Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/e70295-6c2e-48fb-8fc9-1260a6f3a393/1/GZCLY2kUj088UPFnED96BHjFKUI.mft
File: GZCLY2kUj088UPFnED96BHjFKUI.mft (raw, json)
Hash identifier: F+BjKXwml6BfA8uJIIXUFiZeN6N+TkiljKS5cFeplU4=
Subject key identifier: 08:9F:1C:F3:35:EA:DE:84:15:D4:70:E9:83:82:E6:BF:07:28:FD:D2
Authority key identifier: 19:90:8B:63:69:14:8F:4F:3C:50:F1:67:10:3F:7A:04:78:C5:29:42
Certificate issuer: /CN=19908b6369148f4f3c50f167103f7a0478c52942
Certificate serial: 019CACB51FC5C015B0A77B910D10A8EEEA2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZCLY2kUj088UPFnED96BHjFKUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/e70295-6c2e-48fb-8fc9-1260a6f3a393/1/GZCLY2kUj088UPFnED96BHjFKUI.mft
Manifest number: 1845
Signing time: Mon 02 Mar 2026 04:01:17 +0000
Manifest this update: Mon 02 Mar 2026 04:01:17 +0000
Manifest next update: Tue 03 Mar 2026 04:01:17 +0000
Files and hashes: 1: E2QGn3eEc4YgUK3AVvYhsuz-J_8.roa (hash: wMdtrfklBtkfMKlhkTQEZGLh+FduG0xroz4RyYIx+Jg=)
2: GZCLY2kUj088UPFnED96BHjFKUI.crl (hash: Wk5VetqRuKc697woTiVO3wa6NsOrQ+pFp+FPLcZ+of0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/e70295-6c2e-48fb-8fc9-1260a6f3a393/1/GZCLY2kUj088UPFnED96BHjFKUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/e70295-6c2e-48fb-8fc9-1260a6f3a393/1/GZCLY2kUj088UPFnED96BHjFKUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/GZCLY2kUj088UPFnED96BHjFKUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b5:1f:c5:c0:15:b0:a7:7b:91:0d:10:a8:ee:ea:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19908b6369148f4f3c50f167103f7a0478c52942
Validity
Not Before: Mar 2 04:01:17 2026 GMT
Not After : Mar 3 04:01:17 2026 GMT
Subject: CN=089f1cf335eade8415d470e98382e6bf0728fdd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:6e:b8:dd:b0:9b:94:f0:32:81:4d:c6:f9:9e:
4f:a6:39:1f:d7:9d:d1:7c:bd:d5:0f:8d:86:60:2c:
64:18:e1:08:f6:8b:09:2a:1b:6b:cf:1e:75:c2:da:
1c:42:7b:05:5e:f0:18:1c:54:1a:a8:d1:e4:6e:cc:
d4:77:e7:8e:9c:2c:f5:89:e0:a2:72:0a:1c:e6:4e:
6a:6e:82:0e:86:90:34:88:a5:d4:89:8a:87:e5:90:
01:c3:3d:77:77:44:ae:3c:6f:82:d2:52:ed:7b:6f:
d2:a0:99:72:80:ce:ab:e0:d6:2a:e7:7d:63:34:da:
10:24:d9:94:e7:fe:06:ef:48:cf:3c:53:92:ab:78:
8e:01:6d:9c:4b:94:6b:30:40:0a:2d:3c:20:fc:20:
ab:54:32:89:61:23:ac:73:fc:49:3f:e0:b0:a6:71:
14:f9:c9:d8:5c:3c:c3:9e:a0:40:71:c7:91:e9:e5:
61:5d:db:ed:5e:0c:b5:6c:1b:b3:97:46:a7:7a:c5:
2d:ed:d7:3e:40:dd:2a:d6:cb:96:58:0f:26:3d:0b:
34:60:26:4b:85:66:6c:c5:b1:55:a7:5a:91:bf:41:
25:69:35:b8:ea:c3:c3:80:e0:a3:4c:80:ec:f2:7c:
60:58:66:f7:fa:af:5d:95:d5:a4:eb:9f:70:1c:85:
9b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:9F:1C:F3:35:EA:DE:84:15:D4:70:E9:83:82:E6:BF:07:28:FD:D2
X509v3 Authority Key Identifier:
keyid:19:90:8B:63:69:14:8F:4F:3C:50:F1:67:10:3F:7A:04:78:C5:29:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZCLY2kUj088UPFnED96BHjFKUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/e70295-6c2e-48fb-8fc9-1260a6f3a393/1/GZCLY2kUj088UPFnED96BHjFKUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/e70295-6c2e-48fb-8fc9-1260a6f3a393/1/GZCLY2kUj088UPFnED96BHjFKUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:13:48:57:61:d2:f1:61:5c:e4:8c:ea:6f:05:72:75:70:b8:
6b:6a:06:01:e1:c8:09:03:e8:f8:97:cd:00:c0:8d:93:c4:0d:
5a:a9:31:89:3b:ff:56:06:f9:60:81:62:08:27:84:63:dd:3b:
51:bb:ab:31:ee:0e:f0:29:1f:eb:25:a1:9b:7a:6e:83:ea:1c:
83:6f:10:ea:5c:83:41:a4:65:2d:12:3a:0a:fb:69:35:71:99:
4d:dc:32:4e:74:b0:c5:95:ff:35:ec:87:b1:34:c6:9b:13:71:
c7:50:d7:f5:24:4a:1f:40:72:25:9f:cb:ce:89:17:e2:dc:e2:
0a:f0:63:b1:aa:03:4d:f2:f0:9d:76:c1:97:4b:20:5d:07:c1:
31:4b:6f:07:46:11:49:c8:48:f3:be:ab:21:3c:ac:4d:89:48:
fc:d7:21:27:b8:27:d3:0c:e2:a1:3e:75:6c:af:66:be:77:be:
31:1b:9b:2e:43:1e:47:06:a9:eb:34:7e:ee:18:8b:17:04:f6:
83:71:19:cd:fa:be:d2:62:4d:c8:ab:dd:86:fb:bb:ab:e4:9b:
b1:71:9e:77:01:49:cb:b4:c5:ba:e2:ae:86:28:a0:a0:0f:8b:
d4:bd:e3:67:1f:1a:86:be:ee:97:f4:39:e3:b9:45:a8:4e:d2:
c8:c1:6c:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZystR/FwBWwp3uRDRCo7uouMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5OTA4YjYzNjkxNDhmNGYzYzUwZjE2NzEwM2Y3YTA0Nzhj
NTI5NDIwHhcNMjYwMzAyMDQwMTE3WhcNMjYwMzAzMDQwMTE3WjAzMTEwLwYDVQQD
EygwODlmMWNmMzM1ZWFkZTg0MTVkNDcwZTk4MzgyZTZiZjA3MjhmZGQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5m643bCblPAygU3G+Z5Ppjkf153R
fL3VD42GYCxkGOEI9osJKhtrzx51wtocQnsFXvAYHFQaqNHkbszUd+eOnCz1ieCi
cgoc5k5qboIOhpA0iKXUiYqH5ZABwz13d0SuPG+C0lLte2/SoJlygM6r4NYq531j
NNoQJNmU5/4G70jPPFOSq3iOAW2cS5RrMEAKLTwg/CCrVDKJYSOsc/xJP+CwpnEU
+cnYXDzDnqBAcceR6eVhXdvtXgy1bBuzl0anesUt7dc+QN0q1suWWA8mPQs0YCZL
hWZsxbFVp1qRv0ElaTW46sPDgOCjTIDs8nxgWGb3+q9dldWk659wHIWbmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAifHPM16t6EFdRw6YOC5r8HKP3SMB8GA1UdIwQY
MBaAFBmQi2NpFI9PPFDxZxA/egR4xSlCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1pDTFkya1VqMDg4VVBGbkVEOTZCSGpGS1VJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9lNzAyOTUtNmMyZS00OGZiLThmYzkt
MTI2MGE2ZjNhMzkzLzEvR1pDTFkya1VqMDg4VVBGbkVEOTZCSGpGS1VJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy9lNzAyOTUtNmMyZS00OGZiLThmYzktMTI2MGE2ZjNhMzkz
LzEvR1pDTFkya1VqMDg4VVBGbkVEOTZCSGpGS1VJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiBNIV2HS
8WFc5IzqbwVydXC4a2oGAeHICQPo+JfNAMCNk8QNWqkxiTv/Vgb5YIFiCCeEY907
UburMe4O8Ckf6yWhm3pug+ocg28Q6lyDQaRlLRI6CvtpNXGZTdwyTnSwxZX/NeyH
sTTGmxNxx1DX9SRKH0ByJZ/LzokX4tziCvBjsaoDTfLwnXbBl0sgXQfBMUtvB0YR
SchI876rITysTYlI/NchJ7gn0wzioT51bK9mvne+MRubLkMeRwap6zR+7hiLFwT2
g3EZzfq+0mJNyKvdhvu7q+SbsXGedwFJy7TFuuKuhiigoA+L1L3jZx8ahr7ul/Q5
47lFqE7SyMFsGA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:57:17 2026 by rpki-client