Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/e53313-d587-492c-ad18-47637eb1ec49/1/GPijrw2MDVHeLd0mWtVNq5e95s4.mft
File: GPijrw2MDVHeLd0mWtVNq5e95s4.mft (raw, json)
Hash identifier: uWbFUbhRAU03Idx7tu9Yws/IGvhL9NHG3YmLlYOZo1Y=
Subject key identifier: 53:0F:61:8D:B6:65:F0:41:BE:61:CA:FD:B6:2C:CC:53:9D:5C:70:F2
Authority key identifier: 18:F8:A3:AF:0D:8C:0D:51:DE:2D:DD:26:5A:D5:4D:AB:97:BD:E6:CE
Certificate issuer: /CN=18f8a3af0d8c0d51de2ddd265ad54dab97bde6ce
Certificate serial: 019D3752B8D2868E636C107696FC0CA787A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GPijrw2MDVHeLd0mWtVNq5e95s4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/e53313-d587-492c-ad18-47637eb1ec49/1/GPijrw2MDVHeLd0mWtVNq5e95s4.mft
Manifest number: 013C
Signing time: Sun 29 Mar 2026 02:01:01 +0000
Manifest this update: Sun 29 Mar 2026 02:01:01 +0000
Manifest next update: Mon 30 Mar 2026 02:01:01 +0000
Files and hashes: 1: GPijrw2MDVHeLd0mWtVNq5e95s4.crl (hash: /sBgRsRjucN8ZKx3PMGn/k/tQnD7Ud95LmcSk4KoMfk=)
2: q-3PkcuXvbxG2AJOGo6sUKyZOAU.roa (hash: a1DkrhlznASzhUP99TVl/s5bY4rDfTZ4JGlmLv4QaHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/e53313-d587-492c-ad18-47637eb1ec49/1/GPijrw2MDVHeLd0mWtVNq5e95s4.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/e53313-d587-492c-ad18-47637eb1ec49/1/GPijrw2MDVHeLd0mWtVNq5e95s4.mft
rsync://rpki.ripe.net/repository/DEFAULT/GPijrw2MDVHeLd0mWtVNq5e95s4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:b8:d2:86:8e:63:6c:10:76:96:fc:0c:a7:87:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18f8a3af0d8c0d51de2ddd265ad54dab97bde6ce
Validity
Not Before: Mar 29 02:01:01 2026 GMT
Not After : Mar 30 02:01:01 2026 GMT
Subject: CN=530f618db665f041be61cafdb62ccc539d5c70f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:71:61:9c:30:db:f2:ea:57:0a:45:1d:51:82:
ca:b5:78:bd:ca:7e:99:2c:49:a7:67:25:34:33:67:
47:b3:aa:59:59:1b:8c:b1:18:26:ae:3b:00:b1:4b:
71:38:fd:45:0f:9d:ae:27:cc:95:c5:0c:f1:5c:62:
23:a2:c3:ee:47:16:29:fa:a0:70:e8:79:9b:3b:3b:
07:72:c1:e8:44:2a:b2:27:1b:a1:c6:de:65:e3:0a:
f0:83:d5:9a:1a:76:db:46:f1:c3:ee:ba:0c:d9:d8:
26:b5:eb:49:73:b8:56:bf:ca:45:e3:df:37:4e:ed:
76:9b:6d:6a:a5:5c:3d:4b:f7:2b:17:30:a2:32:12:
9c:d4:0c:69:9b:45:be:d2:c9:d0:55:b6:77:63:7e:
53:49:39:53:05:ef:d5:6c:fe:88:f7:83:18:3a:32:
bf:44:ee:71:94:24:a9:79:0b:66:44:35:94:fd:03:
40:c7:5e:51:29:37:83:25:55:0c:8b:dd:dc:00:e6:
10:20:19:4c:80:e6:42:bd:a1:55:a1:09:78:16:26:
17:1c:7c:4d:07:10:0d:1a:e1:96:4d:dc:f6:64:f1:
22:df:94:61:32:6c:b0:fe:97:d0:43:f5:69:30:01:
bb:16:62:a7:b0:13:e5:8e:ac:1f:ef:c7:0f:d3:c6:
53:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:0F:61:8D:B6:65:F0:41:BE:61:CA:FD:B6:2C:CC:53:9D:5C:70:F2
X509v3 Authority Key Identifier:
keyid:18:F8:A3:AF:0D:8C:0D:51:DE:2D:DD:26:5A:D5:4D:AB:97:BD:E6:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GPijrw2MDVHeLd0mWtVNq5e95s4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/e53313-d587-492c-ad18-47637eb1ec49/1/GPijrw2MDVHeLd0mWtVNq5e95s4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/e53313-d587-492c-ad18-47637eb1ec49/1/GPijrw2MDVHeLd0mWtVNq5e95s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:25:8c:41:f2:ec:05:f2:40:06:87:f8:8b:bc:f6:94:6f:50:
ef:94:ca:f9:9d:3f:77:38:ae:c2:5e:06:f5:10:ba:91:e7:b7:
80:b0:97:bc:c0:0d:a5:0d:f9:28:e4:77:63:31:3e:c3:14:a5:
19:66:3e:4b:45:6c:5b:b7:04:ab:73:d5:aa:1d:3b:22:29:8b:
ea:88:1b:00:17:7a:84:07:02:93:ba:be:8b:c2:8a:86:30:36:
33:01:92:89:bb:b4:0a:7c:5f:cb:70:1f:b3:75:48:55:32:80:
74:99:b7:74:fa:6c:be:a9:a5:f4:16:91:6c:4b:d5:90:b9:05:
d7:bc:8d:6a:dc:7b:28:69:ca:41:74:68:05:ff:34:ab:58:37:
1a:e2:f0:8f:cb:1a:52:fc:bc:ea:ed:d9:7f:cb:c3:fe:61:46:
e2:f2:f3:20:d0:02:c6:d6:4b:64:8f:1f:50:17:3b:35:ae:81:
bd:94:ce:61:e0:41:c0:45:a4:e3:c2:fe:43:b5:17:c4:43:46:
12:c7:bf:a6:3e:79:c8:03:df:84:2b:38:44:86:a1:06:eb:d6:
11:18:72:e1:b9:ec:69:18:ad:24:47:cd:9d:25:49:c7:b9:fc:
c7:fc:dc:55:1a:7a:5e:c6:b2:12:5c:57:30:7a:13:65:7c:b0:
85:17:90:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03UrjSho5jbBB2lvwMp4egMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4ZjhhM2FmMGQ4YzBkNTFkZTJkZGQyNjVhZDU0ZGFiOTdi
ZGU2Y2UwHhcNMjYwMzI5MDIwMTAxWhcNMjYwMzMwMDIwMTAxWjAzMTEwLwYDVQQD
Eyg1MzBmNjE4ZGI2NjVmMDQxYmU2MWNhZmRiNjJjY2M1MzlkNWM3MGYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXFhnDDb8upXCkUdUYLKtXi9yn6Z
LEmnZyU0M2dHs6pZWRuMsRgmrjsAsUtxOP1FD52uJ8yVxQzxXGIjosPuRxYp+qBw
6HmbOzsHcsHoRCqyJxuhxt5l4wrwg9WaGnbbRvHD7roM2dgmtetJc7hWv8pF4983
Tu12m21qpVw9S/crFzCiMhKc1Axpm0W+0snQVbZ3Y35TSTlTBe/VbP6I94MYOjK/
RO5xlCSpeQtmRDWU/QNAx15RKTeDJVUMi93cAOYQIBlMgOZCvaFVoQl4FiYXHHxN
BxANGuGWTdz2ZPEi35RhMmyw/pfQQ/VpMAG7FmKnsBPljqwf78cP08ZTMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFMPYY22ZfBBvmHK/bYszFOdXHDyMB8GA1UdIwQY
MBaAFBj4o68NjA1R3i3dJlrVTauXvebOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1BpanJ3Mk1EVkhlTGQwbVd0Vk5xNWU5NXM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9lNTMzMTMtZDU4Ny00OTJjLWFkMTgt
NDc2MzdlYjFlYzQ5LzEvR1BpanJ3Mk1EVkhlTGQwbVd0Vk5xNWU5NXM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi9lNTMzMTMtZDU4Ny00OTJjLWFkMTgtNDc2MzdlYjFlYzQ5
LzEvR1BpanJ3Mk1EVkhlTGQwbVd0Vk5xNWU5NXM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApSWMQfLs
BfJABof4i7z2lG9Q75TK+Z0/dziuwl4G9RC6kee3gLCXvMANpQ35KOR3YzE+wxSl
GWY+S0VsW7cEq3PVqh07IimL6ogbABd6hAcCk7q+i8KKhjA2MwGSibu0Cnxfy3Af
s3VIVTKAdJm3dPpsvqml9BaRbEvVkLkF17yNatx7KGnKQXRoBf80q1g3GuLwj8sa
Uvy86u3Zf8vD/mFG4vLzINACxtZLZI8fUBc7Na6BvZTOYeBBwEWk48L+Q7UXxENG
Ese/pj55yAPfhCs4RIahBuvWERhy4bnsaRitJEfNnSVJx7n8x/zcVRp6XsayElxX
MHoTZXywhReQ7g==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:13 2026 by rpki-client