Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/8e7054-fd50-4f91-9cc7-264f0cc5ff80/1/Gq51omzPhiEiKBakccy3wNXnFuI.mft
File: Gq51omzPhiEiKBakccy3wNXnFuI.mft (raw, json)
Hash identifier: +9hYAt3YTmV/Qr3h4mmJEbmeKgx/Y+0ucZoWCaQ7YoY=
Subject key identifier: 38:BC:E2:04:2A:CC:B6:E2:B3:CB:4E:B9:5E:D9:41:3D:DB:D1:50:7F
Authority key identifier: 1A:AE:75:A2:6C:CF:86:21:22:28:16:A4:71:CC:B7:C0:D5:E7:16:E2
Certificate issuer: /CN=1aae75a26ccf8621222816a471ccb7c0d5e716e2
Certificate serial: 019D16B558A171440344CEAA523AB1943352
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gq51omzPhiEiKBakccy3wNXnFuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/8e7054-fd50-4f91-9cc7-264f0cc5ff80/1/Gq51omzPhiEiKBakccy3wNXnFuI.mft
Manifest number: 0B88
Signing time: Sun 22 Mar 2026 18:01:16 +0000
Manifest this update: Sun 22 Mar 2026 18:01:16 +0000
Manifest next update: Mon 23 Mar 2026 18:01:16 +0000
Files and hashes: 1: Gq51omzPhiEiKBakccy3wNXnFuI.crl (hash: rBIbzOz+duTQQCVtoCNhXZbXDd1qte+3+murWRYyW/Y=)
2: NVSHB6tzwUob75xSfGz6jaNLiYE.roa (hash: +Q4isin9ctWLd5y4nbiMUVJ0M1dT5+TerwoyCULpr+o=)
3: Ou1S9-7Ve_CB-idLlDNc-rifkt0.roa (hash: 39EOhAHHh040SHRa6UcwZcFa8mestfBXu2NgvqotUUw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/8e7054-fd50-4f91-9cc7-264f0cc5ff80/1/Gq51omzPhiEiKBakccy3wNXnFuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/8e7054-fd50-4f91-9cc7-264f0cc5ff80/1/Gq51omzPhiEiKBakccy3wNXnFuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gq51omzPhiEiKBakccy3wNXnFuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 23 Mar 2026 17:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:16:b5:58:a1:71:44:03:44:ce:aa:52:3a:b1:94:33:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aae75a26ccf8621222816a471ccb7c0d5e716e2
Validity
Not Before: Mar 22 18:01:16 2026 GMT
Not After : Mar 23 18:01:16 2026 GMT
Subject: CN=38bce2042accb6e2b3cb4eb95ed9413ddbd1507f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b5:e2:7b:21:d1:4a:a5:49:30:07:6a:88:32:
54:a3:b6:fd:4d:01:73:66:39:5f:35:1e:40:d3:7e:
9b:06:b9:9c:d9:6c:aa:94:c2:ce:64:31:4e:fb:ab:
cd:d3:6d:eb:04:d2:94:e3:91:13:2c:35:5a:bd:42:
82:c3:7f:40:c5:c5:22:22:6b:ce:b7:9d:fe:17:d0:
60:26:97:09:f7:c5:6e:5d:c1:e3:1e:55:5d:31:f8:
9b:2c:d1:0c:7e:8b:ac:95:c4:5d:d8:51:e9:3d:12:
6c:25:f8:c5:6c:b2:cf:62:40:b0:0e:94:db:8c:cb:
2f:46:32:1e:7e:b7:ae:98:4d:b9:a4:05:b2:fd:40:
38:1e:1c:48:13:45:11:64:b7:2d:70:90:73:9d:68:
99:96:e6:49:ec:04:59:47:2e:19:9a:8a:30:38:e2:
03:99:f3:7f:a3:1a:8a:d1:b7:0b:a0:7a:f8:cc:04:
b8:ed:8d:63:3a:78:e1:3f:a8:a9:cc:0c:7a:a3:21:
75:a2:fc:0b:29:48:2f:1a:3f:07:e2:0e:f9:01:33:
65:b2:eb:a2:62:5b:cb:3b:cc:15:18:9e:44:ae:cc:
50:15:72:fd:34:38:5a:89:4c:74:79:4c:26:f4:b8:
a9:f2:71:73:3e:8b:74:19:47:ca:4d:df:e3:c0:1c:
82:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:BC:E2:04:2A:CC:B6:E2:B3:CB:4E:B9:5E:D9:41:3D:DB:D1:50:7F
X509v3 Authority Key Identifier:
keyid:1A:AE:75:A2:6C:CF:86:21:22:28:16:A4:71:CC:B7:C0:D5:E7:16:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gq51omzPhiEiKBakccy3wNXnFuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8e7054-fd50-4f91-9cc7-264f0cc5ff80/1/Gq51omzPhiEiKBakccy3wNXnFuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8e7054-fd50-4f91-9cc7-264f0cc5ff80/1/Gq51omzPhiEiKBakccy3wNXnFuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:bf:60:01:4f:59:09:76:ff:dd:94:ff:03:14:fd:3c:02:b9:
ed:0f:56:57:f5:4e:d7:28:19:51:5e:96:c9:f0:4d:81:6f:cf:
ea:af:cf:70:85:43:2d:6c:56:9e:11:c4:17:30:f5:11:27:92:
5d:15:13:1e:fc:23:19:35:cc:d0:85:94:a8:47:f1:2e:b1:61:
22:1f:21:79:8d:f6:d4:88:4f:9e:b2:ce:d5:e3:48:31:88:24:
c0:63:8d:d2:ec:1a:63:0b:b5:3e:8d:94:80:b3:a2:5c:6a:de:
b2:82:9e:ae:73:e7:56:8c:f8:60:80:b9:97:13:d0:03:51:5e:
77:ad:25:95:af:d2:6e:09:d3:b8:3b:7f:74:04:ac:2c:8f:c6:
3a:c3:ec:c9:6c:01:83:25:90:a6:50:ca:22:18:3a:96:e9:d1:
ab:0e:64:28:45:96:92:c7:0a:d8:ae:ed:57:5e:0e:55:e6:49:
6e:86:51:da:fb:cf:fe:b0:59:69:ca:9e:df:c6:bf:6f:b4:39:
87:15:4a:cb:26:94:05:e7:35:86:a7:79:8f:f4:bd:eb:bc:45:
3e:ed:21:83:ac:74:39:29:7a:18:0a:2e:c3:94:1f:c0:a0:f1:
3e:e2:ef:52:a2:b8:32:70:f2:53:ef:41:12:58:26:8f:f6:c8:
09:76:18:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0WtVihcUQDRM6qUjqxlDNSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhYWU3NWEyNmNjZjg2MjEyMjI4MTZhNDcxY2NiN2MwZDVl
NzE2ZTIwHhcNMjYwMzIyMTgwMTE2WhcNMjYwMzIzMTgwMTE2WjAzMTEwLwYDVQQD
EygzOGJjZTIwNDJhY2NiNmUyYjNjYjRlYjk1ZWQ5NDEzZGRiZDE1MDdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7XieyHRSqVJMAdqiDJUo7b9TQFz
ZjlfNR5A036bBrmc2WyqlMLOZDFO+6vN023rBNKU45ETLDVavUKCw39AxcUiImvO
t53+F9BgJpcJ98VuXcHjHlVdMfibLNEMfouslcRd2FHpPRJsJfjFbLLPYkCwDpTb
jMsvRjIefreumE25pAWy/UA4HhxIE0URZLctcJBznWiZluZJ7ARZRy4ZmoowOOID
mfN/oxqK0bcLoHr4zAS47Y1jOnjhP6ipzAx6oyF1ovwLKUgvGj8H4g75ATNlsuui
YlvLO8wVGJ5ErsxQFXL9NDhaiUx0eUwm9Lip8nFzPot0GUfKTd/jwByCjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDi84gQqzLbis8tOuV7ZQT3b0VB/MB8GA1UdIwQY
MBaAFBqudaJsz4YhIigWpHHMt8DV5xbiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3E1MW9telBoaUVpS0Jha2NjeTN3TlhuRnVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy84ZTcwNTQtZmQ1MC00ZjkxLTljYzct
MjY0ZjBjYzVmZjgwLzEvR3E1MW9telBoaUVpS0Jha2NjeTN3TlhuRnVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy84ZTcwNTQtZmQ1MC00ZjkxLTljYzctMjY0ZjBjYzVmZjgw
LzEvR3E1MW9telBoaUVpS0Jha2NjeTN3TlhuRnVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWr9gAU9Z
CXb/3ZT/AxT9PAK57Q9WV/VO1ygZUV6WyfBNgW/P6q/PcIVDLWxWnhHEFzD1ESeS
XRUTHvwjGTXM0IWUqEfxLrFhIh8heY321IhPnrLO1eNIMYgkwGON0uwaYwu1Po2U
gLOiXGresoKernPnVoz4YIC5lxPQA1Fed60lla/SbgnTuDt/dASsLI/GOsPsyWwB
gyWQplDKIhg6lunRqw5kKEWWkscK2K7tV14OVeZJboZR2vvP/rBZacqe38a/b7Q5
hxVKyyaUBec1hqd5j/S967xFPu0hg6x0OSl6GAouw5QfwKDxPuLvUqK4MnDyU+9B
Elgmj/bICXYY8A==
-----END CERTIFICATE-----
Generated at Sun Mar 22 23:45:31 2026 by rpki-client