Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/900cef-6481-4ff8-8e04-3cb8d817e027/1/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.mft
File: gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.mft (raw, json)
Hash identifier: TfaHfOqeLCcftgRQ8Jcj5CjmXj7XbNVaoJIyHLm5rKc=
Subject key identifier: B0:D8:AF:E6:A6:20:78:8D:AF:EE:07:A6:B0:6B:53:37:D8:F4:02:E1
Authority key identifier: 80:FF:D9:DF:45:6A:DB:E3:B1:E6:61:EE:15:62:68:65:FE:16:88:C8
Certificate issuer: /CN=80ffd9df456adbe3b1e661ee15626865fe1688c8
Certificate serial: 019CAA8FCE41E3D576A15288E5B1885CEB1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/900cef-6481-4ff8-8e04-3cb8d817e027/1/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.mft
Manifest number: 09A3
Signing time: Sun 01 Mar 2026 18:01:17 +0000
Manifest this update: Sun 01 Mar 2026 18:01:17 +0000
Manifest next update: Mon 02 Mar 2026 18:01:17 +0000
Files and hashes: 1: 0sYvu1PO-IyHrG5N2OwGBlK2IA0.roa (hash: NMF2/P9bXnT/asgGcGIGlNxwJHSua/9I79hyE0CwqWk=)
2: HGlsVrHEnVUZTxnltUDYgtbddII.roa (hash: PRTqegkFaXBSmjlIahMPcYyZ0ftS890tO/2pjXR1d6s=)
3: gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.crl (hash: YGGoLwAtKacneW+SQizzaZ0xqRjK+DEs50W4ckyurUc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/900cef-6481-4ff8-8e04-3cb8d817e027/1/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/900cef-6481-4ff8-8e04-3cb8d817e027/1/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.mft
rsync://rpki.ripe.net/repository/DEFAULT/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:ce:41:e3:d5:76:a1:52:88:e5:b1:88:5c:eb:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80ffd9df456adbe3b1e661ee15626865fe1688c8
Validity
Not Before: Mar 1 18:01:17 2026 GMT
Not After : Mar 2 18:01:17 2026 GMT
Subject: CN=b0d8afe6a620788dafee07a6b06b5337d8f402e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:cc:20:4b:6e:6b:1a:db:47:6e:29:a2:b9:11:
52:1d:ea:0e:f7:96:9f:07:d1:16:ca:9a:d1:8f:a8:
f9:aa:48:c4:08:69:02:4f:22:b3:da:33:ff:33:0d:
3a:17:67:30:2d:26:bd:72:7f:38:cb:f6:f3:7b:34:
41:d8:36:38:f7:9d:e2:47:18:43:bc:10:70:36:d2:
82:c9:09:69:2e:ca:65:57:8c:c1:bd:e7:49:7e:c1:
0b:cc:f7:ba:37:91:62:d0:63:b1:61:64:20:65:a6:
f0:ea:6a:e0:27:32:91:da:8e:e1:3f:6c:49:8c:51:
af:4f:b3:58:c3:12:fe:fb:8c:6a:83:5f:57:2e:59:
04:33:c1:e0:bf:98:10:bc:48:c0:1a:1b:da:39:94:
2c:cb:4e:1e:6f:1b:6c:08:26:2b:b8:a1:51:88:73:
4b:eb:d9:bb:2b:a2:42:cd:c2:71:8b:a7:d4:ff:68:
a9:a0:66:63:48:ee:7e:24:e2:99:99:45:4f:f5:59:
83:33:1c:c4:16:c7:49:37:96:b3:d3:9b:b4:b1:07:
f7:9d:a7:06:a5:26:52:b0:76:2c:0b:75:42:a9:96:
5c:6c:e1:fc:a0:4e:e7:e6:09:3c:d3:ba:12:dc:c9:
35:81:1b:af:ed:cd:31:af:de:27:9f:53:42:4e:08:
1a:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:D8:AF:E6:A6:20:78:8D:AF:EE:07:A6:B0:6B:53:37:D8:F4:02:E1
X509v3 Authority Key Identifier:
keyid:80:FF:D9:DF:45:6A:DB:E3:B1:E6:61:EE:15:62:68:65:FE:16:88:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/900cef-6481-4ff8-8e04-3cb8d817e027/1/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/900cef-6481-4ff8-8e04-3cb8d817e027/1/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:b2:d9:80:af:54:ec:31:9e:2d:a6:43:1b:40:a8:47:90:72:
f6:7b:fc:c7:01:a7:83:f2:32:6a:75:ef:3f:b8:04:18:46:84:
72:2c:e9:29:af:0b:ef:93:a0:2a:f1:23:06:6f:e7:79:b6:bb:
b8:73:d9:31:d0:a8:b9:57:5c:28:37:5f:65:3b:73:13:93:20:
bb:f8:3f:70:1b:72:37:c6:15:ea:f8:d8:33:7e:3d:c5:19:d4:
0d:78:9e:03:1e:ba:fe:88:d0:7d:7c:99:b6:67:16:f0:2a:10:
a3:c8:be:c4:af:0d:44:bb:93:26:f8:9e:25:9c:5f:10:dc:66:
54:16:53:cc:a2:32:1f:62:8a:de:3e:56:0b:4f:bb:1f:00:48:
61:3d:9c:83:09:2f:0b:74:3f:e3:f8:df:ec:08:80:44:fe:29:
5c:da:a4:db:53:c9:0a:52:4d:46:43:31:6e:07:c0:60:3d:38:
c0:c5:ac:45:82:6d:ac:92:58:56:ed:66:62:0d:b7:8c:c5:27:
ff:f5:9b:ce:e9:b4:cf:16:ed:ae:04:e1:e1:2f:e4:92:44:59:
e5:0d:92:15:c1:f6:e6:d6:69:73:02:18:f7:35:55:51:e4:21:
1b:49:96:10:0f:61:e0:f4:05:04:6f:73:d8:71:14:f6:13:91:
01:b9:0e:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqj85B49V2oVKI5bGIXOsfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwZmZkOWRmNDU2YWRiZTNiMWU2NjFlZTE1NjI2ODY1ZmUx
Njg4YzgwHhcNMjYwMzAxMTgwMTE3WhcNMjYwMzAyMTgwMTE3WjAzMTEwLwYDVQQD
EyhiMGQ4YWZlNmE2MjA3ODhkYWZlZTA3YTZiMDZiNTMzN2Q4ZjQwMmUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8wgS25rGttHbimiuRFSHeoO95af
B9EWyprRj6j5qkjECGkCTyKz2jP/Mw06F2cwLSa9cn84y/bzezRB2DY4953iRxhD
vBBwNtKCyQlpLsplV4zBvedJfsELzPe6N5Fi0GOxYWQgZabw6mrgJzKR2o7hP2xJ
jFGvT7NYwxL++4xqg19XLlkEM8Hgv5gQvEjAGhvaOZQsy04ebxtsCCYruKFRiHNL
69m7K6JCzcJxi6fU/2ipoGZjSO5+JOKZmUVP9VmDMxzEFsdJN5az05u0sQf3nacG
pSZSsHYsC3VCqZZcbOH8oE7n5gk807oS3Mk1gRuv7c0xr94nn1NCTggaOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLDYr+amIHiNr+4HprBrUzfY9ALhMB8GA1UdIwQY
MBaAFID/2d9FatvjseZh7hViaGX+FojIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1BfWjMwVnEyLU94NW1IdUZXSm9aZjRXaU1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi85MDBjZWYtNjQ4MS00ZmY4LThlMDQt
M2NiOGQ4MTdlMDI3LzEvZ1BfWjMwVnEyLU94NW1IdUZXSm9aZjRXaU1nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi85MDBjZWYtNjQ4MS00ZmY4LThlMDQtM2NiOGQ4MTdlMDI3
LzEvZ1BfWjMwVnEyLU94NW1IdUZXSm9aZjRXaU1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPLLZgK9U
7DGeLaZDG0CoR5By9nv8xwGng/IyanXvP7gEGEaEcizpKa8L75OgKvEjBm/neba7
uHPZMdCouVdcKDdfZTtzE5Mgu/g/cBtyN8YV6vjYM349xRnUDXieAx66/ojQfXyZ
tmcW8CoQo8i+xK8NRLuTJvieJZxfENxmVBZTzKIyH2KK3j5WC0+7HwBIYT2cgwkv
C3Q/4/jf7AiARP4pXNqk21PJClJNRkMxbgfAYD04wMWsRYJtrJJYVu1mYg23jMUn
//Wbzum0zxbtrgTh4S/kkkRZ5Q2SFcH25tZpcwIY9zVVUeQhG0mWEA9h4PQFBG9z
2HEU9hORAbkODA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:57:34 2026 by rpki-client