Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/b59715-b05a-4b4a-a922-0144a3282a2e/1/gFBQT0sXdugLitn4s1bmE7WFs1o.mft
File: gFBQT0sXdugLitn4s1bmE7WFs1o.mft (raw, json)
Hash identifier: 2mVarcq1o6Wg+xsu7rFRKjbGEGmJDE/7WoXwXNC/Yfc=
Subject key identifier: 9E:96:BC:CB:1C:9B:AE:E9:B8:15:C9:3E:89:6F:1B:98:72:72:A9:B9
Authority key identifier: 80:50:50:4F:4B:17:76:E8:0B:8A:D9:F8:B3:56:E6:13:B5:85:B3:5A
Certificate issuer: /CN=8050504f4b1776e80b8ad9f8b356e613b585b35a
Certificate serial: 019CAA2193E2ECD8EA800568FCCADB309A22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gFBQT0sXdugLitn4s1bmE7WFs1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/b59715-b05a-4b4a-a922-0144a3282a2e/1/gFBQT0sXdugLitn4s1bmE7WFs1o.mft
Manifest number: 1369
Signing time: Sun 01 Mar 2026 16:00:53 +0000
Manifest this update: Sun 01 Mar 2026 16:00:53 +0000
Manifest next update: Mon 02 Mar 2026 16:00:53 +0000
Files and hashes: 1: 3CKrmM_5W9qGNwDPT707OalHLD8.roa (hash: 2NaLVNwjCsDKmG9seV4wmBk1JF4GhywwWN0SoFKjTJk=)
2: 8QowToFWOkypHOOmOlay9H9m3cI.roa (hash: FEurkgF3+aXJgB8qUw5KyF+e2MK/WZfbCLqpt4IVc9o=)
3: FV-pMv8EGTaMa6CCbtYT2e9XnxQ.roa (hash: oCIb8FIypKIz4AB8jOeyTjsmMStjtBdK3bvDo7a5vjg=)
4: gFBQT0sXdugLitn4s1bmE7WFs1o.crl (hash: r+vc4TNsCLFo7G8MZDZ7Ou8GG/2d8suNSX4vWFXrBos=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/b59715-b05a-4b4a-a922-0144a3282a2e/1/gFBQT0sXdugLitn4s1bmE7WFs1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/b59715-b05a-4b4a-a922-0144a3282a2e/1/gFBQT0sXdugLitn4s1bmE7WFs1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/gFBQT0sXdugLitn4s1bmE7WFs1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:93:e2:ec:d8:ea:80:05:68:fc:ca:db:30:9a:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8050504f4b1776e80b8ad9f8b356e613b585b35a
Validity
Not Before: Mar 1 16:00:53 2026 GMT
Not After : Mar 2 16:00:53 2026 GMT
Subject: CN=9e96bccb1c9baee9b815c93e896f1b987272a9b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:12:44:1d:36:29:39:73:08:29:14:13:d6:e7:
92:8d:e1:1d:00:5b:1e:42:45:7d:38:57:f8:d8:de:
63:01:9a:6d:ae:0f:3b:c0:90:10:f1:e4:18:11:00:
37:a0:46:ff:1e:af:c5:7a:6d:51:91:55:8e:f7:c6:
bf:8b:55:60:2c:7a:ac:b4:e3:a0:33:32:65:91:6d:
e2:09:ac:09:8b:52:e0:04:6a:39:e3:c7:55:ba:30:
e2:c3:0a:6e:7a:33:ab:f7:0d:e7:d8:1a:e4:72:00:
c8:88:42:2c:40:08:9c:6a:56:32:1a:f8:94:2b:44:
8a:bf:8c:4a:7a:0b:2f:79:93:1f:74:ed:b3:10:8c:
6a:3e:0a:37:3d:50:8f:7e:9b:07:b5:51:c7:1e:cf:
19:c5:7b:69:d7:a3:73:42:71:36:36:0b:4a:80:92:
95:c3:bf:5b:ad:95:7e:8a:07:85:bb:c5:da:f9:69:
47:f7:09:b1:35:90:72:78:00:06:90:fb:5f:d4:bf:
5c:10:ac:52:19:05:45:4e:5b:fd:aa:b6:a1:5a:99:
f0:2c:6f:91:ec:5e:3e:3a:bd:ab:aa:69:ed:1d:a5:
81:9f:0c:84:3f:f5:6b:74:d4:0b:27:d9:66:3d:2d:
af:f1:49:04:b8:1c:1c:64:6f:53:dd:19:5c:a7:22:
80:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:96:BC:CB:1C:9B:AE:E9:B8:15:C9:3E:89:6F:1B:98:72:72:A9:B9
X509v3 Authority Key Identifier:
keyid:80:50:50:4F:4B:17:76:E8:0B:8A:D9:F8:B3:56:E6:13:B5:85:B3:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gFBQT0sXdugLitn4s1bmE7WFs1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/b59715-b05a-4b4a-a922-0144a3282a2e/1/gFBQT0sXdugLitn4s1bmE7WFs1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/b59715-b05a-4b4a-a922-0144a3282a2e/1/gFBQT0sXdugLitn4s1bmE7WFs1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:ab:5f:cf:ec:7e:b8:bf:36:76:57:65:ea:3d:c1:f7:77:a9:
3a:47:10:aa:7e:54:cc:e8:e8:d6:bd:ac:2b:8f:a8:1c:5a:a2:
76:ca:be:a1:72:a5:2c:5c:72:85:f6:d6:69:c7:ca:e3:4e:24:
5a:8a:a1:1b:30:86:59:e7:08:6f:27:44:60:2e:17:80:99:13:
9f:24:43:f6:50:e6:37:d0:4f:35:36:86:3a:da:b4:39:3e:74:
19:11:90:c3:86:f0:fb:f7:f4:91:f2:75:dc:88:2b:3d:13:a4:
41:ae:99:51:5a:41:f1:30:c7:68:08:b8:92:ee:39:ed:e1:8c:
20:cd:75:88:36:0b:01:17:c7:02:00:00:8a:0d:54:51:b5:1d:
66:03:dd:c3:42:03:48:bb:e1:2b:43:f9:46:50:ff:8e:82:8b:
2c:ca:62:be:d3:12:7b:3e:b1:72:38:56:c9:b0:3e:e1:fd:30:
9e:18:03:a2:bd:bd:37:d9:24:7b:24:d5:fc:28:8b:c2:33:fe:
c3:cb:63:87:83:53:3e:9e:21:db:9a:aa:34:e1:53:0c:dc:a6:
5b:bc:93:bb:2d:85:0d:b7:9b:b7:7e:26:bd:53:d3:59:25:7f:
96:4f:7e:18:93:ce:43:d5:a0:66:27:38:3f:a8:ed:dd:b6:8c:
22:6d:ed:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqIZPi7NjqgAVo/MrbMJoiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwNTA1MDRmNGIxNzc2ZTgwYjhhZDlmOGIzNTZlNjEzYjU4
NWIzNWEwHhcNMjYwMzAxMTYwMDUzWhcNMjYwMzAyMTYwMDUzWjAzMTEwLwYDVQQD
Eyg5ZTk2YmNjYjFjOWJhZWU5YjgxNWM5M2U4OTZmMWI5ODcyNzJhOWI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBJEHTYpOXMIKRQT1ueSjeEdAFse
QkV9OFf42N5jAZptrg87wJAQ8eQYEQA3oEb/Hq/Fem1RkVWO98a/i1VgLHqstOOg
MzJlkW3iCawJi1LgBGo548dVujDiwwpuejOr9w3n2BrkcgDIiEIsQAicalYyGviU
K0SKv4xKegsveZMfdO2zEIxqPgo3PVCPfpsHtVHHHs8ZxXtp16NzQnE2NgtKgJKV
w79brZV+igeFu8Xa+WlH9wmxNZByeAAGkPtf1L9cEKxSGQVFTlv9qrahWpnwLG+R
7F4+Or2rqmntHaWBnwyEP/VrdNQLJ9lmPS2v8UkEuBwcZG9T3RlcpyKAIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ6WvMscm67puBXJPolvG5hycqm5MB8GA1UdIwQY
MBaAFIBQUE9LF3boC4rZ+LNW5hO1hbNaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ0ZCUVQwc1hkdWdMaXRuNHMxYm1FN1dGczFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9iNTk3MTUtYjA1YS00YjRhLWE5MjIt
MDE0NGEzMjgyYTJlLzEvZ0ZCUVQwc1hkdWdMaXRuNHMxYm1FN1dGczFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC9iNTk3MTUtYjA1YS00YjRhLWE5MjItMDE0NGEzMjgyYTJl
LzEvZ0ZCUVQwc1hkdWdMaXRuNHMxYm1FN1dGczFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYatfz+x+
uL82dldl6j3B93epOkcQqn5UzOjo1r2sK4+oHFqidsq+oXKlLFxyhfbWacfK404k
WoqhGzCGWecIbydEYC4XgJkTnyRD9lDmN9BPNTaGOtq0OT50GRGQw4bw+/f0kfJ1
3IgrPROkQa6ZUVpB8TDHaAi4ku457eGMIM11iDYLARfHAgAAig1UUbUdZgPdw0ID
SLvhK0P5RlD/joKLLMpivtMSez6xcjhWybA+4f0wnhgDor29N9kkeyTV/CiLwjP+
w8tjh4NTPp4h25qqNOFTDNymW7yTuy2FDbebt34mvVPTWSV/lk9+GJPOQ9WgZic4
P6jt3baMIm3tlA==
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:58:44 2026 by rpki-client