Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a30194-e74f-456b-891f-68a4153450b1/1/gP-4grVdAkWUCj414a3dU6esf-Y.mft
File: gP-4grVdAkWUCj414a3dU6esf-Y.mft (raw, json)
Hash identifier: InJSSfpFBbuEYlUK3d45ayN6YrP50UleX0wO+dgV41k=
Subject key identifier: 69:93:EF:C7:83:86:14:B0:66:15:76:DC:EC:EE:94:16:D2:93:95:24
Authority key identifier: 80:FF:B8:82:B5:5D:02:45:94:0A:3E:35:E1:AD:DD:53:A7:AC:7F:E6
Certificate issuer: /CN=80ffb882b55d0245940a3e35e1addd53a7ac7fe6
Certificate serial: 019CB05AEA0184554E02CA9E2745C59B98EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gP-4grVdAkWUCj414a3dU6esf-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a30194-e74f-456b-891f-68a4153450b1/1/gP-4grVdAkWUCj414a3dU6esf-Y.mft
Manifest number: 98
Signing time: Mon 02 Mar 2026 21:01:13 +0000
Manifest this update: Mon 02 Mar 2026 21:01:13 +0000
Manifest next update: Tue 03 Mar 2026 21:01:13 +0000
Files and hashes: 1: gP-4grVdAkWUCj414a3dU6esf-Y.crl (hash: WxbAkne0JnMYvw/WKkpYnHN6mpWuJepJyEPPfZyW3Pk=)
2: ghkZqiRBYP7F8aWdqRde-YlWVwI.roa (hash: D1th9djUsHfufM7g4Iy1vOHC4rWVpb4G82R0TUpgdcQ=)
3: uwzrkDAt1bWbxPHQL77n6ueMwTQ.roa (hash: v6tCrn+4VuGO560AfCeDjuj3YGlPBrSypyg+OiqsxoM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/a30194-e74f-456b-891f-68a4153450b1/1/gP-4grVdAkWUCj414a3dU6esf-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/a30194-e74f-456b-891f-68a4153450b1/1/gP-4grVdAkWUCj414a3dU6esf-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/gP-4grVdAkWUCj414a3dU6esf-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 21:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b0:5a:ea:01:84:55:4e:02:ca:9e:27:45:c5:9b:98:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80ffb882b55d0245940a3e35e1addd53a7ac7fe6
Validity
Not Before: Mar 2 21:01:13 2026 GMT
Not After : Mar 3 21:01:13 2026 GMT
Subject: CN=6993efc7838614b0661576dcecee9416d2939524
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:2a:37:2e:c2:8d:25:79:15:df:ee:21:05:69:
35:22:86:2f:32:16:a9:96:ce:7a:cc:52:cd:96:19:
26:70:3f:f6:92:f4:11:70:f7:3a:88:67:fc:61:8c:
9b:6c:bc:61:7d:65:9c:ba:e2:54:ae:90:46:df:29:
8f:ea:78:58:be:2c:1a:72:d6:f9:be:e9:10:61:10:
c3:29:39:be:4d:7d:9e:09:03:89:79:20:97:36:fa:
3a:b3:b1:67:6a:ed:08:88:32:11:45:b8:57:bd:ca:
29:83:fd:0f:20:27:a8:0c:ba:9f:54:b0:c8:e1:15:
69:2a:30:d1:a7:60:53:24:d1:29:1d:c3:36:3b:ef:
3d:ac:e3:d0:35:8a:85:b0:6d:10:52:23:f7:39:b0:
80:13:91:e2:77:77:84:c2:96:bc:43:c5:ba:c3:c6:
31:66:7d:fa:85:6f:af:6f:3e:3f:d2:83:80:27:fc:
b7:d5:c4:8c:b3:b9:70:1d:8f:ca:5e:13:52:59:9a:
63:c9:86:08:2a:a0:8e:e7:df:b2:c4:55:b2:21:17:
08:12:f6:f2:a0:34:e5:2e:e9:c9:6e:e0:06:98:1d:
fc:93:48:d9:dd:74:54:da:03:3a:bf:e4:20:86:dd:
86:0e:0b:9a:54:22:d9:0c:f5:6c:48:90:4f:31:aa:
4f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:93:EF:C7:83:86:14:B0:66:15:76:DC:EC:EE:94:16:D2:93:95:24
X509v3 Authority Key Identifier:
keyid:80:FF:B8:82:B5:5D:02:45:94:0A:3E:35:E1:AD:DD:53:A7:AC:7F:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gP-4grVdAkWUCj414a3dU6esf-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a30194-e74f-456b-891f-68a4153450b1/1/gP-4grVdAkWUCj414a3dU6esf-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a30194-e74f-456b-891f-68a4153450b1/1/gP-4grVdAkWUCj414a3dU6esf-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d6:2f:2e:2a:b0:96:75:1f:e0:12:62:b9:93:fb:30:be:d2:b0:
9a:88:33:5f:8f:49:57:39:cf:df:ed:2c:8b:02:25:45:3d:90:
6b:74:f3:9d:de:c5:77:bf:97:ae:6a:4b:6f:57:45:f4:1c:b5:
44:5d:01:8f:df:7a:7a:60:66:97:40:b4:72:9d:9d:a0:70:9e:
70:03:7e:78:0d:42:e3:32:d0:98:64:fb:95:a5:e7:cb:c0:ad:
f5:2d:bd:ae:0d:b4:78:82:37:5f:54:4a:b4:1e:aa:9d:07:cf:
9e:7a:fc:f4:9a:9a:fc:61:d6:f3:c6:c1:9f:00:e3:84:38:d6:
2c:7c:2b:9e:62:0e:ee:5c:4f:16:99:37:2a:3d:04:d8:11:8f:
e0:08:50:43:ce:b7:d9:4a:1f:42:b2:6b:33:fc:ff:48:59:6e:
f4:55:04:f5:01:36:f8:90:4c:4b:b9:0b:f6:c6:0c:81:95:4d:
e7:2d:4a:e2:ad:71:17:2f:0a:c6:36:5a:2d:52:75:f4:af:df:
ce:e4:b1:cf:1f:d3:eb:43:76:34:c9:6f:52:d5:b9:37:86:81:
7a:ba:7a:46:9f:3f:1d:c3:bd:83:ab:87:bf:27:c3:da:f4:d1:
1c:c1:f0:60:0e:eb:3f:b8:99:63:4a:ff:14:c9:82:ae:37:64:
cf:b4:d1:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZywWuoBhFVOAsqeJ0XFm5jrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwZmZiODgyYjU1ZDAyNDU5NDBhM2UzNWUxYWRkZDUzYTdh
YzdmZTYwHhcNMjYwMzAyMjEwMTEzWhcNMjYwMzAzMjEwMTEzWjAzMTEwLwYDVQQD
Eyg2OTkzZWZjNzgzODYxNGIwNjYxNTc2ZGNlY2VlOTQxNmQyOTM5NTI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Co3LsKNJXkV3+4hBWk1IoYvMhap
ls56zFLNlhkmcD/2kvQRcPc6iGf8YYybbLxhfWWcuuJUrpBG3ymP6nhYviwactb5
vukQYRDDKTm+TX2eCQOJeSCXNvo6s7Fnau0IiDIRRbhXvcopg/0PICeoDLqfVLDI
4RVpKjDRp2BTJNEpHcM2O+89rOPQNYqFsG0QUiP3ObCAE5Hid3eEwpa8Q8W6w8Yx
Zn36hW+vbz4/0oOAJ/y31cSMs7lwHY/KXhNSWZpjyYYIKqCO59+yxFWyIRcIEvby
oDTlLunJbuAGmB38k0jZ3XRU2gM6v+Qght2GDguaVCLZDPVsSJBPMapPXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGmT78eDhhSwZhV23OzulBbSk5UkMB8GA1UdIwQY
MBaAFID/uIK1XQJFlAo+NeGt3VOnrH/mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1AtNGdyVmRBa1dVQ2o0MTRhM2RVNmVzZi1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9hMzAxOTQtZTc0Zi00NTZiLTg5MWYt
NjhhNDE1MzQ1MGIxLzEvZ1AtNGdyVmRBa1dVQ2o0MTRhM2RVNmVzZi1ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi9hMzAxOTQtZTc0Zi00NTZiLTg5MWYtNjhhNDE1MzQ1MGIx
LzEvZ1AtNGdyVmRBa1dVQ2o0MTRhM2RVNmVzZi1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1i8uKrCW
dR/gEmK5k/swvtKwmogzX49JVznP3+0siwIlRT2Qa3Tznd7Fd7+XrmpLb1dF9By1
RF0Bj996emBml0C0cp2doHCecAN+eA1C4zLQmGT7laXny8Ct9S29rg20eII3X1RK
tB6qnQfPnnr89Jqa/GHW88bBnwDjhDjWLHwrnmIO7lxPFpk3Kj0E2BGP4AhQQ863
2UofQrJrM/z/SFlu9FUE9QE2+JBMS7kL9sYMgZVN5y1K4q1xFy8KxjZaLVJ19K/f
zuSxzx/T60N2NMlvUtW5N4aBerp6Rp8/HcO9g6uHvyfD2vTRHMHwYA7rP7iZY0r/
FMmCrjdkz7TROg==
-----END CERTIFICATE-----
Generated at Tue Mar 3 02:07:35 2026 by rpki-client