Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/d23870-74c7-4a84-90ec-c32036750e36/1/GtTMzv5VxeIjqbMgW5OKPRyehtU.mft
File: GtTMzv5VxeIjqbMgW5OKPRyehtU.mft (raw, json)
Hash identifier: 2eZkdHu5RMIqWJJJRGKVQH2fUF7tzk2JPEpa3Tw8zuE=
Subject key identifier: E9:C8:59:9C:ED:A7:1A:95:71:35:BA:F2:2B:A8:7D:96:33:27:60:2C
Authority key identifier: 1A:D4:CC:CE:FE:55:C5:E2:23:A9:B3:20:5B:93:8A:3D:1C:9E:86:D5
Certificate issuer: /CN=1ad4cccefe55c5e223a9b3205b938a3d1c9e86d5
Certificate serial: 019D28BBE6617A139B75F764C2350F1EF248
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GtTMzv5VxeIjqbMgW5OKPRyehtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/d23870-74c7-4a84-90ec-c32036750e36/1/GtTMzv5VxeIjqbMgW5OKPRyehtU.mft
Manifest number: 1568
Signing time: Thu 26 Mar 2026 06:01:35 +0000
Manifest this update: Thu 26 Mar 2026 06:01:35 +0000
Manifest next update: Fri 27 Mar 2026 06:01:35 +0000
Files and hashes: 1: GtTMzv5VxeIjqbMgW5OKPRyehtU.crl (hash: RDO/srAGuUV8pAZu3zYlWlkq+qAufqi7jY+gvOFW/70=)
2: k7oeIV7HgF0MdSr9wY7QH1nk1Po.roa (hash: H0UiWZoHXbQKY5PjSSEja9oJ63puQn0Ebtq8jzm98zU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/d23870-74c7-4a84-90ec-c32036750e36/1/GtTMzv5VxeIjqbMgW5OKPRyehtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/d23870-74c7-4a84-90ec-c32036750e36/1/GtTMzv5VxeIjqbMgW5OKPRyehtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/GtTMzv5VxeIjqbMgW5OKPRyehtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:e6:61:7a:13:9b:75:f7:64:c2:35:0f:1e:f2:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ad4cccefe55c5e223a9b3205b938a3d1c9e86d5
Validity
Not Before: Mar 26 06:01:35 2026 GMT
Not After : Mar 27 06:01:35 2026 GMT
Subject: CN=e9c8599ceda71a957135baf22ba87d963327602c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:15:32:2a:94:12:40:a5:2b:4c:a6:0a:c4:f3:
90:f2:dd:82:2c:58:e5:32:8f:cc:be:8f:cb:1e:20:
0b:99:25:67:f3:14:94:65:54:e5:92:64:20:d9:aa:
41:49:7d:75:8d:f2:6b:02:0d:97:4a:16:36:21:ae:
8d:40:98:57:2f:21:2d:9a:df:9d:39:3a:2a:64:17:
d8:96:c1:8f:b5:15:62:4d:d7:3c:d0:5a:48:44:a4:
84:db:a3:ee:a2:fe:3b:8f:56:0c:26:e9:5e:01:e8:
0d:62:d6:70:06:62:27:3a:5e:2d:27:c9:e7:5b:b8:
54:49:17:ec:34:e2:96:f8:71:72:05:11:d3:7e:e3:
55:72:82:9b:0c:47:8d:0a:91:84:28:cf:98:ba:6a:
88:12:be:b0:1f:4c:e7:15:c2:83:dd:60:b2:8e:ca:
28:22:77:e5:d6:bc:ad:24:71:e3:13:24:e7:48:d8:
4b:06:c7:80:da:28:16:94:c6:3c:52:27:43:26:46:
ee:20:4f:92:1d:6f:3e:4d:81:d2:3a:5c:6c:70:d0:
1f:e3:10:2e:96:1d:ec:2c:69:7a:49:8d:8b:21:d2:
0a:5e:c6:96:b0:70:b1:1e:7b:c1:6c:4b:d5:e0:66:
3f:95:c9:9e:3b:7e:01:5d:12:e2:99:fe:71:50:d6:
12:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:C8:59:9C:ED:A7:1A:95:71:35:BA:F2:2B:A8:7D:96:33:27:60:2C
X509v3 Authority Key Identifier:
keyid:1A:D4:CC:CE:FE:55:C5:E2:23:A9:B3:20:5B:93:8A:3D:1C:9E:86:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GtTMzv5VxeIjqbMgW5OKPRyehtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d23870-74c7-4a84-90ec-c32036750e36/1/GtTMzv5VxeIjqbMgW5OKPRyehtU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d23870-74c7-4a84-90ec-c32036750e36/1/GtTMzv5VxeIjqbMgW5OKPRyehtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:a9:f3:94:eb:e6:d7:20:96:80:1d:e5:29:2f:c8:87:b5:2d:
79:04:7d:ee:bb:70:56:80:6f:16:1b:74:a1:18:a2:c5:78:df:
22:bf:6d:b8:08:25:6b:a5:36:37:2c:89:b5:20:0e:30:63:00:
9f:74:a4:2b:76:90:5f:6b:43:87:49:5c:0a:ad:94:2e:90:0f:
59:3f:c2:28:6c:2f:b6:b6:af:c2:a2:47:e1:11:5e:93:08:e4:
f9:22:3d:f6:70:f4:d8:5d:57:fa:16:d5:25:c5:f6:9d:a4:ac:
56:d7:42:0d:a5:c1:98:33:56:e7:3d:ea:f3:2b:07:48:5e:99:
0a:39:09:b3:53:da:aa:a2:1a:7d:38:70:79:02:51:9f:18:ed:
27:b4:05:f1:04:20:15:38:0d:28:37:ef:4f:f1:03:37:79:99:
98:bf:41:ee:9c:84:54:90:93:7c:d0:fa:11:4b:6b:a7:f9:2a:
2b:1f:d9:95:01:0a:5b:e0:2a:9d:dc:26:8b:22:82:2d:4a:55:
bb:cc:d8:c1:8e:a1:0f:e1:75:a3:9e:88:e7:f6:ae:61:f4:b1:
bd:33:02:b5:14:35:27:08:9f:64:68:f6:80:9f:63:c9:ee:93:
f1:62:2d:fb:ae:a7:84:09:61:ce:00:69:72:e6:2e:de:a7:ce:
85:8b:85:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ou+ZhehObdfdkwjUPHvJIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhZDRjY2NlZmU1NWM1ZTIyM2E5YjMyMDViOTM4YTNkMWM5
ZTg2ZDUwHhcNMjYwMzI2MDYwMTM1WhcNMjYwMzI3MDYwMTM1WjAzMTEwLwYDVQQD
EyhlOWM4NTk5Y2VkYTcxYTk1NzEzNWJhZjIyYmE4N2Q5NjMzMjc2MDJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBUyKpQSQKUrTKYKxPOQ8t2CLFjl
Mo/Mvo/LHiALmSVn8xSUZVTlkmQg2apBSX11jfJrAg2XShY2Ia6NQJhXLyEtmt+d
OToqZBfYlsGPtRViTdc80FpIRKSE26Puov47j1YMJuleAegNYtZwBmInOl4tJ8nn
W7hUSRfsNOKW+HFyBRHTfuNVcoKbDEeNCpGEKM+YumqIEr6wH0znFcKD3WCyjsoo
Infl1rytJHHjEyTnSNhLBseA2igWlMY8UidDJkbuIE+SHW8+TYHSOlxscNAf4xAu
lh3sLGl6SY2LIdIKXsaWsHCxHnvBbEvV4GY/lcmeO34BXRLimf5xUNYSvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOnIWZztpxqVcTW68iuofZYzJ2AsMB8GA1UdIwQY
MBaAFBrUzM7+VcXiI6mzIFuTij0cnobVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3RUTXp2NVZ4ZUlqcWJNZ1c1T0tQUnllaHRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9kMjM4NzAtNzRjNy00YTg0LTkwZWMt
YzMyMDM2NzUwZTM2LzEvR3RUTXp2NVZ4ZUlqcWJNZ1c1T0tQUnllaHRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi9kMjM4NzAtNzRjNy00YTg0LTkwZWMtYzMyMDM2NzUwZTM2
LzEvR3RUTXp2NVZ4ZUlqcWJNZ1c1T0tQUnllaHRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACKnzlOvm
1yCWgB3lKS/Ih7UteQR97rtwVoBvFht0oRiixXjfIr9tuAgla6U2NyyJtSAOMGMA
n3SkK3aQX2tDh0lcCq2ULpAPWT/CKGwvtravwqJH4RFekwjk+SI99nD02F1X+hbV
JcX2naSsVtdCDaXBmDNW5z3q8ysHSF6ZCjkJs1PaqqIafThweQJRnxjtJ7QF8QQg
FTgNKDfvT/EDN3mZmL9B7pyEVJCTfND6EUtrp/kqKx/ZlQEKW+AqndwmiyKCLUpV
u8zYwY6hD+F1o56I5/auYfSxvTMCtRQ1JwifZGj2gJ9jye6T8WIt+66nhAlhzgBp
cuYu3qfOhYuF9w==
-----END CERTIFICATE-----
Generated at Thu Mar 26 15:19:10 2026 by rpki-client