Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/3975b1-074c-4fd0-9661-d1d6c3f92ffb/1/Gw4VwVrnA6iXkEavXezEky7cf24.mft
File: Gw4VwVrnA6iXkEavXezEky7cf24.mft (raw, json)
Hash identifier: vV5LfFyLsQXM4pz+h0eSsoLTYFgGe6d3LZPsVHO8W9M=
Subject key identifier: B0:3C:0D:9D:A5:15:8E:D9:F4:E7:A2:2B:8E:2A:E5:A6:DD:F6:E2:E0
Authority key identifier: 1B:0E:15:C1:5A:E7:03:A8:97:90:46:AF:5D:EC:C4:93:2E:DC:7F:6E
Certificate issuer: /CN=1b0e15c15ae703a8979046af5decc4932edc7f6e
Certificate serial: 019CAD22C3B87536C0740351922C5C60334B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gw4VwVrnA6iXkEavXezEky7cf24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/3975b1-074c-4fd0-9661-d1d6c3f92ffb/1/Gw4VwVrnA6iXkEavXezEky7cf24.mft
Manifest number: 0989
Signing time: Mon 02 Mar 2026 06:01:02 +0000
Manifest this update: Mon 02 Mar 2026 06:01:02 +0000
Manifest next update: Tue 03 Mar 2026 06:01:02 +0000
Files and hashes: 1: Gw4VwVrnA6iXkEavXezEky7cf24.crl (hash: au/ZQj+KbhGPOe+kerWlhTWdPtGk41Wis97Os4GZieM=)
2: LXtgiz2X-uWCq46JBVRBYRvIQFU.roa (hash: NOLtuvoznBuDmvNkK3zlEF6kLeoyidKik4Tk8XzR8jE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/3975b1-074c-4fd0-9661-d1d6c3f92ffb/1/Gw4VwVrnA6iXkEavXezEky7cf24.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/3975b1-074c-4fd0-9661-d1d6c3f92ffb/1/Gw4VwVrnA6iXkEavXezEky7cf24.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gw4VwVrnA6iXkEavXezEky7cf24.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:c3:b8:75:36:c0:74:03:51:92:2c:5c:60:33:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0e15c15ae703a8979046af5decc4932edc7f6e
Validity
Not Before: Mar 2 06:01:02 2026 GMT
Not After : Mar 3 06:01:02 2026 GMT
Subject: CN=b03c0d9da5158ed9f4e7a22b8e2ae5a6ddf6e2e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:4a:bf:95:8a:8d:28:48:08:2d:6e:d3:5a:fe:
f7:11:7c:c4:de:fd:0f:67:20:e7:a3:b9:d7:99:2b:
1f:27:6c:7d:53:e2:0d:98:d9:1e:70:8f:1e:27:77:
7e:b5:0c:21:d2:89:20:cb:c4:ca:a3:b5:07:4e:21:
a4:22:08:d5:01:9b:87:f2:78:8f:fb:c6:69:ec:a9:
46:0b:5a:ef:09:1f:90:e8:30:3f:0d:ae:d4:b4:39:
b9:64:2f:9e:4b:43:e8:3b:6c:8d:4f:e6:42:3d:a0:
fa:1d:bf:04:0d:91:6d:2c:c4:12:d5:61:8b:2d:60:
11:bd:bc:c9:7c:75:bd:0d:a6:44:ce:5a:99:6e:87:
cc:33:d5:96:07:ab:64:9c:92:57:59:05:b1:fd:c7:
1b:ec:cb:e9:a3:7d:3b:ea:e0:ef:d9:19:e6:18:c8:
4d:a0:37:4b:72:39:3e:cb:c7:b5:60:89:0e:cf:0d:
3f:18:b3:5d:80:a8:0b:b1:60:f6:8b:21:de:3a:8c:
7a:50:4c:20:bc:6b:65:13:92:8e:e6:80:12:27:8e:
a3:27:37:f0:80:d1:bb:cc:8e:6f:64:ee:17:40:d6:
f0:59:a5:c9:84:93:6c:ba:96:45:35:19:03:b9:84:
54:c3:db:5d:e3:b0:02:cc:b5:36:e6:a3:bd:8d:b4:
99:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:3C:0D:9D:A5:15:8E:D9:F4:E7:A2:2B:8E:2A:E5:A6:DD:F6:E2:E0
X509v3 Authority Key Identifier:
keyid:1B:0E:15:C1:5A:E7:03:A8:97:90:46:AF:5D:EC:C4:93:2E:DC:7F:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gw4VwVrnA6iXkEavXezEky7cf24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/3975b1-074c-4fd0-9661-d1d6c3f92ffb/1/Gw4VwVrnA6iXkEavXezEky7cf24.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/3975b1-074c-4fd0-9661-d1d6c3f92ffb/1/Gw4VwVrnA6iXkEavXezEky7cf24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:8f:6f:dd:90:ab:68:34:43:ae:63:a9:a7:60:76:1e:94:b0:
ec:5f:8a:bd:bf:15:6a:a2:f2:51:13:c8:85:11:0d:9d:f8:a1:
f9:f4:d0:70:db:4f:f2:30:c9:3f:b0:ae:9a:19:85:be:1e:39:
4d:34:fc:3e:31:48:3d:6d:fd:76:66:d5:dd:2e:18:30:61:50:
cc:92:fb:e4:c1:41:c6:3a:ec:1b:8d:e5:bf:c0:67:46:ce:f3:
f1:25:84:72:17:a8:a2:50:0a:8e:5c:6a:6c:63:d9:49:f9:3c:
c5:4b:37:af:f3:51:d4:69:95:36:20:24:17:13:7c:dd:a5:e7:
87:e2:64:4d:c4:c1:53:f9:7b:be:29:50:e3:3d:c2:69:ce:47:
5b:f0:d4:f4:e9:96:4c:f5:a4:e1:6d:cb:cb:06:52:ec:9e:1a:
c2:40:ae:2e:14:3a:15:de:d7:ce:b8:cb:f9:db:a6:b1:b2:a0:
5f:b3:cc:82:bf:b7:05:24:61:93:7f:69:f9:f3:51:6b:96:b4:
90:e3:54:8e:1c:94:5d:34:47:5b:af:ee:91:98:a4:7c:43:40:
48:ac:c6:d3:18:ce:62:e3:21:15:50:bc:b0:56:8c:d7:04:43:
f0:ab:c9:4f:de:d9:b7:57:32:2d:61:9b:18:7f:c2:6e:c2:53:
13:0f:39:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytIsO4dTbAdANRkixcYDNLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiMGUxNWMxNWFlNzAzYTg5NzkwNDZhZjVkZWNjNDkzMmVk
YzdmNmUwHhcNMjYwMzAyMDYwMTAyWhcNMjYwMzAzMDYwMTAyWjAzMTEwLwYDVQQD
EyhiMDNjMGQ5ZGE1MTU4ZWQ5ZjRlN2EyMmI4ZTJhZTVhNmRkZjZlMmUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkUq/lYqNKEgILW7TWv73EXzE3v0P
ZyDno7nXmSsfJ2x9U+INmNkecI8eJ3d+tQwh0okgy8TKo7UHTiGkIgjVAZuH8niP
+8Zp7KlGC1rvCR+Q6DA/Da7UtDm5ZC+eS0PoO2yNT+ZCPaD6Hb8EDZFtLMQS1WGL
LWARvbzJfHW9DaZEzlqZbofMM9WWB6tknJJXWQWx/ccb7Mvpo3076uDv2RnmGMhN
oDdLcjk+y8e1YIkOzw0/GLNdgKgLsWD2iyHeOox6UEwgvGtlE5KO5oASJ46jJzfw
gNG7zI5vZO4XQNbwWaXJhJNsupZFNRkDuYRUw9td47ACzLU25qO9jbSZAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLA8DZ2lFY7Z9OeiK44q5abd9uLgMB8GA1UdIwQY
MBaAFBsOFcFa5wOol5BGr13sxJMu3H9uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3c0VndWcm5BNmlYa0VhdlhlekVreTdjZjI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8zOTc1YjEtMDc0Yy00ZmQwLTk2NjEt
ZDFkNmMzZjkyZmZiLzEvR3c0VndWcm5BNmlYa0VhdlhlekVreTdjZjI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC8zOTc1YjEtMDc0Yy00ZmQwLTk2NjEtZDFkNmMzZjkyZmZi
LzEvR3c0VndWcm5BNmlYa0VhdlhlekVreTdjZjI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEY9v3ZCr
aDRDrmOpp2B2HpSw7F+Kvb8VaqLyURPIhRENnfih+fTQcNtP8jDJP7CumhmFvh45
TTT8PjFIPW39dmbV3S4YMGFQzJL75MFBxjrsG43lv8BnRs7z8SWEcheoolAKjlxq
bGPZSfk8xUs3r/NR1GmVNiAkFxN83aXnh+JkTcTBU/l7vilQ4z3Cac5HW/DU9OmW
TPWk4W3LywZS7J4awkCuLhQ6Fd7XzrjL+dumsbKgX7PMgr+3BSRhk39p+fNRa5a0
kONUjhyUXTRHW6/ukZikfENASKzG0xjOYuMhFVC8sFaM1wRD8KvJT97Zt1cyLWGb
GH/CbsJTEw85Lw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:00:07 2026 by rpki-client