Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/6ea16c-b92f-4041-a508-bb5893a6ac91/1/ga5w39QwUnNv6F8A0phM43a3brM.mft
File: ga5w39QwUnNv6F8A0phM43a3brM.mft (raw, json)
Hash identifier: g9g05jz+QrJEPmqv6Qr7GQJv1GmQMnGLJ+t13foCi8Q=
Subject key identifier: 73:F9:76:62:5E:7F:8E:F3:2C:43:B6:D0:52:3A:6F:DC:73:2C:60:00
Authority key identifier: 81:AE:70:DF:D4:30:52:73:6F:E8:5F:00:D2:98:4C:E3:76:B7:6E:B3
Certificate issuer: /CN=81ae70dfd43052736fe85f00d2984ce376b76eb3
Certificate serial: 019CE4B5EF95D21BF6CC983674DDDF1A199C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ga5w39QwUnNv6F8A0phM43a3brM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/6ea16c-b92f-4041-a508-bb5893a6ac91/1/ga5w39QwUnNv6F8A0phM43a3brM.mft
Manifest number: 09BF
Signing time: Fri 13 Mar 2026 01:00:54 +0000
Manifest this update: Fri 13 Mar 2026 01:00:54 +0000
Manifest next update: Sat 14 Mar 2026 01:00:54 +0000
Files and hashes: 1: EvlHWqhQzmdjRG2k6tk-9HD_zOg.roa (hash: CaEBziMi2C6rN6WGf7O34W/+WtB1Ogao7r0fRD3u2XA=)
2: ga5w39QwUnNv6F8A0phM43a3brM.crl (hash: 6uvv8Z5EJP5ORbA8/yl1a38G3g4ErN5tDva6PeevqTc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/6ea16c-b92f-4041-a508-bb5893a6ac91/1/ga5w39QwUnNv6F8A0phM43a3brM.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/6ea16c-b92f-4041-a508-bb5893a6ac91/1/ga5w39QwUnNv6F8A0phM43a3brM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ga5w39QwUnNv6F8A0phM43a3brM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:b5:ef:95:d2:1b:f6:cc:98:36:74:dd:df:1a:19:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81ae70dfd43052736fe85f00d2984ce376b76eb3
Validity
Not Before: Mar 13 01:00:54 2026 GMT
Not After : Mar 14 01:00:54 2026 GMT
Subject: CN=73f976625e7f8ef32c43b6d0523a6fdc732c6000
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b8:fa:74:39:98:af:70:bc:66:5b:28:29:80:
2d:e5:ff:8c:f3:d5:65:c7:8e:18:87:95:ab:f5:78:
9c:83:ae:aa:dc:40:cf:42:a8:65:00:7b:e2:f9:8b:
98:65:44:29:b1:35:0b:fd:84:6e:2b:41:49:f1:c6:
62:b7:70:41:03:f9:d7:35:ae:73:2c:85:4a:a2:1b:
b3:ee:9f:b5:6b:3b:9b:97:a4:bf:af:fd:15:ab:e2:
3d:ac:be:71:fa:a5:a0:82:fc:ff:dc:2b:f6:ab:4a:
8d:cc:44:ee:f9:2c:ed:50:90:da:41:97:27:64:07:
0c:7d:cf:bb:43:44:10:47:04:41:b0:2f:c0:ec:78:
88:4c:80:65:1b:78:b0:7d:03:8d:f3:66:6f:a7:fd:
f1:8e:e1:3a:7e:f3:49:cd:06:67:d9:92:6a:bb:83:
bb:41:33:bd:51:e2:87:67:5d:f4:8e:74:d3:51:42:
a0:84:ac:3d:a3:de:f6:10:14:de:21:16:61:f6:7c:
08:0f:9c:30:31:02:96:93:85:f3:bd:b3:01:4d:e8:
8e:81:6e:8b:a9:9e:7e:5b:8d:4b:f9:76:cd:b5:28:
0d:ca:6f:ac:40:04:43:52:68:a4:41:fe:63:71:8e:
a7:36:a2:c5:0c:8a:a8:8b:d7:d3:78:3b:0c:0f:af:
d9:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:F9:76:62:5E:7F:8E:F3:2C:43:B6:D0:52:3A:6F:DC:73:2C:60:00
X509v3 Authority Key Identifier:
keyid:81:AE:70:DF:D4:30:52:73:6F:E8:5F:00:D2:98:4C:E3:76:B7:6E:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ga5w39QwUnNv6F8A0phM43a3brM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/6ea16c-b92f-4041-a508-bb5893a6ac91/1/ga5w39QwUnNv6F8A0phM43a3brM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/6ea16c-b92f-4041-a508-bb5893a6ac91/1/ga5w39QwUnNv6F8A0phM43a3brM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:01:0b:29:f1:47:6c:c1:39:35:8d:06:7e:00:55:43:d6:82:
9f:26:29:f6:6b:63:f8:45:9e:86:88:07:1c:1c:e3:d8:e2:f3:
e3:80:6b:49:34:1b:fe:ad:40:ae:0c:19:c7:85:42:a3:c3:b4:
4b:7a:fd:ca:6d:e1:77:04:cf:2f:b4:90:fd:0e:97:6b:2a:ce:
d4:e4:41:1a:12:01:81:68:d8:a7:ef:8b:66:7d:e9:81:77:11:
52:7c:a7:ba:65:c6:32:ae:e5:1f:17:b8:d9:68:9d:3a:9a:03:
0c:2c:17:c6:16:92:24:d9:00:fa:b0:90:5f:c5:28:db:de:a5:
07:bf:f2:71:cb:09:29:e3:36:e8:64:68:39:3b:68:6d:13:51:
9e:6a:1f:a4:86:38:96:5e:3d:ca:34:91:e9:65:92:07:2c:b2:
c3:14:5e:e7:95:5b:4c:fc:c9:eb:d8:b7:9e:46:a3:4b:c1:8c:
8d:78:3e:f5:39:b5:49:d5:b5:15:ef:e8:c5:7e:6c:aa:a0:2b:
55:e0:15:d4:9a:b2:09:65:c6:d7:3a:52:93:03:1e:1b:43:d2:
84:d7:c2:4c:4c:57:ba:f0:63:53:40:81:10:dc:37:b4:1d:20:
f6:08:98:8e:40:e7:51:6a:d0:7c:63:30:66:3f:1a:17:83:42:
95:90:c0:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzkte+V0hv2zJg2dN3fGhmcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxYWU3MGRmZDQzMDUyNzM2ZmU4NWYwMGQyOTg0Y2UzNzZi
NzZlYjMwHhcNMjYwMzEzMDEwMDU0WhcNMjYwMzE0MDEwMDU0WjAzMTEwLwYDVQQD
Eyg3M2Y5NzY2MjVlN2Y4ZWYzMmM0M2I2ZDA1MjNhNmZkYzczMmM2MDAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrj6dDmYr3C8ZlsoKYAt5f+M89Vl
x44Yh5Wr9Xicg66q3EDPQqhlAHvi+YuYZUQpsTUL/YRuK0FJ8cZit3BBA/nXNa5z
LIVKohuz7p+1azubl6S/r/0Vq+I9rL5x+qWggvz/3Cv2q0qNzETu+SztUJDaQZcn
ZAcMfc+7Q0QQRwRBsC/A7HiITIBlG3iwfQON82Zvp/3xjuE6fvNJzQZn2ZJqu4O7
QTO9UeKHZ130jnTTUUKghKw9o972EBTeIRZh9nwID5wwMQKWk4XzvbMBTeiOgW6L
qZ5+W41L+XbNtSgNym+sQARDUmikQf5jcY6nNqLFDIqoi9fTeDsMD6/ZywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHP5dmJef47zLEO20FI6b9xzLGAAMB8GA1UdIwQY
MBaAFIGucN/UMFJzb+hfANKYTON2t26zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2E1dzM5UXdVbk52NkY4QTBwaE00M2EzYnJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS82ZWExNmMtYjkyZi00MDQxLWE1MDgt
YmI1ODkzYTZhYzkxLzEvZ2E1dzM5UXdVbk52NkY4QTBwaE00M2EzYnJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS82ZWExNmMtYjkyZi00MDQxLWE1MDgtYmI1ODkzYTZhYzkx
LzEvZ2E1dzM5UXdVbk52NkY4QTBwaE00M2EzYnJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAigELKfFH
bME5NY0GfgBVQ9aCnyYp9mtj+EWehogHHBzj2OLz44BrSTQb/q1ArgwZx4VCo8O0
S3r9ym3hdwTPL7SQ/Q6XayrO1ORBGhIBgWjYp++LZn3pgXcRUnynumXGMq7lHxe4
2WidOpoDDCwXxhaSJNkA+rCQX8Uo296lB7/yccsJKeM26GRoOTtobRNRnmofpIY4
ll49yjSR6WWSByyywxRe55VbTPzJ69i3nkajS8GMjXg+9Tm1SdW1Fe/oxX5sqqAr
VeAV1JqyCWXG1zpSkwMeG0PShNfCTExXuvBjU0CBENw3tB0g9giYjkDnUWrQfGMw
Zj8aF4NClZDAEQ==
-----END CERTIFICATE-----
Generated at Fri Mar 13 08:40:28 2026 by rpki-client