Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.mft
File: gPq1UNgnot7w1NJhYGFCXC9pTIQ.mft (raw, json)
Hash identifier: SjXLRiNYDt7tAtlGIaomWnzMnYx+LCh9NGjpYcTBSGM=
Subject key identifier: C5:16:61:6A:8F:E9:48:C0:1D:C2:69:D9:D5:F2:3B:DC:C7:2A:FF:0F
Authority key identifier: 80:FA:B5:50:D8:27:A2:DE:F0:D4:D2:61:60:61:42:5C:2F:69:4C:84
Certificate issuer: /CN=80fab550d827a2def0d4d2616061425c2f694c84
Certificate serial: 019D25BA2D8CBE8941E3BA3E12FA22134606
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gPq1UNgnot7w1NJhYGFCXC9pTIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.mft
Manifest number: 0BC9
Signing time: Wed 25 Mar 2026 16:00:51 +0000
Manifest this update: Wed 25 Mar 2026 16:00:51 +0000
Manifest next update: Thu 26 Mar 2026 16:00:51 +0000
Files and hashes: 1: gPq1UNgnot7w1NJhYGFCXC9pTIQ.crl (hash: IlrpRR+0LZFd+JZ+3k9nVETdAov4um0Wp+dW+HLlixA=)
2: nSdbQEZKwp0Romsqj9nsZ4vQQrg.roa (hash: cAfzjYhPiwZe4Q3nVUxCxa/M+bhIuNdGJn+GlgVFeZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/gPq1UNgnot7w1NJhYGFCXC9pTIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:2d:8c:be:89:41:e3:ba:3e:12:fa:22:13:46:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80fab550d827a2def0d4d2616061425c2f694c84
Validity
Not Before: Mar 25 16:00:51 2026 GMT
Not After : Mar 26 16:00:51 2026 GMT
Subject: CN=c516616a8fe948c01dc269d9d5f23bdcc72aff0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ae:c4:eb:8d:6e:1a:6d:3d:c9:0b:b0:20:1d:
96:dc:d2:a0:3f:8f:8b:f2:28:d4:61:76:65:ed:72:
df:f1:8b:d0:5b:f5:66:23:c5:af:a7:9a:3a:dc:12:
85:90:54:3d:bf:fc:83:d1:bf:43:67:24:74:6e:f2:
cd:f9:2b:72:35:35:50:26:14:38:0b:d1:1a:21:d3:
94:40:b1:86:ab:26:d1:fd:59:6c:df:db:b4:0e:8a:
a6:f5:eb:35:32:ed:6e:32:26:9f:b1:4a:c1:c5:61:
a6:fc:83:a8:6f:f0:ab:8c:e4:5a:96:89:df:c2:8f:
9e:e6:ce:7f:44:b0:41:aa:78:c7:c5:c9:cd:01:79:
f2:d8:92:b9:cf:6f:81:4d:7d:f4:47:10:e5:2d:f2:
85:5a:26:99:01:9e:7c:4b:b7:71:5c:1a:62:98:02:
47:a3:07:13:c9:bb:cc:48:59:ef:77:fb:83:3d:01:
73:3b:92:14:71:aa:9a:03:aa:b9:06:45:ab:a4:3b:
b0:1e:36:20:57:48:aa:85:01:73:d8:3b:bb:92:f9:
e2:d5:dd:82:94:75:ea:94:f7:73:3e:3f:58:55:68:
bb:1a:65:33:0b:78:26:b2:af:02:5a:31:e7:44:5d:
22:1e:80:92:37:46:75:cf:21:ac:6d:cf:1e:59:ef:
d9:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:16:61:6A:8F:E9:48:C0:1D:C2:69:D9:D5:F2:3B:DC:C7:2A:FF:0F
X509v3 Authority Key Identifier:
keyid:80:FA:B5:50:D8:27:A2:DE:F0:D4:D2:61:60:61:42:5C:2F:69:4C:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gPq1UNgnot7w1NJhYGFCXC9pTIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:a8:fe:63:8d:1d:de:96:5f:2a:33:61:2d:5d:7f:cf:d9:7e:
ba:73:3b:6e:1a:5c:8e:79:a0:16:05:3e:89:92:6e:2b:a2:7f:
ba:d7:e2:e2:a8:fd:f7:08:ba:98:de:4c:36:44:a5:59:d9:0a:
77:6d:41:21:e8:03:72:41:24:8d:f3:34:c9:e6:54:e3:97:39:
d0:1f:14:f7:9b:13:a8:81:98:0a:4e:66:ef:55:c6:47:5f:06:
b9:f3:ce:57:6d:81:6a:b7:8b:ce:08:94:af:79:f2:8d:44:9a:
88:53:2e:5a:a8:7d:c2:01:b7:94:31:31:c1:9b:9b:46:9b:01:
6c:18:be:96:56:db:10:ec:5d:a2:15:ec:73:03:b0:b5:36:cb:
d0:9d:e6:9e:26:d1:50:1d:0d:03:24:44:6d:1e:78:1b:97:f9:
b8:5d:be:be:fe:f5:2c:b9:a4:83:fb:92:33:e9:7a:c0:c5:82:
b6:7e:5c:4e:81:bd:1b:dc:52:40:ca:da:e0:51:7d:73:0f:3f:
62:00:04:df:6f:53:98:f7:5d:e0:95:a1:21:be:d2:cf:ec:16:
70:0a:2e:23:d1:83:c5:e7:2b:b9:ba:57:d4:c8:ca:11:bc:88:
9a:25:3f:e7:00:c9:36:56:95:77:05:b1:28:a8:84:b4:63:dd:
a1:0f:a2:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0lui2MvolB47o+EvoiE0YGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwZmFiNTUwZDgyN2EyZGVmMGQ0ZDI2MTYwNjE0MjVjMmY2
OTRjODQwHhcNMjYwMzI1MTYwMDUxWhcNMjYwMzI2MTYwMDUxWjAzMTEwLwYDVQQD
EyhjNTE2NjE2YThmZTk0OGMwMWRjMjY5ZDlkNWYyM2JkY2M3MmFmZjBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3K7E641uGm09yQuwIB2W3NKgP4+L
8ijUYXZl7XLf8YvQW/VmI8Wvp5o63BKFkFQ9v/yD0b9DZyR0bvLN+StyNTVQJhQ4
C9EaIdOUQLGGqybR/Vls39u0Doqm9es1Mu1uMiafsUrBxWGm/IOob/CrjORalonf
wo+e5s5/RLBBqnjHxcnNAXny2JK5z2+BTX30RxDlLfKFWiaZAZ58S7dxXBpimAJH
owcTybvMSFnvd/uDPQFzO5IUcaqaA6q5BkWrpDuwHjYgV0iqhQFz2Du7kvni1d2C
lHXqlPdzPj9YVWi7GmUzC3gmsq8CWjHnRF0iHoCSN0Z1zyGsbc8eWe/ZLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMUWYWqP6UjAHcJp2dXyO9zHKv8PMB8GA1UdIwQY
MBaAFID6tVDYJ6Le8NTSYWBhQlwvaUyEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1BxMVVOZ25vdDd3MU5KaFlHRkNYQzlwVElRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS80YmE1ZmYtNTYyZS00MzU0LTk2MDAt
Zjc2MjkyOWYxZjA4LzEvZ1BxMVVOZ25vdDd3MU5KaFlHRkNYQzlwVElRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS80YmE1ZmYtNTYyZS00MzU0LTk2MDAtZjc2MjkyOWYxZjA4
LzEvZ1BxMVVOZ25vdDd3MU5KaFlHRkNYQzlwVElRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl6j+Y40d
3pZfKjNhLV1/z9l+unM7bhpcjnmgFgU+iZJuK6J/utfi4qj99wi6mN5MNkSlWdkK
d21BIegDckEkjfM0yeZU45c50B8U95sTqIGYCk5m71XGR18GufPOV22BareLzgiU
r3nyjUSaiFMuWqh9wgG3lDExwZubRpsBbBi+llbbEOxdohXscwOwtTbL0J3mnibR
UB0NAyREbR54G5f5uF2+vv71LLmkg/uSM+l6wMWCtn5cToG9G9xSQMra4FF9cw8/
YgAE329TmPdd4JWhIb7Sz+wWcAouI9GDxecrubpX1MjKEbyImiU/5wDJNlaVdwWx
KKiEtGPdoQ+i1A==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:43:52 2026 by rpki-client