Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/fe7b79-1568-4eb6-bc0f-5489e22cab81/1/gPPzEUyqjpJigXJfcn1gjZM5URg.mft
File: gPPzEUyqjpJigXJfcn1gjZM5URg.mft (raw, json)
Hash identifier: KX/tS9Jaz8QkfRL43i5RLD2wcWIwqpE/5Pb/9pAFbTc=
Subject key identifier: 78:9D:50:C3:E5:0D:55:E6:DF:49:F1:31:1B:B2:AD:15:77:61:93:BE
Authority key identifier: 80:F3:F3:11:4C:AA:8E:92:62:81:72:5F:72:7D:60:8D:93:39:51:18
Certificate issuer: /CN=80f3f3114caa8e926281725f727d608d93395118
Certificate serial: 019D2A7252EF6FC353A393E2944BB34C8FE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gPPzEUyqjpJigXJfcn1gjZM5URg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/fe7b79-1568-4eb6-bc0f-5489e22cab81/1/gPPzEUyqjpJigXJfcn1gjZM5URg.mft
Manifest number: 04D3
Signing time: Thu 26 Mar 2026 14:00:28 +0000
Manifest this update: Thu 26 Mar 2026 14:00:28 +0000
Manifest next update: Fri 27 Mar 2026 14:00:28 +0000
Files and hashes: 1: 9VgFj1U5AyYKHqnm3AK0iZ8EyZY.roa (hash: y0d6gj7QyX83YX1GU3wakz/LTeS7oSLMM+wcVlzLLQc=)
2: gPPzEUyqjpJigXJfcn1gjZM5URg.crl (hash: 0jkpBJ1i+q/mh6En0MeqCP+PRubY/1PmdDGaDFwMmYk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/fe7b79-1568-4eb6-bc0f-5489e22cab81/1/gPPzEUyqjpJigXJfcn1gjZM5URg.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/fe7b79-1568-4eb6-bc0f-5489e22cab81/1/gPPzEUyqjpJigXJfcn1gjZM5URg.mft
rsync://rpki.ripe.net/repository/DEFAULT/gPPzEUyqjpJigXJfcn1gjZM5URg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:52:ef:6f:c3:53:a3:93:e2:94:4b:b3:4c:8f:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80f3f3114caa8e926281725f727d608d93395118
Validity
Not Before: Mar 26 14:00:28 2026 GMT
Not After : Mar 27 14:00:28 2026 GMT
Subject: CN=789d50c3e50d55e6df49f1311bb2ad15776193be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4e:d2:5e:3e:7c:e3:a0:4a:83:b4:9c:bf:9e:
53:a0:90:93:71:8d:f6:f1:c7:e4:aa:e2:45:d3:ef:
e4:d3:d1:93:8b:c3:aa:dc:70:9c:33:f0:05:99:10:
0b:09:68:dc:1c:d0:14:73:10:eb:32:3d:33:8a:57:
17:a5:19:95:ee:1d:a5:3f:5d:df:a4:2b:bd:98:c0:
e1:3f:7a:12:b6:62:ef:4d:a4:1e:e2:eb:8b:18:5c:
09:88:f7:50:1e:e8:59:19:4c:36:28:d4:aa:40:de:
b8:c0:25:e4:2e:2f:7c:9b:43:df:ac:68:68:6f:c5:
36:6d:7a:7c:69:c5:81:56:d9:a6:a2:12:1e:a7:9c:
33:86:66:5c:49:5c:50:da:17:d0:51:27:ed:45:bc:
02:03:12:d4:4b:60:93:b9:1c:9b:5c:31:f3:39:a2:
ab:13:74:44:4e:85:05:44:ab:15:d2:38:be:e2:54:
25:3c:9e:bc:c9:b3:2f:71:6f:6b:15:65:9a:0b:a9:
19:50:61:c7:c6:bf:95:ac:82:20:ef:86:33:6c:43:
e5:4f:63:da:75:b7:d9:9d:c4:cb:e7:bb:32:58:a7:
c1:24:44:02:9d:da:d8:f7:2f:bb:89:65:a9:b9:d7:
66:48:b3:24:91:9e:b1:67:03:54:5b:50:d5:b4:fb:
4f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:9D:50:C3:E5:0D:55:E6:DF:49:F1:31:1B:B2:AD:15:77:61:93:BE
X509v3 Authority Key Identifier:
keyid:80:F3:F3:11:4C:AA:8E:92:62:81:72:5F:72:7D:60:8D:93:39:51:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gPPzEUyqjpJigXJfcn1gjZM5URg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fe7b79-1568-4eb6-bc0f-5489e22cab81/1/gPPzEUyqjpJigXJfcn1gjZM5URg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fe7b79-1568-4eb6-bc0f-5489e22cab81/1/gPPzEUyqjpJigXJfcn1gjZM5URg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:87:eb:10:d2:26:4f:af:b9:49:90:c0:a0:d7:ef:82:8e:83:
69:2e:ff:1a:b1:83:e8:93:5c:47:eb:0b:db:63:ba:fd:08:bf:
91:2d:64:b1:d0:b8:7e:c2:8e:5d:b1:89:90:b2:8b:1b:15:31:
a7:75:28:d9:8b:a8:b4:48:57:90:9f:20:4f:d3:28:85:32:4e:
89:c4:50:a7:98:3c:eb:db:4c:5e:90:e8:45:a4:41:b7:10:29:
5e:f4:3b:dc:18:a0:55:ae:f8:db:75:01:87:53:57:40:f1:a2:
50:d6:0b:6a:33:3f:6e:a3:ce:a0:91:7d:44:47:39:9c:a0:22:
d5:ec:ca:c1:65:73:e4:28:1a:94:26:34:4a:c9:50:15:19:64:
f8:d3:be:d2:a9:26:9a:3d:c2:5b:f0:49:47:93:b9:49:2c:e6:
77:97:32:26:88:69:8d:ad:ae:2a:91:22:fc:a6:51:a6:dd:a9:
ae:6c:22:b5:65:68:c3:49:37:95:dc:ce:53:18:34:97:00:ee:
93:ed:25:3b:0f:97:cc:f4:a0:82:d4:ae:46:d7:0d:f4:7d:0e:
85:87:27:18:98:c3:06:06:21:96:23:af:18:67:b3:ac:57:46:
22:2a:44:b6:1a:15:c4:6b:75:ff:f8:0c:dc:f4:38:6b:d9:2e:
f3:82:69:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0qclLvb8NTo5PilEuzTI/pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwZjNmMzExNGNhYThlOTI2MjgxNzI1ZjcyN2Q2MDhkOTMz
OTUxMTgwHhcNMjYwMzI2MTQwMDI4WhcNMjYwMzI3MTQwMDI4WjAzMTEwLwYDVQQD
Eyg3ODlkNTBjM2U1MGQ1NWU2ZGY0OWYxMzExYmIyYWQxNTc3NjE5M2JlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtE7SXj5846BKg7Scv55ToJCTcY32
8cfkquJF0+/k09GTi8Oq3HCcM/AFmRALCWjcHNAUcxDrMj0zilcXpRmV7h2lP13f
pCu9mMDhP3oStmLvTaQe4uuLGFwJiPdQHuhZGUw2KNSqQN64wCXkLi98m0PfrGho
b8U2bXp8acWBVtmmohIep5wzhmZcSVxQ2hfQUSftRbwCAxLUS2CTuRybXDHzOaKr
E3REToUFRKsV0ji+4lQlPJ68ybMvcW9rFWWaC6kZUGHHxr+VrIIg74YzbEPlT2Pa
dbfZncTL57syWKfBJEQCndrY9y+7iWWpuddmSLMkkZ6xZwNUW1DVtPtPzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHidUMPlDVXm30nxMRuyrRV3YZO+MB8GA1UdIwQY
MBaAFIDz8xFMqo6SYoFyX3J9YI2TOVEYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1BQekVVeXFqcEppZ1hKZmNuMWdqWk01VVJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9mZTdiNzktMTU2OC00ZWI2LWJjMGYt
NTQ4OWUyMmNhYjgxLzEvZ1BQekVVeXFqcEppZ1hKZmNuMWdqWk01VVJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS9mZTdiNzktMTU2OC00ZWI2LWJjMGYtNTQ4OWUyMmNhYjgx
LzEvZ1BQekVVeXFqcEppZ1hKZmNuMWdqWk01VVJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbIfrENIm
T6+5SZDAoNfvgo6DaS7/GrGD6JNcR+sL22O6/Qi/kS1ksdC4fsKOXbGJkLKLGxUx
p3Uo2YuotEhXkJ8gT9MohTJOicRQp5g869tMXpDoRaRBtxApXvQ73BigVa7423UB
h1NXQPGiUNYLajM/bqPOoJF9REc5nKAi1ezKwWVz5CgalCY0SslQFRlk+NO+0qkm
mj3CW/BJR5O5SSzmd5cyJohpja2uKpEi/KZRpt2prmwitWVow0k3ldzOUxg0lwDu
k+0lOw+XzPSggtSuRtcN9H0OhYcnGJjDBgYhliOvGGezrFdGIipEthoVxGt1//gM
3PQ4a9ku84JpOw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 18:36:54 2026 by rpki-client