Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/dbad88-f818-431e-87a6-dfee984037ac/1/gTADAN5QBa2iu2bCaJmKQMM60js.mft
File: gTADAN5QBa2iu2bCaJmKQMM60js.mft (raw, json)
Hash identifier: fG+/5umaFanwkU5jnJ5RyziOs1q6xuUz4tTK/+XkYhI=
Subject key identifier: 6F:59:1C:5C:1E:5F:47:BB:EC:45:32:70:9B:F8:40:F2:CF:6B:AF:BE
Authority key identifier: 81:30:03:00:DE:50:05:AD:A2:BB:66:C2:68:99:8A:40:C3:3A:D2:3B
Certificate issuer: /CN=81300300de5005ada2bb66c268998a40c33ad23b
Certificate serial: 019D37529ED0B08BC9407E9B8932FEE3092B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gTADAN5QBa2iu2bCaJmKQMM60js.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/dbad88-f818-431e-87a6-dfee984037ac/1/gTADAN5QBa2iu2bCaJmKQMM60js.mft
Manifest number: 0EE5
Signing time: Sun 29 Mar 2026 02:00:54 +0000
Manifest this update: Sun 29 Mar 2026 02:00:54 +0000
Manifest next update: Mon 30 Mar 2026 02:00:54 +0000
Files and hashes: 1: O5-mG7lTLGsSHbPOXl_2N2nSPgs.roa (hash: hoTvW0b4Iag7FokkMuOsi13ZXqhsvaxP4WoOFPmTwHY=)
2: gTADAN5QBa2iu2bCaJmKQMM60js.crl (hash: hnrFLfu8EViQQ05aJleaj2mT81qUwGtf0cXGbrFnjVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/dbad88-f818-431e-87a6-dfee984037ac/1/gTADAN5QBa2iu2bCaJmKQMM60js.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/dbad88-f818-431e-87a6-dfee984037ac/1/gTADAN5QBa2iu2bCaJmKQMM60js.mft
rsync://rpki.ripe.net/repository/DEFAULT/gTADAN5QBa2iu2bCaJmKQMM60js.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:9e:d0:b0:8b:c9:40:7e:9b:89:32:fe:e3:09:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81300300de5005ada2bb66c268998a40c33ad23b
Validity
Not Before: Mar 29 02:00:54 2026 GMT
Not After : Mar 30 02:00:54 2026 GMT
Subject: CN=6f591c5c1e5f47bbec4532709bf840f2cf6bafbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a0:36:14:2f:25:8d:58:cd:e1:44:d8:5f:62:
5c:2e:57:07:30:90:2f:9e:b1:3e:05:9c:72:e1:d7:
98:f7:0b:a9:7a:ed:be:dd:ca:0c:63:3b:c1:35:5a:
df:8a:57:53:69:08:4d:a2:45:82:a8:ed:bb:62:07:
b9:25:b3:00:94:6e:52:7d:4a:e6:57:e0:5e:fc:b2:
24:3f:91:6e:78:a6:c2:1a:d7:d8:3a:25:4a:11:f2:
b8:57:09:b7:56:b6:c7:3b:f4:72:39:ab:63:fa:03:
e6:4e:b1:76:16:89:57:52:d7:e6:6a:10:a6:1a:d3:
07:f9:c7:6f:ae:f8:3b:3b:20:14:cf:21:54:c9:40:
f0:3b:86:92:1b:49:c8:c9:05:cc:dd:ec:92:73:5c:
05:42:ec:b1:37:bc:f1:2d:5d:46:01:6e:45:5d:4b:
cf:0d:9c:b8:9a:c3:bf:47:5f:dd:20:45:fe:c9:3e:
45:5e:a8:9c:6b:58:46:b6:53:23:cc:62:43:d8:4b:
86:39:3b:03:db:d2:1a:40:5d:0b:2e:1c:57:29:05:
0c:90:e9:22:ae:4c:aa:87:c6:d7:b4:8b:26:e1:c9:
8c:e6:49:f5:97:39:63:9f:a1:8c:e4:36:0d:b4:4c:
0a:31:87:72:42:06:27:8b:93:80:12:f4:c8:67:89:
80:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:59:1C:5C:1E:5F:47:BB:EC:45:32:70:9B:F8:40:F2:CF:6B:AF:BE
X509v3 Authority Key Identifier:
keyid:81:30:03:00:DE:50:05:AD:A2:BB:66:C2:68:99:8A:40:C3:3A:D2:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gTADAN5QBa2iu2bCaJmKQMM60js.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/dbad88-f818-431e-87a6-dfee984037ac/1/gTADAN5QBa2iu2bCaJmKQMM60js.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/dbad88-f818-431e-87a6-dfee984037ac/1/gTADAN5QBa2iu2bCaJmKQMM60js.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:a2:e8:c1:11:52:d0:71:ad:fe:b6:1d:22:99:ce:1d:e0:09:
ce:87:22:7f:69:08:dc:eb:03:69:6f:7f:22:da:58:bf:2c:5a:
5e:46:d3:92:9f:4e:47:71:73:2a:a1:15:c7:a2:16:f4:14:92:
38:3b:53:57:c7:ee:66:bc:f3:fe:fb:cf:d7:95:e4:7c:c8:ea:
16:85:86:e3:5f:0c:93:17:ba:66:f4:8b:0b:86:78:36:2f:f8:
28:65:a6:d8:4a:4c:89:01:92:4d:e5:c4:ea:59:2e:9b:4d:4d:
b4:88:cb:5a:64:d6:78:72:f3:b3:e2:87:4a:59:75:64:ec:20:
db:65:69:be:bb:bb:a1:d3:75:80:9d:85:9c:50:48:bc:0f:b8:
39:f8:d2:32:54:fb:ae:77:7a:72:a8:a2:fd:ea:69:61:0d:18:
f0:f6:91:38:64:ac:50:c4:18:13:70:95:6c:d1:74:6a:10:14:
0f:d3:46:cf:c2:8c:e5:7b:ef:14:3b:62:ac:44:96:e7:0f:8b:
34:01:07:c6:0f:e6:5d:90:e8:f2:cd:4a:62:44:b5:28:76:91:
cd:67:e2:e8:23:a1:5f:37:cd:3d:d0:d1:05:17:eb:06:e0:72:
f2:47:00:53:7d:16:7c:6c:50:05:b4:95:8e:fe:ab:c7:b6:e6:
89:c6:e0:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03Up7QsIvJQH6biTL+4wkrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxMzAwMzAwZGU1MDA1YWRhMmJiNjZjMjY4OTk4YTQwYzMz
YWQyM2IwHhcNMjYwMzI5MDIwMDU0WhcNMjYwMzMwMDIwMDU0WjAzMTEwLwYDVQQD
Eyg2ZjU5MWM1YzFlNWY0N2JiZWM0NTMyNzA5YmY4NDBmMmNmNmJhZmJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKA2FC8ljVjN4UTYX2JcLlcHMJAv
nrE+BZxy4deY9wupeu2+3coMYzvBNVrfildTaQhNokWCqO27Yge5JbMAlG5SfUrm
V+Be/LIkP5FueKbCGtfYOiVKEfK4Vwm3VrbHO/RyOatj+gPmTrF2FolXUtfmahCm
GtMH+cdvrvg7OyAUzyFUyUDwO4aSG0nIyQXM3eySc1wFQuyxN7zxLV1GAW5FXUvP
DZy4msO/R1/dIEX+yT5FXqica1hGtlMjzGJD2EuGOTsD29IaQF0LLhxXKQUMkOki
rkyqh8bXtIsm4cmM5kn1lzljn6GM5DYNtEwKMYdyQgYni5OAEvTIZ4mAlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG9ZHFweX0e77EUycJv4QPLPa6++MB8GA1UdIwQY
MBaAFIEwAwDeUAWtortmwmiZikDDOtI7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1RBREFONVFCYTJpdTJiQ2FKbUtRTU02MGpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9kYmFkODgtZjgxOC00MzFlLTg3YTYt
ZGZlZTk4NDAzN2FjLzEvZ1RBREFONVFCYTJpdTJiQ2FKbUtRTU02MGpzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy9kYmFkODgtZjgxOC00MzFlLTg3YTYtZGZlZTk4NDAzN2Fj
LzEvZ1RBREFONVFCYTJpdTJiQ2FKbUtRTU02MGpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj6LowRFS
0HGt/rYdIpnOHeAJzocif2kI3OsDaW9/ItpYvyxaXkbTkp9OR3FzKqEVx6IW9BSS
ODtTV8fuZrzz/vvP15XkfMjqFoWG418Mkxe6ZvSLC4Z4Ni/4KGWm2EpMiQGSTeXE
6lkum01NtIjLWmTWeHLzs+KHSll1ZOwg22Vpvru7odN1gJ2FnFBIvA+4OfjSMlT7
rnd6cqii/eppYQ0Y8PaROGSsUMQYE3CVbNF0ahAUD9NGz8KM5XvvFDtirESW5w+L
NAEHxg/mXZDo8s1KYkS1KHaRzWfi6COhXzfNPdDRBRfrBuBy8kcAU30WfGxQBbSV
jv6rx7bmicbgQw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:47 2026 by rpki-client