Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/625ad6-ce2b-4314-ac78-aa5aa6d74b4e/1/gtqmUAcIPsylkSj9XwMdNQMrV0k.mft
File: gtqmUAcIPsylkSj9XwMdNQMrV0k.mft (raw, json)
Hash identifier: CfQPSnXy/KYZamV0X3p8gUyPdzHI+WPmDb+WTRjruXo=
Subject key identifier: F9:CF:7C:90:53:C3:DF:C5:60:77:85:A9:D7:3C:CC:8A:3B:51:D1:18
Authority key identifier: 82:DA:A6:50:07:08:3E:CC:A5:91:28:FD:5F:03:1D:35:03:2B:57:49
Certificate issuer: /CN=82daa65007083ecca59128fd5f031d35032b5749
Certificate serial: 019E1EA35BB0F311397E6F8E165EFB51AFE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gtqmUAcIPsylkSj9XwMdNQMrV0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/625ad6-ce2b-4314-ac78-aa5aa6d74b4e/1/gtqmUAcIPsylkSj9XwMdNQMrV0k.mft
Manifest number: 11
Signing time: Wed 13 May 2026 00:01:22 +0000
Manifest this update: Wed 13 May 2026 00:01:22 +0000
Manifest next update: Thu 14 May 2026 00:01:22 +0000
Files and hashes: 1: Qr6lJM203NhFGKZShnscSCdGFno.roa (hash: jbJSkdqG0TP7acpwCoEzRW1DcU+dJ+gbIy2PJggIZmM=)
2: gtqmUAcIPsylkSj9XwMdNQMrV0k.crl (hash: 2h9W5R3kA79++15Nwvew1+Vn7bFyqCNL+vnDzzKutGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/625ad6-ce2b-4314-ac78-aa5aa6d74b4e/1/gtqmUAcIPsylkSj9XwMdNQMrV0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/625ad6-ce2b-4314-ac78-aa5aa6d74b4e/1/gtqmUAcIPsylkSj9XwMdNQMrV0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/gtqmUAcIPsylkSj9XwMdNQMrV0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:5b:b0:f3:11:39:7e:6f:8e:16:5e:fb:51:af:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82daa65007083ecca59128fd5f031d35032b5749
Validity
Not Before: May 13 00:01:22 2026 GMT
Not After : May 14 00:01:22 2026 GMT
Subject: CN=f9cf7c9053c3dfc5607785a9d73ccc8a3b51d118
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:00:0b:ea:4c:6f:ff:1e:b0:13:a8:0e:b7:44:
df:ae:1f:d2:b3:04:a6:ae:9b:af:3f:91:d3:93:6b:
97:73:5d:27:f3:88:4e:9e:95:43:c3:63:8a:c2:5d:
d6:7d:60:1a:6d:95:aa:04:f0:3c:72:ff:98:30:9a:
08:cf:43:a4:f2:c5:38:25:a5:3f:d4:39:bb:d1:38:
ce:15:14:91:d9:d6:0a:60:a8:a3:6e:a0:d9:0f:a5:
a4:ce:f8:07:60:9f:47:2f:65:fe:f2:81:e1:7f:a8:
95:7f:d0:55:e4:5c:7d:83:ed:14:f3:bc:8f:1d:b0:
8e:5e:59:18:35:1b:97:ab:b5:2a:8b:80:94:98:7d:
34:fe:12:13:f0:06:5f:63:a0:09:a9:18:1d:eb:13:
06:a2:f5:c9:dc:40:7f:d6:84:d1:92:b8:f5:9c:aa:
56:c5:16:d9:da:75:ae:70:f2:ed:ec:32:91:79:18:
f5:84:e7:c7:7b:c2:e1:98:ae:15:e1:17:54:48:95:
76:1a:80:51:3b:9c:d2:90:02:5b:17:b2:d3:28:49:
73:5a:32:16:a4:23:24:79:12:22:94:0d:bd:f3:83:
5b:0c:74:26:cc:3b:1f:ec:fa:3d:60:ad:e2:eb:92:
ee:23:b7:f7:03:73:50:74:20:e7:c1:f8:6c:8f:a1:
1f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:CF:7C:90:53:C3:DF:C5:60:77:85:A9:D7:3C:CC:8A:3B:51:D1:18
X509v3 Authority Key Identifier:
keyid:82:DA:A6:50:07:08:3E:CC:A5:91:28:FD:5F:03:1D:35:03:2B:57:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gtqmUAcIPsylkSj9XwMdNQMrV0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/625ad6-ce2b-4314-ac78-aa5aa6d74b4e/1/gtqmUAcIPsylkSj9XwMdNQMrV0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/625ad6-ce2b-4314-ac78-aa5aa6d74b4e/1/gtqmUAcIPsylkSj9XwMdNQMrV0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:65:81:25:7b:1f:d0:99:9d:18:a4:e7:bf:4a:38:e6:9c:ac:
f6:55:9a:94:ac:8d:47:d3:37:31:92:09:0a:3e:a0:36:80:b5:
d3:50:70:e8:ae:5f:65:2f:64:9d:6d:d2:f5:df:bc:d9:e3:f9:
84:42:3b:49:60:d3:d4:10:2f:ef:8a:81:09:28:ae:d0:32:b6:
cf:e6:66:5c:27:93:9e:ed:ca:c0:97:ad:24:d5:7f:b1:49:36:
87:5b:83:57:7b:20:34:20:6a:dd:c2:aa:4f:fa:94:01:bc:f1:
00:06:a9:40:a7:8d:0a:74:d9:d2:a6:b9:9a:af:58:41:04:f2:
e2:d0:7b:2f:61:8f:0a:93:eb:e7:85:9d:03:8f:57:63:88:08:
e9:6c:11:c9:0b:0b:31:77:8b:45:e1:28:21:b0:87:b5:fc:61:
7d:00:ef:ec:c2:46:56:19:82:43:88:0d:95:40:9c:f1:7f:6c:
17:f3:4a:98:4b:a7:3e:71:06:35:1e:df:de:0c:ac:29:10:0e:
c8:1d:24:95:89:f0:c2:f1:f2:31:f8:fa:b8:4b:e3:34:51:b6:
94:19:5b:97:39:8b:39:b9:7a:80:b7:6c:73:71:c9:68:80:07:
b1:dd:38:ef:05:9b:2e:a0:32:de:ca:2c:c1:61:e3:67:93:a4:
1d:00:63:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4eo1uw8xE5fm+OFl77Ua/oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyZGFhNjUwMDcwODNlY2NhNTkxMjhmZDVmMDMxZDM1MDMy
YjU3NDkwHhcNMjYwNTEzMDAwMTIyWhcNMjYwNTE0MDAwMTIyWjAzMTEwLwYDVQQD
EyhmOWNmN2M5MDUzYzNkZmM1NjA3Nzg1YTlkNzNjY2M4YTNiNTFkMTE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgAL6kxv/x6wE6gOt0Tfrh/SswSm
rpuvP5HTk2uXc10n84hOnpVDw2OKwl3WfWAabZWqBPA8cv+YMJoIz0Ok8sU4JaU/
1Dm70TjOFRSR2dYKYKijbqDZD6WkzvgHYJ9HL2X+8oHhf6iVf9BV5Fx9g+0U87yP
HbCOXlkYNRuXq7Uqi4CUmH00/hIT8AZfY6AJqRgd6xMGovXJ3EB/1oTRkrj1nKpW
xRbZ2nWucPLt7DKReRj1hOfHe8LhmK4V4RdUSJV2GoBRO5zSkAJbF7LTKElzWjIW
pCMkeRIilA2984NbDHQmzDsf7Po9YK3i65LuI7f3A3NQdCDnwfhsj6EfUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPnPfJBTw9/FYHeFqdc8zIo7UdEYMB8GA1UdIwQY
MBaAFILaplAHCD7MpZEo/V8DHTUDK1dJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3RxbVVBY0lQc3lsa1NqOVh3TWROUU1yVjBrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi82MjVhZDYtY2UyYi00MzE0LWFjNzgt
YWE1YWE2ZDc0YjRlLzEvZ3RxbVVBY0lQc3lsa1NqOVh3TWROUU1yVjBrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi82MjVhZDYtY2UyYi00MzE0LWFjNzgtYWE1YWE2ZDc0YjRl
LzEvZ3RxbVVBY0lQc3lsa1NqOVh3TWROUU1yVjBrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP2WBJXsf
0JmdGKTnv0o45pys9lWalKyNR9M3MZIJCj6gNoC101Bw6K5fZS9knW3S9d+82eP5
hEI7SWDT1BAv74qBCSiu0DK2z+ZmXCeTnu3KwJetJNV/sUk2h1uDV3sgNCBq3cKq
T/qUAbzxAAapQKeNCnTZ0qa5mq9YQQTy4tB7L2GPCpPr54WdA49XY4gI6WwRyQsL
MXeLReEoIbCHtfxhfQDv7MJGVhmCQ4gNlUCc8X9sF/NKmEunPnEGNR7f3gysKRAO
yB0klYnwwvHyMfj6uEvjNFG2lBlblzmLObl6gLdsc3HJaIAHsd047wWbLqAy3sos
wWHjZ5OkHQBjnA==
-----END CERTIFICATE-----
Generated at Wed May 13 05:55:50 2026 by rpki-client