Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f2/625ad6-ce2b-4314-ac78-aa5aa6d74b4e/1/gtqmUAcIPsylkSj9XwMdNQMrV0k.mft
File: gtqmUAcIPsylkSj9XwMdNQMrV0k.mft (raw, json)
Hash identifier: YIZUHM0V27TpX9NBtS3H7V9wXgbg9XsHgLhLGdpnsvA=
Subject key identifier: B5:AD:37:4E:A4:3F:91:9F:6F:FB:5D:77:9A:07:25:F3:E8:06:11:DD
Authority key identifier: 82:DA:A6:50:07:08:3E:CC:A5:91:28:FD:5F:03:1D:35:03:2B:57:49
Certificate issuer: /CN=82daa65007083ecca59128fd5f031d35032b5749
Certificate serial: 01A0C66A5F6908A63E435FB736E431558455
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gtqmUAcIPsylkSj9XwMdNQMrV0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/625ad6-ce2b-4314-ac78-aa5aa6d74b4e/1/gtqmUAcIPsylkSj9XwMdNQMrV0k.mft
Manifest number: 0171
Signing time: Tue 22 Sep 2026 00:00:55 +0000
Manifest this update: Tue 22 Sep 2026 00:00:55 +0000
Manifest next update: Wed 23 Sep 2026 00:00:55 +0000
Files and hashes: 1: Qr6lJM203NhFGKZShnscSCdGFno.roa (hash: jbJSkdqG0TP7acpwCoEzRW1DcU+dJ+gbIy2PJggIZmM=)
2: gtqmUAcIPsylkSj9XwMdNQMrV0k.crl (hash: h8OdahGZ8jxqQwqcwUbAG2gaI/srlh5ar3kFpFngqrI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/625ad6-ce2b-4314-ac78-aa5aa6d74b4e/1/gtqmUAcIPsylkSj9XwMdNQMrV0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/625ad6-ce2b-4314-ac78-aa5aa6d74b4e/1/gtqmUAcIPsylkSj9XwMdNQMrV0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/gtqmUAcIPsylkSj9XwMdNQMrV0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:6a:5f:69:08:a6:3e:43:5f:b7:36:e4:31:55:84:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82daa65007083ecca59128fd5f031d35032b5749
Validity
Not Before: Sep 22 00:00:55 2026 GMT
Not After : Sep 23 00:00:55 2026 GMT
Subject: CN=b5ad374ea43f919f6ffb5d779a0725f3e80611dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ba:f8:52:36:91:64:11:f0:05:97:ff:75:ee:
97:49:08:27:fa:d6:ea:64:55:b4:51:99:ce:49:cc:
4a:ca:46:a7:b2:1b:ee:d6:5d:9b:e3:73:f4:df:5a:
85:bc:94:84:d3:3f:1e:bb:b6:0f:4c:1f:7c:2b:12:
f3:64:ed:7c:9b:0d:44:e2:89:d2:24:8d:6a:0b:f9:
8d:53:8a:ec:ec:76:98:8b:ce:49:45:56:35:d4:5a:
62:99:cb:1c:a6:85:e6:06:63:e4:5e:c4:e8:4d:a4:
1c:7a:e1:de:84:23:72:24:95:e9:a2:2a:be:94:b4:
d3:c7:70:59:98:35:da:13:83:ee:95:88:dc:07:e3:
2e:6d:ce:27:6b:77:bc:3c:90:6d:dd:27:7e:0f:5c:
49:2b:5f:6f:44:14:48:1e:f0:ca:f7:71:6b:41:eb:
d7:12:d0:98:70:9c:b6:8f:59:13:5b:df:8a:96:cd:
f0:f8:6b:39:09:ea:5e:b3:9c:28:aa:a7:97:08:2d:
80:e4:a8:2e:10:9e:91:ab:30:bd:a6:b8:58:2b:59:
66:a2:b2:92:2d:7e:40:06:c1:c2:30:35:b2:e6:4d:
39:1c:39:be:d8:6b:de:46:c0:7c:5a:64:10:99:18:
d3:29:b4:97:52:55:c8:89:fa:33:3f:ef:5b:5b:4c:
a4:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:AD:37:4E:A4:3F:91:9F:6F:FB:5D:77:9A:07:25:F3:E8:06:11:DD
X509v3 Authority Key Identifier:
keyid:82:DA:A6:50:07:08:3E:CC:A5:91:28:FD:5F:03:1D:35:03:2B:57:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gtqmUAcIPsylkSj9XwMdNQMrV0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/625ad6-ce2b-4314-ac78-aa5aa6d74b4e/1/gtqmUAcIPsylkSj9XwMdNQMrV0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/625ad6-ce2b-4314-ac78-aa5aa6d74b4e/1/gtqmUAcIPsylkSj9XwMdNQMrV0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:b1:d3:17:56:04:a2:ca:f2:4a:5a:91:41:ee:c2:d4:91:55:
06:da:fe:f9:89:0a:b8:a1:01:75:43:5d:57:f9:39:2c:81:9b:
8b:6d:9e:70:74:73:5f:fd:b0:30:1b:0e:74:54:b1:05:4e:68:
88:30:4d:96:1d:6c:e3:23:09:43:15:9a:f8:5a:7c:ba:37:e6:
ac:b6:ac:e2:ce:d1:0f:10:f0:73:47:c2:38:0f:dd:75:a6:a7:
69:f2:01:1d:85:52:3e:b0:fc:d3:95:23:24:61:12:4c:c1:ef:
56:4d:6c:0f:46:4f:df:9d:26:80:ba:1c:30:75:a2:db:14:8e:
6a:15:c6:e9:01:87:b3:bc:66:6a:83:74:c8:41:8a:a8:c5:b4:
ce:a1:91:aa:32:c7:3e:73:8c:84:90:fe:91:93:80:91:95:ab:
80:88:c9:32:e3:10:19:e5:52:f2:3e:99:e0:66:63:a6:cb:9c:
93:11:48:ad:b1:e9:43:c4:81:ad:e5:68:c4:93:38:ae:69:f6:
ac:73:08:2a:f7:e3:f0:22:b7:0d:d8:74:4e:fa:31:00:1e:b1:
7b:09:af:73:e0:1a:cf:1b:d0:69:7b:32:86:04:01:92:3d:af:
4e:d8:e6:5a:88:77:be:43:85:30:5f:d6:1b:cc:cf:ea:d5:61:
b6:8e:80:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDGal9pCKY+Q1+3NuQxVYRVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyZGFhNjUwMDcwODNlY2NhNTkxMjhmZDVmMDMxZDM1MDMy
YjU3NDkwHhcNMjYwOTIyMDAwMDU1WhcNMjYwOTIzMDAwMDU1WjAzMTEwLwYDVQQD
EyhiNWFkMzc0ZWE0M2Y5MTlmNmZmYjVkNzc5YTA3MjVmM2U4MDYxMWRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn7r4UjaRZBHwBZf/de6XSQgn+tbq
ZFW0UZnOScxKykanshvu1l2b43P031qFvJSE0z8eu7YPTB98KxLzZO18mw1E4onS
JI1qC/mNU4rs7HaYi85JRVY11FpimcscpoXmBmPkXsToTaQceuHehCNyJJXpoiq+
lLTTx3BZmDXaE4PulYjcB+Mubc4na3e8PJBt3Sd+D1xJK19vRBRIHvDK93FrQevX
EtCYcJy2j1kTW9+Kls3w+Gs5Cepes5woqqeXCC2A5KguEJ6RqzC9prhYK1lmorKS
LX5ABsHCMDWy5k05HDm+2GveRsB8WmQQmRjTKbSXUlXIifozP+9bW0yk2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLWtN06kP5Gfb/tdd5oHJfPoBhHdMB8GA1UdIwQY
MBaAFILaplAHCD7MpZEo/V8DHTUDK1dJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3RxbVVBY0lQc3lsa1NqOVh3TWROUU1yVjBrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi82MjVhZDYtY2UyYi00MzE0LWFjNzgt
YWE1YWE2ZDc0YjRlLzEvZ3RxbVVBY0lQc3lsa1NqOVh3TWROUU1yVjBrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi82MjVhZDYtY2UyYi00MzE0LWFjNzgtYWE1YWE2ZDc0YjRl
LzEvZ3RxbVVBY0lQc3lsa1NqOVh3TWROUU1yVjBrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl7HTF1YE
osrySlqRQe7C1JFVBtr++YkKuKEBdUNdV/k5LIGbi22ecHRzX/2wMBsOdFSxBU5o
iDBNlh1s4yMJQxWa+Fp8ujfmrLas4s7RDxDwc0fCOA/ddaanafIBHYVSPrD805Uj
JGESTMHvVk1sD0ZP350mgLocMHWi2xSOahXG6QGHs7xmaoN0yEGKqMW0zqGRqjLH
PnOMhJD+kZOAkZWrgIjJMuMQGeVS8j6Z4GZjpsuckxFIrbHpQ8SBreVoxJM4rmn2
rHMIKvfj8CK3Ddh0TvoxAB6xewmvc+AazxvQaXsyhgQBkj2vTtjmWoh3vkOFMF/W
G8zP6tVhto6AAA==
-----END CERTIFICATE-----
Generated at Tue Sep 22 08:52:07 2026 by rpki-client