Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/37423c-ebdd-4ea8-814c-333896a00e6f/1/ghhRSqrfoDhGuh9tOfH55DfGPEE.mft
File: ghhRSqrfoDhGuh9tOfH55DfGPEE.mft (raw, json)
Hash identifier: hFXIAKkRSbl9NK+op6HhGRzp2lT+kUka0r4vjqUb7/c=
Subject key identifier: 66:66:0D:E8:2D:92:9E:7C:7D:1D:F6:4E:85:DE:1B:CC:13:F6:30:9B
Authority key identifier: 82:18:51:4A:AA:DF:A0:38:46:BA:1F:6D:39:F1:F9:E4:37:C6:3C:41
Certificate issuer: /CN=8218514aaadfa03846ba1f6d39f1f9e437c63c41
Certificate serial: 019D39E560EBC6955D6D9475B2D1601A11B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ghhRSqrfoDhGuh9tOfH55DfGPEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/37423c-ebdd-4ea8-814c-333896a00e6f/1/ghhRSqrfoDhGuh9tOfH55DfGPEE.mft
Manifest number: 0345
Signing time: Sun 29 Mar 2026 14:00:26 +0000
Manifest this update: Sun 29 Mar 2026 14:00:26 +0000
Manifest next update: Mon 30 Mar 2026 14:00:26 +0000
Files and hashes: 1: YmZt4lZpU1shOLgdiFA_T_0pQ3I.roa (hash: 8M2UJGawHMzsPICg3lHqbXgWNZSlB+7GA+dfuiGAbhQ=)
2: ghhRSqrfoDhGuh9tOfH55DfGPEE.crl (hash: opUAU3Bp49DHvT361oR8kScB15HsZWiggGxHwtRF2xc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/37423c-ebdd-4ea8-814c-333896a00e6f/1/ghhRSqrfoDhGuh9tOfH55DfGPEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/37423c-ebdd-4ea8-814c-333896a00e6f/1/ghhRSqrfoDhGuh9tOfH55DfGPEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ghhRSqrfoDhGuh9tOfH55DfGPEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:60:eb:c6:95:5d:6d:94:75:b2:d1:60:1a:11:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8218514aaadfa03846ba1f6d39f1f9e437c63c41
Validity
Not Before: Mar 29 14:00:26 2026 GMT
Not After : Mar 30 14:00:26 2026 GMT
Subject: CN=66660de82d929e7c7d1df64e85de1bcc13f6309b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:58:3f:55:38:9e:90:69:b5:f5:5e:36:b1:9c:
e0:1a:0f:03:2a:1e:fb:72:7b:9c:4f:90:f4:84:dc:
f5:bb:6c:58:85:e4:28:8d:ba:14:93:ee:7c:21:b5:
64:a2:08:e4:82:c7:9d:68:c6:2c:de:56:5a:2c:74:
fc:33:b6:52:fe:83:83:9e:60:23:67:f9:d3:6f:0f:
c9:59:ed:8d:69:73:a1:7f:69:97:da:80:75:d3:30:
89:a7:5a:aa:c1:65:ae:6f:4e:d2:03:b7:6a:37:c6:
02:07:fe:8f:33:c0:b4:a5:eb:60:2e:eb:4b:9d:46:
2e:de:ee:ee:35:be:96:0a:6d:d2:56:51:c4:b3:ce:
50:02:e7:9c:09:df:41:73:d7:1e:cd:fc:5a:02:f5:
92:8c:ea:fa:ee:67:e9:18:a2:0f:e0:e1:2b:0f:1c:
f3:c2:9d:4c:aa:be:46:ce:f2:7e:54:55:cc:81:51:
cd:7d:1d:56:80:5f:34:fd:3a:70:87:69:c0:54:96:
4a:2a:d3:e0:ad:ef:60:f5:e1:02:7e:c7:a9:cb:5d:
64:db:b2:ca:9f:5b:5c:55:49:c6:e5:fc:44:e9:81:
c2:cc:73:a0:0b:b1:9b:7d:24:ca:df:81:23:5b:67:
2e:7c:bd:aa:ec:08:dd:d9:e8:22:d7:23:53:2a:5e:
37:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:66:0D:E8:2D:92:9E:7C:7D:1D:F6:4E:85:DE:1B:CC:13:F6:30:9B
X509v3 Authority Key Identifier:
keyid:82:18:51:4A:AA:DF:A0:38:46:BA:1F:6D:39:F1:F9:E4:37:C6:3C:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ghhRSqrfoDhGuh9tOfH55DfGPEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/37423c-ebdd-4ea8-814c-333896a00e6f/1/ghhRSqrfoDhGuh9tOfH55DfGPEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/37423c-ebdd-4ea8-814c-333896a00e6f/1/ghhRSqrfoDhGuh9tOfH55DfGPEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:5a:49:92:30:60:4b:c4:70:b4:ce:d8:a4:d5:af:06:a7:58:
a1:7e:91:20:21:0f:0e:53:96:25:60:ac:c9:e7:84:3b:9c:26:
e1:81:0f:60:4b:24:c6:29:4c:44:07:59:00:f9:c3:18:d0:50:
9b:c1:80:89:f0:21:53:0c:52:b5:a7:2f:3a:ba:d9:65:af:1a:
be:a2:36:ae:c9:9c:73:2b:68:a3:cc:3d:07:9b:82:d4:bb:8f:
8c:21:36:74:01:fd:f0:76:03:0b:8b:e1:95:99:e3:20:11:76:
d0:8f:8c:1f:cf:7a:20:da:57:34:39:84:dc:91:0b:27:71:18:
02:e4:6f:20:75:f9:5c:ae:18:8a:fe:b7:4f:68:e0:c5:3f:91:
fb:2c:67:52:19:4d:89:1f:17:e0:88:45:30:e1:c0:e4:e0:6d:
58:ae:13:78:5a:73:00:88:c1:8c:ac:12:eb:c3:63:cd:37:0c:
b8:52:ff:2d:2f:16:69:c3:57:cf:a5:96:bd:cf:55:ec:82:1e:
e7:28:9d:85:1e:c3:f1:0f:71:f2:51:f2:3a:04:06:4f:62:c3:
1c:ff:dd:41:db:5f:8e:8c:ce:d7:da:08:ea:b9:8e:34:df:df:
7a:3f:44:14:f5:8d:d9:f4:e9:20:20:f0:f0:be:fd:55:75:7b:
4d:8f:4d:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ055WDrxpVdbZR1stFgGhG4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyMTg1MTRhYWFkZmEwMzg0NmJhMWY2ZDM5ZjFmOWU0Mzdj
NjNjNDEwHhcNMjYwMzI5MTQwMDI2WhcNMjYwMzMwMTQwMDI2WjAzMTEwLwYDVQQD
Eyg2NjY2MGRlODJkOTI5ZTdjN2QxZGY2NGU4NWRlMWJjYzEzZjYzMDliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA51g/VTiekGm19V42sZzgGg8DKh77
cnucT5D0hNz1u2xYheQojboUk+58IbVkogjkgsedaMYs3lZaLHT8M7ZS/oODnmAj
Z/nTbw/JWe2NaXOhf2mX2oB10zCJp1qqwWWub07SA7dqN8YCB/6PM8C0petgLutL
nUYu3u7uNb6WCm3SVlHEs85QAuecCd9Bc9cezfxaAvWSjOr67mfpGKIP4OErDxzz
wp1Mqr5GzvJ+VFXMgVHNfR1WgF80/Tpwh2nAVJZKKtPgre9g9eECfsepy11k27LK
n1tcVUnG5fxE6YHCzHOgC7GbfSTK34EjW2cufL2q7Ajd2egi1yNTKl43cQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGZmDegtkp58fR32ToXeG8wT9jCbMB8GA1UdIwQY
MBaAFIIYUUqq36A4RrofbTnx+eQ3xjxBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2hoUlNxcmZvRGhHdWg5dE9mSDU1RGZHUEVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS8zNzQyM2MtZWJkZC00ZWE4LTgxNGMt
MzMzODk2YTAwZTZmLzEvZ2hoUlNxcmZvRGhHdWg5dE9mSDU1RGZHUEVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS8zNzQyM2MtZWJkZC00ZWE4LTgxNGMtMzMzODk2YTAwZTZm
LzEvZ2hoUlNxcmZvRGhHdWg5dE9mSDU1RGZHUEVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs1pJkjBg
S8RwtM7YpNWvBqdYoX6RICEPDlOWJWCsyeeEO5wm4YEPYEskxilMRAdZAPnDGNBQ
m8GAifAhUwxStacvOrrZZa8avqI2rsmccytoo8w9B5uC1LuPjCE2dAH98HYDC4vh
lZnjIBF20I+MH896INpXNDmE3JELJ3EYAuRvIHX5XK4Yiv63T2jgxT+R+yxnUhlN
iR8X4IhFMOHA5OBtWK4TeFpzAIjBjKwS68NjzTcMuFL/LS8WacNXz6WWvc9V7IIe
5yidhR7D8Q9x8lHyOgQGT2LDHP/dQdtfjozO19oI6rmONN/fej9EFPWN2fTpICDw
8L79VXV7TY9NVA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 18:39:20 2026 by rpki-client