Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/8795e0-efb7-48c5-849f-cfceb87973dd/1/gfOofhE2a1RaWhJ7gyh2U7GMilY.mft
File: gfOofhE2a1RaWhJ7gyh2U7GMilY.mft (raw, json)
Hash identifier: eSqDrmQUp/G2QK+NsyIJj8b4NLGMagWVWhmCNIV/0VE=
Subject key identifier: 33:10:56:E6:9B:A9:F7:CB:9F:3D:CC:4E:D6:1B:E5:3B:72:7F:53:A0
Authority key identifier: 81:F3:A8:7E:11:36:6B:54:5A:5A:12:7B:83:28:76:53:B1:8C:8A:56
Certificate issuer: /CN=81f3a87e11366b545a5a127b83287653b18c8a56
Certificate serial: 019D389C305CE8BBAD9B37AA36E919DB74DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gfOofhE2a1RaWhJ7gyh2U7GMilY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/8795e0-efb7-48c5-849f-cfceb87973dd/1/gfOofhE2a1RaWhJ7gyh2U7GMilY.mft
Manifest number: 0276
Signing time: Sun 29 Mar 2026 08:00:53 +0000
Manifest this update: Sun 29 Mar 2026 08:00:53 +0000
Manifest next update: Mon 30 Mar 2026 08:00:53 +0000
Files and hashes: 1: LJsQ6phR8LiQVY1FFhD_unQmTVI.roa (hash: EDMo6GSMblcwsUUKgaU7mr/ntpmSgCtV67E6zw3bxPk=)
2: gfOofhE2a1RaWhJ7gyh2U7GMilY.crl (hash: 86JKTBGThIBGBmbJ2lQbzYsRKHaBGPQcTuucSKfnxQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/8795e0-efb7-48c5-849f-cfceb87973dd/1/gfOofhE2a1RaWhJ7gyh2U7GMilY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/8795e0-efb7-48c5-849f-cfceb87973dd/1/gfOofhE2a1RaWhJ7gyh2U7GMilY.mft
rsync://rpki.ripe.net/repository/DEFAULT/gfOofhE2a1RaWhJ7gyh2U7GMilY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:30:5c:e8:bb:ad:9b:37:aa:36:e9:19:db:74:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81f3a87e11366b545a5a127b83287653b18c8a56
Validity
Not Before: Mar 29 08:00:53 2026 GMT
Not After : Mar 30 08:00:53 2026 GMT
Subject: CN=331056e69ba9f7cb9f3dcc4ed61be53b727f53a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:12:f2:d8:46:f7:92:b9:b2:52:9b:1d:13:04:
28:2b:90:fa:b3:5f:7c:2e:14:a2:c5:d4:36:19:33:
89:6e:5b:84:6a:3c:78:63:db:c8:36:de:79:f9:50:
ed:0d:a9:90:5d:94:b8:df:0e:ca:03:4e:ea:bd:fc:
41:1d:84:e0:37:dd:3d:98:97:55:04:09:34:54:2e:
d1:d2:62:25:19:34:a3:98:d5:6b:54:55:d3:9f:f1:
e1:c3:61:42:5d:74:15:cd:8e:f5:ec:19:a1:3b:83:
7c:ef:5f:9a:5a:aa:55:ae:bf:22:ef:ba:51:44:f6:
0c:32:c8:f2:5c:9c:7d:73:f7:d2:9d:bc:26:a6:b4:
70:0c:e7:66:d9:c0:2f:66:73:2e:06:aa:bd:70:fe:
fa:fa:af:a7:52:c8:26:30:01:d5:89:54:54:a7:f5:
e0:6f:37:28:b5:6c:a8:14:1e:d1:6d:b1:52:c0:a1:
e9:13:1c:95:1a:21:f4:5c:7c:75:cd:8e:a4:e7:c6:
e6:cc:99:b3:d1:ca:93:dd:6f:d9:35:e2:00:07:5b:
b7:ff:8c:34:c2:f4:5b:33:4b:86:49:af:a8:0f:1c:
f7:6a:6d:3c:24:d5:a8:7e:e6:45:fc:f1:40:8d:90:
9f:7c:5c:9b:a7:bc:fe:52:9b:67:2f:1a:84:ee:0e:
4a:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:10:56:E6:9B:A9:F7:CB:9F:3D:CC:4E:D6:1B:E5:3B:72:7F:53:A0
X509v3 Authority Key Identifier:
keyid:81:F3:A8:7E:11:36:6B:54:5A:5A:12:7B:83:28:76:53:B1:8C:8A:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gfOofhE2a1RaWhJ7gyh2U7GMilY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/8795e0-efb7-48c5-849f-cfceb87973dd/1/gfOofhE2a1RaWhJ7gyh2U7GMilY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/8795e0-efb7-48c5-849f-cfceb87973dd/1/gfOofhE2a1RaWhJ7gyh2U7GMilY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:7b:32:73:63:1b:86:5f:1f:ba:9e:db:1a:45:31:ed:6b:0b:
a2:85:03:a1:51:50:e6:f7:fd:99:a9:13:12:5a:1b:7b:a8:f6:
42:ae:68:0c:a2:9b:01:9b:be:82:29:c9:28:df:fe:8b:c4:a5:
b1:6d:55:b5:55:9b:67:ff:a8:0a:a5:66:3e:9f:b3:41:d7:e4:
66:50:2b:00:b6:c3:00:22:72:e4:e4:66:54:65:97:77:96:c4:
fc:2e:bf:bc:bb:bf:a8:ef:44:e7:84:c9:b0:d0:0c:f0:88:e3:
bd:07:4a:80:fe:8c:53:19:3c:bf:e1:dd:af:64:47:41:14:61:
74:b9:79:58:37:04:5b:77:8c:99:e0:a6:d7:ce:01:7b:a6:37:
c9:f7:6e:db:ab:d3:67:75:72:2f:5e:d1:20:91:28:ca:3f:34:
c4:36:1c:91:77:e4:af:b4:bf:c5:3d:60:2d:96:dd:b6:57:f9:
e1:53:e3:99:e8:d4:e5:ca:ba:54:fe:eb:de:b3:54:58:66:aa:
fb:9c:1f:b3:c9:73:18:da:93:a3:5a:5e:a8:1e:2c:56:de:39:
73:1a:17:ec:3f:98:34:13:a6:08:8d:c6:35:78:39:c1:be:bb:
2b:8f:32:9a:06:b6:b5:1f:ea:3a:e8:e5:9d:cb:90:65:d0:53:
ae:59:68:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04nDBc6LutmzeqNukZ23TfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxZjNhODdlMTEzNjZiNTQ1YTVhMTI3YjgzMjg3NjUzYjE4
YzhhNTYwHhcNMjYwMzI5MDgwMDUzWhcNMjYwMzMwMDgwMDUzWjAzMTEwLwYDVQQD
EygzMzEwNTZlNjliYTlmN2NiOWYzZGNjNGVkNjFiZTUzYjcyN2Y1M2EwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmhLy2Eb3krmyUpsdEwQoK5D6s198
LhSixdQ2GTOJbluEajx4Y9vINt55+VDtDamQXZS43w7KA07qvfxBHYTgN909mJdV
BAk0VC7R0mIlGTSjmNVrVFXTn/Hhw2FCXXQVzY717BmhO4N871+aWqpVrr8i77pR
RPYMMsjyXJx9c/fSnbwmprRwDOdm2cAvZnMuBqq9cP76+q+nUsgmMAHViVRUp/Xg
bzcotWyoFB7RbbFSwKHpExyVGiH0XHx1zY6k58bmzJmz0cqT3W/ZNeIAB1u3/4w0
wvRbM0uGSa+oDxz3am08JNWofuZF/PFAjZCffFybp7z+UptnLxqE7g5KuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDMQVuabqffLnz3MTtYb5Ttyf1OgMB8GA1UdIwQY
MBaAFIHzqH4RNmtUWloSe4ModlOxjIpWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2ZPb2ZoRTJhMVJhV2hKN2d5aDJVN0dNaWxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC84Nzk1ZTAtZWZiNy00OGM1LTg0OWYt
Y2ZjZWI4Nzk3M2RkLzEvZ2ZPb2ZoRTJhMVJhV2hKN2d5aDJVN0dNaWxZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC84Nzk1ZTAtZWZiNy00OGM1LTg0OWYtY2ZjZWI4Nzk3M2Rk
LzEvZ2ZPb2ZoRTJhMVJhV2hKN2d5aDJVN0dNaWxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArnsyc2Mb
hl8fup7bGkUx7WsLooUDoVFQ5vf9makTElobe6j2Qq5oDKKbAZu+ginJKN/+i8Sl
sW1VtVWbZ/+oCqVmPp+zQdfkZlArALbDACJy5ORmVGWXd5bE/C6/vLu/qO9E54TJ
sNAM8IjjvQdKgP6MUxk8v+Hdr2RHQRRhdLl5WDcEW3eMmeCm184Be6Y3yfdu26vT
Z3VyL17RIJEoyj80xDYckXfkr7S/xT1gLZbdtlf54VPjmejU5cq6VP7r3rNUWGaq
+5wfs8lzGNqTo1peqB4sVt45cxoX7D+YNBOmCI3GNXg5wb67K48ymga2tR/qOujl
ncuQZdBTrlloyA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 17:00:52 2026 by rpki-client