Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.mft
File: gPq1UNgnot7w1NJhYGFCXC9pTIQ.mft (raw, json)
Hash identifier: UStTa229oSGaWbNERT90PylhwLFTn7zFkzPen2fRCMw=
Subject key identifier: 33:A3:18:5D:79:0C:9B:EC:C0:8E:98:61:E6:83:72:DF:F7:17:DD:8D
Authority key identifier: 80:FA:B5:50:D8:27:A2:DE:F0:D4:D2:61:60:61:42:5C:2F:69:4C:84
Certificate issuer: /CN=80fab550d827a2def0d4d2616061425c2f694c84
Certificate serial: 019FAABE7962F564DF2C370934270D9F5050
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gPq1UNgnot7w1NJhYGFCXC9pTIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.mft
Manifest number: 0D17
Signing time: Tue 28 Jul 2026 22:00:37 +0000
Manifest this update: Tue 28 Jul 2026 22:00:37 +0000
Manifest next update: Wed 29 Jul 2026 22:00:37 +0000
Files and hashes: 1: gPq1UNgnot7w1NJhYGFCXC9pTIQ.crl (hash: zlSQnjI83/+HFWKfs8um36rajiDqpcM2zEGobFK5V1c=)
2: nSdbQEZKwp0Romsqj9nsZ4vQQrg.roa (hash: cAfzjYhPiwZe4Q3nVUxCxa/M+bhIuNdGJn+GlgVFeZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/gPq1UNgnot7w1NJhYGFCXC9pTIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 22:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:be:79:62:f5:64:df:2c:37:09:34:27:0d:9f:50:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80fab550d827a2def0d4d2616061425c2f694c84
Validity
Not Before: Jul 28 22:00:37 2026 GMT
Not After : Jul 29 22:00:37 2026 GMT
Subject: CN=33a3185d790c9becc08e9861e68372dff717dd8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:cf:d6:5e:a8:c9:bc:99:b8:11:48:54:2c:b5:
f0:13:af:63:1d:e8:7f:b5:3b:de:56:b5:d6:10:4f:
ed:4b:7a:d7:12:c4:84:18:09:b6:1a:98:0a:df:9b:
d3:a9:cd:aa:12:be:c4:c5:b5:f6:b9:82:3a:19:24:
35:cb:f6:35:f4:8f:4b:61:19:3c:57:89:87:3e:28:
a9:6b:0e:63:cd:8a:5d:b8:a7:a8:21:f4:91:6e:47:
b8:1a:85:34:5d:79:5c:f5:b9:a1:3c:25:c0:21:87:
7d:31:65:52:d6:40:f7:8b:80:81:74:1e:1e:42:69:
85:c0:b5:a4:18:f6:90:c6:2c:d7:65:89:85:1c:86:
3e:f6:96:d4:3b:b2:99:3f:4c:c0:97:88:b9:86:99:
56:8f:20:90:4b:c7:b2:80:c3:91:f0:a3:e3:40:e0:
7a:ab:02:be:c8:23:0e:d2:16:fc:a2:f3:92:77:dd:
38:dd:0d:89:9c:2f:3a:55:3b:e2:12:c1:36:03:2a:
7d:14:31:71:2a:38:9b:2b:7d:fa:cd:bc:d4:5a:53:
80:aa:cc:b6:dc:60:8f:44:f0:8c:2a:41:09:e2:b3:
09:79:6d:53:cc:68:0e:7c:3a:89:8c:85:fe:87:7d:
f5:d8:23:cf:12:22:0d:14:03:85:c1:6f:34:62:f2:
cb:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:A3:18:5D:79:0C:9B:EC:C0:8E:98:61:E6:83:72:DF:F7:17:DD:8D
X509v3 Authority Key Identifier:
keyid:80:FA:B5:50:D8:27:A2:DE:F0:D4:D2:61:60:61:42:5C:2F:69:4C:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gPq1UNgnot7w1NJhYGFCXC9pTIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:bc:08:88:e3:5f:e2:8b:09:db:3e:b4:21:60:67:33:eb:69:
12:75:e8:88:33:2f:c0:b6:cb:2c:22:46:8a:a2:40:d1:0a:64:
06:35:94:17:1e:8a:5b:ce:b9:fc:bf:16:df:48:c6:95:34:d9:
3e:e4:0c:39:34:8a:13:c7:c5:05:0d:44:33:61:27:3d:93:5e:
35:3e:5a:73:79:dc:0a:47:f5:4a:a9:bb:64:83:46:95:28:bb:
b5:06:dd:34:c3:5a:4d:f4:98:10:bd:0c:ab:48:b0:76:3b:89:
55:3e:25:f6:28:5a:14:1a:6b:f0:ff:a1:bf:5d:8c:42:6e:9d:
c3:08:ae:4f:7a:49:50:53:88:94:fa:6a:f3:f4:be:91:38:79:
79:2a:6c:df:77:d1:5c:53:b8:26:d6:0f:5c:32:a8:cb:6f:ba:
24:53:c8:94:04:0a:5e:11:25:25:f7:4c:46:13:1e:12:1d:50:
51:aa:1f:1c:47:a5:36:e6:9e:30:03:80:eb:b1:34:77:f2:6e:
e7:38:e5:81:15:f6:70:a3:bb:72:b1:ed:1f:c9:63:16:f8:a5:
db:71:65:55:b4:f9:d7:27:c9:4b:44:0c:c7:1b:19:07:54:ab:
fc:20:4f:24:62:24:29:86:0f:f6:07:f0:2a:7e:7f:0f:0c:36:
56:45:ad:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qvnli9WTfLDcJNCcNn1BQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwZmFiNTUwZDgyN2EyZGVmMGQ0ZDI2MTYwNjE0MjVjMmY2
OTRjODQwHhcNMjYwNzI4MjIwMDM3WhcNMjYwNzI5MjIwMDM3WjAzMTEwLwYDVQQD
EygzM2EzMTg1ZDc5MGM5YmVjYzA4ZTk4NjFlNjgzNzJkZmY3MTdkZDhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAks/WXqjJvJm4EUhULLXwE69jHeh/
tTveVrXWEE/tS3rXEsSEGAm2GpgK35vTqc2qEr7ExbX2uYI6GSQ1y/Y19I9LYRk8
V4mHPiipaw5jzYpduKeoIfSRbke4GoU0XXlc9bmhPCXAIYd9MWVS1kD3i4CBdB4e
QmmFwLWkGPaQxizXZYmFHIY+9pbUO7KZP0zAl4i5hplWjyCQS8eygMOR8KPjQOB6
qwK+yCMO0hb8ovOSd9043Q2JnC86VTviEsE2Ayp9FDFxKjibK336zbzUWlOAqsy2
3GCPRPCMKkEJ4rMJeW1TzGgOfDqJjIX+h3312CPPEiINFAOFwW80YvLL+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDOjGF15DJvswI6YYeaDct/3F92NMB8GA1UdIwQY
MBaAFID6tVDYJ6Le8NTSYWBhQlwvaUyEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1BxMVVOZ25vdDd3MU5KaFlHRkNYQzlwVElRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS80YmE1ZmYtNTYyZS00MzU0LTk2MDAt
Zjc2MjkyOWYxZjA4LzEvZ1BxMVVOZ25vdDd3MU5KaFlHRkNYQzlwVElRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS80YmE1ZmYtNTYyZS00MzU0LTk2MDAtZjc2MjkyOWYxZjA4
LzEvZ1BxMVVOZ25vdDd3MU5KaFlHRkNYQzlwVElRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKbwIiONf
4osJ2z60IWBnM+tpEnXoiDMvwLbLLCJGiqJA0QpkBjWUFx6KW865/L8W30jGlTTZ
PuQMOTSKE8fFBQ1EM2EnPZNeNT5ac3ncCkf1Sqm7ZINGlSi7tQbdNMNaTfSYEL0M
q0iwdjuJVT4l9ihaFBpr8P+hv12MQm6dwwiuT3pJUFOIlPpq8/S+kTh5eSps33fR
XFO4JtYPXDKoy2+6JFPIlAQKXhElJfdMRhMeEh1QUaofHEelNuaeMAOA67E0d/Ju
5zjlgRX2cKO7crHtH8ljFvil23FlVbT51yfJS0QMxxsZB1Sr/CBPJGIkKYYP9gfw
Kn5/Dww2VkWtWQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 05:13:57 2026 by rpki-client