Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c6b65c-2fc3-4196-af30-3940d135b28b/1/v3DW_GPRd37tzY9GpVk2F8YxneY.mft
File: v3DW_GPRd37tzY9GpVk2F8YxneY.mft (raw, json)
Hash identifier: ZnAFMG/BTG6rA+ZzIj3gkCNi0jkwgZBanDZG6Hzgz8Q=
Subject key identifier: E5:9A:18:5F:5D:EE:3A:D4:04:E1:32:28:E9:AF:7C:35:16:72:04:AA
Authority key identifier: BF:70:D6:FC:63:D1:77:7E:ED:CD:8F:46:A5:59:36:17:C6:31:9D:E6
Certificate issuer: /CN=bf70d6fc63d1777eedcd8f46a5593617c6319de6
Certificate serial: 019D28BB9F9D4BEB888CCA7DA906ACB798A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v3DW_GPRd37tzY9GpVk2F8YxneY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/c6b65c-2fc3-4196-af30-3940d135b28b/1/v3DW_GPRd37tzY9GpVk2F8YxneY.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 06:01:17 +0000
Manifest this update: Thu 26 Mar 2026 06:01:17 +0000
Manifest next update: Fri 27 Mar 2026 06:01:17 +0000
Files and hashes: 1: Qy5Nmi3nAZDOhC946zssMGSp1zg.roa (hash: y5SFQREp1nOA/KbiyA7m/8jCP4sF9FhQoIl2/65Own0=)
2: v3DW_GPRd37tzY9GpVk2F8YxneY.crl (hash: NS3iYH8LRu93U51gDp5C8MlThp0YhYWdzRSZmm6ygY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/c6b65c-2fc3-4196-af30-3940d135b28b/1/v3DW_GPRd37tzY9GpVk2F8YxneY.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/c6b65c-2fc3-4196-af30-3940d135b28b/1/v3DW_GPRd37tzY9GpVk2F8YxneY.mft
rsync://rpki.ripe.net/repository/DEFAULT/v3DW_GPRd37tzY9GpVk2F8YxneY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:9f:9d:4b:eb:88:8c:ca:7d:a9:06:ac:b7:98:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf70d6fc63d1777eedcd8f46a5593617c6319de6
Validity
Not Before: Mar 26 06:01:17 2026 GMT
Not After : Mar 27 06:01:17 2026 GMT
Subject: CN=e59a185f5dee3ad404e13228e9af7c35167204aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:7b:c9:ce:6e:7e:57:99:40:a2:1d:c1:2b:6a:
1b:bf:00:4a:20:c0:07:66:d7:2e:14:d3:ec:1c:81:
a2:bc:9e:6f:97:5e:9a:da:80:95:8f:9d:fe:72:5d:
9c:26:13:d7:56:2f:2c:af:3a:4e:f1:d7:9e:6b:1c:
dd:51:4c:cd:91:2d:5f:0b:fe:ae:9e:8a:3e:71:72:
ba:f8:25:10:53:50:f9:02:d3:0e:0d:aa:3d:96:e0:
2f:4c:66:bd:a6:da:89:a7:c3:9e:62:14:b7:f9:c6:
92:f5:88:0b:16:ff:8f:66:22:a2:ec:43:22:59:14:
ba:a1:ff:03:01:b4:6e:fa:9c:52:50:5b:95:68:3c:
02:dc:37:0b:9a:70:11:69:51:88:50:1b:b0:1b:39:
2b:56:d3:7b:55:2d:a1:23:85:db:6b:c1:ec:d1:fe:
5d:fe:02:fa:39:52:40:86:e8:80:d2:c8:18:92:c8:
68:0e:c2:50:f6:7a:a5:31:18:26:88:3c:2b:67:1c:
56:ba:2d:f9:42:12:60:78:65:3a:8b:0f:61:46:e3:
71:1f:0e:da:8f:88:de:cf:f8:06:8a:b7:e4:71:22:
11:6a:ab:fb:f8:a6:f5:a0:25:02:6b:50:0b:cd:42:
0e:51:ef:87:76:01:99:1e:09:f5:cc:a7:79:a0:be:
d1:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:9A:18:5F:5D:EE:3A:D4:04:E1:32:28:E9:AF:7C:35:16:72:04:AA
X509v3 Authority Key Identifier:
keyid:BF:70:D6:FC:63:D1:77:7E:ED:CD:8F:46:A5:59:36:17:C6:31:9D:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v3DW_GPRd37tzY9GpVk2F8YxneY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c6b65c-2fc3-4196-af30-3940d135b28b/1/v3DW_GPRd37tzY9GpVk2F8YxneY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c6b65c-2fc3-4196-af30-3940d135b28b/1/v3DW_GPRd37tzY9GpVk2F8YxneY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:41:a3:27:90:7c:c7:e5:48:cf:f1:ee:23:ec:2f:d3:4c:15:
6f:d2:2e:3b:d3:1b:3b:d1:92:62:3a:51:2d:90:a2:9c:8a:a1:
7d:e3:66:65:3e:e0:98:8c:04:95:54:33:e3:cf:36:2e:4d:8e:
07:89:f0:a7:60:ed:88:ad:ee:60:de:26:07:dc:be:99:32:2f:
67:4e:fa:eb:77:bd:11:b9:57:7f:19:62:55:c7:d8:d8:aa:ad:
84:75:6e:be:1d:e9:e5:c4:8d:eb:78:4f:83:e7:11:4e:84:97:
5a:f9:79:ae:12:a2:59:72:46:cb:5f:c3:70:3e:7f:02:19:45:
60:26:75:36:0c:d7:5d:2b:d6:1c:5a:b5:f1:8e:48:f4:f7:01:
37:65:80:60:db:55:cc:a8:de:0d:f3:f3:f3:e5:f6:5d:91:1a:
e9:2a:37:26:2c:17:35:1c:b7:23:14:f0:c3:fb:ed:bf:51:34:
cc:01:54:f3:cb:74:02:1b:f0:17:a2:77:22:6e:d9:02:9a:b9:
f1:16:22:a0:3c:8b:74:1e:2f:40:0e:67:48:ee:45:b6:65:05:
c7:2d:b1:54:34:d0:a7:22:39:f1:7b:6e:e7:38:c2:c5:4c:83:
f7:a1:d4:72:2d:f8:6e:e9:8e:c0:39:0a:ee:a0:95:5f:04:de:
43:b9:69:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ou5+dS+uIjMp9qQast5igMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmNzBkNmZjNjNkMTc3N2VlZGNkOGY0NmE1NTkzNjE3YzYz
MTlkZTYwHhcNMjYwMzI2MDYwMTE3WhcNMjYwMzI3MDYwMTE3WjAzMTEwLwYDVQQD
EyhlNTlhMTg1ZjVkZWUzYWQ0MDRlMTMyMjhlOWFmN2MzNTE2NzIwNGFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXvJzm5+V5lAoh3BK2obvwBKIMAH
ZtcuFNPsHIGivJ5vl16a2oCVj53+cl2cJhPXVi8srzpO8deeaxzdUUzNkS1fC/6u
noo+cXK6+CUQU1D5AtMODao9luAvTGa9ptqJp8OeYhS3+caS9YgLFv+PZiKi7EMi
WRS6of8DAbRu+pxSUFuVaDwC3DcLmnARaVGIUBuwGzkrVtN7VS2hI4Xba8Hs0f5d
/gL6OVJAhuiA0sgYkshoDsJQ9nqlMRgmiDwrZxxWui35QhJgeGU6iw9hRuNxHw7a
j4jez/gGirfkcSIRaqv7+Kb1oCUCa1ALzUIOUe+HdgGZHgn1zKd5oL7ROwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOWaGF9d7jrUBOEyKOmvfDUWcgSqMB8GA1UdIwQY
MBaAFL9w1vxj0Xd+7c2PRqVZNhfGMZ3mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjNEV19HUFJkMzd0elk5R3BWazJGOFl4bmVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9jNmI2NWMtMmZjMy00MTk2LWFmMzAt
Mzk0MGQxMzViMjhiLzEvdjNEV19HUFJkMzd0elk5R3BWazJGOFl4bmVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS9jNmI2NWMtMmZjMy00MTk2LWFmMzAtMzk0MGQxMzViMjhi
LzEvdjNEV19HUFJkMzd0elk5R3BWazJGOFl4bmVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPUGjJ5B8
x+VIz/HuI+wv00wVb9IuO9MbO9GSYjpRLZCinIqhfeNmZT7gmIwElVQz4882Lk2O
B4nwp2DtiK3uYN4mB9y+mTIvZ07663e9EblXfxliVcfY2KqthHVuvh3p5cSN63hP
g+cRToSXWvl5rhKiWXJGy1/DcD5/AhlFYCZ1NgzXXSvWHFq18Y5I9PcBN2WAYNtV
zKjeDfPz8+X2XZEa6So3JiwXNRy3IxTww/vtv1E0zAFU88t0AhvwF6J3Im7ZApq5
8RYioDyLdB4vQA5nSO5FtmUFxy2xVDTQpyI58Xtu5zjCxUyD96HUci34bumOwDkK
7qCVXwTeQ7lprg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:56:47 2026 by rpki-client