Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/0dda42-53a5-4aba-86ae-639e14d04de6/1/gmf7Sgtne4N3kHuC-x-4gQov7wg.mft
File: gmf7Sgtne4N3kHuC-x-4gQov7wg.mft (raw, json)
Hash identifier: hmcA5AHYqkb+hMIBvTPWE72ZIbiEliWielsJK56ofW0=
Subject key identifier: B4:9E:54:D7:8F:9D:BE:97:22:3B:CB:BE:30:8D:F9:C6:85:70:DB:0A
Authority key identifier: 82:67:FB:4A:0B:67:7B:83:77:90:7B:82:FB:1F:B8:81:0A:2F:EF:08
Certificate issuer: /CN=8267fb4a0b677b8377907b82fb1fb8810a2fef08
Certificate serial: 019D2A3BD0736597552BB4FA2F985C88F28D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmf7Sgtne4N3kHuC-x-4gQov7wg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/0dda42-53a5-4aba-86ae-639e14d04de6/1/gmf7Sgtne4N3kHuC-x-4gQov7wg.mft
Manifest number: 1896
Signing time: Thu 26 Mar 2026 13:00:56 +0000
Manifest this update: Thu 26 Mar 2026 13:00:56 +0000
Manifest next update: Fri 27 Mar 2026 13:00:56 +0000
Files and hashes: 1: BfT142IZrG6w9x_sdv9NlYOwnjk.roa (hash: nMyUMScF9ierHQNaWf4H2FAJS6EPcrZmAIOFL2K/38E=)
2: WbmA7_GX8lhYD5gwDfMty_B0UMU.roa (hash: pbu61dkoeJNOEFlPCcPVO/fOlKpt2IKFm6HwfwnwwJQ=)
3: gmf7Sgtne4N3kHuC-x-4gQov7wg.crl (hash: kfvAjggwR7UxHrISL3owYElG5bj83MdjTSPnTfBa1so=)
4: hIyRTGN4bqnLKJCwc1F2Eg7MBmc.roa (hash: VGcdVOE9BIoWHNOMBje5zrVkxvWhg/+tqscfV1XcAU8=)
5: ltFa2izzbGOqtwBVA_TWfrJgXcI.roa (hash: OPV1MRSkrBUfBNL/wEtgSLV80hiGFh9joek6UVN6nV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/0dda42-53a5-4aba-86ae-639e14d04de6/1/gmf7Sgtne4N3kHuC-x-4gQov7wg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/0dda42-53a5-4aba-86ae-639e14d04de6/1/gmf7Sgtne4N3kHuC-x-4gQov7wg.mft
rsync://rpki.ripe.net/repository/DEFAULT/gmf7Sgtne4N3kHuC-x-4gQov7wg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3b:d0:73:65:97:55:2b:b4:fa:2f:98:5c:88:f2:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8267fb4a0b677b8377907b82fb1fb8810a2fef08
Validity
Not Before: Mar 26 13:00:56 2026 GMT
Not After : Mar 27 13:00:56 2026 GMT
Subject: CN=b49e54d78f9dbe97223bcbbe308df9c68570db0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:2d:f4:d8:01:c0:49:77:b3:bc:3a:b7:ba:f8:
26:6e:1b:4c:52:30:31:45:67:71:c0:bc:f0:87:cc:
88:12:1a:04:db:e3:7c:8a:4f:f3:2b:7e:17:07:2c:
61:0e:9c:43:0c:bc:cb:6c:ea:12:4e:5b:4e:19:cc:
9e:67:d9:77:2f:dd:bb:9d:f1:46:39:08:60:6b:1d:
e9:7a:83:7f:23:85:62:be:28:2d:68:e6:6e:59:72:
aa:a3:4a:a4:1b:8a:42:7a:81:6c:63:80:b8:b6:18:
f1:f4:f0:41:61:98:c5:f1:31:c2:3c:8a:ce:ab:6d:
54:39:69:86:8d:ad:e3:70:bc:1a:4d:a1:30:72:fe:
53:40:2a:fc:bb:f0:0c:b9:d7:1b:db:2c:dc:99:6b:
3b:f0:76:a5:95:b5:cf:ae:db:19:00:bc:b4:21:cf:
f3:99:96:20:44:ff:ba:fd:23:28:26:9d:88:57:c2:
96:0d:b8:c5:fe:0a:68:82:48:e4:72:83:78:68:de:
ef:77:63:96:b1:19:e4:eb:9e:83:2e:a7:c8:2c:31:
53:25:ef:59:da:05:a9:96:f9:7d:68:03:71:61:6f:
b3:39:33:1c:25:74:dc:e2:c2:3c:0a:c4:25:83:dd:
6b:c2:38:1b:43:36:a8:10:79:e2:f9:5b:af:e0:4e:
da:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:9E:54:D7:8F:9D:BE:97:22:3B:CB:BE:30:8D:F9:C6:85:70:DB:0A
X509v3 Authority Key Identifier:
keyid:82:67:FB:4A:0B:67:7B:83:77:90:7B:82:FB:1F:B8:81:0A:2F:EF:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmf7Sgtne4N3kHuC-x-4gQov7wg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/0dda42-53a5-4aba-86ae-639e14d04de6/1/gmf7Sgtne4N3kHuC-x-4gQov7wg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/0dda42-53a5-4aba-86ae-639e14d04de6/1/gmf7Sgtne4N3kHuC-x-4gQov7wg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:a7:ce:5a:e4:60:01:38:bf:fd:06:65:5f:42:4b:5a:05:c8:
3b:48:86:f9:d1:47:5a:48:3b:c9:88:6b:a1:d9:2c:f1:74:75:
c8:9d:f5:c4:fd:54:02:80:2a:87:c6:58:84:14:6c:15:7a:eb:
b0:d0:3a:ed:c9:42:6c:dd:d0:ef:f7:3a:68:35:e4:56:32:b0:
45:89:09:ea:02:43:ed:b1:2a:82:09:a2:94:a9:22:34:ed:d5:
77:77:d7:80:fe:ea:cd:ef:b2:df:6b:be:e5:48:bb:b0:87:a6:
0b:06:6e:f6:7b:10:e3:ea:32:10:44:24:1e:87:aa:2a:21:d1:
91:35:b8:32:9e:c3:28:45:a9:d8:67:e0:1c:3c:e0:da:c6:11:
a9:2b:31:cc:0b:aa:94:31:f5:ac:5a:e5:02:fa:40:6d:8e:69:
00:dd:d5:ec:7e:b2:09:60:87:f8:bf:3d:49:0e:54:0e:00:09:
41:51:bc:58:d9:e1:00:8d:86:95:ad:37:ee:b6:8b:6a:6c:1b:
b4:c5:76:0d:47:bf:af:cb:8a:20:90:3f:7e:39:de:e3:82:fa:
70:10:ad:2f:c1:53:fc:35:8f:b0:b2:d8:50:39:9d:aa:87:57:
56:c5:61:1b:24:7c:67:d7:d0:ce:e3:ad:41:cd:01:6d:eb:e7:
65:d6:77:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0qO9BzZZdVK7T6L5hciPKNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyNjdmYjRhMGI2NzdiODM3NzkwN2I4MmZiMWZiODgxMGEy
ZmVmMDgwHhcNMjYwMzI2MTMwMDU2WhcNMjYwMzI3MTMwMDU2WjAzMTEwLwYDVQQD
EyhiNDllNTRkNzhmOWRiZTk3MjIzYmNiYmUzMDhkZjljNjg1NzBkYjBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2C302AHASXezvDq3uvgmbhtMUjAx
RWdxwLzwh8yIEhoE2+N8ik/zK34XByxhDpxDDLzLbOoSTltOGcyeZ9l3L927nfFG
OQhgax3peoN/I4VivigtaOZuWXKqo0qkG4pCeoFsY4C4thjx9PBBYZjF8THCPIrO
q21UOWmGja3jcLwaTaEwcv5TQCr8u/AMudcb2yzcmWs78HallbXPrtsZALy0Ic/z
mZYgRP+6/SMoJp2IV8KWDbjF/gpogkjkcoN4aN7vd2OWsRnk656DLqfILDFTJe9Z
2gWplvl9aANxYW+zOTMcJXTc4sI8CsQlg91rwjgbQzaoEHni+Vuv4E7aBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLSeVNePnb6XIjvLvjCN+caFcNsKMB8GA1UdIwQY
MBaAFIJn+0oLZ3uDd5B7gvsfuIEKL+8IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ21mN1NndG5lNE4za0h1Qy14LTRnUW92N3dnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi8wZGRhNDItNTNhNS00YWJhLTg2YWUt
NjM5ZTE0ZDA0ZGU2LzEvZ21mN1NndG5lNE4za0h1Qy14LTRnUW92N3dnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi8wZGRhNDItNTNhNS00YWJhLTg2YWUtNjM5ZTE0ZDA0ZGU2
LzEvZ21mN1NndG5lNE4za0h1Qy14LTRnUW92N3dnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoKfOWuRg
ATi//QZlX0JLWgXIO0iG+dFHWkg7yYhrodks8XR1yJ31xP1UAoAqh8ZYhBRsFXrr
sNA67clCbN3Q7/c6aDXkVjKwRYkJ6gJD7bEqggmilKkiNO3Vd3fXgP7qze+y32u+
5Ui7sIemCwZu9nsQ4+oyEEQkHoeqKiHRkTW4Mp7DKEWp2GfgHDzg2sYRqSsxzAuq
lDH1rFrlAvpAbY5pAN3V7H6yCWCH+L89SQ5UDgAJQVG8WNnhAI2Gla037raLamwb
tMV2DUe/r8uKIJA/fjne44L6cBCtL8FT/DWPsLLYUDmdqodXVsVhGyR8Z9fQzuOt
Qc0BbevnZdZ35w==
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:28:58 2026 by rpki-client