Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/59a43f-881a-48ed-9c3e-82c085a92777/1/GmoUE8yJZe6SQWtgWfkLGHeMizg.mft
File: GmoUE8yJZe6SQWtgWfkLGHeMizg.mft (raw, json)
Hash identifier: hYaiRMGi97rMH5hkskl9I33j81C7ei2ShaOoonhHnz8=
Subject key identifier: 81:74:63:A7:09:62:37:0F:F1:1D:F3:52:80:E6:B6:7D:57:56:2A:4D
Authority key identifier: 1A:6A:14:13:CC:89:65:EE:92:41:6B:60:59:F9:0B:18:77:8C:8B:38
Certificate issuer: /CN=1a6a1413cc8965ee92416b6059f90b18778c8b38
Certificate serial: 019D284E0FCDCED333BA242B89DCF077AF0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GmoUE8yJZe6SQWtgWfkLGHeMizg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/59a43f-881a-48ed-9c3e-82c085a92777/1/GmoUE8yJZe6SQWtgWfkLGHeMizg.mft
Manifest number: 11E5
Signing time: Thu 26 Mar 2026 04:01:37 +0000
Manifest this update: Thu 26 Mar 2026 04:01:37 +0000
Manifest next update: Fri 27 Mar 2026 04:01:37 +0000
Files and hashes: 1: 6-OKgajr9v823pHOsspSDLg9nr0.roa (hash: NwM+C7ZC5FzvcWLiIPRWkD1+69dXcTrTBwmQOx+Eypo=)
2: GmoUE8yJZe6SQWtgWfkLGHeMizg.crl (hash: Zhfijbd6EPfWcUqa5w06iejSjn8e5Jr/OzQoeLtqQM4=)
3: Rir5qUdiM3zzTUT-Xkj3rqlToCI.roa (hash: AEK9ReBz0aDKpQLz2sCl8uFxNfkDOQwbvwIUAoemDV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/59a43f-881a-48ed-9c3e-82c085a92777/1/GmoUE8yJZe6SQWtgWfkLGHeMizg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/59a43f-881a-48ed-9c3e-82c085a92777/1/GmoUE8yJZe6SQWtgWfkLGHeMizg.mft
rsync://rpki.ripe.net/repository/DEFAULT/GmoUE8yJZe6SQWtgWfkLGHeMizg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:0f:cd:ce:d3:33:ba:24:2b:89:dc:f0:77:af:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a6a1413cc8965ee92416b6059f90b18778c8b38
Validity
Not Before: Mar 26 04:01:37 2026 GMT
Not After : Mar 27 04:01:37 2026 GMT
Subject: CN=817463a70962370ff11df35280e6b67d57562a4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:2b:f9:8b:8b:f1:ce:c1:7a:40:08:38:8c:d7:
80:90:4d:e5:34:cf:bb:00:9f:ee:37:f0:11:00:28:
fd:e5:02:97:32:21:eb:b6:5b:5c:ea:b5:2c:f8:c5:
03:fb:66:2a:ce:f3:dc:42:64:a7:46:88:a8:a9:00:
cd:76:03:19:a2:9a:94:1c:09:bf:c4:cb:2a:c5:fb:
4f:72:24:c5:cb:d0:d2:80:e5:0e:38:b3:61:34:05:
49:eb:fc:22:3f:ff:4a:ee:54:5d:22:e6:40:f9:4e:
cc:ba:07:d9:5a:21:6d:a7:40:f9:f8:6e:32:ff:03:
bf:c5:1b:d7:b4:22:7f:53:29:41:2e:62:0c:99:7e:
00:93:d0:b9:6c:cf:a8:b8:2e:4b:b5:68:f5:a9:c4:
6e:95:4e:50:8e:22:4e:12:18:db:ed:67:e0:a4:40:
83:cc:96:c1:34:b3:fa:d1:20:35:76:93:45:a2:ff:
aa:1a:9f:30:f5:08:c1:f9:24:63:c2:54:ac:46:e4:
fd:6d:ec:8f:1c:37:eb:c7:59:09:84:96:69:28:af:
0c:9e:f8:f7:32:06:63:13:77:3e:31:31:70:92:41:
38:b5:cd:fe:83:c4:77:27:a0:70:d2:0d:5d:ba:02:
ed:84:78:44:38:4b:81:02:e4:2b:1d:38:9d:18:00:
bd:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:74:63:A7:09:62:37:0F:F1:1D:F3:52:80:E6:B6:7D:57:56:2A:4D
X509v3 Authority Key Identifier:
keyid:1A:6A:14:13:CC:89:65:EE:92:41:6B:60:59:F9:0B:18:77:8C:8B:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GmoUE8yJZe6SQWtgWfkLGHeMizg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/59a43f-881a-48ed-9c3e-82c085a92777/1/GmoUE8yJZe6SQWtgWfkLGHeMizg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/59a43f-881a-48ed-9c3e-82c085a92777/1/GmoUE8yJZe6SQWtgWfkLGHeMizg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:7b:7f:ef:de:db:93:f3:2a:51:76:0d:aa:02:9f:09:d4:34:
a9:1d:a6:bb:e3:92:d5:44:51:8c:d8:81:68:15:21:9d:2c:4b:
91:c3:23:c1:db:92:9f:9d:5c:91:3e:92:b6:fa:90:f0:a4:0f:
ec:a5:63:fd:bd:c2:c8:a3:78:e7:3f:7d:fa:92:e9:47:58:28:
b2:97:14:71:31:eb:e1:72:46:88:90:4c:80:aa:9c:87:45:ca:
70:c2:7e:8e:bf:5b:55:6e:e2:41:68:58:29:2a:98:30:ba:d0:
4e:da:3d:7b:65:f5:db:bb:2e:56:5f:7c:6f:26:49:a4:68:2e:
7c:37:95:ca:10:f8:8b:68:60:17:8d:cd:17:d1:b6:5d:a7:5e:
86:89:41:a2:c5:ca:76:de:84:ca:db:79:fe:fb:81:10:38:79:
b4:9a:76:8f:43:a2:e7:0d:53:a1:7a:78:53:bd:a2:51:3e:51:
bd:35:a2:cb:6d:7a:3e:08:9a:ef:90:70:94:f0:72:1d:1a:21:
3c:c4:d7:fa:8f:a9:64:e6:f6:f9:fe:8b:96:7f:58:15:80:ef:
4c:00:da:6a:06:24:88:23:f6:47:6f:95:09:7c:29:c6:8b:0a:
48:92:29:1e:f6:7e:05:f0:f5:fb:ba:a5:00:46:c6:8e:2f:d5:
b6:e3:70:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oTg/NztMzuiQridzwd68NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhNmExNDEzY2M4OTY1ZWU5MjQxNmI2MDU5ZjkwYjE4Nzc4
YzhiMzgwHhcNMjYwMzI2MDQwMTM3WhcNMjYwMzI3MDQwMTM3WjAzMTEwLwYDVQQD
Eyg4MTc0NjNhNzA5NjIzNzBmZjExZGYzNTI4MGU2YjY3ZDU3NTYyYTRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkiv5i4vxzsF6QAg4jNeAkE3lNM+7
AJ/uN/ARACj95QKXMiHrtltc6rUs+MUD+2YqzvPcQmSnRoioqQDNdgMZopqUHAm/
xMsqxftPciTFy9DSgOUOOLNhNAVJ6/wiP/9K7lRdIuZA+U7MugfZWiFtp0D5+G4y
/wO/xRvXtCJ/UylBLmIMmX4Ak9C5bM+ouC5LtWj1qcRulU5QjiJOEhjb7WfgpECD
zJbBNLP60SA1dpNFov+qGp8w9QjB+SRjwlSsRuT9beyPHDfrx1kJhJZpKK8Mnvj3
MgZjE3c+MTFwkkE4tc3+g8R3J6Bw0g1dugLthHhEOEuBAuQrHTidGAC92QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIF0Y6cJYjcP8R3zUoDmtn1XVipNMB8GA1UdIwQY
MBaAFBpqFBPMiWXukkFrYFn5Cxh3jIs4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR21vVUU4eUpaZTZTUVd0Z1dma0xHSGVNaXpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC81OWE0M2YtODgxYS00OGVkLTljM2Ut
ODJjMDg1YTkyNzc3LzEvR21vVUU4eUpaZTZTUVd0Z1dma0xHSGVNaXpnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC81OWE0M2YtODgxYS00OGVkLTljM2UtODJjMDg1YTkyNzc3
LzEvR21vVUU4eUpaZTZTUVd0Z1dma0xHSGVNaXpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbHt/797b
k/MqUXYNqgKfCdQ0qR2mu+OS1URRjNiBaBUhnSxLkcMjwduSn51ckT6StvqQ8KQP
7KVj/b3CyKN45z99+pLpR1gospcUcTHr4XJGiJBMgKqch0XKcMJ+jr9bVW7iQWhY
KSqYMLrQTto9e2X127suVl98byZJpGgufDeVyhD4i2hgF43NF9G2XadeholBosXK
dt6Eytt5/vuBEDh5tJp2j0Oi5w1ToXp4U72iUT5RvTWiy216Pgia75BwlPByHRoh
PMTX+o+pZOb2+f6Lln9YFYDvTADaagYkiCP2R2+VCXwpxosKSJIpHvZ+BfD1+7ql
AEbGji/VtuNw2g==
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:54:20 2026 by rpki-client