Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/666dd5-cfa3-40e7-aa30-98f940e4d7c1/1/GEx8A2TxCTz8WEyTA3AkEE-0hUo.mft
File: GEx8A2TxCTz8WEyTA3AkEE-0hUo.mft (raw, json)
Hash identifier: s8QEKUMIpnqSvkTvsSExmXG2uHxaRcFTWAhhQu5B054=
Subject key identifier: 76:52:77:30:91:EA:0C:F5:A4:89:7C:56:87:58:D0:85:48:AE:22:99
Authority key identifier: 18:4C:7C:03:64:F1:09:3C:FC:58:4C:93:03:70:24:10:4F:B4:85:4A
Certificate issuer: /CN=184c7c0364f1093cfc584c93037024104fb4854a
Certificate serial: 019D3909AE10C1ADB1AA289DA3DC5B52CC39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GEx8A2TxCTz8WEyTA3AkEE-0hUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/666dd5-cfa3-40e7-aa30-98f940e4d7c1/1/GEx8A2TxCTz8WEyTA3AkEE-0hUo.mft
Manifest number: 1287
Signing time: Sun 29 Mar 2026 10:00:28 +0000
Manifest this update: Sun 29 Mar 2026 10:00:28 +0000
Manifest next update: Mon 30 Mar 2026 10:00:28 +0000
Files and hashes: 1: GEx8A2TxCTz8WEyTA3AkEE-0hUo.crl (hash: 70qu1Oe00OO5AQSxHfmcmUH308QwKiyWzYMTKnZt/GY=)
2: UQ_3tdEvusxpKm6g-bRZq8tkD4E.roa (hash: s1CWyQo9MuJT6cKRpUhun2W2gEgTiwk/dhUNwuJXn1c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/666dd5-cfa3-40e7-aa30-98f940e4d7c1/1/GEx8A2TxCTz8WEyTA3AkEE-0hUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/666dd5-cfa3-40e7-aa30-98f940e4d7c1/1/GEx8A2TxCTz8WEyTA3AkEE-0hUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/GEx8A2TxCTz8WEyTA3AkEE-0hUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:ae:10:c1:ad:b1:aa:28:9d:a3:dc:5b:52:cc:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=184c7c0364f1093cfc584c93037024104fb4854a
Validity
Not Before: Mar 29 10:00:28 2026 GMT
Not After : Mar 30 10:00:28 2026 GMT
Subject: CN=7652773091ea0cf5a4897c568758d08548ae2299
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:42:72:4b:a7:84:9e:b7:27:a7:6c:4f:73:d7:
0d:6f:78:42:69:e6:18:41:3e:07:34:52:2d:9f:8d:
cb:4b:38:b6:af:d2:82:f9:5a:10:15:24:ed:ef:bd:
fb:ad:a1:7d:55:8f:41:ac:dc:e1:01:d8:01:0c:9b:
a9:ca:17:80:49:b1:96:21:77:e0:db:ef:3a:47:db:
a2:01:34:fd:72:27:16:15:ff:c7:60:11:70:db:b2:
16:89:0d:bf:8a:22:e0:0a:43:75:b8:ac:29:66:4c:
70:17:7d:6d:2d:60:df:67:7f:b5:65:ad:22:f4:9c:
94:8c:93:d7:d9:45:0e:65:be:4e:cb:4c:2c:04:c2:
26:89:06:d8:a3:26:6f:71:06:d9:15:80:4b:2e:db:
20:50:6f:2a:48:89:f8:26:bc:3d:c5:5a:4c:49:1a:
21:ab:3c:1e:07:42:7a:5a:17:69:70:27:99:89:64:
07:c3:15:20:dd:2a:62:51:c3:7a:9b:a7:b2:d2:fd:
c3:87:b5:00:03:dd:7a:3e:74:d1:9a:fc:24:4e:1f:
8c:67:c1:6f:61:85:25:ba:4f:5a:c9:ed:be:db:20:
a2:9b:8a:72:1f:3f:8a:a4:d2:b2:34:20:f8:25:a0:
21:c4:00:93:7c:ef:f5:45:e1:17:ce:38:a0:d2:14:
f3:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:52:77:30:91:EA:0C:F5:A4:89:7C:56:87:58:D0:85:48:AE:22:99
X509v3 Authority Key Identifier:
keyid:18:4C:7C:03:64:F1:09:3C:FC:58:4C:93:03:70:24:10:4F:B4:85:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GEx8A2TxCTz8WEyTA3AkEE-0hUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/666dd5-cfa3-40e7-aa30-98f940e4d7c1/1/GEx8A2TxCTz8WEyTA3AkEE-0hUo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/666dd5-cfa3-40e7-aa30-98f940e4d7c1/1/GEx8A2TxCTz8WEyTA3AkEE-0hUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:24:6d:7b:89:16:42:92:74:a4:08:4b:9d:8f:01:44:f7:3a:
a9:8d:bf:83:bb:0f:55:bf:e1:26:eb:5a:6e:0b:96:90:ac:0d:
b9:14:34:d3:99:90:e3:2b:de:8f:1e:e3:23:df:08:ad:0b:20:
64:96:41:68:69:5c:9d:c1:fe:68:3d:8e:97:fb:bc:80:44:ce:
b7:37:c5:67:94:20:d4:d4:cb:a2:76:75:96:7a:83:41:56:bd:
38:c9:02:28:a8:20:8f:fa:ef:35:ba:11:0d:b8:92:a0:ba:e9:
77:7f:c9:23:16:61:17:1e:47:bc:a9:b6:ed:01:f3:5c:60:69:
55:e7:c0:b9:46:d3:2d:d5:09:c1:7c:05:f3:14:bc:1c:db:60:
35:92:e2:21:d6:24:18:e4:82:1d:ed:91:12:00:db:be:7a:73:
e0:56:de:4f:ac:bf:91:84:64:72:14:60:74:39:52:d2:5b:97:
0a:51:2f:12:b1:5b:a4:15:b4:f0:de:62:a0:a6:f4:e8:91:55:
c6:01:19:6a:3f:47:25:60:81:7b:12:70:23:cc:fb:19:1e:34:
71:e2:53:92:ac:09:b9:19:09:19:61:c7:3f:c6:d4:a0:df:ab:
cc:18:d0:c4:e9:f7:87:6f:82:c3:12:60:20:20:23:9e:03:c0:
19:58:af:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05Ca4Qwa2xqiido9xbUsw5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4NGM3YzAzNjRmMTA5M2NmYzU4NGM5MzAzNzAyNDEwNGZi
NDg1NGEwHhcNMjYwMzI5MTAwMDI4WhcNMjYwMzMwMTAwMDI4WjAzMTEwLwYDVQQD
Eyg3NjUyNzczMDkxZWEwY2Y1YTQ4OTdjNTY4NzU4ZDA4NTQ4YWUyMjk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm0JyS6eEnrcnp2xPc9cNb3hCaeYY
QT4HNFItn43LSzi2r9KC+VoQFSTt7737raF9VY9BrNzhAdgBDJupyheASbGWIXfg
2+86R9uiATT9cicWFf/HYBFw27IWiQ2/iiLgCkN1uKwpZkxwF31tLWDfZ3+1Za0i
9JyUjJPX2UUOZb5Oy0wsBMImiQbYoyZvcQbZFYBLLtsgUG8qSIn4Jrw9xVpMSRoh
qzweB0J6WhdpcCeZiWQHwxUg3SpiUcN6m6ey0v3Dh7UAA916PnTRmvwkTh+MZ8Fv
YYUluk9aye2+2yCim4pyHz+KpNKyNCD4JaAhxACTfO/1ReEXzjig0hTzXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHZSdzCR6gz1pIl8VodY0IVIriKZMB8GA1UdIwQY
MBaAFBhMfANk8Qk8/FhMkwNwJBBPtIVKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0V4OEEyVHhDVHo4V0V5VEEzQWtFRS0waFVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS82NjZkZDUtY2ZhMy00MGU3LWFhMzAt
OThmOTQwZTRkN2MxLzEvR0V4OEEyVHhDVHo4V0V5VEEzQWtFRS0waFVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS82NjZkZDUtY2ZhMy00MGU3LWFhMzAtOThmOTQwZTRkN2Mx
LzEvR0V4OEEyVHhDVHo4V0V5VEEzQWtFRS0waFVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKiRte4kW
QpJ0pAhLnY8BRPc6qY2/g7sPVb/hJutabguWkKwNuRQ005mQ4yvejx7jI98IrQsg
ZJZBaGlcncH+aD2Ol/u8gETOtzfFZ5Qg1NTLonZ1lnqDQVa9OMkCKKggj/rvNboR
DbiSoLrpd3/JIxZhFx5HvKm27QHzXGBpVefAuUbTLdUJwXwF8xS8HNtgNZLiIdYk
GOSCHe2REgDbvnpz4FbeT6y/kYRkchRgdDlS0luXClEvErFbpBW08N5ioKb06JFV
xgEZaj9HJWCBexJwI8z7GR40ceJTkqwJuRkJGWHHP8bUoN+rzBjQxOn3h2+CwxJg
ICAjngPAGVivxg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:49:01 2026 by rpki-client