Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/c4ebb2-74fb-497c-9707-60fa8e0af204/1/GfRzuqwkYD6teVw6ot6t-G01H8I.mft
File: GfRzuqwkYD6teVw6ot6t-G01H8I.mft (raw, json)
Hash identifier: yRyKf28EudSdG/coggRoWVV/6twYwoA1Ofpni60zjMk=
Subject key identifier: 68:99:E3:B6:7E:78:47:EC:C4:B4:D1:6E:07:12:22:55:8A:D7:97:FD
Authority key identifier: 19:F4:73:BA:AC:24:60:3E:AD:79:5C:3A:A2:DE:AD:F8:6D:35:1F:C2
Certificate issuer: /CN=19f473baac24603ead795c3aa2deadf86d351fc2
Certificate serial: 01A0F531C975B9E0894E0AA4B964B3199358
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GfRzuqwkYD6teVw6ot6t-G01H8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/c4ebb2-74fb-497c-9707-60fa8e0af204/1/GfRzuqwkYD6teVw6ot6t-G01H8I.mft
Manifest number: D5
Signing time: Thu 01 Oct 2026 02:01:15 +0000
Manifest this update: Thu 01 Oct 2026 02:01:15 +0000
Manifest next update: Fri 02 Oct 2026 02:01:15 +0000
Files and hashes: 1: GfRzuqwkYD6teVw6ot6t-G01H8I.crl (hash: 96v219GZEiyLXI36Xcwtop2IfVB6/WFWfKucxZ6bhFA=)
2: gNE4IPEZB9u0WmCsF4Pfsq8nHMA.roa (hash: xyIv1xmiMjTFOEwHYgnbJZRjv1TpjuI5f7fPV5Q1SEc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/c4ebb2-74fb-497c-9707-60fa8e0af204/1/GfRzuqwkYD6teVw6ot6t-G01H8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/c4ebb2-74fb-497c-9707-60fa8e0af204/1/GfRzuqwkYD6teVw6ot6t-G01H8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/GfRzuqwkYD6teVw6ot6t-G01H8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 02:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f5:31:c9:75:b9:e0:89:4e:0a:a4:b9:64:b3:19:93:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19f473baac24603ead795c3aa2deadf86d351fc2
Validity
Not Before: Oct 1 02:01:15 2026 GMT
Not After : Oct 2 02:01:15 2026 GMT
Subject: CN=6899e3b67e7847ecc4b4d16e071222558ad797fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e9:69:c9:af:e0:0f:f7:f8:22:4f:6e:d6:12:
6b:90:dd:d3:78:ca:f0:8b:b3:0c:f0:2a:c6:ee:01:
02:cf:25:bb:a3:dd:ae:27:0a:be:a7:60:23:3e:7d:
16:ca:95:39:48:9a:4d:50:eb:59:ee:df:ba:bc:bf:
8f:1e:0f:5c:3a:3c:de:56:7c:09:bd:5a:52:fc:50:
00:be:a8:63:a1:93:8b:15:3e:9d:82:13:24:d1:a9:
3c:59:25:bb:90:01:18:cd:18:ed:22:b5:8b:5d:b0:
04:fc:ce:b1:8d:28:65:6e:cb:62:24:83:4a:64:20:
f4:fb:b9:9e:5a:00:f0:c7:ac:1e:00:0c:58:67:05:
95:23:cf:83:2c:07:23:32:a3:af:4d:a0:71:b6:b9:
5d:36:8e:11:13:8e:ec:ca:73:6b:95:e0:de:6b:66:
8b:92:41:5c:73:02:f7:24:cd:d1:f2:2d:99:1a:3f:
54:88:45:dd:d0:85:bc:17:46:32:84:0d:c7:b7:c4:
61:ec:fa:4f:99:74:52:21:45:06:14:d2:c2:be:32:
5a:cc:2c:3d:66:6a:e5:18:45:b1:55:91:27:13:af:
a8:b4:21:67:93:99:76:4c:29:ae:16:7d:fb:b5:c4:
90:38:78:5f:fe:53:9e:27:9e:bd:a4:9c:ee:f1:2f:
1f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:99:E3:B6:7E:78:47:EC:C4:B4:D1:6E:07:12:22:55:8A:D7:97:FD
X509v3 Authority Key Identifier:
keyid:19:F4:73:BA:AC:24:60:3E:AD:79:5C:3A:A2:DE:AD:F8:6D:35:1F:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GfRzuqwkYD6teVw6ot6t-G01H8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c4ebb2-74fb-497c-9707-60fa8e0af204/1/GfRzuqwkYD6teVw6ot6t-G01H8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c4ebb2-74fb-497c-9707-60fa8e0af204/1/GfRzuqwkYD6teVw6ot6t-G01H8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:b7:33:ec:b6:1b:97:64:dd:e4:31:7a:02:8d:ec:13:6b:cb:
32:0c:b6:10:86:9e:11:7b:c2:e3:b4:95:46:2f:f3:54:c3:6e:
2a:cf:40:a0:c3:b8:22:82:cb:1d:ac:0b:46:40:6c:b6:6f:69:
de:9a:48:73:7a:91:5f:85:d3:e6:7b:c2:8d:33:aa:e3:04:0a:
54:c3:76:f3:8e:4e:4f:62:a6:1c:f8:c1:8f:34:ea:24:ff:2d:
19:94:64:6d:87:ac:ec:2d:fd:b5:8f:a4:20:0a:b2:da:44:31:
f0:1b:7e:b6:23:71:22:38:14:8a:f6:cd:0c:6c:44:0a:b7:90:
ea:60:9e:61:5d:1f:b6:1e:5a:ad:be:d9:30:d9:89:2f:2d:b0:
35:89:32:a3:6d:44:1e:dc:31:89:35:39:b2:1b:64:2c:70:a9:
aa:77:d5:9d:39:0b:20:58:81:fb:47:10:60:cf:fc:89:78:6b:
1a:12:b7:51:5d:54:e3:ad:fe:7f:8f:92:3e:91:fb:ff:7e:ef:
fd:4a:e7:92:bc:32:ff:2c:e3:ec:4b:0b:8b:09:6d:48:52:74:
17:68:b1:28:49:f4:09:24:f7:ca:0d:23:41:c5:a2:ec:73:70:
14:0c:ff:b1:32:12:80:85:2e:47:10:04:90:4f:a7:04:22:f2:
f7:06:19:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaD1Mcl1ueCJTgqkuWSzGZNYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5ZjQ3M2JhYWMyNDYwM2VhZDc5NWMzYWEyZGVhZGY4NmQz
NTFmYzIwHhcNMjYxMDAxMDIwMTE1WhcNMjYxMDAyMDIwMTE1WjAzMTEwLwYDVQQD
Eyg2ODk5ZTNiNjdlNzg0N2VjYzRiNGQxNmUwNzEyMjI1NThhZDc5N2ZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOlpya/gD/f4Ik9u1hJrkN3TeMrw
i7MM8CrG7gECzyW7o92uJwq+p2AjPn0WypU5SJpNUOtZ7t+6vL+PHg9cOjzeVnwJ
vVpS/FAAvqhjoZOLFT6dghMk0ak8WSW7kAEYzRjtIrWLXbAE/M6xjShlbstiJINK
ZCD0+7meWgDwx6weAAxYZwWVI8+DLAcjMqOvTaBxtrldNo4RE47synNrleDea2aL
kkFccwL3JM3R8i2ZGj9UiEXd0IW8F0YyhA3Ht8Rh7PpPmXRSIUUGFNLCvjJazCw9
ZmrlGEWxVZEnE6+otCFnk5l2TCmuFn37tcSQOHhf/lOeJ569pJzu8S8f8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGiZ47Z+eEfsxLTRbgcSIlWK15f9MB8GA1UdIwQY
MBaAFBn0c7qsJGA+rXlcOqLerfhtNR/CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2ZSenVxd2tZRDZ0ZVZ3Nm90NnQtRzAxSDhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9jNGViYjItNzRmYi00OTdjLTk3MDct
NjBmYThlMGFmMjA0LzEvR2ZSenVxd2tZRDZ0ZVZ3Nm90NnQtRzAxSDhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS9jNGViYjItNzRmYi00OTdjLTk3MDctNjBmYThlMGFmMjA0
LzEvR2ZSenVxd2tZRDZ0ZVZ3Nm90NnQtRzAxSDhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPbcz7LYb
l2Td5DF6Ao3sE2vLMgy2EIaeEXvC47SVRi/zVMNuKs9AoMO4IoLLHawLRkBstm9p
3ppIc3qRX4XT5nvCjTOq4wQKVMN2845OT2KmHPjBjzTqJP8tGZRkbYes7C39tY+k
IAqy2kQx8Bt+tiNxIjgUivbNDGxECreQ6mCeYV0fth5arb7ZMNmJLy2wNYkyo21E
HtwxiTU5shtkLHCpqnfVnTkLIFiB+0cQYM/8iXhrGhK3UV1U463+f4+SPpH7/37v
/Urnkrwy/yzj7EsLiwltSFJ0F2ixKEn0CST3yg0jQcWi7HNwFAz/sTISgIUuRxAE
kE+nBCLy9wYZAA==
-----END CERTIFICATE-----
Generated at Thu Oct 1 14:57:49 2026 by rpki-client