Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.mft
File: 0gsI5gdmjgYFAITuN5KKHAsDVJI.mft (raw, json)
Hash identifier: Fj6WlSEhObVwlo5jbFDKAwMYQkbktSEZq/dHKrWGE5Y=
Subject key identifier: DB:99:43:90:66:7A:6C:54:B1:89:3B:3D:BF:E8:F4:CD:11:22:E3:D5
Authority key identifier: D2:0B:08:E6:07:66:8E:06:05:00:84:EE:37:92:8A:1C:0B:03:54:92
Certificate issuer: /CN=d20b08e607668e06050084ee37928a1c0b035492
Certificate serial: 019D284E4DBA4D799CD734EB9F949CC780EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0gsI5gdmjgYFAITuN5KKHAsDVJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.mft
Manifest number: 05B6
Signing time: Thu 26 Mar 2026 04:01:53 +0000
Manifest this update: Thu 26 Mar 2026 04:01:53 +0000
Manifest next update: Fri 27 Mar 2026 04:01:53 +0000
Files and hashes: 1: 0gsI5gdmjgYFAITuN5KKHAsDVJI.crl (hash: tq4mFyH4kP3Uu4XTUSEblH1YBJe2uxUGo2hOpw4g1ik=)
2: Gm-t-lh2E0gK3CSrIU-gJkije_Q.roa (hash: Ono4+T4YpgzQm0xFxMzJXZM1mWa8sfDRC5aPTIXlCxg=)
3: HOPT3iuIJW2Ca5RKaQZ_7H8DEUg.roa (hash: Z7lWxJ3V5i6LgJFHNccxxl1xQSA36VYmA9LTVT4CQFA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/0gsI5gdmjgYFAITuN5KKHAsDVJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:4d:ba:4d:79:9c:d7:34:eb:9f:94:9c:c7:80:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d20b08e607668e06050084ee37928a1c0b035492
Validity
Not Before: Mar 26 04:01:53 2026 GMT
Not After : Mar 27 04:01:53 2026 GMT
Subject: CN=db994390667a6c54b1893b3dbfe8f4cd1122e3d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:31:d6:0c:00:be:35:9d:13:18:4b:16:1e:de:
5e:9a:2a:db:95:19:ac:46:f5:eb:d2:3d:75:7d:41:
1d:bf:df:dc:ba:9f:0e:44:a3:89:c9:0e:df:a6:22:
b2:4d:ba:e6:9c:fc:ce:b7:8e:07:7f:1e:d9:5b:d7:
8f:74:2e:8f:14:b0:26:bd:dd:40:dd:32:b6:16:81:
89:c9:20:2e:27:64:ba:e0:91:96:bc:52:0b:58:81:
36:ca:26:be:f9:ed:f3:96:6a:75:90:b5:16:04:77:
21:09:45:18:9d:59:e2:ce:7a:86:e5:53:e2:10:3c:
2b:ff:5b:86:6f:ed:f5:a2:98:4b:44:92:a2:97:6e:
29:96:48:1e:c5:e4:af:ba:03:59:1c:80:c5:94:12:
c6:80:a5:c9:d5:40:a0:1c:9e:ad:a5:15:10:09:e2:
d6:70:7f:f3:07:f3:2c:4c:6b:0a:99:0d:6c:77:84:
4a:af:b0:fe:87:36:a2:b4:cc:ac:66:11:a4:00:12:
47:50:d6:97:2d:a6:5b:2d:69:c0:ce:3d:4d:1f:30:
a2:fc:1f:70:80:a8:02:c1:50:ac:61:4c:2a:ec:7a:
24:00:95:88:f8:56:6f:af:29:27:c8:8d:7e:85:90:
c1:a5:c2:8a:d9:50:07:de:c7:41:ed:ac:45:54:7d:
b3:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:99:43:90:66:7A:6C:54:B1:89:3B:3D:BF:E8:F4:CD:11:22:E3:D5
X509v3 Authority Key Identifier:
keyid:D2:0B:08:E6:07:66:8E:06:05:00:84:EE:37:92:8A:1C:0B:03:54:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0gsI5gdmjgYFAITuN5KKHAsDVJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:e1:d5:51:b3:cc:8e:bf:b2:43:9c:08:62:b0:87:20:f1:51:
e8:ce:5b:e4:08:5e:9d:d7:4e:e6:fc:7c:23:c3:67:ac:fd:bb:
77:95:88:43:d2:f6:0f:87:97:79:41:e8:9b:02:ff:ae:2c:a5:
7e:87:e6:37:31:1a:1a:2b:a0:ff:cb:9a:6d:fe:78:29:da:29:
63:79:7a:58:de:b4:7b:80:ba:a1:5a:63:f5:88:4f:27:a5:81:
38:bb:09:aa:8b:fa:cc:8b:c6:ed:e9:6a:79:4c:4e:00:7f:fe:
6c:8c:00:5c:75:8a:18:c8:6e:fe:af:6b:10:e5:33:de:cf:7f:
96:f3:4b:9d:0e:3a:f6:07:30:12:61:95:8f:5b:d0:de:d2:1d:
09:f8:2f:ab:5f:85:da:1a:c6:b6:85:b1:81:78:7d:86:c1:1d:
20:38:3f:16:0d:a0:62:3a:f2:37:77:32:7b:0a:73:0b:49:7f:
00:85:89:75:bc:93:e9:9a:f2:aa:5d:76:0c:13:4a:09:8a:05:
08:a5:e2:0e:ca:23:5f:9f:d2:47:70:14:0e:56:02:85:83:d2:
5b:07:11:1d:32:56:32:5d:ed:90:76:6d:e4:df:82:ef:ff:9c:
b5:1c:8f:8f:6b:be:0e:6d:98:d1:6b:7a:38:a7:9c:09:28:91:
11:75:67:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oTk26TXmc1zTrn5Scx4DrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyMGIwOGU2MDc2NjhlMDYwNTAwODRlZTM3OTI4YTFjMGIw
MzU0OTIwHhcNMjYwMzI2MDQwMTUzWhcNMjYwMzI3MDQwMTUzWjAzMTEwLwYDVQQD
EyhkYjk5NDM5MDY2N2E2YzU0YjE4OTNiM2RiZmU4ZjRjZDExMjJlM2Q1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhDHWDAC+NZ0TGEsWHt5emirblRms
RvXr0j11fUEdv9/cup8ORKOJyQ7fpiKyTbrmnPzOt44Hfx7ZW9ePdC6PFLAmvd1A
3TK2FoGJySAuJ2S64JGWvFILWIE2yia++e3zlmp1kLUWBHchCUUYnVniznqG5VPi
EDwr/1uGb+31ophLRJKil24plkgexeSvugNZHIDFlBLGgKXJ1UCgHJ6tpRUQCeLW
cH/zB/MsTGsKmQ1sd4RKr7D+hzaitMysZhGkABJHUNaXLaZbLWnAzj1NHzCi/B9w
gKgCwVCsYUwq7HokAJWI+FZvryknyI1+hZDBpcKK2VAH3sdB7axFVH2zKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNuZQ5BmemxUsYk7Pb/o9M0RIuPVMB8GA1UdIwQY
MBaAFNILCOYHZo4GBQCE7jeSihwLA1SSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGdzSTVnZG1qZ1lGQUlUdU41S0tIQXNEVkpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC8yMTdhYWYtM2IzYi00ZDljLWEyY2Et
MDYyYzg4ODJiYTcxLzEvMGdzSTVnZG1qZ1lGQUlUdU41S0tIQXNEVkpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC8yMTdhYWYtM2IzYi00ZDljLWEyY2EtMDYyYzg4ODJiYTcx
LzEvMGdzSTVnZG1qZ1lGQUlUdU41S0tIQXNEVkpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADuHVUbPM
jr+yQ5wIYrCHIPFR6M5b5AhenddO5vx8I8NnrP27d5WIQ9L2D4eXeUHomwL/riyl
fofmNzEaGiug/8uabf54KdopY3l6WN60e4C6oVpj9YhPJ6WBOLsJqov6zIvG7elq
eUxOAH/+bIwAXHWKGMhu/q9rEOUz3s9/lvNLnQ469gcwEmGVj1vQ3tIdCfgvq1+F
2hrGtoWxgXh9hsEdIDg/Fg2gYjryN3cyewpzC0l/AIWJdbyT6Zryql12DBNKCYoF
CKXiDsojX5/SR3AUDlYChYPSWwcRHTJWMl3tkHZt5N+C7/+ctRyPj2u+Dm2Y0Wt6
OKecCSiREXVnJA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:36:40 2026 by rpki-client