Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.mft
File: gI4jjjDct1l1n7ijlNniEaKLnYc.mft (raw, json)
Hash identifier: KOaWrd12r/VuQEUvjKN2+s32v2KCHCGfs3XnXEKuJpk=
Subject key identifier: 15:01:6D:1E:5E:83:90:B6:6B:F7:85:72:41:A4:E9:B1:24:49:96:6F
Authority key identifier: 80:8E:23:8E:30:DC:B7:59:75:9F:B8:A3:94:D9:E2:11:A2:8B:9D:87
Certificate issuer: /CN=808e238e30dcb759759fb8a394d9e211a28b9d87
Certificate serial: 019D27DFE3695B77FBADC2BD00A778B79770
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gI4jjjDct1l1n7ijlNniEaKLnYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.mft
Manifest number: 1840
Signing time: Thu 26 Mar 2026 02:01:17 +0000
Manifest this update: Thu 26 Mar 2026 02:01:17 +0000
Manifest next update: Fri 27 Mar 2026 02:01:17 +0000
Files and hashes: 1: 6K4rT6VCuHtrpHkb6XBvfHzGcts.roa (hash: rcgp9RRt2ZMAtK8hgAgj71whrGluIkO7wLBZN77JUi8=)
2: 7H4eovIj7ri5a4YGeazmMZD4xU0.roa (hash: VG6bKSTJ2U4Zytr4AzXi09offh8427MPVKqZ8LWMbF8=)
3: C7uI61q8dQVU_3fsVaMtwm-r8h4.roa (hash: j2Y8Kx7Kbyv7kbNZrbep36yCj0SwPksojFDFgp+to00=)
4: EsSyiXnC44Xl8fO-3wz0FTDHjxQ.roa (hash: RCqvNh4i3hyPp+Oe+ChUyeaHuVCxT8Wqs4E9vLq+3Wo=)
5: TJcBJB8tMVwgDD5VmpPQL_K5MUc.roa (hash: SHSnvcEgiE0T0omJOGKRwDEpcU7UTWSZBFiCrzeaHso=)
6: aLeBPPf7ugWBDmXZtGstFAYR5d8.roa (hash: WCjwJf715go5YX++trIsBUfbf3PUAGqQfhdqAZp7NwQ=)
7: cFNkpBBI6QgxmqXdNxyE4i3ZWnQ.roa (hash: Tq1d2AHFpLFiKaiI1LAqCi5XawIGiQzqgQJ+E8gkzHI=)
8: gI4jjjDct1l1n7ijlNniEaKLnYc.crl (hash: HgZdEanql6vlkodmDshhOf4l5Mzwjg5MjGowEQG0GL0=)
9: rqerlNmrLuq2_e9gT61g1lPKhKw.roa (hash: baZcLs1YVGyRyT3FzbboyPeCvMFaa7u6Y1jXFJdiXQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/gI4jjjDct1l1n7ijlNniEaKLnYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:e3:69:5b:77:fb:ad:c2:bd:00:a7:78:b7:97:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=808e238e30dcb759759fb8a394d9e211a28b9d87
Validity
Not Before: Mar 26 02:01:17 2026 GMT
Not After : Mar 27 02:01:17 2026 GMT
Subject: CN=15016d1e5e8390b66bf7857241a4e9b12449966f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:81:a1:88:98:9f:96:f8:da:7f:67:37:05:6e:
e5:ca:dd:9d:2f:2a:09:36:ba:c7:1f:ae:a1:2b:96:
29:76:0c:d6:92:84:e7:dc:6f:3f:0a:47:00:c7:f7:
98:35:22:44:c2:6f:d3:16:75:1d:d4:81:2e:8c:0b:
4b:d6:b7:c8:89:ae:9b:56:cc:df:47:42:55:52:49:
b6:e7:ea:75:ea:2d:4f:4f:10:13:c9:27:37:5b:ce:
4c:c5:60:43:18:8e:85:e5:47:ef:82:ba:90:75:d2:
c5:9a:85:cd:6f:44:7d:49:15:24:86:3f:fc:4b:e8:
9c:c9:36:10:04:45:b6:b3:db:f5:7c:a0:4c:a6:48:
6c:45:24:d4:aa:ba:d3:35:c4:c0:4f:14:d6:f2:2f:
d4:33:15:dc:f5:a3:48:a0:5f:2e:26:35:ac:51:64:
38:e0:eb:38:ef:50:ed:60:4e:d7:5f:5c:18:f9:89:
b7:ef:16:7a:fa:2f:d6:54:15:57:0e:bd:62:a4:ee:
d6:67:ba:9c:ec:49:b9:5e:30:8d:ae:b5:9e:2c:fe:
92:31:b2:24:c6:fb:c1:38:24:2d:c4:0e:b5:25:d4:
15:fc:ac:0e:33:d0:61:10:83:e5:48:7e:b8:9f:1f:
59:14:18:cf:26:ec:df:69:6c:98:28:00:30:1f:52:
84:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:01:6D:1E:5E:83:90:B6:6B:F7:85:72:41:A4:E9:B1:24:49:96:6F
X509v3 Authority Key Identifier:
keyid:80:8E:23:8E:30:DC:B7:59:75:9F:B8:A3:94:D9:E2:11:A2:8B:9D:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gI4jjjDct1l1n7ijlNniEaKLnYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:4c:4c:0f:6f:81:27:74:4d:bb:d1:b3:36:db:cc:60:28:ff:
8d:92:a4:89:41:b8:a5:a8:83:6e:0b:05:44:1e:b4:b9:b7:62:
d4:f1:d8:4e:eb:e3:33:08:89:50:75:96:5c:63:a6:3e:d2:18:
71:10:1d:e2:54:bc:d3:ed:b3:26:e5:7f:c3:9a:b1:e8:cc:60:
45:eb:aa:8f:6e:75:e7:d1:90:f4:b1:0a:84:de:fb:51:c7:28:
96:ce:db:f0:8b:b0:1e:5c:8b:22:5c:96:62:90:f0:d1:05:97:
92:61:95:09:e4:49:9a:e1:fc:44:78:ff:67:b6:bc:4c:bf:e9:
71:ce:fc:51:94:b6:7d:63:1d:ba:90:30:31:86:98:b2:81:37:
c2:89:70:ea:8c:7a:fb:22:cf:02:94:24:43:4c:b8:0e:0d:b9:
b9:8b:3a:52:c1:92:71:34:fe:2c:62:f5:69:b6:2c:6f:97:99:
f5:57:13:ea:5b:2f:19:66:78:7c:3e:93:1e:b4:45:0a:4b:af:
90:0b:1f:19:ec:fd:26:00:a7:7e:5b:35:5e:b8:2d:5a:05:ee:
1e:cb:20:bc:e3:eb:7c:26:eb:5d:fd:ef:f9:5d:7c:5d:f7:22:
48:a7:60:75:c6:12:a4:af:ee:dd:09:55:9a:5e:c2:c1:f4:df:
78:17:c0:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0n3+NpW3f7rcK9AKd4t5dwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwOGUyMzhlMzBkY2I3NTk3NTlmYjhhMzk0ZDllMjExYTI4
YjlkODcwHhcNMjYwMzI2MDIwMTE3WhcNMjYwMzI3MDIwMTE3WjAzMTEwLwYDVQQD
EygxNTAxNmQxZTVlODM5MGI2NmJmNzg1NzI0MWE0ZTliMTI0NDk5NjZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiYGhiJiflvjaf2c3BW7lyt2dLyoJ
NrrHH66hK5YpdgzWkoTn3G8/CkcAx/eYNSJEwm/TFnUd1IEujAtL1rfIia6bVszf
R0JVUkm25+p16i1PTxATySc3W85MxWBDGI6F5UfvgrqQddLFmoXNb0R9SRUkhj/8
S+icyTYQBEW2s9v1fKBMpkhsRSTUqrrTNcTATxTW8i/UMxXc9aNIoF8uJjWsUWQ4
4Os471DtYE7XX1wY+Ym37xZ6+i/WVBVXDr1ipO7WZ7qc7Em5XjCNrrWeLP6SMbIk
xvvBOCQtxA61JdQV/KwOM9BhEIPlSH64nx9ZFBjPJuzfaWyYKAAwH1KEVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBUBbR5eg5C2a/eFckGk6bEkSZZvMB8GA1UdIwQY
MBaAFICOI44w3LdZdZ+4o5TZ4hGii52HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ0k0ampqRGN0MWwxbjdpamxObmlFYUtMblljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi83YjJjZDYtYjFmMy00M2ZjLTlmMDkt
Y2Q5NzQwNDI2NDlmLzEvZ0k0ampqRGN0MWwxbjdpamxObmlFYUtMblljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi83YjJjZDYtYjFmMy00M2ZjLTlmMDktY2Q5NzQwNDI2NDlm
LzEvZ0k0ampqRGN0MWwxbjdpamxObmlFYUtMblljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGkxMD2+B
J3RNu9GzNtvMYCj/jZKkiUG4paiDbgsFRB60ubdi1PHYTuvjMwiJUHWWXGOmPtIY
cRAd4lS80+2zJuV/w5qx6MxgReuqj25159GQ9LEKhN77Uccols7b8IuwHlyLIlyW
YpDw0QWXkmGVCeRJmuH8RHj/Z7a8TL/pcc78UZS2fWMdupAwMYaYsoE3wolw6ox6
+yLPApQkQ0y4Dg25uYs6UsGScTT+LGL1abYsb5eZ9VcT6lsvGWZ4fD6THrRFCkuv
kAsfGez9JgCnfls1XrgtWgXuHssgvOPrfCbrXf3v+V18XfciSKdgdcYSpK/u3QlV
ml7CwfTfeBfAxQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:58:30 2026 by rpki-client