Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/c4ebb2-74fb-497c-9707-60fa8e0af204/1/GfRzuqwkYD6teVw6ot6t-G01H8I.mft
File: GfRzuqwkYD6teVw6ot6t-G01H8I.mft (raw, json)
Hash identifier: qLClaV75pquhcUQoZRWU+vQvq4FkP+Tl6bOrOPnkb2g=
Subject key identifier: 3F:3D:32:80:62:14:84:3E:DF:4D:59:99:F0:03:9B:B2:9A:27:5F:01
Authority key identifier: 19:F4:73:BA:AC:24:60:3E:AD:79:5C:3A:A2:DE:AD:F8:6D:35:1F:C2
Certificate issuer: /CN=19f473baac24603ead795c3aa2deadf86d351fc2
Certificate serial: 019F93C9839C37BA9EBDB5E40FEC5051702F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GfRzuqwkYD6teVw6ot6t-G01H8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/c4ebb2-74fb-497c-9707-60fa8e0af204/1/GfRzuqwkYD6teVw6ot6t-G01H8I.mft
Manifest number: 1E
Signing time: Fri 24 Jul 2026 11:01:24 +0000
Manifest this update: Fri 24 Jul 2026 11:01:24 +0000
Manifest next update: Sat 25 Jul 2026 11:01:24 +0000
Files and hashes: 1: GfRzuqwkYD6teVw6ot6t-G01H8I.crl (hash: 0BtXroHEGzA21YxmGOdN6MvbRdcpN1muWnhDUXGMmxw=)
2: gNE4IPEZB9u0WmCsF4Pfsq8nHMA.roa (hash: xyIv1xmiMjTFOEwHYgnbJZRjv1TpjuI5f7fPV5Q1SEc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/c4ebb2-74fb-497c-9707-60fa8e0af204/1/GfRzuqwkYD6teVw6ot6t-G01H8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/c4ebb2-74fb-497c-9707-60fa8e0af204/1/GfRzuqwkYD6teVw6ot6t-G01H8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/GfRzuqwkYD6teVw6ot6t-G01H8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 11:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:c9:83:9c:37:ba:9e:bd:b5:e4:0f:ec:50:51:70:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19f473baac24603ead795c3aa2deadf86d351fc2
Validity
Not Before: Jul 24 11:01:24 2026 GMT
Not After : Jul 25 11:01:24 2026 GMT
Subject: CN=3f3d32806214843edf4d5999f0039bb29a275f01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b7:2c:8c:73:a7:ae:73:1f:2f:54:11:1f:41:
09:f5:c1:23:1d:02:07:c5:97:d4:e6:11:c8:13:c2:
3f:61:07:06:ce:f1:61:56:b2:a7:4d:be:f3:3c:64:
c2:33:2d:38:dc:92:94:14:21:c7:04:af:e2:e3:83:
be:88:2d:e5:35:68:da:45:4c:28:da:a7:81:57:9f:
4a:ec:f1:0b:1b:f8:d4:9c:5a:e4:73:2a:13:f5:17:
18:79:9a:00:b3:7d:8d:c8:7b:c2:71:be:b8:38:65:
21:b4:e2:27:22:c4:8d:e4:a9:a3:bb:e1:3a:c5:3d:
8c:10:32:07:e0:af:0a:8e:2c:bb:88:c5:d4:20:ee:
e3:b2:da:54:26:8c:60:b8:fa:d0:2f:95:6b:0e:4f:
0b:05:64:2b:c9:23:59:c7:c7:05:ee:b4:f3:d1:6b:
82:e3:12:92:f8:4e:a3:8c:6e:13:e9:be:5e:8a:23:
8e:5a:b1:c6:35:b3:96:be:de:f9:f5:5a:ec:25:cc:
e4:fb:8c:c7:ad:7a:46:1f:84:1b:5b:cb:6d:d7:24:
1b:ae:2e:4f:68:77:bb:7d:08:d4:a9:d4:6f:6a:fc:
59:e6:a5:c5:3d:e1:77:4a:54:40:af:f5:ef:fc:12:
82:8e:3e:7c:16:99:67:d4:d9:6d:0a:5e:2b:39:29:
51:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:3D:32:80:62:14:84:3E:DF:4D:59:99:F0:03:9B:B2:9A:27:5F:01
X509v3 Authority Key Identifier:
keyid:19:F4:73:BA:AC:24:60:3E:AD:79:5C:3A:A2:DE:AD:F8:6D:35:1F:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GfRzuqwkYD6teVw6ot6t-G01H8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c4ebb2-74fb-497c-9707-60fa8e0af204/1/GfRzuqwkYD6teVw6ot6t-G01H8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c4ebb2-74fb-497c-9707-60fa8e0af204/1/GfRzuqwkYD6teVw6ot6t-G01H8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:3a:bd:41:16:92:e9:d7:22:b5:25:4c:95:47:3e:0c:62:d4:
20:0b:7c:e8:78:e8:15:75:2e:54:6a:67:dc:7a:a0:65:d7:97:
3c:d5:cb:ae:1c:87:81:ac:01:cc:d4:fa:af:89:8a:f4:78:a6:
27:de:67:de:eb:cd:69:68:7c:59:cd:b6:c7:f2:92:4e:de:d3:
f0:05:f2:2c:13:e1:67:e5:2f:34:b4:b8:60:35:e1:3c:5c:75:
4f:5d:47:30:b2:ed:d6:cd:5a:33:03:bc:75:a2:ba:85:2e:b9:
74:62:a1:0b:61:42:46:39:1d:fa:2c:bc:f7:34:ff:6f:1d:4d:
23:66:77:03:7c:f3:2f:16:65:9f:01:d0:bb:d7:2c:24:72:7a:
89:d9:5f:e2:3f:47:c2:de:d0:6c:ac:bc:30:d2:c8:45:90:a3:
3a:88:7b:05:6c:82:0b:1d:a0:45:5a:c1:cc:73:e9:59:55:ff:
d1:9f:05:3a:66:3a:ae:b9:8c:7c:c2:84:de:2e:4d:36:30:8f:
c7:c8:79:ba:5d:15:84:74:72:0a:64:2c:bc:0a:72:ec:f7:7e:
43:ff:25:79:07:b9:22:da:0e:b8:68:08:18:f8:d2:05:05:04:
fb:3f:b7:0c:5b:b8:66:89:cc:51:6d:0e:79:8d:c8:37:f4:fd:
f6:12:39:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TyYOcN7qevbXkD+xQUXAvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5ZjQ3M2JhYWMyNDYwM2VhZDc5NWMzYWEyZGVhZGY4NmQz
NTFmYzIwHhcNMjYwNzI0MTEwMTI0WhcNMjYwNzI1MTEwMTI0WjAzMTEwLwYDVQQD
EygzZjNkMzI4MDYyMTQ4NDNlZGY0ZDU5OTlmMDAzOWJiMjlhMjc1ZjAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxLcsjHOnrnMfL1QRH0EJ9cEjHQIH
xZfU5hHIE8I/YQcGzvFhVrKnTb7zPGTCMy043JKUFCHHBK/i44O+iC3lNWjaRUwo
2qeBV59K7PELG/jUnFrkcyoT9RcYeZoAs32NyHvCcb64OGUhtOInIsSN5Kmju+E6
xT2MEDIH4K8Kjiy7iMXUIO7jstpUJoxguPrQL5VrDk8LBWQrySNZx8cF7rTz0WuC
4xKS+E6jjG4T6b5eiiOOWrHGNbOWvt759VrsJczk+4zHrXpGH4QbW8tt1yQbri5P
aHe7fQjUqdRvavxZ5qXFPeF3SlRAr/Xv/BKCjj58Fpln1NltCl4rOSlREQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD89MoBiFIQ+301ZmfADm7KaJ18BMB8GA1UdIwQY
MBaAFBn0c7qsJGA+rXlcOqLerfhtNR/CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2ZSenVxd2tZRDZ0ZVZ3Nm90NnQtRzAxSDhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9jNGViYjItNzRmYi00OTdjLTk3MDct
NjBmYThlMGFmMjA0LzEvR2ZSenVxd2tZRDZ0ZVZ3Nm90NnQtRzAxSDhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS9jNGViYjItNzRmYi00OTdjLTk3MDctNjBmYThlMGFmMjA0
LzEvR2ZSenVxd2tZRDZ0ZVZ3Nm90NnQtRzAxSDhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUzq9QRaS
6dcitSVMlUc+DGLUIAt86HjoFXUuVGpn3HqgZdeXPNXLrhyHgawBzNT6r4mK9Him
J95n3uvNaWh8Wc22x/KSTt7T8AXyLBPhZ+UvNLS4YDXhPFx1T11HMLLt1s1aMwO8
daK6hS65dGKhC2FCRjkd+iy89zT/bx1NI2Z3A3zzLxZlnwHQu9csJHJ6idlf4j9H
wt7QbKy8MNLIRZCjOoh7BWyCCx2gRVrBzHPpWVX/0Z8FOmY6rrmMfMKE3i5NNjCP
x8h5ul0VhHRyCmQsvApy7Pd+Q/8leQe5ItoOuGgIGPjSBQUE+z+3DFu4ZonMUW0O
eY3IN/T99hI5jA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 20:48:51 2026 by rpki-client