Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/8e7054-fd50-4f91-9cc7-264f0cc5ff80/1/Gq51omzPhiEiKBakccy3wNXnFuI.mft
File: Gq51omzPhiEiKBakccy3wNXnFuI.mft (raw, json)
Hash identifier: pEautNEwAGq6IDa5MfZvFSSdgx4vw3rWr3GWpYiSxwE=
Subject key identifier: 98:0B:9D:A6:BD:CC:61:C0:0B:54:1D:B9:FA:6A:64:F3:8A:D6:77:C4
Authority key identifier: 1A:AE:75:A2:6C:CF:86:21:22:28:16:A4:71:CC:B7:C0:D5:E7:16:E2
Certificate issuer: /CN=1aae75a26ccf8621222816a471ccb7c0d5e716e2
Certificate serial: 019D281666D7380E7FAB902B631A90858A90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gq51omzPhiEiKBakccy3wNXnFuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/8e7054-fd50-4f91-9cc7-264f0cc5ff80/1/Gq51omzPhiEiKBakccy3wNXnFuI.mft
Manifest number: 0B91
Signing time: Thu 26 Mar 2026 03:00:49 +0000
Manifest this update: Thu 26 Mar 2026 03:00:49 +0000
Manifest next update: Fri 27 Mar 2026 03:00:49 +0000
Files and hashes: 1: Gq51omzPhiEiKBakccy3wNXnFuI.crl (hash: z5QiHtKAGXLgR8YdpkZO729WPLTM3miL4ckqGBBlHh0=)
2: NVSHB6tzwUob75xSfGz6jaNLiYE.roa (hash: +Q4isin9ctWLd5y4nbiMUVJ0M1dT5+TerwoyCULpr+o=)
3: Ou1S9-7Ve_CB-idLlDNc-rifkt0.roa (hash: 39EOhAHHh040SHRa6UcwZcFa8mestfBXu2NgvqotUUw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/8e7054-fd50-4f91-9cc7-264f0cc5ff80/1/Gq51omzPhiEiKBakccy3wNXnFuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/8e7054-fd50-4f91-9cc7-264f0cc5ff80/1/Gq51omzPhiEiKBakccy3wNXnFuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gq51omzPhiEiKBakccy3wNXnFuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:66:d7:38:0e:7f:ab:90:2b:63:1a:90:85:8a:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aae75a26ccf8621222816a471ccb7c0d5e716e2
Validity
Not Before: Mar 26 03:00:49 2026 GMT
Not After : Mar 27 03:00:49 2026 GMT
Subject: CN=980b9da6bdcc61c00b541db9fa6a64f38ad677c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:0f:9e:8b:ed:c8:fb:a8:a6:65:a2:30:f8:86:
43:c4:cc:f1:42:27:ad:5a:e5:9b:ae:a3:c9:0b:a3:
01:ab:56:ec:5a:c6:46:65:6d:8d:ed:4d:fb:dc:4a:
45:ef:50:2f:1b:70:49:36:66:e3:67:08:e3:66:6f:
e5:ec:b4:e4:6e:1a:02:af:3b:22:b8:fd:30:95:a9:
5d:1b:a0:ce:83:b5:ea:88:1b:6e:e9:b4:89:6a:9e:
bf:32:6b:7a:04:f7:7b:4d:11:46:33:21:8f:32:90:
fd:55:75:06:94:2b:cf:c7:9e:3d:7a:45:80:50:8a:
a1:a1:c0:b5:c4:34:b2:bc:dc:ce:24:e5:01:e7:0c:
5f:c8:2b:da:7d:c5:b8:1b:c1:3a:df:c1:b1:53:3f:
9d:e1:6a:75:5b:ee:f0:a6:08:7b:8b:41:69:8a:a2:
88:f5:ca:9b:2b:9c:29:7f:4d:12:5b:8a:f1:42:64:
ef:19:1f:6a:96:ae:3e:4e:6b:9a:35:d5:8a:9a:59:
6c:45:00:3e:c0:ea:6f:f1:9c:6c:a1:61:54:6b:5e:
a4:9d:bc:a2:3f:3f:9b:80:e8:94:66:bf:7c:71:b2:
be:b7:f2:0b:36:b7:6b:01:a5:e9:87:6c:41:5d:7c:
41:a8:f9:a4:4f:d9:7e:b3:cf:f5:3d:10:cb:1a:e3:
1d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:0B:9D:A6:BD:CC:61:C0:0B:54:1D:B9:FA:6A:64:F3:8A:D6:77:C4
X509v3 Authority Key Identifier:
keyid:1A:AE:75:A2:6C:CF:86:21:22:28:16:A4:71:CC:B7:C0:D5:E7:16:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gq51omzPhiEiKBakccy3wNXnFuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8e7054-fd50-4f91-9cc7-264f0cc5ff80/1/Gq51omzPhiEiKBakccy3wNXnFuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8e7054-fd50-4f91-9cc7-264f0cc5ff80/1/Gq51omzPhiEiKBakccy3wNXnFuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:1b:d7:9e:fd:62:f6:a4:a7:32:d8:2f:cb:e8:26:3d:04:a1:
16:a8:c6:51:13:d3:e4:59:92:6d:65:6e:e2:a5:74:59:3e:f7:
c3:2d:ee:48:09:b3:8f:d7:f3:17:d5:4a:cf:3e:30:4d:66:64:
33:b6:1f:79:b5:12:18:04:2d:a7:80:a0:0b:d1:96:d9:97:d3:
ab:41:5f:7a:49:29:db:ec:65:be:7b:63:8c:ad:aa:78:9e:cf:
76:20:da:70:dd:cf:12:b1:8c:15:ad:dd:cb:69:b1:c4:81:3a:
aa:f5:93:34:ae:23:41:cb:6a:2e:15:fa:b3:2a:cc:d4:af:21:
96:18:f0:2c:3c:6a:e5:04:b0:7c:8c:9e:08:49:93:b1:ba:77:
79:62:e5:f2:65:cf:6b:aa:c7:c6:45:c4:69:7f:bf:cc:ae:a7:
2d:5f:47:91:57:52:d4:61:86:b4:9c:3c:4e:2c:97:9a:2f:6a:
cd:8b:3d:2c:ba:be:bd:ac:ab:fa:ba:c9:9a:34:b1:76:17:33:
0c:90:dd:4c:e2:ed:85:20:bd:cf:cd:a7:41:72:6e:bd:f2:a0:
56:72:34:44:84:6a:c6:af:e3:dd:bb:35:12:4e:1e:54:70:10:
02:b7:45:73:37:76:8b:77:f5:4b:18:07:26:4c:c2:bc:33:cf:
00:40:e8:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oFmbXOA5/q5ArYxqQhYqQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhYWU3NWEyNmNjZjg2MjEyMjI4MTZhNDcxY2NiN2MwZDVl
NzE2ZTIwHhcNMjYwMzI2MDMwMDQ5WhcNMjYwMzI3MDMwMDQ5WjAzMTEwLwYDVQQD
Eyg5ODBiOWRhNmJkY2M2MWMwMGI1NDFkYjlmYTZhNjRmMzhhZDY3N2M0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxw+ei+3I+6imZaIw+IZDxMzxQiet
WuWbrqPJC6MBq1bsWsZGZW2N7U373EpF71AvG3BJNmbjZwjjZm/l7LTkbhoCrzsi
uP0wlaldG6DOg7XqiBtu6bSJap6/Mmt6BPd7TRFGMyGPMpD9VXUGlCvPx549ekWA
UIqhocC1xDSyvNzOJOUB5wxfyCvafcW4G8E638GxUz+d4Wp1W+7wpgh7i0FpiqKI
9cqbK5wpf00SW4rxQmTvGR9qlq4+TmuaNdWKmllsRQA+wOpv8ZxsoWFUa16knbyi
Pz+bgOiUZr98cbK+t/ILNrdrAaXph2xBXXxBqPmkT9l+s8/1PRDLGuMd/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJgLnaa9zGHAC1QdufpqZPOK1nfEMB8GA1UdIwQY
MBaAFBqudaJsz4YhIigWpHHMt8DV5xbiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3E1MW9telBoaUVpS0Jha2NjeTN3TlhuRnVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy84ZTcwNTQtZmQ1MC00ZjkxLTljYzct
MjY0ZjBjYzVmZjgwLzEvR3E1MW9telBoaUVpS0Jha2NjeTN3TlhuRnVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy84ZTcwNTQtZmQ1MC00ZjkxLTljYzctMjY0ZjBjYzVmZjgw
LzEvR3E1MW9telBoaUVpS0Jha2NjeTN3TlhuRnVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoxvXnv1i
9qSnMtgvy+gmPQShFqjGURPT5FmSbWVu4qV0WT73wy3uSAmzj9fzF9VKzz4wTWZk
M7YfebUSGAQtp4CgC9GW2ZfTq0Ffekkp2+xlvntjjK2qeJ7PdiDacN3PErGMFa3d
y2mxxIE6qvWTNK4jQctqLhX6syrM1K8hlhjwLDxq5QSwfIyeCEmTsbp3eWLl8mXP
a6rHxkXEaX+/zK6nLV9HkVdS1GGGtJw8TiyXmi9qzYs9LLq+vayr+rrJmjSxdhcz
DJDdTOLthSC9z82nQXJuvfKgVnI0RIRqxq/j3bs1Ek4eVHAQArdFczd2i3f1SxgH
JkzCvDPPAEDoiQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:06:24 2026 by rpki-client