Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.mft
File: GbgAw5Em2zyk4NVpEPCtN5JX5KA.mft (raw, json)
Hash identifier: vtVO3isk729ufzHhQvxuy/GuK5EEvcSDYDpJDZbCKaU=
Subject key identifier: E6:B2:8A:68:FB:B4:05:80:D7:82:15:2F:51:40:10:9F:BC:68:E6:3A
Authority key identifier: 19:B8:00:C3:91:26:DB:3C:A4:E0:D5:69:10:F0:AD:37:92:57:E4:A0
Certificate issuer: /CN=19b800c39126db3ca4e0d56910f0ad379257e4a0
Certificate serial: 019D2772282C8160E0B7B8CD868E4925FFE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GbgAw5Em2zyk4NVpEPCtN5JX5KA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.mft
Manifest number: 1569
Signing time: Thu 26 Mar 2026 00:01:25 +0000
Manifest this update: Thu 26 Mar 2026 00:01:25 +0000
Manifest next update: Fri 27 Mar 2026 00:01:25 +0000
Files and hashes: 1: GbgAw5Em2zyk4NVpEPCtN5JX5KA.crl (hash: vFulQbYziazbkztkpgm4no7KMVkg0DHyZF0RzQAfOKg=)
2: m1RumSL2Lpkn5xSdos4UK5ogmGo.roa (hash: t8Fp9lqrvZa6bhqA8X/cu7LJ30Q8l1gfuatd+QQW+b8=)
3: tmAwZ9rp_6wm7u527HJaXsN99iU.roa (hash: RX2GBKLuRCt7FRxgKIFpvkG43EUbtKKHIwQ+YaosNiU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GbgAw5Em2zyk4NVpEPCtN5JX5KA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:28:2c:81:60:e0:b7:b8:cd:86:8e:49:25:ff:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19b800c39126db3ca4e0d56910f0ad379257e4a0
Validity
Not Before: Mar 26 00:01:25 2026 GMT
Not After : Mar 27 00:01:25 2026 GMT
Subject: CN=e6b28a68fbb40580d782152f5140109fbc68e63a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:22:e6:bd:88:ef:be:d8:7f:d0:14:6b:45:23:
c5:4a:42:fd:ad:8a:42:24:d0:eb:40:99:a8:59:f4:
51:2c:87:4d:af:e5:8b:9c:be:c2:5a:26:00:35:e7:
2e:41:46:e0:f8:03:93:0c:b9:44:f5:43:62:d0:5d:
f1:fc:e5:d4:75:50:da:76:dd:7c:05:7f:06:c3:c2:
a9:0d:af:f1:bb:5b:57:58:89:27:ee:ff:5d:d5:69:
ec:a5:b3:02:fe:d6:9b:83:f2:3f:1d:7d:4b:fb:1b:
8e:c4:0a:28:48:31:09:cd:4c:5a:53:b0:50:e1:cd:
71:2d:40:48:31:89:be:e5:30:2e:c6:de:3a:da:9c:
57:e0:c0:2b:4c:89:60:62:7f:8e:dd:a8:2c:06:c9:
d4:ee:cf:dd:a8:83:ac:40:ad:b5:c0:94:1b:8d:db:
03:81:7b:9e:11:62:da:e5:75:db:83:36:f5:04:40:
65:46:ed:eb:33:88:47:ce:4c:43:f6:10:8b:ec:5d:
48:7d:34:e6:74:ca:4d:8a:91:7c:2e:d3:b3:c2:4b:
dc:13:3f:e7:58:be:0a:5f:22:91:46:69:d9:0f:58:
3d:cd:15:fa:5e:95:8f:9a:ca:e4:39:ad:ec:57:00:
c5:ac:29:d2:56:d5:73:e9:5c:23:94:6c:2a:80:08:
50:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:B2:8A:68:FB:B4:05:80:D7:82:15:2F:51:40:10:9F:BC:68:E6:3A
X509v3 Authority Key Identifier:
keyid:19:B8:00:C3:91:26:DB:3C:A4:E0:D5:69:10:F0:AD:37:92:57:E4:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbgAw5Em2zyk4NVpEPCtN5JX5KA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:fd:16:78:6b:b9:3f:21:ee:0f:be:6c:9b:2c:0e:08:e5:81:
1e:3e:9f:84:ab:ea:15:aa:cd:b1:b7:c8:52:9b:3d:ae:29:6d:
75:1d:17:61:53:43:eb:36:cb:9f:eb:e4:36:42:44:83:d3:ed:
bd:1b:de:db:84:68:81:03:19:c5:d8:0e:a5:44:0a:27:e8:37:
22:32:0b:eb:16:ef:8e:bd:33:87:3f:65:d2:46:f2:ec:73:03:
fd:28:94:f8:6a:ef:76:72:8d:1d:5a:41:03:cd:1b:b3:2e:68:
5e:f0:09:91:39:0f:1f:2e:8b:36:34:e2:c1:a5:aa:54:d9:0b:
75:0f:c3:f0:32:85:2a:db:ec:dc:23:fe:12:27:bd:32:35:cf:
cc:91:27:6f:98:19:b7:fa:98:b2:6b:cc:fa:ba:2d:72:ed:50:
76:72:eb:2b:39:4b:4b:b7:b0:0e:2b:9b:6b:f7:0c:f7:4d:66:
60:c7:e3:ad:4c:22:0f:14:ef:3c:1a:c4:d6:0b:29:8a:ca:e9:
31:6e:69:55:d7:c1:fe:46:3d:53:58:1a:10:f7:98:93:47:a2:
39:6a:5c:a7:a4:83:0d:0f:23:bb:20:d4:40:34:62:32:58:62:
eb:cf:66:36:cb:b5:0f:56:1e:98:ba:c4:2b:39:40:4a:02:46:
36:85:9d:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ncigsgWDgt7jNho5JJf/lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5YjgwMGMzOTEyNmRiM2NhNGUwZDU2OTEwZjBhZDM3OTI1
N2U0YTAwHhcNMjYwMzI2MDAwMTI1WhcNMjYwMzI3MDAwMTI1WjAzMTEwLwYDVQQD
EyhlNmIyOGE2OGZiYjQwNTgwZDc4MjE1MmY1MTQwMTA5ZmJjNjhlNjNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1yLmvYjvvth/0BRrRSPFSkL9rYpC
JNDrQJmoWfRRLIdNr+WLnL7CWiYANecuQUbg+AOTDLlE9UNi0F3x/OXUdVDadt18
BX8Gw8KpDa/xu1tXWIkn7v9d1WnspbMC/tabg/I/HX1L+xuOxAooSDEJzUxaU7BQ
4c1xLUBIMYm+5TAuxt462pxX4MArTIlgYn+O3agsBsnU7s/dqIOsQK21wJQbjdsD
gXueEWLa5XXbgzb1BEBlRu3rM4hHzkxD9hCL7F1IfTTmdMpNipF8LtOzwkvcEz/n
WL4KXyKRRmnZD1g9zRX6XpWPmsrkOa3sVwDFrCnSVtVz6VwjlGwqgAhQDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOayimj7tAWA14IVL1FAEJ+8aOY6MB8GA1UdIwQY
MBaAFBm4AMORJts8pODVaRDwrTeSV+SgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2JnQXc1RW0yenlrNE5WcEVQQ3RONUpYNUtBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS84NGI0ODktOGI2Zi00NTlkLTlhMzEt
ZjE4YWQ5ZjRjYzM0LzEvR2JnQXc1RW0yenlrNE5WcEVQQ3RONUpYNUtBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS84NGI0ODktOGI2Zi00NTlkLTlhMzEtZjE4YWQ5ZjRjYzM0
LzEvR2JnQXc1RW0yenlrNE5WcEVQQ3RONUpYNUtBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvP0WeGu5
PyHuD75smywOCOWBHj6fhKvqFarNsbfIUps9riltdR0XYVND6zbLn+vkNkJEg9Pt
vRve24RogQMZxdgOpUQKJ+g3IjIL6xbvjr0zhz9l0kby7HMD/SiU+GrvdnKNHVpB
A80bsy5oXvAJkTkPHy6LNjTiwaWqVNkLdQ/D8DKFKtvs3CP+Eie9MjXPzJEnb5gZ
t/qYsmvM+rotcu1QdnLrKzlLS7ewDiuba/cM901mYMfjrUwiDxTvPBrE1gspisrp
MW5pVdfB/kY9U1gaEPeYk0eiOWpcp6SDDQ8juyDUQDRiMlhi689mNsu1D1YemLrE
KzlASgJGNoWdWA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:34:49 2026 by rpki-client