Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/b3c8a6-e32e-4700-b5ed-6a994e5ec472/1/gV_CISVyYlbWo189oo91E90xwf4.mft
File: gV_CISVyYlbWo189oo91E90xwf4.mft (raw, json)
Hash identifier: /LwH/bClvDsdev+PMDqBaJZptLppdjEqvYzG5N8SnMg=
Subject key identifier: D0:3E:F3:94:C2:98:B3:B3:B9:74:78:B5:F0:28:40:41:9F:FC:E0:41
Authority key identifier: 81:5F:C2:21:25:72:62:56:D6:A3:5F:3D:A2:8F:75:13:DD:31:C1:FE
Certificate issuer: /CN=815fc22125726256d6a35f3da28f7513dd31c1fe
Certificate serial: 019D389C658180E9527168CBDC02BAA6B75E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gV_CISVyYlbWo189oo91E90xwf4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/b3c8a6-e32e-4700-b5ed-6a994e5ec472/1/gV_CISVyYlbWo189oo91E90xwf4.mft
Manifest number: 1820
Signing time: Sun 29 Mar 2026 08:01:06 +0000
Manifest this update: Sun 29 Mar 2026 08:01:06 +0000
Manifest next update: Mon 30 Mar 2026 08:01:06 +0000
Files and hashes: 1: gV_CISVyYlbWo189oo91E90xwf4.crl (hash: 23RxuYbO2c0vBIL2D/9iN4pHjqOOvFB/cgMFW1IzGFQ=)
2: lYK_65AKlFPw1-t6tjg4pQYtXHY.roa (hash: VCWprxMwmjsHW4IsRUv/igV1kqqp3MMJUQXFePAz+0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/b3c8a6-e32e-4700-b5ed-6a994e5ec472/1/gV_CISVyYlbWo189oo91E90xwf4.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/b3c8a6-e32e-4700-b5ed-6a994e5ec472/1/gV_CISVyYlbWo189oo91E90xwf4.mft
rsync://rpki.ripe.net/repository/DEFAULT/gV_CISVyYlbWo189oo91E90xwf4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:65:81:80:e9:52:71:68:cb:dc:02:ba:a6:b7:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=815fc22125726256d6a35f3da28f7513dd31c1fe
Validity
Not Before: Mar 29 08:01:06 2026 GMT
Not After : Mar 30 08:01:06 2026 GMT
Subject: CN=d03ef394c298b3b3b97478b5f02840419ffce041
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:11:55:aa:0c:3a:b7:13:6d:ad:25:b8:44:aa:
bd:e9:18:d7:92:6a:5f:0e:14:b5:5a:7c:d1:16:79:
6f:69:0c:10:97:a0:ee:7d:16:b6:55:47:fc:15:64:
6e:2c:53:60:95:cb:d7:84:3a:05:98:06:14:b2:74:
63:3b:2d:96:cc:5e:3d:cc:b7:2c:ed:d7:c9:05:42:
91:91:3b:45:f0:0e:05:0a:56:63:3d:3c:f4:fe:12:
54:d1:0a:d6:4d:52:9c:95:af:7c:b7:c3:09:d6:47:
84:a3:f5:d7:c9:00:1f:13:ce:3b:21:7d:c8:5e:24:
42:a9:d6:d6:60:da:a8:ec:b2:8a:26:ef:19:c7:dd:
f5:35:d3:42:f8:48:26:54:c0:c4:e1:31:aa:89:25:
f1:21:c2:03:81:a9:35:d7:50:c0:be:35:e1:84:11:
b3:ac:28:6b:7b:c5:f2:e4:8d:9f:88:66:4e:8a:be:
8b:f5:7a:9a:57:b8:f6:94:63:cb:f3:08:54:63:f8:
d7:e4:a9:47:17:5b:c7:58:95:bc:20:8e:bb:54:3d:
f3:a2:bf:01:88:f4:f2:30:f6:fd:76:25:42:b3:78:
3c:56:03:8f:60:89:91:39:a6:75:83:2e:ff:4c:80:
cd:a5:ac:ad:28:64:0f:f4:ad:98:9a:77:f7:10:33:
37:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:3E:F3:94:C2:98:B3:B3:B9:74:78:B5:F0:28:40:41:9F:FC:E0:41
X509v3 Authority Key Identifier:
keyid:81:5F:C2:21:25:72:62:56:D6:A3:5F:3D:A2:8F:75:13:DD:31:C1:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gV_CISVyYlbWo189oo91E90xwf4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/b3c8a6-e32e-4700-b5ed-6a994e5ec472/1/gV_CISVyYlbWo189oo91E90xwf4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/b3c8a6-e32e-4700-b5ed-6a994e5ec472/1/gV_CISVyYlbWo189oo91E90xwf4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:88:13:01:85:4b:fd:d1:5f:6d:18:83:30:18:2e:05:4d:a5:
da:57:0a:35:2f:e3:8f:54:8c:e9:55:a7:d6:35:10:f9:7a:11:
57:19:d3:75:f5:bd:86:79:04:63:b5:f1:23:ba:80:1b:f6:f7:
1c:a3:dc:f7:d3:f3:46:9a:d0:55:cc:2c:40:0b:9b:90:0c:e9:
a8:0a:5b:d8:7d:db:33:1e:a6:da:e0:d7:1b:6c:82:50:5b:f9:
c6:9d:1f:e6:3e:25:08:0f:6c:79:ec:0d:3d:41:f7:5d:22:1e:
79:72:f4:12:e4:49:5d:60:ae:f2:57:2b:08:fe:53:ec:dd:e7:
c2:c7:06:2c:ad:32:15:bd:ce:ec:1d:a9:2a:8a:9d:15:f3:37:
44:73:4d:45:30:89:a1:68:dc:1b:52:65:28:7f:5d:3e:dc:a8:
a6:6f:65:47:5a:d3:59:70:83:d5:fe:76:75:84:15:13:3a:0a:
cf:e9:79:46:01:2f:8d:fa:02:8c:ed:92:0f:2b:d6:cf:8d:6a:
22:33:9d:6c:e4:5c:eb:a6:25:46:76:e9:0a:68:70:66:34:30:
dc:34:f6:23:0a:c2:56:5e:94:e9:a3:fa:b6:af:44:3b:24:8b:
a9:42:9f:06:21:1d:d2:a6:4b:e3:ea:08:f3:15:ac:4e:2f:f6:
9d:f4:72:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04nGWBgOlScWjL3AK6prdeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxNWZjMjIxMjU3MjYyNTZkNmEzNWYzZGEyOGY3NTEzZGQz
MWMxZmUwHhcNMjYwMzI5MDgwMTA2WhcNMjYwMzMwMDgwMTA2WjAzMTEwLwYDVQQD
EyhkMDNlZjM5NGMyOThiM2IzYjk3NDc4YjVmMDI4NDA0MTlmZmNlMDQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRFVqgw6txNtrSW4RKq96RjXkmpf
DhS1WnzRFnlvaQwQl6DufRa2VUf8FWRuLFNglcvXhDoFmAYUsnRjOy2WzF49zLcs
7dfJBUKRkTtF8A4FClZjPTz0/hJU0QrWTVKcla98t8MJ1keEo/XXyQAfE847IX3I
XiRCqdbWYNqo7LKKJu8Zx931NdNC+EgmVMDE4TGqiSXxIcIDgak111DAvjXhhBGz
rChre8Xy5I2fiGZOir6L9XqaV7j2lGPL8whUY/jX5KlHF1vHWJW8II67VD3zor8B
iPTyMPb9diVCs3g8VgOPYImROaZ1gy7/TIDNpaytKGQP9K2Ymnf3EDM3uQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNA+85TCmLOzuXR4tfAoQEGf/OBBMB8GA1UdIwQY
MBaAFIFfwiElcmJW1qNfPaKPdRPdMcH+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1ZfQ0lTVnlZbGJXbzE4OW9vOTFFOTB4d2Y0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9iM2M4YTYtZTMyZS00NzAwLWI1ZWQt
NmE5OTRlNWVjNDcyLzEvZ1ZfQ0lTVnlZbGJXbzE4OW9vOTFFOTB4d2Y0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC9iM2M4YTYtZTMyZS00NzAwLWI1ZWQtNmE5OTRlNWVjNDcy
LzEvZ1ZfQ0lTVnlZbGJXbzE4OW9vOTFFOTB4d2Y0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh4gTAYVL
/dFfbRiDMBguBU2l2lcKNS/jj1SM6VWn1jUQ+XoRVxnTdfW9hnkEY7XxI7qAG/b3
HKPc99PzRprQVcwsQAubkAzpqApb2H3bMx6m2uDXG2yCUFv5xp0f5j4lCA9seewN
PUH3XSIeeXL0EuRJXWCu8lcrCP5T7N3nwscGLK0yFb3O7B2pKoqdFfM3RHNNRTCJ
oWjcG1JlKH9dPtyopm9lR1rTWXCD1f52dYQVEzoKz+l5RgEvjfoCjO2SDyvWz41q
IjOdbORc66YlRnbpCmhwZjQw3DT2IwrCVl6U6aP6tq9EOySLqUKfBiEd0qZL4+oI
8xWsTi/2nfRyRA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:47 2026 by rpki-client