Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/87eafc-17a6-4903-b951-4d20da0c530e/1/GmoUZyI70xUQwU8hvTPX12mCnSg.mft
File: GmoUZyI70xUQwU8hvTPX12mCnSg.mft (raw, json)
Hash identifier: TbQpDlZdJaBl88B16rpA0BfsXMmRiFAhU6kWbROgxos=
Subject key identifier: 7F:EC:CE:48:1B:DA:87:A4:06:79:31:2E:E0:0D:E8:45:22:5A:7C:C8
Authority key identifier: 1A:6A:14:67:22:3B:D3:15:10:C1:4F:21:BD:33:D7:D7:69:82:9D:28
Certificate issuer: /CN=1a6a1467223bd31510c14f21bd33d7d769829d28
Certificate serial: 019D382E1B503378B93E15DAE2DE48C82CC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GmoUZyI70xUQwU8hvTPX12mCnSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/87eafc-17a6-4903-b951-4d20da0c530e/1/GmoUZyI70xUQwU8hvTPX12mCnSg.mft
Manifest number: 028A
Signing time: Sun 29 Mar 2026 06:00:38 +0000
Manifest this update: Sun 29 Mar 2026 06:00:38 +0000
Manifest next update: Mon 30 Mar 2026 06:00:38 +0000
Files and hashes: 1: GmoUZyI70xUQwU8hvTPX12mCnSg.crl (hash: l3KStnNpJWu7QAmlPCjzw5zLZFX5f+Rwqu7SMNrzV1Q=)
2: yMHe_AcZ7t0DOCfavN3ISgqxc3c.roa (hash: 9DwkTaaH9QdGqF+hvGsRneF8svXbKCB6hQgeZ0/mVuk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/87eafc-17a6-4903-b951-4d20da0c530e/1/GmoUZyI70xUQwU8hvTPX12mCnSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/87eafc-17a6-4903-b951-4d20da0c530e/1/GmoUZyI70xUQwU8hvTPX12mCnSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/GmoUZyI70xUQwU8hvTPX12mCnSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:1b:50:33:78:b9:3e:15:da:e2:de:48:c8:2c:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a6a1467223bd31510c14f21bd33d7d769829d28
Validity
Not Before: Mar 29 06:00:38 2026 GMT
Not After : Mar 30 06:00:38 2026 GMT
Subject: CN=7fecce481bda87a40679312ee00de845225a7cc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:7e:ef:a5:2c:d2:60:64:96:c8:01:85:2a:28:
e4:40:0a:ba:28:a4:dd:b0:1e:3c:a7:fb:6e:47:f7:
e7:9e:64:f0:db:98:46:52:4d:ff:5d:f0:6f:c8:e6:
20:97:f7:e8:07:be:db:9d:54:66:0b:07:ee:e9:92:
2c:65:d0:9e:73:92:8f:a0:cb:58:f3:6a:4e:f1:5d:
45:df:22:82:66:3e:c7:2a:77:d7:fd:62:c1:2b:0a:
5a:68:53:09:bc:89:45:60:03:36:54:c8:56:12:e0:
77:a5:d7:a2:93:3f:56:5a:94:e6:1a:77:cc:14:9c:
67:59:73:ad:93:cc:03:52:8e:b7:62:0d:8f:9d:70:
86:f0:42:52:2f:89:21:b1:4f:82:2f:4f:39:95:85:
c4:5a:25:3c:b0:95:57:3b:cb:2f:3c:04:86:66:2b:
59:eb:91:94:c1:1d:d9:a7:d6:25:72:a8:b0:ea:90:
d8:a8:dd:53:53:61:0f:47:5f:50:7f:7e:e5:62:9e:
81:04:81:da:74:bb:3a:8c:16:61:c9:cf:1b:6e:22:
33:5f:54:bf:6e:12:e0:51:f2:57:b3:4b:df:83:f0:
1a:cd:fe:fb:25:bd:ec:f3:62:91:13:2e:61:e3:47:
4f:61:8e:8f:a3:3d:b2:5f:3d:f1:bb:73:9e:d3:50:
fe:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:EC:CE:48:1B:DA:87:A4:06:79:31:2E:E0:0D:E8:45:22:5A:7C:C8
X509v3 Authority Key Identifier:
keyid:1A:6A:14:67:22:3B:D3:15:10:C1:4F:21:BD:33:D7:D7:69:82:9D:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GmoUZyI70xUQwU8hvTPX12mCnSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/87eafc-17a6-4903-b951-4d20da0c530e/1/GmoUZyI70xUQwU8hvTPX12mCnSg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/87eafc-17a6-4903-b951-4d20da0c530e/1/GmoUZyI70xUQwU8hvTPX12mCnSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:fd:4a:b5:6e:31:23:04:26:ec:57:9f:7d:bc:89:76:e4:79:
bb:6b:49:b7:fc:ea:e6:7d:ac:82:e1:01:cc:a0:ef:ba:2a:08:
3a:5b:5b:1e:88:b6:9f:8b:98:73:e5:20:ea:42:59:99:5c:07:
78:52:6a:cd:c7:fc:e3:fd:ed:33:50:8f:30:5f:45:4a:3b:96:
5a:78:da:17:4b:c8:66:1d:af:3b:b7:31:ba:3f:d1:4c:65:2a:
59:c3:50:e0:05:8f:3c:d9:a6:dc:44:27:b3:3e:d2:0d:c4:9d:
c1:9c:bb:c0:a5:8e:62:bf:ec:75:c3:cd:56:ca:99:68:61:ad:
9c:17:d0:df:cc:92:f2:3a:2b:a5:0a:dc:39:f2:b4:59:23:4c:
4c:6c:31:38:35:f6:ca:70:26:68:3f:0b:4d:0e:6d:84:7c:9b:
09:bf:ca:f3:f7:74:3f:80:5f:51:18:34:b3:ce:82:4e:49:b6:
11:fc:ee:84:66:84:2d:3f:99:ee:b1:c1:68:3b:dd:ee:7a:41:
8e:4f:f1:ab:c5:b1:20:71:0c:6f:3d:dc:94:69:c2:6c:f2:5e:
cb:64:e4:9a:8f:d7:9a:dd:f7:d2:5d:60:90:38:bc:62:55:2a:
e9:fa:d5:5c:be:75:27:7d:b7:ca:b0:7a:87:a7:e5:d2:f3:87:
3c:45:ed:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04LhtQM3i5PhXa4t5IyCzHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhNmExNDY3MjIzYmQzMTUxMGMxNGYyMWJkMzNkN2Q3Njk4
MjlkMjgwHhcNMjYwMzI5MDYwMDM4WhcNMjYwMzMwMDYwMDM4WjAzMTEwLwYDVQQD
Eyg3ZmVjY2U0ODFiZGE4N2E0MDY3OTMxMmVlMDBkZTg0NTIyNWE3Y2M4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxn7vpSzSYGSWyAGFKijkQAq6KKTd
sB48p/tuR/fnnmTw25hGUk3/XfBvyOYgl/foB77bnVRmCwfu6ZIsZdCec5KPoMtY
82pO8V1F3yKCZj7HKnfX/WLBKwpaaFMJvIlFYAM2VMhWEuB3pdeikz9WWpTmGnfM
FJxnWXOtk8wDUo63Yg2PnXCG8EJSL4khsU+CL085lYXEWiU8sJVXO8svPASGZitZ
65GUwR3Zp9Ylcqiw6pDYqN1TU2EPR19Qf37lYp6BBIHadLs6jBZhyc8bbiIzX1S/
bhLgUfJXs0vfg/Aazf77Jb3s82KREy5h40dPYY6Poz2yXz3xu3Oe01D+mwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH/szkgb2oekBnkxLuAN6EUiWnzIMB8GA1UdIwQY
MBaAFBpqFGciO9MVEMFPIb0z19dpgp0oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR21vVVp5STcweFVRd1U4aHZUUFgxMm1DblNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS84N2VhZmMtMTdhNi00OTAzLWI5NTEt
NGQyMGRhMGM1MzBlLzEvR21vVVp5STcweFVRd1U4aHZUUFgxMm1DblNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS84N2VhZmMtMTdhNi00OTAzLWI5NTEtNGQyMGRhMGM1MzBl
LzEvR21vVVp5STcweFVRd1U4aHZUUFgxMm1DblNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAf1KtW4x
IwQm7FeffbyJduR5u2tJt/zq5n2sguEBzKDvuioIOltbHoi2n4uYc+Ug6kJZmVwH
eFJqzcf84/3tM1CPMF9FSjuWWnjaF0vIZh2vO7cxuj/RTGUqWcNQ4AWPPNmm3EQn
sz7SDcSdwZy7wKWOYr/sdcPNVsqZaGGtnBfQ38yS8jorpQrcOfK0WSNMTGwxODX2
ynAmaD8LTQ5thHybCb/K8/d0P4BfURg0s86CTkm2EfzuhGaELT+Z7rHBaDvd7npB
jk/xq8WxIHEMbz3clGnCbPJey2Tkmo/Xmt330l1gkDi8YlUq6frVXL51J323yrB6
h6fl0vOHPEXt1A==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:06:04 2026 by rpki-client