Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/3dc4dd-80bb-4df5-af58-b7adf04e423d/1/g7d8noEHbPS0zv7V7vIQf3UsNjA.mft
File: g7d8noEHbPS0zv7V7vIQf3UsNjA.mft (raw, json)
Hash identifier: GASPXfhnf3V8q3i2nQ24po6PX4jIArlM5sZlTvL6T1Q=
Subject key identifier: 36:FF:D2:78:B9:C7:6F:F5:72:8B:B3:AC:F3:15:DB:1C:47:DE:CB:B2
Authority key identifier: 83:B7:7C:9E:81:07:6C:F4:B4:CE:FE:D5:EE:F2:10:7F:75:2C:36:30
Certificate issuer: /CN=83b77c9e81076cf4b4cefed5eef2107f752c3630
Certificate serial: 019E9B84F9B5AC1B8C352DE8082C46D26955
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g7d8noEHbPS0zv7V7vIQf3UsNjA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/3dc4dd-80bb-4df5-af58-b7adf04e423d/1/g7d8noEHbPS0zv7V7vIQf3UsNjA.mft
Manifest number: 1949
Signing time: Sat 06 Jun 2026 06:00:43 +0000
Manifest this update: Sat 06 Jun 2026 06:00:43 +0000
Manifest next update: Sun 07 Jun 2026 06:00:43 +0000
Files and hashes: 1: GHGkwEVylqYxr15hWfLzxHp9MA0.roa (hash: 6MgKNZ/wr6UP8/R75FjFSF75c2qdb4J/GZr8B0Cgj+s=)
2: g7d8noEHbPS0zv7V7vIQf3UsNjA.crl (hash: mICtHKacXnA/bA3pz6P26UZdg9dz/eH9D0jDbJJfQzQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/3dc4dd-80bb-4df5-af58-b7adf04e423d/1/g7d8noEHbPS0zv7V7vIQf3UsNjA.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/3dc4dd-80bb-4df5-af58-b7adf04e423d/1/g7d8noEHbPS0zv7V7vIQf3UsNjA.mft
rsync://rpki.ripe.net/repository/DEFAULT/g7d8noEHbPS0zv7V7vIQf3UsNjA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 04:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9b:84:f9:b5:ac:1b:8c:35:2d:e8:08:2c:46:d2:69:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83b77c9e81076cf4b4cefed5eef2107f752c3630
Validity
Not Before: Jun 6 06:00:43 2026 GMT
Not After : Jun 7 06:00:43 2026 GMT
Subject: CN=36ffd278b9c76ff5728bb3acf315db1c47decbb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:33:75:16:e6:0b:54:ed:03:fa:c7:af:36:13:
60:01:0e:a1:55:67:64:c1:9f:f9:bb:1a:63:19:9e:
32:0f:4c:78:23:fb:35:3b:53:94:f7:54:ea:04:39:
c9:0b:a0:82:00:97:13:76:10:54:7e:bc:ce:d5:51:
0b:0d:c4:ae:9b:a2:8e:ed:d7:12:b0:0a:af:82:6e:
c9:a5:83:b3:b5:8b:a9:0f:7d:f9:65:31:f5:5f:e0:
5b:4d:38:e0:28:8a:cd:52:8a:8d:b1:b6:ac:ee:84:
71:f9:e1:4a:51:43:ee:f2:82:1f:7f:6f:60:a1:34:
f3:97:22:46:47:8a:34:cc:51:8d:75:51:a4:d8:a1:
17:77:d8:98:d9:84:98:6c:a4:20:3d:07:4d:d9:ef:
13:d7:52:b5:be:c3:0c:71:43:c6:98:32:23:e5:6f:
00:0c:59:9f:cb:00:ea:ae:80:5a:7a:d3:c0:43:3e:
e4:ad:e2:52:22:60:3d:b4:89:d1:5c:66:7f:24:4b:
21:d0:b9:b9:ca:d2:3f:6a:35:96:f6:40:f2:43:9d:
28:c6:ea:04:57:f8:55:91:99:d6:9d:5f:82:54:71:
15:a1:1d:27:04:c4:05:07:06:fe:67:2e:8f:e9:fa:
66:45:1a:7e:5e:5f:2c:b7:48:68:b4:8c:fa:93:18:
26:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:FF:D2:78:B9:C7:6F:F5:72:8B:B3:AC:F3:15:DB:1C:47:DE:CB:B2
X509v3 Authority Key Identifier:
keyid:83:B7:7C:9E:81:07:6C:F4:B4:CE:FE:D5:EE:F2:10:7F:75:2C:36:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g7d8noEHbPS0zv7V7vIQf3UsNjA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3dc4dd-80bb-4df5-af58-b7adf04e423d/1/g7d8noEHbPS0zv7V7vIQf3UsNjA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3dc4dd-80bb-4df5-af58-b7adf04e423d/1/g7d8noEHbPS0zv7V7vIQf3UsNjA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:20:bf:f4:55:a1:d7:9f:da:21:f1:de:ff:dd:b6:27:16:26:
cd:c3:8e:03:96:25:6e:cb:e4:a2:22:44:e2:a3:1e:5f:70:01:
0a:92:c1:ef:cc:94:e3:d7:65:27:d1:4c:ac:50:8c:34:c7:59:
81:1b:fa:6c:17:46:fb:ea:1a:64:20:53:21:b4:24:4d:18:7b:
f2:0e:9b:eb:a3:c7:fe:90:b0:c8:0f:18:0b:f1:d9:70:ab:cd:
bd:ae:b4:0b:06:18:a0:12:4b:a1:13:2e:86:5a:c7:1c:05:a4:
0b:f8:34:53:c9:4f:74:7a:12:4f:b1:1c:45:c3:5e:c9:e4:52:
38:b6:99:65:2a:b0:4f:01:50:e0:67:8e:e8:2e:39:b7:71:49:
1b:2c:0c:c8:5c:3c:8e:86:5a:c0:a6:62:58:a9:86:bf:3f:bc:
5e:60:f9:64:f4:c5:e7:d1:e7:09:cc:81:5a:bc:ee:7c:d9:b7:
c2:1b:34:24:97:29:c3:c8:47:3d:d2:51:7b:a7:fc:ba:2c:c0:
97:87:02:2c:31:17:f0:3a:5e:4e:54:05:f0:a7:e7:33:3f:3d:
ac:e6:b5:5b:ea:0b:89:e3:14:0d:30:d7:3d:6d:e6:50:b6:9a:
b1:f0:51:fd:6f:6b:9d:e3:be:d0:2e:16:13:9f:7f:9b:e6:f6:
3f:a6:e7:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6bhPm1rBuMNS3oCCxG0mlVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzYjc3YzllODEwNzZjZjRiNGNlZmVkNWVlZjIxMDdmNzUy
YzM2MzAwHhcNMjYwNjA2MDYwMDQzWhcNMjYwNjA3MDYwMDQzWjAzMTEwLwYDVQQD
EygzNmZmZDI3OGI5Yzc2ZmY1NzI4YmIzYWNmMzE1ZGIxYzQ3ZGVjYmIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzN1FuYLVO0D+sevNhNgAQ6hVWdk
wZ/5uxpjGZ4yD0x4I/s1O1OU91TqBDnJC6CCAJcTdhBUfrzO1VELDcSum6KO7dcS
sAqvgm7JpYOztYupD335ZTH1X+BbTTjgKIrNUoqNsbas7oRx+eFKUUPu8oIff29g
oTTzlyJGR4o0zFGNdVGk2KEXd9iY2YSYbKQgPQdN2e8T11K1vsMMcUPGmDIj5W8A
DFmfywDqroBaetPAQz7kreJSImA9tInRXGZ/JEsh0Lm5ytI/ajWW9kDyQ50oxuoE
V/hVkZnWnV+CVHEVoR0nBMQFBwb+Zy6P6fpmRRp+Xl8st0hotIz6kxgmhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDb/0ni5x2/1couzrPMV2xxH3suyMB8GA1UdIwQY
MBaAFIO3fJ6BB2z0tM7+1e7yEH91LDYwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzdkOG5vRUhiUFMwenY3Vjd2SVFmM1VzTmpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC8zZGM0ZGQtODBiYi00ZGY1LWFmNTgt
YjdhZGYwNGU0MjNkLzEvZzdkOG5vRUhiUFMwenY3Vjd2SVFmM1VzTmpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC8zZGM0ZGQtODBiYi00ZGY1LWFmNTgtYjdhZGYwNGU0MjNk
LzEvZzdkOG5vRUhiUFMwenY3Vjd2SVFmM1VzTmpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABiC/9FWh
15/aIfHe/922JxYmzcOOA5YlbsvkoiJE4qMeX3ABCpLB78yU49dlJ9FMrFCMNMdZ
gRv6bBdG++oaZCBTIbQkTRh78g6b66PH/pCwyA8YC/HZcKvNva60CwYYoBJLoRMu
hlrHHAWkC/g0U8lPdHoST7EcRcNeyeRSOLaZZSqwTwFQ4GeO6C45t3FJGywMyFw8
joZawKZiWKmGvz+8XmD5ZPTF59HnCcyBWrzufNm3whs0JJcpw8hHPdJRe6f8uizA
l4cCLDEX8DpeTlQF8KfnMz89rOa1W+oLieMUDTDXPW3mULaasfBR/W9rneO+0C4W
E59/m+b2P6bnbg==
-----END CERTIFICATE-----
Generated at Sat Jun 6 13:20:38 2026 by rpki-client