Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/c04359-4ae4-4e47-91cb-d7d02e97e25d/1/GiR0zlteIgufQxr8hq9OwUD18Ww.mft
File: GiR0zlteIgufQxr8hq9OwUD18Ww.mft (raw, json)
Hash identifier: T+G0EO1KuV9O9NZ9jB8tiNOyQn7JJYaojMwRiT+dOQk=
Subject key identifier: 39:43:FE:61:72:E5:51:BD:47:03:0C:44:B7:67:77:07:D0:21:E5:26
Authority key identifier: 1A:24:74:CE:5B:5E:22:0B:9F:43:1A:FC:86:AF:4E:C1:40:F5:F1:6C
Certificate issuer: /CN=1a2474ce5b5e220b9f431afc86af4ec140f5f16c
Certificate serial: 019D26CCEEE1070CD2E67B80C3BF38758F41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GiR0zlteIgufQxr8hq9OwUD18Ww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/c04359-4ae4-4e47-91cb-d7d02e97e25d/1/GiR0zlteIgufQxr8hq9OwUD18Ww.mft
Manifest number: 0D63
Signing time: Wed 25 Mar 2026 21:00:57 +0000
Manifest this update: Wed 25 Mar 2026 21:00:57 +0000
Manifest next update: Thu 26 Mar 2026 21:00:57 +0000
Files and hashes: 1: GiR0zlteIgufQxr8hq9OwUD18Ww.crl (hash: gnZw4zVHOZ/drEgAX7+A9rLg5MrIBSpeHh5EfxgXyyM=)
2: SkKZfC38ghmrpySCpGvRpFixxKU.roa (hash: o3RJWOBJfQjmbxei+seF+/aOYTLshRFp1ICoacA0zAA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/c04359-4ae4-4e47-91cb-d7d02e97e25d/1/GiR0zlteIgufQxr8hq9OwUD18Ww.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/c04359-4ae4-4e47-91cb-d7d02e97e25d/1/GiR0zlteIgufQxr8hq9OwUD18Ww.mft
rsync://rpki.ripe.net/repository/DEFAULT/GiR0zlteIgufQxr8hq9OwUD18Ww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:ee:e1:07:0c:d2:e6:7b:80:c3:bf:38:75:8f:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a2474ce5b5e220b9f431afc86af4ec140f5f16c
Validity
Not Before: Mar 25 21:00:57 2026 GMT
Not After : Mar 26 21:00:57 2026 GMT
Subject: CN=3943fe6172e551bd47030c44b7677707d021e526
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:df:68:df:17:33:c4:12:72:da:f1:87:c3:dd:
b3:0e:6d:92:82:7e:47:da:dd:2d:33:cc:e0:37:03:
19:c2:b2:13:cd:97:60:29:4c:59:5d:5b:45:a7:43:
38:be:24:8e:45:a4:ae:6a:5f:43:94:33:d2:d0:7e:
22:fd:6a:07:94:75:e7:92:89:fb:14:c3:29:57:49:
90:ad:4f:9a:ed:56:1a:30:d3:71:ab:b2:8b:16:ac:
14:ed:49:0b:fe:67:81:81:80:f5:6f:69:2b:fb:51:
8e:c0:d2:ec:ec:27:c7:00:19:ab:5e:a6:27:c5:40:
55:d8:3b:82:ba:d5:97:c7:9b:ed:b4:f2:ca:d2:7f:
7e:0b:23:d2:8d:a2:b5:3c:82:80:76:ae:a7:b3:20:
af:12:45:2a:a6:a9:11:cc:de:a3:c0:64:c3:5a:23:
db:32:31:50:2e:73:a4:66:0c:f1:55:6c:64:84:a5:
b4:36:ff:35:b2:53:73:54:f3:53:aa:8b:57:5e:d8:
95:f3:36:f8:ce:d0:ed:60:4f:fd:ee:59:bf:14:0f:
ba:56:ff:5d:d7:6d:0c:8d:8a:a1:70:12:45:86:e9:
37:fc:74:45:62:15:c6:29:7e:28:33:c3:0b:79:5a:
4b:9f:b6:5b:06:bd:6c:9f:01:82:20:46:97:17:7a:
34:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:43:FE:61:72:E5:51:BD:47:03:0C:44:B7:67:77:07:D0:21:E5:26
X509v3 Authority Key Identifier:
keyid:1A:24:74:CE:5B:5E:22:0B:9F:43:1A:FC:86:AF:4E:C1:40:F5:F1:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GiR0zlteIgufQxr8hq9OwUD18Ww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c04359-4ae4-4e47-91cb-d7d02e97e25d/1/GiR0zlteIgufQxr8hq9OwUD18Ww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c04359-4ae4-4e47-91cb-d7d02e97e25d/1/GiR0zlteIgufQxr8hq9OwUD18Ww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:71:d7:87:8c:33:9a:05:ef:56:70:02:b7:ff:ee:d1:51:18:
fc:86:b6:08:be:b4:3e:01:cb:ae:8a:64:3f:57:6a:61:ed:65:
86:0b:55:d4:c9:ae:78:5f:f0:49:bb:bf:31:43:9f:44:5e:d5:
77:09:cf:9e:f3:1f:1b:20:1b:88:00:4e:e3:33:22:8c:65:7f:
fc:af:80:fc:14:b6:ec:ad:30:10:ea:cb:f3:50:10:0a:ca:ad:
f7:1e:0d:24:4e:fd:72:3c:95:18:9a:9a:63:ea:9d:83:b4:99:
21:cd:5a:e9:c3:47:db:52:0a:f2:f6:7c:e6:0c:0d:24:cf:91:
d4:af:1d:f1:fa:18:eb:dc:fd:29:d1:ab:7f:88:97:8e:91:77:
46:5e:f8:6d:42:8a:49:37:3c:00:9d:3d:ac:dd:de:c4:51:61:
19:cd:51:48:81:63:e5:8b:42:78:dc:66:9c:8c:65:d9:28:db:
8b:ab:f7:57:b6:03:9f:c7:b0:4a:62:af:5e:9f:10:39:be:08:
45:cf:2a:fa:e4:b1:cf:4b:3c:2d:ca:79:41:fe:0c:e0:3e:ba:
87:8b:6d:7e:83:42:25:68:fd:b0:c7:5f:bc:1e:0e:ae:5a:cb:
26:d9:71:d8:52:50:4a:e8:b4:73:c4:e7:90:80:b7:ec:fe:b5:
a0:68:c5:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mzO7hBwzS5nuAw784dY9BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhMjQ3NGNlNWI1ZTIyMGI5ZjQzMWFmYzg2YWY0ZWMxNDBm
NWYxNmMwHhcNMjYwMzI1MjEwMDU3WhcNMjYwMzI2MjEwMDU3WjAzMTEwLwYDVQQD
EygzOTQzZmU2MTcyZTU1MWJkNDcwMzBjNDRiNzY3NzcwN2QwMjFlNTI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr99o3xczxBJy2vGHw92zDm2Sgn5H
2t0tM8zgNwMZwrITzZdgKUxZXVtFp0M4viSORaSual9DlDPS0H4i/WoHlHXnkon7
FMMpV0mQrU+a7VYaMNNxq7KLFqwU7UkL/meBgYD1b2kr+1GOwNLs7CfHABmrXqYn
xUBV2DuCutWXx5vttPLK0n9+CyPSjaK1PIKAdq6nsyCvEkUqpqkRzN6jwGTDWiPb
MjFQLnOkZgzxVWxkhKW0Nv81slNzVPNTqotXXtiV8zb4ztDtYE/97lm/FA+6Vv9d
120MjYqhcBJFhuk3/HRFYhXGKX4oM8MLeVpLn7ZbBr1snwGCIEaXF3o0lwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDlD/mFy5VG9RwMMRLdndwfQIeUmMB8GA1UdIwQY
MBaAFBokdM5bXiILn0Ma/IavTsFA9fFsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2lSMHpsdGVJZ3VmUXhyOGhxOU93VUQxOFd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9jMDQzNTktNGFlNC00ZTQ3LTkxY2It
ZDdkMDJlOTdlMjVkLzEvR2lSMHpsdGVJZ3VmUXhyOGhxOU93VUQxOFd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC9jMDQzNTktNGFlNC00ZTQ3LTkxY2ItZDdkMDJlOTdlMjVk
LzEvR2lSMHpsdGVJZ3VmUXhyOGhxOU93VUQxOFd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP3HXh4wz
mgXvVnACt//u0VEY/Ia2CL60PgHLropkP1dqYe1lhgtV1MmueF/wSbu/MUOfRF7V
dwnPnvMfGyAbiABO4zMijGV//K+A/BS27K0wEOrL81AQCsqt9x4NJE79cjyVGJqa
Y+qdg7SZIc1a6cNH21IK8vZ85gwNJM+R1K8d8foY69z9KdGrf4iXjpF3Rl74bUKK
STc8AJ09rN3exFFhGc1RSIFj5YtCeNxmnIxl2Sjbi6v3V7YDn8ewSmKvXp8QOb4I
Rc8q+uSxz0s8Lcp5Qf4M4D66h4ttfoNCJWj9sMdfvB4OrlrLJtlx2FJQSui0c8Tn
kIC37P61oGjFiQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 04:15:32 2026 by rpki-client