Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c6b65c-2fc3-4196-af30-3940d135b28b/1/v3DW_GPRd37tzY9GpVk2F8YxneY.mft
File: v3DW_GPRd37tzY9GpVk2F8YxneY.mft (raw, json)
Hash identifier: UrS8yNsdepLg5aCJr8p7Ihu/GsuzGX7AsfiDGOXrEMI=
Subject key identifier: D5:FB:43:DF:0D:65:94:30:78:32:BA:1F:05:6C:6C:5D:E6:EE:4B:F8
Authority key identifier: BF:70:D6:FC:63:D1:77:7E:ED:CD:8F:46:A5:59:36:17:C6:31:9D:E6
Certificate issuer: /CN=bf70d6fc63d1777eedcd8f46a5593617c6319de6
Certificate serial: 019D382E32AE7B42635F3463D34D07D9F96D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v3DW_GPRd37tzY9GpVk2F8YxneY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/c6b65c-2fc3-4196-af30-3940d135b28b/1/v3DW_GPRd37tzY9GpVk2F8YxneY.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 06:00:44 +0000
Manifest this update: Sun 29 Mar 2026 06:00:44 +0000
Manifest next update: Mon 30 Mar 2026 06:00:44 +0000
Files and hashes: 1: Qy5Nmi3nAZDOhC946zssMGSp1zg.roa (hash: y5SFQREp1nOA/KbiyA7m/8jCP4sF9FhQoIl2/65Own0=)
2: v3DW_GPRd37tzY9GpVk2F8YxneY.crl (hash: 7DA9pshNrQR3z7Aq0KHeaHJNrxsZ4MVcAjkrv4yTFJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/c6b65c-2fc3-4196-af30-3940d135b28b/1/v3DW_GPRd37tzY9GpVk2F8YxneY.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/c6b65c-2fc3-4196-af30-3940d135b28b/1/v3DW_GPRd37tzY9GpVk2F8YxneY.mft
rsync://rpki.ripe.net/repository/DEFAULT/v3DW_GPRd37tzY9GpVk2F8YxneY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:32:ae:7b:42:63:5f:34:63:d3:4d:07:d9:f9:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf70d6fc63d1777eedcd8f46a5593617c6319de6
Validity
Not Before: Mar 29 06:00:44 2026 GMT
Not After : Mar 30 06:00:44 2026 GMT
Subject: CN=d5fb43df0d6594307832ba1f056c6c5de6ee4bf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:1b:4e:a9:41:a7:e2:b1:04:10:9f:e1:84:77:
e3:d2:0d:90:20:49:34:a8:6d:36:e9:5e:10:89:2e:
09:ef:71:a8:4d:14:2b:4c:ac:d5:9b:2f:0c:e0:5a:
02:5c:63:c8:a4:2e:b3:71:8e:bc:ce:af:61:5f:57:
2e:ac:e2:27:70:8f:9d:86:9b:e3:3b:27:8e:6f:06:
72:f7:18:f4:4e:ca:06:82:b7:91:95:e4:2c:76:e4:
9f:e4:7f:66:3e:14:08:98:1b:9d:a3:ab:e8:05:1f:
5d:42:48:c9:d6:dd:ff:5e:9a:0e:98:81:df:1f:4a:
0d:c1:88:01:2c:d7:3d:7c:9d:b4:d8:0e:f4:8f:57:
de:fb:59:fe:6f:ef:5e:5f:03:47:77:e2:d5:06:c0:
18:d4:44:95:de:7a:e1:75:1e:84:67:0e:ee:ec:8b:
b4:ce:62:7b:5e:ac:2c:05:ea:ad:87:7e:da:b5:8d:
83:17:af:b9:aa:dd:ff:f2:3f:6f:95:a0:f3:eb:c8:
b9:f7:97:7a:f6:fb:f9:ad:9a:55:66:38:66:3f:a9:
0d:32:63:a6:69:f4:0a:eb:12:29:48:8b:b2:d7:78:
9f:f2:9a:78:3c:cc:c5:64:86:c7:70:1c:5e:e3:d7:
cf:13:16:00:87:98:c9:ba:31:0e:17:a3:06:9a:55:
67:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:FB:43:DF:0D:65:94:30:78:32:BA:1F:05:6C:6C:5D:E6:EE:4B:F8
X509v3 Authority Key Identifier:
keyid:BF:70:D6:FC:63:D1:77:7E:ED:CD:8F:46:A5:59:36:17:C6:31:9D:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v3DW_GPRd37tzY9GpVk2F8YxneY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c6b65c-2fc3-4196-af30-3940d135b28b/1/v3DW_GPRd37tzY9GpVk2F8YxneY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c6b65c-2fc3-4196-af30-3940d135b28b/1/v3DW_GPRd37tzY9GpVk2F8YxneY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:81:55:92:bf:c7:d8:a3:4f:f4:7c:28:3a:df:90:31:86:ef:
85:6e:b0:fa:e5:05:b3:65:59:56:b6:3c:0c:4a:73:8e:cf:6b:
64:2c:e8:b7:dc:81:f6:27:89:84:9c:33:14:b8:f6:95:93:2e:
14:86:13:b8:2e:bf:d4:e9:dc:fb:18:6e:eb:5d:5b:ca:c0:ef:
90:d6:c4:7d:0f:22:29:e7:41:e6:77:20:0c:25:98:b9:b1:a5:
dd:fc:c5:c6:a3:1a:f9:da:8e:9e:d2:f0:07:b7:0f:1c:aa:99:
3e:a8:69:38:ce:db:af:6a:44:3d:bc:c4:97:db:01:e8:e2:fa:
7c:0e:20:f7:09:a1:54:df:d1:5a:80:15:ca:a6:fa:9f:a4:96:
01:88:6f:c1:c2:99:cc:b0:b1:e5:96:6e:33:33:3f:b7:fc:a7:
b9:bd:40:56:ef:4d:4b:13:0e:65:06:6b:96:ee:65:aa:f6:fc:
a6:aa:72:43:a2:5a:03:cd:9f:43:7a:e1:17:d6:7a:a1:e7:4a:
f7:4d:18:db:e1:46:a2:eb:53:1f:08:f4:3a:1b:e2:9b:87:86:
a8:4b:c4:fe:43:6f:97:47:09:ad:3a:ed:4f:af:1f:a2:d3:70:
81:27:b7:0a:28:78:54:68:d5:c5:d9:02:4d:2d:ae:c9:91:b0:
37:47:8d:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04LjKue0JjXzRj000H2fltMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmNzBkNmZjNjNkMTc3N2VlZGNkOGY0NmE1NTkzNjE3YzYz
MTlkZTYwHhcNMjYwMzI5MDYwMDQ0WhcNMjYwMzMwMDYwMDQ0WjAzMTEwLwYDVQQD
EyhkNWZiNDNkZjBkNjU5NDMwNzgzMmJhMWYwNTZjNmM1ZGU2ZWU0YmY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2RtOqUGn4rEEEJ/hhHfj0g2QIEk0
qG026V4QiS4J73GoTRQrTKzVmy8M4FoCXGPIpC6zcY68zq9hX1curOIncI+dhpvj
OyeObwZy9xj0TsoGgreRleQsduSf5H9mPhQImBudo6voBR9dQkjJ1t3/XpoOmIHf
H0oNwYgBLNc9fJ202A70j1fe+1n+b+9eXwNHd+LVBsAY1ESV3nrhdR6EZw7u7Iu0
zmJ7XqwsBeqth37atY2DF6+5qt3/8j9vlaDz68i595d69vv5rZpVZjhmP6kNMmOm
afQK6xIpSIuy13if8pp4PMzFZIbHcBxe49fPExYAh5jJujEOF6MGmlVn/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNX7Q98NZZQweDK6HwVsbF3m7kv4MB8GA1UdIwQY
MBaAFL9w1vxj0Xd+7c2PRqVZNhfGMZ3mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjNEV19HUFJkMzd0elk5R3BWazJGOFl4bmVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9jNmI2NWMtMmZjMy00MTk2LWFmMzAt
Mzk0MGQxMzViMjhiLzEvdjNEV19HUFJkMzd0elk5R3BWazJGOFl4bmVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS9jNmI2NWMtMmZjMy00MTk2LWFmMzAtMzk0MGQxMzViMjhi
LzEvdjNEV19HUFJkMzd0elk5R3BWazJGOFl4bmVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFIFVkr/H
2KNP9HwoOt+QMYbvhW6w+uUFs2VZVrY8DEpzjs9rZCzot9yB9ieJhJwzFLj2lZMu
FIYTuC6/1Onc+xhu611bysDvkNbEfQ8iKedB5ncgDCWYubGl3fzFxqMa+dqOntLw
B7cPHKqZPqhpOM7br2pEPbzEl9sB6OL6fA4g9wmhVN/RWoAVyqb6n6SWAYhvwcKZ
zLCx5ZZuMzM/t/ynub1AVu9NSxMOZQZrlu5lqvb8pqpyQ6JaA82fQ3rhF9Z6oedK
900Y2+FGoutTHwj0Ohvim4eGqEvE/kNvl0cJrTrtT68fotNwgSe3Cih4VGjVxdkC
TS2uyZGwN0eNUw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:34:38 2026 by rpki-client