Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/e82de9-25f4-466e-9c0c-c08997a7a08f/1/gU7b0ZY0y7kaDS2v11nUyafne3o.mft
File: gU7b0ZY0y7kaDS2v11nUyafne3o.mft (raw, json)
Hash identifier: G+rB3WehglFVk5el9E7hc94F7y3Uvtqzbl5K2SXb0Ng=
Subject key identifier: BC:2B:AE:B7:68:90:4F:07:1C:B4:5E:4C:C6:91:15:FB:B2:9C:C3:FB
Authority key identifier: 81:4E:DB:D1:96:34:CB:B9:1A:0D:2D:AF:D7:59:D4:C9:A7:E7:7B:7A
Certificate issuer: /CN=814edbd19634cbb91a0d2dafd759d4c9a7e77b7a
Certificate serial: 019D38D3AF82175AB9ABA3F6F5E3E0FB4261
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gU7b0ZY0y7kaDS2v11nUyafne3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/e82de9-25f4-466e-9c0c-c08997a7a08f/1/gU7b0ZY0y7kaDS2v11nUyafne3o.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 09:01:30 +0000
Manifest this update: Sun 29 Mar 2026 09:01:30 +0000
Manifest next update: Mon 30 Mar 2026 09:01:30 +0000
Files and hashes: 1: 2mdLM4QMSFolc5LIsVCE-5xpuxw.roa (hash: Pb6j/jV8p9sMo1nrwtTOTYAV2/aTJmLOHn6ZswOsyqw=)
2: dTiJsEq_JJ5524hOgqQnN8Ddhhg.roa (hash: C8qRzW17uM9hsxbqGg5gMXnbyDi7MEbAVWHt31dT0Ag=)
3: gU7b0ZY0y7kaDS2v11nUyafne3o.crl (hash: UuloOoe1TMp6lND2VrbgNDh/wvyEslbp63Kl0vMZHno=)
4: kPXbHwmFeaUgl0gADFGcVtXfM54.roa (hash: PFLTi3V9mE8UoiZOrhozT0x6k7lKbzmX0yMq70JlctI=)
5: zJqeRCb5j4Dd57Zj7b1drSwEVOY.roa (hash: kMSmGuO+kRwRxKV3HZvVShc5KQnbIWPqxWeSNvdxgoM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/e82de9-25f4-466e-9c0c-c08997a7a08f/1/gU7b0ZY0y7kaDS2v11nUyafne3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/e82de9-25f4-466e-9c0c-c08997a7a08f/1/gU7b0ZY0y7kaDS2v11nUyafne3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/gU7b0ZY0y7kaDS2v11nUyafne3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:af:82:17:5a:b9:ab:a3:f6:f5:e3:e0:fb:42:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=814edbd19634cbb91a0d2dafd759d4c9a7e77b7a
Validity
Not Before: Mar 29 09:01:30 2026 GMT
Not After : Mar 30 09:01:30 2026 GMT
Subject: CN=bc2baeb768904f071cb45e4cc69115fbb29cc3fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:22:34:bc:9f:13:0a:e6:a3:62:eb:66:28:0b:
f3:92:00:55:cd:28:7a:eb:3d:0b:0c:e9:0e:bc:02:
20:68:e6:e9:21:60:dc:06:4f:b5:bd:3d:73:69:40:
48:4e:82:78:95:ce:54:26:3f:b0:6d:6d:b1:88:f0:
3f:35:ea:40:62:66:91:f0:62:9d:3b:ba:18:e5:a0:
77:27:54:05:a3:be:bb:3b:ee:80:9e:78:51:ac:00:
da:dc:ca:61:f3:f1:a3:b5:52:09:45:95:8f:9f:69:
5c:4f:af:73:f5:8f:58:e1:c7:97:94:21:b7:40:63:
3a:d5:3b:75:df:1b:6f:3a:db:2a:ea:f4:9b:c2:cb:
19:32:e0:da:06:4d:ed:a9:f1:86:4d:87:14:85:a7:
31:16:f5:42:34:45:46:1c:0f:24:7a:33:20:f9:52:
01:20:b0:aa:5d:f3:27:70:ae:06:00:2c:f3:a7:b5:
2e:06:5b:6a:8a:ce:3c:fb:dd:c2:3a:7b:b7:83:d6:
ce:8c:80:4b:b8:52:f3:a5:2b:da:33:68:2f:54:6a:
fa:ef:44:e4:61:16:30:38:a8:bc:52:e5:36:90:d2:
81:6a:07:9a:3c:26:05:26:8f:d2:5c:d4:54:02:d3:
86:21:aa:a5:9f:fc:bf:fb:2f:5f:1c:a6:52:d0:b7:
e9:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:2B:AE:B7:68:90:4F:07:1C:B4:5E:4C:C6:91:15:FB:B2:9C:C3:FB
X509v3 Authority Key Identifier:
keyid:81:4E:DB:D1:96:34:CB:B9:1A:0D:2D:AF:D7:59:D4:C9:A7:E7:7B:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gU7b0ZY0y7kaDS2v11nUyafne3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e82de9-25f4-466e-9c0c-c08997a7a08f/1/gU7b0ZY0y7kaDS2v11nUyafne3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e82de9-25f4-466e-9c0c-c08997a7a08f/1/gU7b0ZY0y7kaDS2v11nUyafne3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:d9:69:64:9e:1f:e4:52:7b:02:4d:d4:84:e8:0a:c8:e6:0a:
32:19:eb:4a:a3:c0:39:ec:06:74:76:af:e2:59:cb:17:0c:17:
1a:50:a8:2d:fb:73:59:6d:20:84:18:d2:88:12:54:1d:a7:c5:
0a:7c:73:4b:c3:3f:b8:31:1b:f6:23:5a:0e:b5:b4:5c:25:e2:
a4:87:bf:2e:ba:00:75:67:6c:8e:d4:4c:e4:a8:55:45:23:f6:
55:05:34:5e:be:73:66:29:7e:19:43:8f:d0:ea:0f:a6:3b:e6:
bf:c6:b3:03:32:f2:5a:54:51:8d:48:49:d6:98:8c:c3:0a:5f:
97:b0:0d:f8:69:e0:9c:0d:58:f4:7f:60:39:03:14:74:79:11:
8b:6a:33:c8:48:40:8b:f2:e2:e4:48:44:55:71:62:18:f0:72:
36:be:11:c5:c7:8b:8e:c0:ca:a2:16:9e:fc:d7:ca:7b:a8:f0:
55:cb:24:0e:1b:3f:94:eb:59:1a:85:18:6e:6f:da:2b:81:60:
ae:9c:58:e8:f8:d5:08:1b:e0:aa:63:df:73:f5:a3:5d:59:14:
c6:29:21:32:72:02:a1:42:46:cc:80:17:ff:e3:c8:fd:2d:07:
ba:16:21:10:ec:94:b4:c0:b9:3c:2f:f4:c5:d8:10:0a:df:19:
86:8c:19:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0406+CF1q5q6P29ePg+0JhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxNGVkYmQxOTYzNGNiYjkxYTBkMmRhZmQ3NTlkNGM5YTdl
NzdiN2EwHhcNMjYwMzI5MDkwMTMwWhcNMjYwMzMwMDkwMTMwWjAzMTEwLwYDVQQD
EyhiYzJiYWViNzY4OTA0ZjA3MWNiNDVlNGNjNjkxMTVmYmIyOWNjM2ZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2iI0vJ8TCuajYutmKAvzkgBVzSh6
6z0LDOkOvAIgaObpIWDcBk+1vT1zaUBIToJ4lc5UJj+wbW2xiPA/NepAYmaR8GKd
O7oY5aB3J1QFo767O+6AnnhRrADa3Mph8/GjtVIJRZWPn2lcT69z9Y9Y4ceXlCG3
QGM61Tt13xtvOtsq6vSbwssZMuDaBk3tqfGGTYcUhacxFvVCNEVGHA8kejMg+VIB
ILCqXfMncK4GACzzp7UuBltqis48+93COnu3g9bOjIBLuFLzpSvaM2gvVGr670Tk
YRYwOKi8UuU2kNKBageaPCYFJo/SXNRUAtOGIaqln/y/+y9fHKZS0LfpOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLwrrrdokE8HHLReTMaRFfuynMP7MB8GA1UdIwQY
MBaAFIFO29GWNMu5Gg0tr9dZ1Mmn53t6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1U3YjBaWTB5N2thRFMydjExblV5YWZuZTNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9lODJkZTktMjVmNC00NjZlLTljMGMt
YzA4OTk3YTdhMDhmLzEvZ1U3YjBaWTB5N2thRFMydjExblV5YWZuZTNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi9lODJkZTktMjVmNC00NjZlLTljMGMtYzA4OTk3YTdhMDhm
LzEvZ1U3YjBaWTB5N2thRFMydjExblV5YWZuZTNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbNlpZJ4f
5FJ7Ak3UhOgKyOYKMhnrSqPAOewGdHav4lnLFwwXGlCoLftzWW0ghBjSiBJUHafF
CnxzS8M/uDEb9iNaDrW0XCXipIe/LroAdWdsjtRM5KhVRSP2VQU0Xr5zZil+GUOP
0OoPpjvmv8azAzLyWlRRjUhJ1piMwwpfl7AN+GngnA1Y9H9gOQMUdHkRi2ozyEhA
i/Li5EhEVXFiGPByNr4RxceLjsDKohae/NfKe6jwVcskDhs/lOtZGoUYbm/aK4Fg
rpxY6PjVCBvgqmPfc/WjXVkUxikhMnICoUJGzIAX/+PI/S0HuhYhEOyUtMC5PC/0
xdgQCt8ZhowZTA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:46:35 2026 by rpki-client