Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/255ec8-f1e3-4a8f-af30-7e39d963a537/1/gRncpg1HvWA7jpzF3r2WxcS6FFs.mft
File: gRncpg1HvWA7jpzF3r2WxcS6FFs.mft (raw, json)
Hash identifier: qJOg3e+iumPXWbs2eb7BFLvAkZWjhdOzf6i+VrLAL/k=
Subject key identifier: 3C:04:2F:40:7F:A7:EC:44:EE:DF:CB:D0:B8:88:58:76:D6:51:20:A8
Authority key identifier: 81:19:DC:A6:0D:47:BD:60:3B:8E:9C:C5:DE:BD:96:C5:C4:BA:14:5B
Certificate issuer: /CN=8119dca60d47bd603b8e9cc5debd96c5c4ba145b
Certificate serial: 019D378916DBBA7CDD7B55B36D293BBC20D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gRncpg1HvWA7jpzF3r2WxcS6FFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/255ec8-f1e3-4a8f-af30-7e39d963a537/1/gRncpg1HvWA7jpzF3r2WxcS6FFs.mft
Manifest number: 07FD
Signing time: Sun 29 Mar 2026 03:00:24 +0000
Manifest this update: Sun 29 Mar 2026 03:00:24 +0000
Manifest next update: Mon 30 Mar 2026 03:00:24 +0000
Files and hashes: 1: 8DmkjBsB4UphtJeSH3FxYV3pk2w.roa (hash: bPCKO1jX7AbhbVFNmCvWafOjpt+yiRZfbgufuUpuv5g=)
2: gRncpg1HvWA7jpzF3r2WxcS6FFs.crl (hash: c045ROzQXqCFU5RbwvvQ37ZtXAHHtGFDps/gBQ5BERo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/255ec8-f1e3-4a8f-af30-7e39d963a537/1/gRncpg1HvWA7jpzF3r2WxcS6FFs.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/255ec8-f1e3-4a8f-af30-7e39d963a537/1/gRncpg1HvWA7jpzF3r2WxcS6FFs.mft
rsync://rpki.ripe.net/repository/DEFAULT/gRncpg1HvWA7jpzF3r2WxcS6FFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:16:db:ba:7c:dd:7b:55:b3:6d:29:3b:bc:20:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8119dca60d47bd603b8e9cc5debd96c5c4ba145b
Validity
Not Before: Mar 29 03:00:24 2026 GMT
Not After : Mar 30 03:00:24 2026 GMT
Subject: CN=3c042f407fa7ec44eedfcbd0b8885876d65120a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:71:2c:6a:9f:0e:60:92:2a:a2:03:89:ca:2d:
05:e5:e0:f4:2f:01:d2:68:7b:c4:0a:72:a6:4b:f4:
88:90:6f:b0:d6:36:ea:3c:2c:7d:41:c6:01:a2:20:
39:73:4f:a0:d9:63:05:f8:15:bf:9e:06:05:af:8e:
b3:64:95:91:ce:9c:69:09:e4:77:19:95:36:23:06:
93:b5:52:c8:57:da:e0:f8:fe:46:21:f2:a8:48:5b:
36:a7:e1:28:56:90:af:c5:4a:90:7f:8a:fe:e4:48:
2f:cb:13:a1:91:c8:45:27:f5:36:92:b8:30:08:ad:
df:b0:1d:db:a2:6a:32:44:83:cf:9a:a9:39:40:87:
bf:a7:03:41:ac:02:6c:ca:97:9b:01:a1:c7:1e:e8:
de:34:42:fb:51:93:8f:76:7d:d0:67:0c:fe:31:1b:
cc:95:54:71:eb:ab:22:11:aa:43:b4:65:b1:bc:bd:
f6:2d:34:89:2b:3b:89:c1:ab:9a:03:7b:ee:bf:71:
cc:f8:6a:7a:b5:8f:69:b6:cc:d5:9c:36:a0:ea:18:
99:cf:a2:be:f8:de:38:cc:8a:f4:ef:6d:c4:8c:5f:
a2:76:b7:d7:83:6f:d3:3e:ce:d2:48:56:77:d5:41:
b5:0d:d2:88:01:3b:88:f0:2e:cb:c8:d2:7b:9a:07:
03:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:04:2F:40:7F:A7:EC:44:EE:DF:CB:D0:B8:88:58:76:D6:51:20:A8
X509v3 Authority Key Identifier:
keyid:81:19:DC:A6:0D:47:BD:60:3B:8E:9C:C5:DE:BD:96:C5:C4:BA:14:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gRncpg1HvWA7jpzF3r2WxcS6FFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/255ec8-f1e3-4a8f-af30-7e39d963a537/1/gRncpg1HvWA7jpzF3r2WxcS6FFs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/255ec8-f1e3-4a8f-af30-7e39d963a537/1/gRncpg1HvWA7jpzF3r2WxcS6FFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:d6:72:3a:6d:c8:79:57:ba:ea:36:ca:4b:b9:48:f3:4f:ef:
dd:23:b8:7c:1e:0d:6e:64:77:92:e3:31:bd:43:20:b6:81:c3:
24:ad:51:f1:92:fc:20:55:75:c0:0b:38:0a:7b:b9:05:e8:2c:
bc:f1:e1:32:d4:8f:13:09:47:0d:da:56:15:7c:62:d0:31:8a:
e0:98:e5:18:42:9f:b1:51:1b:bf:03:5d:6d:61:b2:54:ec:0c:
77:e7:94:54:43:62:7a:53:2e:8f:81:fd:98:c8:12:a8:ec:a4:
38:1d:d5:fc:5f:45:29:d0:cf:3a:4d:38:78:73:89:c0:2f:59:
0c:cd:7d:e2:99:6b:1f:e7:25:f3:bd:12:ba:42:0f:52:7e:2e:
12:5d:60:48:df:56:7d:05:4f:41:8c:79:56:08:3c:6b:c5:5f:
34:93:69:74:aa:23:81:b8:f7:2d:9d:aa:b5:28:54:b6:50:fd:
3d:de:ad:42:41:40:8f:e1:07:47:c3:69:72:31:d7:f5:27:7b:
18:58:be:67:b1:53:cb:08:2d:87:b0:2e:40:f9:d3:60:b5:78:
a2:ca:77:71:f2:98:f2:bf:ef:88:1e:65:9e:72:a8:a4:d4:6c:
52:8e:5e:d4:9d:bf:16:be:d6:91:d0:9f:2a:93:f4:a1:43:96:
fd:8c:68:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03iRbbunzde1WzbSk7vCDWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxMTlkY2E2MGQ0N2JkNjAzYjhlOWNjNWRlYmQ5NmM1YzRi
YTE0NWIwHhcNMjYwMzI5MDMwMDI0WhcNMjYwMzMwMDMwMDI0WjAzMTEwLwYDVQQD
EygzYzA0MmY0MDdmYTdlYzQ0ZWVkZmNiZDBiODg4NTg3NmQ2NTEyMGE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1HEsap8OYJIqogOJyi0F5eD0LwHS
aHvECnKmS/SIkG+w1jbqPCx9QcYBoiA5c0+g2WMF+BW/ngYFr46zZJWRzpxpCeR3
GZU2IwaTtVLIV9rg+P5GIfKoSFs2p+EoVpCvxUqQf4r+5EgvyxOhkchFJ/U2krgw
CK3fsB3bomoyRIPPmqk5QIe/pwNBrAJsypebAaHHHujeNEL7UZOPdn3QZwz+MRvM
lVRx66siEapDtGWxvL32LTSJKzuJwauaA3vuv3HM+Gp6tY9ptszVnDag6hiZz6K+
+N44zIr0723EjF+idrfXg2/TPs7SSFZ31UG1DdKIATuI8C7LyNJ7mgcDowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDwEL0B/p+xE7t/L0LiIWHbWUSCoMB8GA1UdIwQY
MBaAFIEZ3KYNR71gO46cxd69lsXEuhRbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1JuY3BnMUh2V0E3anB6RjNyMld4Y1M2RkZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS8yNTVlYzgtZjFlMy00YThmLWFmMzAt
N2UzOWQ5NjNhNTM3LzEvZ1JuY3BnMUh2V0E3anB6RjNyMld4Y1M2RkZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS8yNTVlYzgtZjFlMy00YThmLWFmMzAtN2UzOWQ5NjNhNTM3
LzEvZ1JuY3BnMUh2V0E3anB6RjNyMld4Y1M2RkZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ9ZyOm3I
eVe66jbKS7lI80/v3SO4fB4NbmR3kuMxvUMgtoHDJK1R8ZL8IFV1wAs4Cnu5Begs
vPHhMtSPEwlHDdpWFXxi0DGK4JjlGEKfsVEbvwNdbWGyVOwMd+eUVENielMuj4H9
mMgSqOykOB3V/F9FKdDPOk04eHOJwC9ZDM194plrH+cl870SukIPUn4uEl1gSN9W
fQVPQYx5Vgg8a8VfNJNpdKojgbj3LZ2qtShUtlD9Pd6tQkFAj+EHR8NpcjHX9Sd7
GFi+Z7FTywgth7AuQPnTYLV4osp3cfKY8r/viB5lnnKopNRsUo5e1J2/Fr7WkdCf
KpP0oUOW/YxoaA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:45 2026 by rpki-client