Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/gnrxfwSZYn5LPIzFwzPsS452NeA.mft
File: gnrxfwSZYn5LPIzFwzPsS452NeA.mft (raw, json)
Hash identifier: Gqu2hloDB2cs/QzsAazLAGYqymSZMJ3qJNd/Hl4/nB4=
Subject key identifier: CD:37:A3:EC:E0:AC:7F:FE:8B:97:AC:B9:BC:29:63:3D:74:F1:43:BA
Authority key identifier: 82:7A:F1:7F:04:99:62:7E:4B:3C:8C:C5:C3:33:EC:4B:8E:76:35:E0
Certificate issuer: /CN=827af17f0499627e4b3c8cc5c333ec4b8e7635e0
Certificate serial: 019D2696564F9DD7D35C116CB56C571A0257
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnrxfwSZYn5LPIzFwzPsS452NeA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/gnrxfwSZYn5LPIzFwzPsS452NeA.mft
Manifest number: 1888
Signing time: Wed 25 Mar 2026 20:01:19 +0000
Manifest this update: Wed 25 Mar 2026 20:01:19 +0000
Manifest next update: Thu 26 Mar 2026 20:01:19 +0000
Files and hashes: 1: 9iYRo82i9hRkUCgmREahdJYxLLE.roa (hash: Iaajzt1IR/GS2dadWD8d0yfp4+37Bgf5XHM3q2W76dA=)
2: Jm12F1fJac9AdzTGN7xQVn8K_U4.roa (hash: P/nVz8qxvVHC3IkIASDUTBADr0JHFnsbfxbsnkdVypc=)
3: U17Ig7TH3Hf9u0Hjug4B8FqbaeM.roa (hash: h4vlRYblnFE5NeXhaGifoUzHbL8gvX60WPtBD/isPek=)
4: Z81lv8qaADBtEGYsx0-brJvvQeg.roa (hash: r6SobeHV+YoGbEJkji/z1sNc1KoSoCEgvZU8Lt5eYac=)
5: gnrxfwSZYn5LPIzFwzPsS452NeA.crl (hash: myfpjQ9cYMOAOfFgO8v9msuwx/WYS6R2sROgG25LF7E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/gnrxfwSZYn5LPIzFwzPsS452NeA.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/gnrxfwSZYn5LPIzFwzPsS452NeA.mft
rsync://rpki.ripe.net/repository/DEFAULT/gnrxfwSZYn5LPIzFwzPsS452NeA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:56:4f:9d:d7:d3:5c:11:6c:b5:6c:57:1a:02:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=827af17f0499627e4b3c8cc5c333ec4b8e7635e0
Validity
Not Before: Mar 25 20:01:19 2026 GMT
Not After : Mar 26 20:01:19 2026 GMT
Subject: CN=cd37a3ece0ac7ffe8b97acb9bc29633d74f143ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:42:38:65:3d:ca:aa:4d:11:a1:7a:91:85:ec:
51:75:5f:98:f1:74:13:d3:27:52:3f:8b:63:b9:f0:
c1:70:8b:f1:32:1d:63:94:3f:24:27:bf:38:c1:b3:
5a:06:06:7c:f9:02:62:bf:b8:9a:44:dc:0f:81:3a:
eb:c4:7c:d2:02:40:98:e8:2e:0f:99:d1:ff:c7:64:
82:8d:1b:39:a6:43:e7:9d:61:ef:a6:ea:f2:04:8c:
26:f9:60:6d:bb:e3:ce:a1:b7:d5:d7:85:ce:8c:65:
3c:05:db:ff:ce:b1:96:a4:cb:24:42:99:fd:52:88:
6b:c4:57:93:94:db:61:bc:0d:d5:d8:ec:ac:1b:ab:
20:c7:c0:f3:4b:58:17:43:0a:5d:f5:ad:4e:9f:4f:
dc:29:7a:78:29:9b:25:89:db:50:07:15:1b:7a:19:
5a:18:9c:90:27:72:fd:59:df:d9:e8:5b:9e:42:ab:
83:3b:bc:55:dc:f1:fa:7f:9d:e4:9d:7d:45:65:02:
f9:36:f6:01:71:77:60:f8:da:25:e1:9a:94:91:5e:
29:5c:99:96:cf:f1:c4:16:97:7e:7b:5d:b1:9c:67:
a6:c7:a1:6c:cc:9b:32:dd:24:44:99:34:a6:33:44:
9e:d4:8a:aa:b2:a7:f4:a2:22:cf:65:e4:96:aa:24:
2e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:37:A3:EC:E0:AC:7F:FE:8B:97:AC:B9:BC:29:63:3D:74:F1:43:BA
X509v3 Authority Key Identifier:
keyid:82:7A:F1:7F:04:99:62:7E:4B:3C:8C:C5:C3:33:EC:4B:8E:76:35:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnrxfwSZYn5LPIzFwzPsS452NeA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/gnrxfwSZYn5LPIzFwzPsS452NeA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/gnrxfwSZYn5LPIzFwzPsS452NeA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:a4:2b:e0:34:67:7a:30:11:17:f5:34:b6:2d:54:f8:ee:bc:
05:cb:41:b9:95:1f:01:40:48:3e:8b:21:3a:67:e5:23:e6:98:
59:ee:09:42:8c:e8:c7:06:eb:ef:a9:6a:c0:68:a7:36:05:65:
be:60:fc:27:37:30:05:32:65:00:09:84:69:0f:7c:c9:ab:e3:
6e:24:c3:ac:04:e7:6c:d4:0b:3b:cf:0b:13:bb:02:4d:c1:dd:
bc:99:8f:f4:a0:01:12:fa:35:9a:6b:60:a5:cd:7c:26:dd:1a:
78:35:50:86:85:96:0d:9f:88:5d:f3:7b:fd:ff:e3:f7:94:a4:
d2:36:2c:fb:ef:f3:2c:3b:77:92:e1:cf:45:a0:bf:12:c2:d6:
c8:e6:f9:de:fa:af:7c:87:63:83:d6:c9:9f:f0:d1:01:3f:1e:
45:69:ab:e5:bd:81:4a:a0:eb:3d:a7:41:5f:d2:99:94:16:a4:
1e:98:2a:49:ff:99:78:79:49:e2:78:2a:4b:c5:b5:42:9e:86:
ae:27:0e:47:26:ef:e7:db:da:b8:88:6a:66:bb:6b:23:6d:44:
72:4d:19:27:7d:bd:b1:c6:a3:84:af:e9:23:25:d3:49:78:ee:
86:1f:64:5b:18:4f:b8:3c:85:54:36:88:6c:d4:07:f2:d2:df:
b6:98:86:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mllZPndfTXBFstWxXGgJXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyN2FmMTdmMDQ5OTYyN2U0YjNjOGNjNWMzMzNlYzRiOGU3
NjM1ZTAwHhcNMjYwMzI1MjAwMTE5WhcNMjYwMzI2MjAwMTE5WjAzMTEwLwYDVQQD
EyhjZDM3YTNlY2UwYWM3ZmZlOGI5N2FjYjliYzI5NjMzZDc0ZjE0M2JhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUI4ZT3Kqk0RoXqRhexRdV+Y8XQT
0ydSP4tjufDBcIvxMh1jlD8kJ784wbNaBgZ8+QJiv7iaRNwPgTrrxHzSAkCY6C4P
mdH/x2SCjRs5pkPnnWHvpuryBIwm+WBtu+POobfV14XOjGU8Bdv/zrGWpMskQpn9
UohrxFeTlNthvA3V2OysG6sgx8DzS1gXQwpd9a1On0/cKXp4KZslidtQBxUbehla
GJyQJ3L9Wd/Z6FueQquDO7xV3PH6f53knX1FZQL5NvYBcXdg+Nol4ZqUkV4pXJmW
z/HEFpd+e12xnGemx6FszJsy3SREmTSmM0Se1Iqqsqf0oiLPZeSWqiQu2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM03o+zgrH/+i5esubwpYz108UO6MB8GA1UdIwQY
MBaAFIJ68X8EmWJ+SzyMxcMz7EuOdjXgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ25yeGZ3U1pZbjVMUEl6Rnd6UHNTNDUyTmVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9jMmFlM2QtOThiNC00NDZmLWFiMjgt
NzMxM2M3ZjNjYTNmLzEvZ25yeGZ3U1pZbjVMUEl6Rnd6UHNTNDUyTmVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC9jMmFlM2QtOThiNC00NDZmLWFiMjgtNzMxM2M3ZjNjYTNm
LzEvZ25yeGZ3U1pZbjVMUEl6Rnd6UHNTNDUyTmVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ6Qr4DRn
ejARF/U0ti1U+O68BctBuZUfAUBIPoshOmflI+aYWe4JQozoxwbr76lqwGinNgVl
vmD8JzcwBTJlAAmEaQ98yavjbiTDrATnbNQLO88LE7sCTcHdvJmP9KABEvo1mmtg
pc18Jt0aeDVQhoWWDZ+IXfN7/f/j95Sk0jYs++/zLDt3kuHPRaC/EsLWyOb53vqv
fIdjg9bJn/DRAT8eRWmr5b2BSqDrPadBX9KZlBakHpgqSf+ZeHlJ4ngqS8W1Qp6G
ricORybv59vauIhqZrtrI21Eck0ZJ329scajhK/pIyXTSXjuhh9kWxhPuDyFVDaI
bNQH8tLftpiGIw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:56:41 2026 by rpki-client