Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/df072c-1caf-4f8a-a494-7e3439af486f/1/gvjR2XuYaTmDMZTuI04MTZW1KJM.mft
File: gvjR2XuYaTmDMZTuI04MTZW1KJM.mft (raw, json)
Hash identifier: J132YxWCR12ZVIWmRHJx8xziZIxSaMmMpNdU1XzTKZM=
Subject key identifier: 66:DA:3E:83:7D:BC:33:BE:D0:3A:59:A9:87:E1:E3:49:82:CF:1C:A4
Authority key identifier: 82:F8:D1:D9:7B:98:69:39:83:31:94:EE:23:4E:0C:4D:95:B5:28:93
Certificate issuer: /CN=82f8d1d97b986939833194ee234e0c4d95b52893
Certificate serial: 019D25BA587F8E88B7563AD4F260459B9664
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gvjR2XuYaTmDMZTuI04MTZW1KJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/df072c-1caf-4f8a-a494-7e3439af486f/1/gvjR2XuYaTmDMZTuI04MTZW1KJM.mft
Manifest number: 0509
Signing time: Wed 25 Mar 2026 16:01:02 +0000
Manifest this update: Wed 25 Mar 2026 16:01:02 +0000
Manifest next update: Thu 26 Mar 2026 16:01:02 +0000
Files and hashes: 1: IxrbbUnr4NlEBFXv08akYoNTGj0.roa (hash: 8fPL/kdOuu7kLO2qxK2P+1Epd0kmxJSFJNXEkM34RBM=)
2: gvjR2XuYaTmDMZTuI04MTZW1KJM.crl (hash: 2NF7AFnMuftT2EvEHNnZuRfx0fmxq5aep03zRsma2pM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/df072c-1caf-4f8a-a494-7e3439af486f/1/gvjR2XuYaTmDMZTuI04MTZW1KJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/df072c-1caf-4f8a-a494-7e3439af486f/1/gvjR2XuYaTmDMZTuI04MTZW1KJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/gvjR2XuYaTmDMZTuI04MTZW1KJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:58:7f:8e:88:b7:56:3a:d4:f2:60:45:9b:96:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82f8d1d97b986939833194ee234e0c4d95b52893
Validity
Not Before: Mar 25 16:01:02 2026 GMT
Not After : Mar 26 16:01:02 2026 GMT
Subject: CN=66da3e837dbc33bed03a59a987e1e34982cf1ca4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:af:0f:93:00:34:30:8a:58:e5:2a:87:3d:fc:
6d:22:7f:4d:ba:18:4b:48:f5:d5:83:81:0f:12:72:
87:00:fa:42:78:68:a1:bc:80:7d:28:4a:52:88:c7:
44:5c:45:bd:12:e1:0a:98:6f:ab:ce:64:ae:6c:d5:
df:02:1a:81:0a:51:f2:ad:24:62:5f:b1:ac:a6:a4:
b7:b5:e5:b0:c2:ce:af:fe:4e:a5:70:2e:80:c8:80:
4c:0f:d3:8c:70:cc:6f:64:1c:d4:3d:54:31:4c:55:
bc:19:fd:f4:02:6b:2e:5b:c5:3e:a1:99:44:7d:f7:
8d:32:10:91:b2:93:8e:90:ca:00:58:52:31:d1:9e:
fa:c3:20:8e:86:03:f4:5e:dc:05:d7:7a:f3:2a:d2:
b9:ad:ba:b0:aa:3a:96:6c:ed:2e:d3:72:0e:9d:c0:
13:b8:6a:36:03:c5:34:7b:3c:9c:e5:3f:50:02:4b:
78:0d:0b:a6:72:6e:9d:75:03:3b:d7:11:cd:57:d5:
73:22:f3:29:73:ea:3c:0e:f6:d1:4c:2b:36:62:2d:
62:7b:82:81:f1:5e:5f:dc:21:ff:7a:4c:6a:8d:71:
87:a1:a8:a7:bf:63:36:18:a0:19:31:5c:d0:2c:6f:
a5:ab:8b:7d:d6:a5:db:bd:b5:ef:44:7c:94:46:1c:
89:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:DA:3E:83:7D:BC:33:BE:D0:3A:59:A9:87:E1:E3:49:82:CF:1C:A4
X509v3 Authority Key Identifier:
keyid:82:F8:D1:D9:7B:98:69:39:83:31:94:EE:23:4E:0C:4D:95:B5:28:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gvjR2XuYaTmDMZTuI04MTZW1KJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/df072c-1caf-4f8a-a494-7e3439af486f/1/gvjR2XuYaTmDMZTuI04MTZW1KJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/df072c-1caf-4f8a-a494-7e3439af486f/1/gvjR2XuYaTmDMZTuI04MTZW1KJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:be:33:ac:e1:ea:e6:ee:6f:73:c1:8d:c7:c4:c6:ec:67:53:
71:63:3e:65:d0:b4:2f:32:06:cb:3e:8b:2f:50:6a:a6:4e:1d:
d8:e6:ad:03:bf:b9:43:0c:28:c3:67:b4:dc:25:2a:b7:4f:d9:
cf:73:65:44:fe:8c:78:fe:f5:b1:1f:0d:9d:17:b5:0c:51:5d:
09:ee:9e:2e:0f:aa:5c:e0:d1:aa:36:f9:1e:c3:1f:96:a7:14:
e4:6c:0d:df:ec:99:1d:ab:7e:12:73:b7:8a:ac:0b:8b:f5:cc:
31:52:c4:8b:af:3d:3d:1a:13:11:83:4e:39:f2:47:b1:1f:b1:
b8:23:d5:45:fc:c3:0c:f7:28:e0:85:31:0a:bf:93:c7:06:b3:
6b:e7:ff:47:6b:c8:8e:a5:87:0f:95:a8:3b:fd:77:67:93:1b:
80:32:42:f0:9e:24:0c:da:f9:a7:95:f8:42:6e:e1:f9:be:41:
1a:a3:10:e3:c9:a5:9b:c8:1b:2e:c6:74:d6:d3:60:f9:a6:3c:
aa:5a:60:93:1f:74:8a:fa:97:ce:49:26:93:53:be:16:2c:fc:
39:a3:b8:3d:7b:ae:ae:3c:b3:33:f2:96:7a:fe:a9:1a:9e:9c:
4b:3c:7e:d3:65:52:97:3d:58:d6:1f:6b:65:2d:8b:f8:a0:cc:
b5:58:00:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0lulh/joi3VjrU8mBFm5ZkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyZjhkMWQ5N2I5ODY5Mzk4MzMxOTRlZTIzNGUwYzRkOTVi
NTI4OTMwHhcNMjYwMzI1MTYwMTAyWhcNMjYwMzI2MTYwMTAyWjAzMTEwLwYDVQQD
Eyg2NmRhM2U4MzdkYmMzM2JlZDAzYTU5YTk4N2UxZTM0OTgyY2YxY2E0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq68PkwA0MIpY5SqHPfxtIn9NuhhL
SPXVg4EPEnKHAPpCeGihvIB9KEpSiMdEXEW9EuEKmG+rzmSubNXfAhqBClHyrSRi
X7GspqS3teWwws6v/k6lcC6AyIBMD9OMcMxvZBzUPVQxTFW8Gf30AmsuW8U+oZlE
ffeNMhCRspOOkMoAWFIx0Z76wyCOhgP0XtwF13rzKtK5rbqwqjqWbO0u03IOncAT
uGo2A8U0ezyc5T9QAkt4DQumcm6ddQM71xHNV9VzIvMpc+o8DvbRTCs2Yi1ie4KB
8V5f3CH/ekxqjXGHoainv2M2GKAZMVzQLG+lq4t91qXbvbXvRHyURhyJ7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGbaPoN9vDO+0DpZqYfh40mCzxykMB8GA1UdIwQY
MBaAFIL40dl7mGk5gzGU7iNODE2VtSiTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3ZqUjJYdVlhVG1ETVpUdUkwNE1UWlcxS0pNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9kZjA3MmMtMWNhZi00ZjhhLWE0OTQt
N2UzNDM5YWY0ODZmLzEvZ3ZqUjJYdVlhVG1ETVpUdUkwNE1UWlcxS0pNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC9kZjA3MmMtMWNhZi00ZjhhLWE0OTQtN2UzNDM5YWY0ODZm
LzEvZ3ZqUjJYdVlhVG1ETVpUdUkwNE1UWlcxS0pNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa74zrOHq
5u5vc8GNx8TG7GdTcWM+ZdC0LzIGyz6LL1Bqpk4d2OatA7+5Qwwow2e03CUqt0/Z
z3NlRP6MeP71sR8NnRe1DFFdCe6eLg+qXODRqjb5HsMflqcU5GwN3+yZHat+EnO3
iqwLi/XMMVLEi689PRoTEYNOOfJHsR+xuCPVRfzDDPco4IUxCr+Txwaza+f/R2vI
jqWHD5WoO/13Z5MbgDJC8J4kDNr5p5X4Qm7h+b5BGqMQ48mlm8gbLsZ01tNg+aY8
qlpgkx90ivqXzkkmk1O+Fiz8OaO4PXuurjyzM/KWev6pGp6cSzx+02VSlz1Y1h9r
ZS2L+KDMtVgAJw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:23:41 2026 by rpki-client