Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/e076dc-10d8-44cc-8aa5-5a94ad133118/1/gh9un_H7vyH2QToTfnNn3YqMA1w.mft
File: gh9un_H7vyH2QToTfnNn3YqMA1w.mft (raw, json)
Hash identifier: w92vS/uZsouz6QiPptkE+yQTC/F20X9Pke8MhOMxpTU=
Subject key identifier: AB:C0:C7:38:EF:E1:40:8A:20:A1:FE:61:A0:F2:C2:24:64:6B:DB:F4
Authority key identifier: 82:1F:6E:9F:F1:FB:BF:21:F6:41:3A:13:7E:73:67:DD:8A:8C:03:5C
Certificate issuer: /CN=821f6e9ff1fbbf21f6413a137e7367dd8a8c035c
Certificate serial: 019D29CEC1982D28D47C5F07CAA0374A4FC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gh9un_H7vyH2QToTfnNn3YqMA1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/e076dc-10d8-44cc-8aa5-5a94ad133118/1/gh9un_H7vyH2QToTfnNn3YqMA1w.mft
Manifest number: 10CA
Signing time: Thu 26 Mar 2026 11:01:48 +0000
Manifest this update: Thu 26 Mar 2026 11:01:48 +0000
Manifest next update: Fri 27 Mar 2026 11:01:48 +0000
Files and hashes: 1: gh9un_H7vyH2QToTfnNn3YqMA1w.crl (hash: frfWzyLxGa1ucJlRi2eBGI7AlZ0XMOzd/bx/mFiZ/eU=)
2: lHeFeB5XmUgMTZd-xp7pg5O2hRk.roa (hash: yDjRb/PwiyZiL5zE1UM9tbqgd31//MiOL1EvDdOA92U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/e076dc-10d8-44cc-8aa5-5a94ad133118/1/gh9un_H7vyH2QToTfnNn3YqMA1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/e076dc-10d8-44cc-8aa5-5a94ad133118/1/gh9un_H7vyH2QToTfnNn3YqMA1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/gh9un_H7vyH2QToTfnNn3YqMA1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:c1:98:2d:28:d4:7c:5f:07:ca:a0:37:4a:4f:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=821f6e9ff1fbbf21f6413a137e7367dd8a8c035c
Validity
Not Before: Mar 26 11:01:48 2026 GMT
Not After : Mar 27 11:01:48 2026 GMT
Subject: CN=abc0c738efe1408a20a1fe61a0f2c224646bdbf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b6:4e:65:83:cc:54:f2:74:bc:5a:a3:6b:12:
a6:b4:2a:2e:49:e6:16:b1:58:0c:01:45:02:69:d2:
c2:57:d7:af:31:34:91:9a:dd:bf:8a:b1:39:9f:30:
01:61:bd:95:f7:97:6e:0c:3d:22:19:33:bf:cf:86:
e6:93:db:f3:c4:d0:fe:cc:12:7d:52:df:83:f8:08:
5c:d4:ab:5b:5c:cb:41:93:08:9c:94:e9:29:b3:ef:
16:b1:1a:a7:9f:5e:e1:e5:6f:02:62:de:29:ac:e0:
04:07:b3:af:7d:56:7b:f4:da:06:02:07:f6:8e:1d:
23:3d:d5:d8:cb:0c:09:dc:20:85:ac:1b:e2:8c:b7:
a1:d1:78:21:43:33:17:41:d9:18:b6:36:41:06:47:
a4:2b:5b:4e:1f:d5:28:77:45:99:40:08:69:af:a5:
28:f2:9d:6a:32:2a:03:e4:e7:5e:f1:ee:27:de:e4:
d5:17:d9:26:f4:dc:90:d5:28:82:bf:de:d5:35:6a:
00:c4:f8:f5:eb:e1:c4:8e:da:1b:ea:26:ce:88:35:
98:cf:4f:b8:b8:78:16:cf:5b:15:d8:06:9c:ee:fd:
15:05:e6:11:9f:34:93:74:26:14:58:1b:bc:c4:b1:
40:1f:23:0c:b6:74:76:04:b3:7e:7e:7f:a8:22:19:
b7:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:C0:C7:38:EF:E1:40:8A:20:A1:FE:61:A0:F2:C2:24:64:6B:DB:F4
X509v3 Authority Key Identifier:
keyid:82:1F:6E:9F:F1:FB:BF:21:F6:41:3A:13:7E:73:67:DD:8A:8C:03:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gh9un_H7vyH2QToTfnNn3YqMA1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/e076dc-10d8-44cc-8aa5-5a94ad133118/1/gh9un_H7vyH2QToTfnNn3YqMA1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/e076dc-10d8-44cc-8aa5-5a94ad133118/1/gh9un_H7vyH2QToTfnNn3YqMA1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:02:34:f1:6d:b2:b5:cb:8a:11:5c:24:59:5f:99:dc:9f:6e:
02:ce:27:4a:b4:45:62:08:58:75:47:11:08:4b:54:e5:81:bc:
a7:fa:8c:9b:1a:ac:9a:21:14:cf:da:98:f1:c1:6f:e9:d7:fb:
76:d4:f6:7d:0c:1a:0a:30:bf:40:2b:1d:e4:ff:9c:66:e0:fc:
c3:61:2d:d5:d9:f3:06:eb:d7:32:8d:3a:9e:69:0e:a3:1f:95:
eb:87:fe:cc:79:32:fe:5e:72:8c:b7:1a:a2:34:03:4e:6e:42:
27:69:68:3c:96:c9:44:62:72:e5:c9:48:0a:f8:ef:12:fa:22:
65:10:16:39:28:f2:37:93:26:29:b4:95:dd:6e:a7:22:bd:4e:
00:19:59:1f:57:56:b1:08:53:94:98:ed:71:3d:8e:d5:2d:7a:
f5:4e:df:1a:85:c3:db:d8:d5:f0:f4:8c:48:30:41:d2:f3:6b:
5d:5f:51:d5:4d:cd:7e:3b:e0:ff:6e:45:4a:b1:92:e2:f9:31:
a1:04:66:c4:4a:f5:89:09:d4:59:db:64:42:fc:bc:b2:76:e3:
bd:5b:d3:50:a7:3c:27:d7:de:b8:a4:08:c0:e1:d4:c2:e1:2d:
b1:7c:b8:bd:d2:37:7b:25:9b:05:48:c0:54:83:43:9e:eb:3b:
d0:c9:33:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pzsGYLSjUfF8HyqA3Sk/JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyMWY2ZTlmZjFmYmJmMjFmNjQxM2ExMzdlNzM2N2RkOGE4
YzAzNWMwHhcNMjYwMzI2MTEwMTQ4WhcNMjYwMzI3MTEwMTQ4WjAzMTEwLwYDVQQD
EyhhYmMwYzczOGVmZTE0MDhhMjBhMWZlNjFhMGYyYzIyNDY0NmJkYmY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrZOZYPMVPJ0vFqjaxKmtCouSeYW
sVgMAUUCadLCV9evMTSRmt2/irE5nzABYb2V95duDD0iGTO/z4bmk9vzxND+zBJ9
Ut+D+Ahc1KtbXMtBkwiclOkps+8WsRqnn17h5W8CYt4prOAEB7OvfVZ79NoGAgf2
jh0jPdXYywwJ3CCFrBvijLeh0XghQzMXQdkYtjZBBkekK1tOH9Uod0WZQAhpr6Uo
8p1qMioD5Ode8e4n3uTVF9km9NyQ1SiCv97VNWoAxPj16+HEjtob6ibOiDWYz0+4
uHgWz1sV2Aac7v0VBeYRnzSTdCYUWBu8xLFAHyMMtnR2BLN+fn+oIhm30wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKvAxzjv4UCKIKH+YaDywiRka9v0MB8GA1UdIwQY
MBaAFIIfbp/x+78h9kE6E35zZ92KjANcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2g5dW5fSDd2eUgyUVRvVGZuTm4zWXFNQTF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9lMDc2ZGMtMTBkOC00NGNjLThhYTUt
NWE5NGFkMTMzMTE4LzEvZ2g5dW5fSDd2eUgyUVRvVGZuTm4zWXFNQTF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy9lMDc2ZGMtMTBkOC00NGNjLThhYTUtNWE5NGFkMTMzMTE4
LzEvZ2g5dW5fSDd2eUgyUVRvVGZuTm4zWXFNQTF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJQI08W2y
tcuKEVwkWV+Z3J9uAs4nSrRFYghYdUcRCEtU5YG8p/qMmxqsmiEUz9qY8cFv6df7
dtT2fQwaCjC/QCsd5P+cZuD8w2Et1dnzBuvXMo06nmkOox+V64f+zHky/l5yjLca
ojQDTm5CJ2loPJbJRGJy5clICvjvEvoiZRAWOSjyN5MmKbSV3W6nIr1OABlZH1dW
sQhTlJjtcT2O1S169U7fGoXD29jV8PSMSDBB0vNrXV9R1U3Nfjvg/25FSrGS4vkx
oQRmxEr1iQnUWdtkQvy8snbjvVvTUKc8J9feuKQIwOHUwuEtsXy4vdI3eyWbBUjA
VINDnus70Mkz0A==
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:11:20 2026 by rpki-client