Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/0143cd-a814-4d48-a87c-d7c0e9393ea0/1/GNwjUhF2AjItdBxRNoyouN0aPqo.mft
File: GNwjUhF2AjItdBxRNoyouN0aPqo.mft (raw, json)
Hash identifier: bJ6Iczz9QCCMHyOEZA/j94JZGgSbwjPzSB8pKl9PW2Y=
Subject key identifier: F7:4B:86:1C:28:27:06:87:41:72:1E:80:83:76:82:EE:84:A2:CF:D8
Authority key identifier: 18:DC:23:52:11:76:02:32:2D:74:1C:51:36:8C:A8:B8:DD:1A:3E:AA
Certificate issuer: /CN=18dc2352117602322d741c51368ca8b8dd1a3eaa
Certificate serial: 019CE3A3181A22320542F7A19BB143D78DAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GNwjUhF2AjItdBxRNoyouN0aPqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/0143cd-a814-4d48-a87c-d7c0e9393ea0/1/GNwjUhF2AjItdBxRNoyouN0aPqo.mft
Manifest number: 0A0A
Signing time: Thu 12 Mar 2026 20:00:42 +0000
Manifest this update: Thu 12 Mar 2026 20:00:42 +0000
Manifest next update: Fri 13 Mar 2026 20:00:42 +0000
Files and hashes: 1: GNwjUhF2AjItdBxRNoyouN0aPqo.crl (hash: DoNmn1ZFpMNj4J70i/cq8NdDMMRStEwzJ74pgzQiIro=)
2: nTSOIsFCXPktLiPKU0rpSqAxP9c.roa (hash: p4pPo4o8ji9IxG+yykgVyf22JPwriVlViBGbSDBIE2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/0143cd-a814-4d48-a87c-d7c0e9393ea0/1/GNwjUhF2AjItdBxRNoyouN0aPqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/0143cd-a814-4d48-a87c-d7c0e9393ea0/1/GNwjUhF2AjItdBxRNoyouN0aPqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/GNwjUhF2AjItdBxRNoyouN0aPqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 20:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e3:a3:18:1a:22:32:05:42:f7:a1:9b:b1:43:d7:8d:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18dc2352117602322d741c51368ca8b8dd1a3eaa
Validity
Not Before: Mar 12 20:00:42 2026 GMT
Not After : Mar 13 20:00:42 2026 GMT
Subject: CN=f74b861c2827068741721e80837682ee84a2cfd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f4:4d:01:0f:75:82:9a:9d:e9:0f:2f:90:60:
1f:5b:1e:ff:30:04:58:31:51:46:a1:e4:0d:6e:67:
42:09:f6:f5:19:b6:0e:be:3b:59:cb:ad:d9:b3:59:
bc:a0:46:8b:dc:a1:a0:ce:0f:30:0d:68:51:9e:70:
fd:67:f4:d8:f3:43:1b:8f:8f:58:26:f0:4e:03:94:
a9:58:20:47:f1:16:65:de:65:38:8f:89:6d:13:eb:
ae:fa:d5:d0:2c:8d:17:dc:17:44:be:0d:54:a2:1d:
48:5d:44:42:ff:15:65:19:ae:ec:ca:9c:74:00:33:
ce:bc:50:65:1c:72:cb:5e:33:4e:f8:a0:f6:b5:13:
89:bc:c2:33:6e:61:91:cf:a3:c6:29:a8:18:25:4c:
53:83:55:18:a3:ea:fa:bb:38:54:6f:63:5c:11:49:
aa:c3:06:53:e3:1b:f6:87:11:f4:49:47:92:49:69:
59:d4:33:de:fa:0a:2c:be:21:74:35:b1:e4:74:05:
4c:2c:97:89:0a:c3:f7:10:ab:a6:c7:6c:12:85:5d:
eb:8e:c4:0f:3b:50:8d:6b:81:b2:2a:c5:a5:2b:6a:
aa:3a:88:38:51:73:c7:36:e7:ee:3d:9d:73:16:42:
43:2e:62:12:fa:8f:12:f0:63:00:a0:33:f1:ea:3c:
b8:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:4B:86:1C:28:27:06:87:41:72:1E:80:83:76:82:EE:84:A2:CF:D8
X509v3 Authority Key Identifier:
keyid:18:DC:23:52:11:76:02:32:2D:74:1C:51:36:8C:A8:B8:DD:1A:3E:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GNwjUhF2AjItdBxRNoyouN0aPqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/0143cd-a814-4d48-a87c-d7c0e9393ea0/1/GNwjUhF2AjItdBxRNoyouN0aPqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/0143cd-a814-4d48-a87c-d7c0e9393ea0/1/GNwjUhF2AjItdBxRNoyouN0aPqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:72:d3:01:28:88:dc:13:89:38:79:59:dc:73:89:a3:4d:a5:
58:65:fd:2f:93:d0:15:fd:05:42:68:48:d2:59:aa:a3:3b:af:
40:89:d4:09:49:cb:b3:ce:91:81:90:f7:34:e2:ee:ba:53:50:
ff:00:3d:a8:22:43:a4:29:2b:93:26:57:56:31:fb:8e:05:ea:
38:27:55:ff:4b:37:f0:a2:fc:94:f3:63:96:d8:95:e2:cf:a4:
95:4a:d3:19:0e:48:4d:d9:92:c5:07:96:ec:85:55:23:9e:19:
80:f9:7c:ff:cc:50:cc:15:7b:a0:b2:cc:d6:0b:df:57:8a:79:
ec:35:22:d3:c7:dc:99:38:3f:47:fb:5e:f0:a1:26:a3:55:39:
25:3b:2b:32:9f:cd:1d:e8:ed:b9:cd:2c:7b:0a:2e:5a:00:85:
88:c7:5c:e9:7d:28:fa:50:37:37:cc:82:7c:b6:89:c5:da:ce:
2e:a1:de:b1:84:24:b4:0f:ff:4f:0f:2b:71:27:45:2e:6d:01:
ba:dd:23:32:88:da:90:a0:b5:42:a1:91:e0:65:1b:e8:46:4e:
2e:e2:55:c7:bb:5b:e9:bb:8c:95:47:56:27:d0:92:26:b9:4e:
12:43:57:17:99:dc:ba:d6:f1:ed:de:20:6b:13:e3:9f:ad:45:
c0:bf:c7:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzjoxgaIjIFQvehm7FD142qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4ZGMyMzUyMTE3NjAyMzIyZDc0MWM1MTM2OGNhOGI4ZGQx
YTNlYWEwHhcNMjYwMzEyMjAwMDQyWhcNMjYwMzEzMjAwMDQyWjAzMTEwLwYDVQQD
EyhmNzRiODYxYzI4MjcwNjg3NDE3MjFlODA4Mzc2ODJlZTg0YTJjZmQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPRNAQ91gpqd6Q8vkGAfWx7/MARY
MVFGoeQNbmdCCfb1GbYOvjtZy63Zs1m8oEaL3KGgzg8wDWhRnnD9Z/TY80Mbj49Y
JvBOA5SpWCBH8RZl3mU4j4ltE+uu+tXQLI0X3BdEvg1Uoh1IXURC/xVlGa7sypx0
ADPOvFBlHHLLXjNO+KD2tROJvMIzbmGRz6PGKagYJUxTg1UYo+r6uzhUb2NcEUmq
wwZT4xv2hxH0SUeSSWlZ1DPe+gosviF0NbHkdAVMLJeJCsP3EKumx2wShV3rjsQP
O1CNa4GyKsWlK2qqOog4UXPHNufuPZ1zFkJDLmIS+o8S8GMAoDPx6jy4awIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPdLhhwoJwaHQXIegIN2gu6Eos/YMB8GA1UdIwQY
MBaAFBjcI1IRdgIyLXQcUTaMqLjdGj6qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR053alVoRjJBakl0ZEJ4Uk5veW91TjBhUHFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8wMTQzY2QtYTgxNC00ZDQ4LWE4N2Mt
ZDdjMGU5MzkzZWEwLzEvR053alVoRjJBakl0ZEJ4Uk5veW91TjBhUHFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8wMTQzY2QtYTgxNC00ZDQ4LWE4N2MtZDdjMGU5MzkzZWEw
LzEvR053alVoRjJBakl0ZEJ4Uk5veW91TjBhUHFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe3LTASiI
3BOJOHlZ3HOJo02lWGX9L5PQFf0FQmhI0lmqozuvQInUCUnLs86RgZD3NOLuulNQ
/wA9qCJDpCkrkyZXVjH7jgXqOCdV/0s38KL8lPNjltiV4s+klUrTGQ5ITdmSxQeW
7IVVI54ZgPl8/8xQzBV7oLLM1gvfV4p57DUi08fcmTg/R/te8KEmo1U5JTsrMp/N
Hejtuc0sewouWgCFiMdc6X0o+lA3N8yCfLaJxdrOLqHesYQktA//Tw8rcSdFLm0B
ut0jMojakKC1QqGR4GUb6EZOLuJVx7tb6buMlUdWJ9CSJrlOEkNXF5ncutbx7d4g
axPjn61FwL/HOA==
-----END CERTIFICATE-----
Generated at Fri Mar 13 01:29:20 2026 by rpki-client