Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/6ea16c-b92f-4041-a508-bb5893a6ac91/1/ga5w39QwUnNv6F8A0phM43a3brM.mft
File: ga5w39QwUnNv6F8A0phM43a3brM.mft (raw, json)
Hash identifier: UDNg3QeeyCr6grzmSYnEu1mcFO+1UmJutoCzrXEp9BU=
Subject key identifier: B0:0C:47:BF:09:78:7F:F6:21:02:4B:0B:B5:22:CF:25:30:2B:EF:09
Authority key identifier: 81:AE:70:DF:D4:30:52:73:6F:E8:5F:00:D2:98:4C:E3:76:B7:6E:B3
Certificate issuer: /CN=81ae70dfd43052736fe85f00d2984ce376b76eb3
Certificate serial: 019D284E5CBB908EF8043673EBA0248553F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ga5w39QwUnNv6F8A0phM43a3brM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/6ea16c-b92f-4041-a508-bb5893a6ac91/1/ga5w39QwUnNv6F8A0phM43a3brM.mft
Manifest number: 09E2
Signing time: Thu 26 Mar 2026 04:01:57 +0000
Manifest this update: Thu 26 Mar 2026 04:01:57 +0000
Manifest next update: Fri 27 Mar 2026 04:01:57 +0000
Files and hashes: 1: EvlHWqhQzmdjRG2k6tk-9HD_zOg.roa (hash: CaEBziMi2C6rN6WGf7O34W/+WtB1Ogao7r0fRD3u2XA=)
2: ga5w39QwUnNv6F8A0phM43a3brM.crl (hash: Sc3ODnbWJTWBDczRCIAXPlV4GdJyZy/0BRxR9QAMkhs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/6ea16c-b92f-4041-a508-bb5893a6ac91/1/ga5w39QwUnNv6F8A0phM43a3brM.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/6ea16c-b92f-4041-a508-bb5893a6ac91/1/ga5w39QwUnNv6F8A0phM43a3brM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ga5w39QwUnNv6F8A0phM43a3brM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:5c:bb:90:8e:f8:04:36:73:eb:a0:24:85:53:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81ae70dfd43052736fe85f00d2984ce376b76eb3
Validity
Not Before: Mar 26 04:01:57 2026 GMT
Not After : Mar 27 04:01:57 2026 GMT
Subject: CN=b00c47bf09787ff621024b0bb522cf25302bef09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:bc:14:0d:da:fa:bc:f6:56:5f:60:83:fd:c1:
8f:27:d3:bc:0d:64:8c:a6:07:3d:35:1e:27:53:85:
11:bb:ac:5d:4e:22:03:97:7f:74:2e:79:bd:37:da:
23:e6:c7:51:f5:51:04:6e:86:01:5f:a6:10:1e:49:
57:a4:be:bb:f4:98:e6:8b:2d:44:a2:68:23:16:10:
53:7b:a7:c8:e9:62:3f:4e:1e:fb:5f:5c:86:82:90:
57:c4:ce:dc:61:5a:f1:a2:1c:6a:5f:99:60:de:b4:
71:76:68:c9:cd:ce:b2:94:c8:48:1e:28:35:7e:06:
3f:e4:7c:02:dc:8c:7c:9a:4a:4e:b7:b4:8e:d2:cf:
46:19:2b:4f:42:fa:36:37:d1:d1:46:ff:b8:b4:53:
b3:ac:b9:c1:9c:d8:08:05:23:af:65:da:bf:8c:7a:
0d:a1:ce:cc:bb:12:35:d7:89:d1:58:93:f3:34:26:
66:e2:5c:87:c7:b5:3c:8b:c3:91:71:b0:c4:23:ad:
26:21:d0:6a:19:59:cf:78:f0:58:0b:e9:7e:15:3f:
a2:2b:9d:a8:8d:94:13:f7:42:f2:09:93:8b:ec:5a:
00:91:67:ef:cf:1f:73:73:5c:2c:80:94:ee:26:a3:
6d:07:e4:13:bf:04:60:5c:3b:d0:a0:3f:a1:08:64:
92:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:0C:47:BF:09:78:7F:F6:21:02:4B:0B:B5:22:CF:25:30:2B:EF:09
X509v3 Authority Key Identifier:
keyid:81:AE:70:DF:D4:30:52:73:6F:E8:5F:00:D2:98:4C:E3:76:B7:6E:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ga5w39QwUnNv6F8A0phM43a3brM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/6ea16c-b92f-4041-a508-bb5893a6ac91/1/ga5w39QwUnNv6F8A0phM43a3brM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/6ea16c-b92f-4041-a508-bb5893a6ac91/1/ga5w39QwUnNv6F8A0phM43a3brM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:fe:72:b9:d9:0c:48:9d:df:1e:f4:58:0f:fe:bc:9a:37:60:
be:18:c5:bd:e5:fc:1b:4b:29:84:2d:80:de:7d:27:63:10:31:
b3:a0:34:e2:32:dc:fb:9e:f5:63:0f:a3:f1:99:d6:f9:a3:10:
dc:ef:da:99:ac:44:c4:3c:61:2f:44:98:da:76:5d:33:54:3e:
d1:71:78:e0:af:3b:92:ed:62:19:a6:02:27:07:00:e8:8c:d2:
a3:3b:f0:56:ce:96:b0:ab:d0:e8:05:70:16:55:98:01:4b:72:
cf:1b:1e:f2:d4:ef:bb:9d:03:3c:0b:50:0c:91:3c:0b:a8:5c:
ba:47:41:3c:ed:09:31:ec:62:59:8a:9b:8b:44:69:1b:37:9c:
95:9d:7a:b3:df:a5:3b:f8:77:c9:ef:d2:cf:8b:02:cf:12:60:
70:2a:71:fd:8f:2c:c4:99:ce:7a:22:42:7d:9f:17:43:c7:3d:
19:cf:e3:ee:a3:e7:08:aa:02:d6:b5:36:15:b1:d1:cf:89:bc:
d9:9a:68:5e:78:c6:ca:ca:f6:7e:1e:a1:51:63:84:83:ab:b4:
8f:4c:ac:2b:f4:50:ba:90:32:e0:1c:03:0d:0a:28:da:ee:58:
c6:5c:9b:1f:30:13:32:05:e1:56:ac:d1:35:65:de:82:16:29:
cc:e9:9f:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oTly7kI74BDZz66AkhVP0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxYWU3MGRmZDQzMDUyNzM2ZmU4NWYwMGQyOTg0Y2UzNzZi
NzZlYjMwHhcNMjYwMzI2MDQwMTU3WhcNMjYwMzI3MDQwMTU3WjAzMTEwLwYDVQQD
EyhiMDBjNDdiZjA5Nzg3ZmY2MjEwMjRiMGJiNTIyY2YyNTMwMmJlZjA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLwUDdr6vPZWX2CD/cGPJ9O8DWSM
pgc9NR4nU4URu6xdTiIDl390Lnm9N9oj5sdR9VEEboYBX6YQHklXpL679Jjmiy1E
omgjFhBTe6fI6WI/Th77X1yGgpBXxM7cYVrxohxqX5lg3rRxdmjJzc6ylMhIHig1
fgY/5HwC3Ix8mkpOt7SO0s9GGStPQvo2N9HRRv+4tFOzrLnBnNgIBSOvZdq/jHoN
oc7MuxI114nRWJPzNCZm4lyHx7U8i8ORcbDEI60mIdBqGVnPePBYC+l+FT+iK52o
jZQT90LyCZOL7FoAkWfvzx9zc1wsgJTuJqNtB+QTvwRgXDvQoD+hCGSSowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLAMR78JeH/2IQJLC7UizyUwK+8JMB8GA1UdIwQY
MBaAFIGucN/UMFJzb+hfANKYTON2t26zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2E1dzM5UXdVbk52NkY4QTBwaE00M2EzYnJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS82ZWExNmMtYjkyZi00MDQxLWE1MDgt
YmI1ODkzYTZhYzkxLzEvZ2E1dzM5UXdVbk52NkY4QTBwaE00M2EzYnJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS82ZWExNmMtYjkyZi00MDQxLWE1MDgtYmI1ODkzYTZhYzkx
LzEvZ2E1dzM5UXdVbk52NkY4QTBwaE00M2EzYnJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjf5yudkM
SJ3fHvRYD/68mjdgvhjFveX8G0sphC2A3n0nYxAxs6A04jLc+571Yw+j8ZnW+aMQ
3O/amaxExDxhL0SY2nZdM1Q+0XF44K87ku1iGaYCJwcA6IzSozvwVs6WsKvQ6AVw
FlWYAUtyzxse8tTvu50DPAtQDJE8C6hcukdBPO0JMexiWYqbi0RpGzeclZ16s9+l
O/h3ye/Sz4sCzxJgcCpx/Y8sxJnOeiJCfZ8XQ8c9Gc/j7qPnCKoC1rU2FbHRz4m8
2ZpoXnjGysr2fh6hUWOEg6u0j0ysK/RQupAy4BwDDQoo2u5YxlybHzATMgXhVqzR
NWXeghYpzOmfAA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:14:44 2026 by rpki-client