Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/b70761-bfd2-44b9-b60a-5969d6eb9b0d/1/GvFIfk0OJsU9WT7ObhRxIiHiQBA.mft
File: GvFIfk0OJsU9WT7ObhRxIiHiQBA.mft (raw, json)
Hash identifier: kx7A41x9NJuxgG5FrTa5ok1vDIPcJNP6XphsvZBW8f4=
Subject key identifier: 00:EF:7B:94:62:E9:47:FB:29:6D:A5:0A:F1:D2:4D:80:AD:96:AC:F4
Authority key identifier: 1A:F1:48:7E:4D:0E:26:C5:3D:59:3E:CE:6E:14:71:22:21:E2:40:10
Certificate issuer: /CN=1af1487e4d0e26c53d593ece6e14712221e24010
Certificate serial: 019D386583CD42B44AFDA222EBD9ACE18916
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GvFIfk0OJsU9WT7ObhRxIiHiQBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/b70761-bfd2-44b9-b60a-5969d6eb9b0d/1/GvFIfk0OJsU9WT7ObhRxIiHiQBA.mft
Manifest number: 019E
Signing time: Sun 29 Mar 2026 07:01:10 +0000
Manifest this update: Sun 29 Mar 2026 07:01:10 +0000
Manifest next update: Mon 30 Mar 2026 07:01:10 +0000
Files and hashes: 1: GvFIfk0OJsU9WT7ObhRxIiHiQBA.crl (hash: Gd6xg0jjDqH1+3YpdG5Yzs0PK5N0mSIdQ04hqu8cGpQ=)
2: iYUev_wikt3902TuQUS_qA3tCJ8.roa (hash: VqRpsKYPKrdIKnSJSQ7Ajn2eZlKMNhnr5TrpIZme+3o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/b70761-bfd2-44b9-b60a-5969d6eb9b0d/1/GvFIfk0OJsU9WT7ObhRxIiHiQBA.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/b70761-bfd2-44b9-b60a-5969d6eb9b0d/1/GvFIfk0OJsU9WT7ObhRxIiHiQBA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GvFIfk0OJsU9WT7ObhRxIiHiQBA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:83:cd:42:b4:4a:fd:a2:22:eb:d9:ac:e1:89:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1af1487e4d0e26c53d593ece6e14712221e24010
Validity
Not Before: Mar 29 07:01:10 2026 GMT
Not After : Mar 30 07:01:10 2026 GMT
Subject: CN=00ef7b9462e947fb296da50af1d24d80ad96acf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ba:f5:fc:4b:55:07:91:61:fc:73:e2:7b:d0:
3f:ce:21:a2:6e:41:e4:2a:2b:e4:3b:6c:0b:b5:9e:
a9:ba:8e:92:57:c9:7f:be:71:ec:62:a1:91:6c:fc:
b1:de:25:2b:95:a8:a4:ec:11:54:c5:17:00:39:24:
8e:e2:45:30:5b:75:1c:3f:62:92:aa:6c:93:ef:5a:
ff:3e:3a:c9:3d:26:2a:34:50:cf:bb:54:de:ad:35:
07:0e:37:1d:32:ed:43:cb:9e:1b:bd:a9:56:e3:bd:
fe:b2:dc:74:65:1c:ce:d6:b0:19:0d:3b:05:17:02:
b7:91:c4:80:a8:04:2d:38:65:7f:93:69:71:1a:c1:
c7:40:6a:98:bb:04:17:ff:e6:28:6a:cd:fd:40:23:
19:a7:33:63:ba:0d:c8:c3:19:a0:47:c1:81:5d:39:
30:9d:a5:47:b1:32:6c:96:c7:3e:69:6c:62:ea:8c:
e6:82:f7:d6:fd:e9:69:73:18:d5:23:d3:72:df:87:
b8:6d:61:53:f2:36:1a:33:74:aa:77:76:de:27:d2:
9a:c9:12:8b:e2:b3:67:f1:0d:4a:10:3a:be:d5:a2:
29:bc:bb:e7:e2:85:23:0d:08:7f:c9:0e:e3:cf:25:
64:0f:e6:7b:bb:55:8c:86:fd:dd:cf:29:5d:dd:47:
b0:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:EF:7B:94:62:E9:47:FB:29:6D:A5:0A:F1:D2:4D:80:AD:96:AC:F4
X509v3 Authority Key Identifier:
keyid:1A:F1:48:7E:4D:0E:26:C5:3D:59:3E:CE:6E:14:71:22:21:E2:40:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GvFIfk0OJsU9WT7ObhRxIiHiQBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/b70761-bfd2-44b9-b60a-5969d6eb9b0d/1/GvFIfk0OJsU9WT7ObhRxIiHiQBA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/b70761-bfd2-44b9-b60a-5969d6eb9b0d/1/GvFIfk0OJsU9WT7ObhRxIiHiQBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:a5:ff:d3:83:58:6b:e3:ab:d7:56:77:6a:fc:b3:7c:aa:5d:
6a:44:99:24:fb:0d:95:80:66:76:5b:d9:5a:76:ff:1b:ad:11:
6f:4c:ed:14:0b:f5:bb:17:d6:f0:70:64:c8:84:fd:58:54:d6:
be:60:5b:9d:2b:b5:7f:77:0d:0d:09:f2:6b:aa:b2:1f:f0:38:
ce:db:86:dc:46:65:8f:2e:e4:a6:d1:91:27:ce:46:f3:cf:81:
ce:b0:72:e1:59:9e:6f:38:31:98:6a:cb:dd:74:21:4b:bf:0c:
e2:c2:73:7c:ed:9f:2b:16:03:23:3f:71:49:6e:5e:4e:9b:03:
06:7f:22:8b:76:2e:f7:be:fa:38:55:01:22:d2:88:cc:89:b0:
3b:fc:57:08:cf:27:d7:93:83:60:d0:45:76:6a:6f:13:ac:72:
5d:0f:9c:64:e1:7f:95:bf:25:13:c5:75:f5:20:87:0c:db:18:
62:9e:9c:7f:1b:b7:8c:de:6a:b5:c4:ab:5f:c3:c8:32:6e:b8:
4e:6a:bc:d1:59:e7:65:01:b5:c4:98:95:75:7d:02:55:a2:8b:
c4:33:b2:3e:c8:36:61:57:46:51:f8:63:80:61:cf:c3:86:4c:
03:e0:cd:06:c8:66:36:8a:8d:76:3b:8a:27:d4:01:e0:4d:4f:
07:07:fb:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZYPNQrRK/aIi69ms4YkWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhZjE0ODdlNGQwZTI2YzUzZDU5M2VjZTZlMTQ3MTIyMjFl
MjQwMTAwHhcNMjYwMzI5MDcwMTEwWhcNMjYwMzMwMDcwMTEwWjAzMTEwLwYDVQQD
EygwMGVmN2I5NDYyZTk0N2ZiMjk2ZGE1MGFmMWQyNGQ4MGFkOTZhY2Y0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrr1/EtVB5Fh/HPie9A/ziGibkHk
KivkO2wLtZ6puo6SV8l/vnHsYqGRbPyx3iUrlaik7BFUxRcAOSSO4kUwW3UcP2KS
qmyT71r/PjrJPSYqNFDPu1TerTUHDjcdMu1Dy54bvalW473+stx0ZRzO1rAZDTsF
FwK3kcSAqAQtOGV/k2lxGsHHQGqYuwQX/+Yoas39QCMZpzNjug3IwxmgR8GBXTkw
naVHsTJslsc+aWxi6ozmgvfW/elpcxjVI9Ny34e4bWFT8jYaM3Sqd3beJ9KayRKL
4rNn8Q1KEDq+1aIpvLvn4oUjDQh/yQ7jzyVkD+Z7u1WMhv3dzyld3UewiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFADve5Ri6Uf7KW2lCvHSTYCtlqz0MB8GA1UdIwQY
MBaAFBrxSH5NDibFPVk+zm4UcSIh4kAQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3ZGSWZrME9Kc1U5V1Q3T2JoUnhJaUhpUUJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9iNzA3NjEtYmZkMi00NGI5LWI2MGEt
NTk2OWQ2ZWI5YjBkLzEvR3ZGSWZrME9Kc1U5V1Q3T2JoUnhJaUhpUUJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC9iNzA3NjEtYmZkMi00NGI5LWI2MGEtNTk2OWQ2ZWI5YjBk
LzEvR3ZGSWZrME9Kc1U5V1Q3T2JoUnhJaUhpUUJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARKX/04NY
a+Or11Z3avyzfKpdakSZJPsNlYBmdlvZWnb/G60Rb0ztFAv1uxfW8HBkyIT9WFTW
vmBbnSu1f3cNDQnya6qyH/A4ztuG3EZljy7kptGRJ85G88+BzrBy4VmebzgxmGrL
3XQhS78M4sJzfO2fKxYDIz9xSW5eTpsDBn8ii3Yu9776OFUBItKIzImwO/xXCM8n
15ODYNBFdmpvE6xyXQ+cZOF/lb8lE8V19SCHDNsYYp6cfxu3jN5qtcSrX8PIMm64
Tmq80VnnZQG1xJiVdX0CVaKLxDOyPsg2YVdGUfhjgGHPw4ZMA+DNBshmNoqNdjuK
J9QB4E1PBwf7AQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:54:51 2026 by rpki-client