZBo0J3dqtBDf1+9dR4fp/+KDVVo/04fbvquESamxmgt
OVPIXVna7M9ubu0PWMFaTHR+et4Yv4K/It2UyHlvOwRCa0BNWT+RbgF5hsRfUMBY
nTq4ibQwVcopvZNN/t1E7xD0dG7W2G94EGh0+L0ijhw7xGJlZ1mp6T2Bt11qO+j+
UxV6lvCW0dAkWkvrsSlFmZOxmxPlsKVv7sZxp4KDs5s0VGzR0ezDGJQ3YzHbgWFF
p4IHxmBFTy4YpIELKzlxYQEdG7XHI8S08VtGkiHhqLCvAq4gtMroVrcB7kw5DJWA
wgRtxdidgwSFcw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:40:44 2026 by rpki-client