Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/007297-c443-427e-a0e7-7dc0057ed96d/1/gc-3wMI0noD-5RtHgxU1Es2dodI.mft
File: gc-3wMI0noD-5RtHgxU1Es2dodI.mft (raw, json)
Hash identifier: FOHEnM30tiZWSY9jVGpEzPjoh+hGvBNfqz8e/BAgzxg=
Subject key identifier: 3F:3F:5C:47:32:DD:D8:DE:F7:7A:50:73:DB:19:DD:D1:C5:20:97:EB
Authority key identifier: 81:CF:B7:C0:C2:34:9E:80:FE:E5:1B:47:83:15:35:12:CD:9D:A1:D2
Certificate issuer: /CN=81cfb7c0c2349e80fee51b4783153512cd9da1d2
Certificate serial: 019D262876FB9ADB72BD8018EAEECBB8904E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gc-3wMI0noD-5RtHgxU1Es2dodI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/007297-c443-427e-a0e7-7dc0057ed96d/1/gc-3wMI0noD-5RtHgxU1Es2dodI.mft
Manifest number: 019A
Signing time: Wed 25 Mar 2026 18:01:19 +0000
Manifest this update: Wed 25 Mar 2026 18:01:19 +0000
Manifest next update: Thu 26 Mar 2026 18:01:19 +0000
Files and hashes: 1: LXQjHzeIEtAnNTCnTqX-LuMg4LM.roa (hash: yhnz3LWej2FHw89JjP62vsOqeBVajdgcdmggLBfvZvY=)
2: gc-3wMI0noD-5RtHgxU1Es2dodI.crl (hash: BBFfWibyVZHiBu597livT90O4yxhv2ZUl9oKeSdrJms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/007297-c443-427e-a0e7-7dc0057ed96d/1/gc-3wMI0noD-5RtHgxU1Es2dodI.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/007297-c443-427e-a0e7-7dc0057ed96d/1/gc-3wMI0noD-5RtHgxU1Es2dodI.mft
rsync://rpki.ripe.net/repository/DEFAULT/gc-3wMI0noD-5RtHgxU1Es2dodI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:76:fb:9a:db:72:bd:80:18:ea:ee:cb:b8:90:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81cfb7c0c2349e80fee51b4783153512cd9da1d2
Validity
Not Before: Mar 25 18:01:19 2026 GMT
Not After : Mar 26 18:01:19 2026 GMT
Subject: CN=3f3f5c4732ddd8def77a5073db19ddd1c52097eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:93:37:ff:f3:48:22:d2:6c:be:38:e3:89:28:
44:96:08:3f:14:ae:36:05:ff:62:52:80:61:75:d3:
f3:d0:8b:6d:e5:85:0b:41:e6:29:27:18:3a:84:6d:
cf:ce:e8:18:9e:cb:e2:17:74:c2:4f:1e:e5:2d:88:
6e:8f:87:cf:41:d1:48:9b:ac:f3:a3:04:1b:28:3e:
58:1a:a9:3a:76:b9:f0:fd:a5:12:91:3e:89:9b:71:
2f:eb:93:f0:09:0e:fd:cc:45:0d:d3:64:9c:e5:4d:
02:b4:46:31:5e:db:95:42:48:7b:ff:a3:c3:a6:bf:
ac:47:0d:bf:ac:ea:88:41:ec:c6:ec:4e:e1:d8:8b:
de:48:d7:aa:1f:72:26:d2:2e:e3:67:4b:08:00:6e:
60:c7:b6:ca:05:c4:dd:ac:f6:ab:17:bd:73:b4:7f:
c0:d1:15:0f:ad:aa:48:03:1a:c8:86:35:f8:40:11:
07:df:31:86:c7:b7:19:de:53:e4:07:18:36:3b:72:
e7:17:4d:ae:67:f7:21:0f:77:6e:08:c8:39:a6:7d:
58:23:48:f1:e9:4b:25:61:0e:e3:ad:a3:b1:2c:5e:
d9:59:41:da:21:2c:39:ce:af:00:6b:08:cc:03:18:
91:f5:88:e7:9b:e7:96:5e:9f:2f:cb:fc:7b:1b:d6:
9f:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:3F:5C:47:32:DD:D8:DE:F7:7A:50:73:DB:19:DD:D1:C5:20:97:EB
X509v3 Authority Key Identifier:
keyid:81:CF:B7:C0:C2:34:9E:80:FE:E5:1B:47:83:15:35:12:CD:9D:A1:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gc-3wMI0noD-5RtHgxU1Es2dodI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/007297-c443-427e-a0e7-7dc0057ed96d/1/gc-3wMI0noD-5RtHgxU1Es2dodI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/007297-c443-427e-a0e7-7dc0057ed96d/1/gc-3wMI0noD-5RtHgxU1Es2dodI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:5b:c5:16:a1:03:c2:b5:05:2a:ee:41:40:23:77:99:09:0f:
0c:8d:76:60:ad:62:67:5c:33:73:64:85:54:4b:e2:7f:a6:52:
78:cc:35:1e:69:82:7e:53:33:73:68:71:e9:2a:4c:68:21:f1:
26:61:bb:90:d9:c6:4a:f4:5a:04:f8:7e:b9:e7:1d:f0:a0:d9:
7e:d1:43:e5:d1:ff:ce:84:20:b3:fe:75:98:99:1e:c6:aa:83:
96:67:05:c8:ed:d5:2d:45:70:53:5e:1b:0f:ac:4b:2f:aa:7f:
5e:4a:83:b9:4f:9a:09:66:25:77:e7:2d:ac:68:4f:a2:de:a7:
de:88:be:fc:b3:d2:16:19:be:51:28:e2:61:3a:6c:f1:c7:bc:
5f:e9:ef:d4:12:0c:20:60:34:c1:49:cc:d8:2a:ed:6e:f6:89:
96:e2:d0:aa:27:d1:fd:d4:3e:da:0c:bf:84:56:b9:c6:fe:31:
4a:06:8d:dd:9a:1c:0a:ed:dd:07:bc:9d:03:ae:e4:69:35:b9:
b0:a2:32:35:22:d7:14:75:2e:7d:ba:d9:a1:ee:8b:85:89:94:
89:fb:c0:da:f9:91:c1:85:df:98:d9:50:cf:2c:24:fc:c4:92:
0a:48:f3:78:ea:2a:b6:99:74:8f:69:16:5b:41:1c:ea:97:12:
e4:5e:0a:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mKHb7mttyvYAY6u7LuJBOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxY2ZiN2MwYzIzNDllODBmZWU1MWI0NzgzMTUzNTEyY2Q5
ZGExZDIwHhcNMjYwMzI1MTgwMTE5WhcNMjYwMzI2MTgwMTE5WjAzMTEwLwYDVQQD
EygzZjNmNWM0NzMyZGRkOGRlZjc3YTUwNzNkYjE5ZGRkMWM1MjA5N2ViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZM3//NIItJsvjjjiShElgg/FK42
Bf9iUoBhddPz0Itt5YULQeYpJxg6hG3PzugYnsviF3TCTx7lLYhuj4fPQdFIm6zz
owQbKD5YGqk6drnw/aUSkT6Jm3Ev65PwCQ79zEUN02Sc5U0CtEYxXtuVQkh7/6PD
pr+sRw2/rOqIQezG7E7h2IveSNeqH3Im0i7jZ0sIAG5gx7bKBcTdrParF71ztH/A
0RUPrapIAxrIhjX4QBEH3zGGx7cZ3lPkBxg2O3LnF02uZ/chD3duCMg5pn1YI0jx
6UslYQ7jraOxLF7ZWUHaISw5zq8AawjMAxiR9Yjnm+eWXp8vy/x7G9afswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD8/XEcy3dje93pQc9sZ3dHFIJfrMB8GA1UdIwQY
MBaAFIHPt8DCNJ6A/uUbR4MVNRLNnaHSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2MtM3dNSTBub0QtNVJ0SGd4VTFFczJkb2RJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy8wMDcyOTctYzQ0My00MjdlLWEwZTct
N2RjMDA1N2VkOTZkLzEvZ2MtM3dNSTBub0QtNVJ0SGd4VTFFczJkb2RJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy8wMDcyOTctYzQ0My00MjdlLWEwZTctN2RjMDA1N2VkOTZk
LzEvZ2MtM3dNSTBub0QtNVJ0SGd4VTFFczJkb2RJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEFvFFqED
wrUFKu5BQCN3mQkPDI12YK1iZ1wzc2SFVEvif6ZSeMw1HmmCflMzc2hx6SpMaCHx
JmG7kNnGSvRaBPh+uecd8KDZftFD5dH/zoQgs/51mJkexqqDlmcFyO3VLUVwU14b
D6xLL6p/XkqDuU+aCWYld+ctrGhPot6n3oi+/LPSFhm+USjiYTps8ce8X+nv1BIM
IGA0wUnM2CrtbvaJluLQqifR/dQ+2gy/hFa5xv4xSgaN3ZocCu3dB7ydA67kaTW5
sKIyNSLXFHUufbrZoe6LhYmUifvA2vmRwYXfmNlQzywk/MSSCkjzeOoqtpl0j2kW
W0Ec6pcS5F4KLQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:21:59 2026 by rpki-client