Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/227e6b-02e4-4108-8b33-63dd275300bc/1/gZkBtk_iJla48tsmC0U_J5NSt9A.mft
File: gZkBtk_iJla48tsmC0U_J5NSt9A.mft (raw, json)
Hash identifier: KWH6FxySJVylmW3/B0tYdG3QbaBP1cM71Vn9Zn7KOT0=
Subject key identifier: 4E:54:82:4B:40:F8:77:63:3D:95:3C:7B:E2:A4:6D:0D:47:DB:79:82
Authority key identifier: 81:99:01:B6:4F:E2:26:56:B8:F2:DB:26:0B:45:3F:27:93:52:B7:D0
Certificate issuer: /CN=819901b64fe22656b8f2db260b453f279352b7d0
Certificate serial: 019D2816D2A32CC4479A3B72CAF8A3797B8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZkBtk_iJla48tsmC0U_J5NSt9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/227e6b-02e4-4108-8b33-63dd275300bc/1/gZkBtk_iJla48tsmC0U_J5NSt9A.mft
Manifest number: 174B
Signing time: Thu 26 Mar 2026 03:01:17 +0000
Manifest this update: Thu 26 Mar 2026 03:01:17 +0000
Manifest next update: Fri 27 Mar 2026 03:01:17 +0000
Files and hashes: 1: QDfTLxIL9bTs2IJHGbG9J1JYEvI.roa (hash: gdEjWQnWjf/YDqv1eeE481wpqiSUZPqETZ8kJJFiZJE=)
2: gZkBtk_iJla48tsmC0U_J5NSt9A.crl (hash: oUlI5eWzGf9hLazUu+/P3nTQp3hgvFDMckwPtzwMD+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/227e6b-02e4-4108-8b33-63dd275300bc/1/gZkBtk_iJla48tsmC0U_J5NSt9A.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/227e6b-02e4-4108-8b33-63dd275300bc/1/gZkBtk_iJla48tsmC0U_J5NSt9A.mft
rsync://rpki.ripe.net/repository/DEFAULT/gZkBtk_iJla48tsmC0U_J5NSt9A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:d2:a3:2c:c4:47:9a:3b:72:ca:f8:a3:79:7b:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=819901b64fe22656b8f2db260b453f279352b7d0
Validity
Not Before: Mar 26 03:01:17 2026 GMT
Not After : Mar 27 03:01:17 2026 GMT
Subject: CN=4e54824b40f877633d953c7be2a46d0d47db7982
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a2:71:ea:2e:37:7e:1b:40:ed:9c:ac:fd:f0:
75:88:98:47:2d:ce:3a:a8:ce:92:b0:55:1e:ac:fd:
4d:c4:39:4c:6e:dd:54:84:0d:b8:66:23:08:28:86:
a8:27:f0:b7:88:5f:fd:50:bf:04:5c:53:0b:79:00:
41:6e:32:fa:d2:4f:2b:a3:d5:71:20:63:43:d2:6d:
80:5b:3e:27:f4:2d:b7:1e:cc:65:8c:6c:a9:8f:ea:
58:b1:74:a0:6c:a7:b1:18:8c:d7:d2:34:b7:70:2b:
53:78:cd:f6:15:aa:9e:dc:e6:f2:5e:dd:86:ca:d3:
09:c8:1d:36:33:f6:85:82:15:a4:00:23:20:02:d5:
8d:81:8c:02:c6:31:3e:a1:dc:d5:6a:b7:65:69:35:
b8:53:21:bb:ca:52:e1:55:72:f6:a7:88:c4:b1:bb:
50:82:25:55:05:6a:aa:a6:2b:49:cb:18:6c:8a:5e:
c9:10:fc:f4:01:d1:f5:ae:04:e1:86:a6:1b:14:6b:
a0:e3:5f:a7:d8:77:c0:9c:eb:c6:a4:cf:66:71:b2:
5c:bb:c1:97:50:07:c6:03:2a:e9:86:ae:38:4d:a0:
fd:7c:58:a4:f1:14:0f:c3:d0:35:ef:c1:de:6b:1b:
37:4d:0b:64:cb:59:90:cd:a2:e1:52:25:e6:16:c7:
cc:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:54:82:4B:40:F8:77:63:3D:95:3C:7B:E2:A4:6D:0D:47:DB:79:82
X509v3 Authority Key Identifier:
keyid:81:99:01:B6:4F:E2:26:56:B8:F2:DB:26:0B:45:3F:27:93:52:B7:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZkBtk_iJla48tsmC0U_J5NSt9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/227e6b-02e4-4108-8b33-63dd275300bc/1/gZkBtk_iJla48tsmC0U_J5NSt9A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/227e6b-02e4-4108-8b33-63dd275300bc/1/gZkBtk_iJla48tsmC0U_J5NSt9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:e7:d3:f4:a7:79:77:0b:eb:b8:5d:b9:b0:13:7a:84:06:82:
28:58:c7:16:c5:17:51:25:59:01:10:a5:f7:59:dc:de:68:f1:
a9:0c:25:5d:40:3b:55:d5:59:fe:ac:da:e7:63:22:16:04:f9:
26:45:2b:31:5d:2b:97:07:5e:b3:d7:e5:14:71:9e:5a:fd:cb:
fe:ef:73:5b:be:aa:6e:5a:6e:a8:51:f0:3f:74:6b:7a:04:11:
d5:e2:aa:2e:b1:19:bc:9a:56:84:90:53:aa:4e:86:e5:1f:7a:
be:21:40:ee:02:71:09:23:f2:15:9f:c5:ca:0d:09:f6:85:80:
57:15:0d:0c:5f:ab:b6:47:31:8b:65:ba:72:f1:49:7c:00:83:
56:5d:1e:e5:74:e8:34:98:24:85:f0:12:a6:75:ea:d1:67:72:
ea:77:54:3c:8d:59:d0:de:79:44:28:44:6b:d1:89:54:ed:23:
d5:5f:26:4c:b9:6f:45:04:80:b9:22:2e:9f:4c:4b:a6:ea:8a:
c6:68:63:c0:04:92:f6:ab:ab:81:df:66:f5:81:a5:c7:91:04:
08:4b:11:ba:9a:8e:43:1c:7a:6b:84:27:91:6a:6e:e4:0b:46:
9b:0b:df:08:62:5a:6f:71:c6:e5:5a:3f:37:73:9c:98:e3:9f:
02:83:69:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oFtKjLMRHmjtyyvijeXuKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxOTkwMWI2NGZlMjI2NTZiOGYyZGIyNjBiNDUzZjI3OTM1
MmI3ZDAwHhcNMjYwMzI2MDMwMTE3WhcNMjYwMzI3MDMwMTE3WjAzMTEwLwYDVQQD
Eyg0ZTU0ODI0YjQwZjg3NzYzM2Q5NTNjN2JlMmE0NmQwZDQ3ZGI3OTgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqJx6i43fhtA7Zys/fB1iJhHLc46
qM6SsFUerP1NxDlMbt1UhA24ZiMIKIaoJ/C3iF/9UL8EXFMLeQBBbjL60k8ro9Vx
IGND0m2AWz4n9C23HsxljGypj+pYsXSgbKexGIzX0jS3cCtTeM32Faqe3ObyXt2G
ytMJyB02M/aFghWkACMgAtWNgYwCxjE+odzVardlaTW4UyG7ylLhVXL2p4jEsbtQ
giVVBWqqpitJyxhsil7JEPz0AdH1rgThhqYbFGug41+n2HfAnOvGpM9mcbJcu8GX
UAfGAyrphq44TaD9fFik8RQPw9A178Heaxs3TQtky1mQzaLhUiXmFsfMhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE5UgktA+HdjPZU8e+KkbQ1H23mCMB8GA1UdIwQY
MBaAFIGZAbZP4iZWuPLbJgtFPyeTUrfQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1prQnRrX2lKbGE0OHRzbUMwVV9KNU5TdDlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC8yMjdlNmItMDJlNC00MTA4LThiMzMt
NjNkZDI3NTMwMGJjLzEvZ1prQnRrX2lKbGE0OHRzbUMwVV9KNU5TdDlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC8yMjdlNmItMDJlNC00MTA4LThiMzMtNjNkZDI3NTMwMGJj
LzEvZ1prQnRrX2lKbGE0OHRzbUMwVV9KNU5TdDlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlufT9Kd5
dwvruF25sBN6hAaCKFjHFsUXUSVZARCl91nc3mjxqQwlXUA7VdVZ/qza52MiFgT5
JkUrMV0rlwdes9flFHGeWv3L/u9zW76qblpuqFHwP3RregQR1eKqLrEZvJpWhJBT
qk6G5R96viFA7gJxCSPyFZ/Fyg0J9oWAVxUNDF+rtkcxi2W6cvFJfACDVl0e5XTo
NJgkhfASpnXq0Wdy6ndUPI1Z0N55RChEa9GJVO0j1V8mTLlvRQSAuSIun0xLpuqK
xmhjwASS9qurgd9m9YGlx5EECEsRupqOQxx6a4QnkWpu5AtGmwvfCGJab3HG5Vo/
N3OcmOOfAoNp9A==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:59:46 2026 by rpki-client