Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/efc9f1-bec3-4771-b480-0184e81aead9/1/gc3Bfa0DvLm8NKnjd6sgcIUtymU.mft
File: gc3Bfa0DvLm8NKnjd6sgcIUtymU.mft (raw, json)
Hash identifier: ZFb80FhISxzMWhsl+GmOpcyrwiDuqVMqG5NtLCQ0HvE=
Subject key identifier: D1:79:5B:FB:F4:69:81:14:79:E6:83:99:71:E1:1D:2C:E3:3B:34:7B
Authority key identifier: 81:CD:C1:7D:AD:03:BC:B9:BC:34:A9:E3:77:AB:20:70:85:2D:CA:65
Certificate issuer: /CN=81cdc17dad03bcb9bc34a9e377ab2070852dca65
Certificate serial: 019D38661ED6AA070E8D02B2059D383DC6BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gc3Bfa0DvLm8NKnjd6sgcIUtymU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/efc9f1-bec3-4771-b480-0184e81aead9/1/gc3Bfa0DvLm8NKnjd6sgcIUtymU.mft
Manifest number: 14DB
Signing time: Sun 29 Mar 2026 07:01:49 +0000
Manifest this update: Sun 29 Mar 2026 07:01:49 +0000
Manifest next update: Mon 30 Mar 2026 07:01:49 +0000
Files and hashes: 1: 5m2yB9NEeUbzh_RrMBbFTl87vZI.roa (hash: +gJzTRd7yfkb9lyTBCKq01A8haFjWWwRmaKWjp0RAm0=)
2: Opf2QA1qNa28jjAr8yKuXu_bAbY.roa (hash: ovjEoKocSUBnOUVIGPdI/qSQMjayKXITtpelF2L20jw=)
3: gc3Bfa0DvLm8NKnjd6sgcIUtymU.crl (hash: eamG2Jvekq8AbeQ9iupAeASe+DJTT+5NM6Q2qGDEOUo=)
4: yvE1riQnzN8M1_ohncQ6e5yrX4w.roa (hash: Bi2CKtLlem3xa/y5EAdM8w4Q0JN6Uyw6zRxbHmseyms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/efc9f1-bec3-4771-b480-0184e81aead9/1/gc3Bfa0DvLm8NKnjd6sgcIUtymU.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/efc9f1-bec3-4771-b480-0184e81aead9/1/gc3Bfa0DvLm8NKnjd6sgcIUtymU.mft
rsync://rpki.ripe.net/repository/DEFAULT/gc3Bfa0DvLm8NKnjd6sgcIUtymU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:1e:d6:aa:07:0e:8d:02:b2:05:9d:38:3d:c6:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81cdc17dad03bcb9bc34a9e377ab2070852dca65
Validity
Not Before: Mar 29 07:01:49 2026 GMT
Not After : Mar 30 07:01:49 2026 GMT
Subject: CN=d1795bfbf469811479e6839971e11d2ce33b347b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1f:22:0c:dc:74:47:52:10:a7:78:8b:da:90:
82:f5:ce:18:11:e9:19:45:47:10:8a:47:9f:3b:39:
4f:7e:b7:c3:0a:d9:c0:31:cd:3c:3e:3f:fa:a5:d7:
26:83:bb:fc:4c:42:8f:5a:85:d4:73:43:fb:e1:46:
38:3e:da:29:fb:6e:45:60:27:73:f5:69:8a:ec:75:
d3:ce:02:91:5a:b1:86:7c:e0:f6:25:32:9b:7a:d4:
1d:0a:dc:2d:47:fd:84:93:44:bc:62:64:8a:5e:79:
a7:68:46:2d:ac:b9:5b:9a:39:19:bb:b8:dc:aa:a8:
08:fc:02:05:5e:39:83:83:b6:8a:cc:d6:3c:85:76:
6f:43:0f:fc:98:f7:fe:96:a8:7b:91:4a:e3:8c:0f:
22:3e:e7:74:08:20:d1:4a:50:d8:7e:11:6e:46:3c:
ce:6b:d1:75:7d:35:65:ec:35:53:70:b9:e6:67:86:
68:81:9b:0f:d8:b9:a5:e9:76:65:a0:81:68:94:08:
a3:a1:69:cc:8d:c5:e6:d8:7a:9a:af:53:2a:87:c3:
35:01:e2:8b:ee:4c:28:85:fb:13:fd:cd:ff:a7:e9:
ed:34:4c:4e:e9:a5:cc:18:3d:a1:d0:72:63:8c:5b:
bd:cd:50:fe:5d:89:34:cd:72:bf:13:d4:d9:08:db:
ac:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:79:5B:FB:F4:69:81:14:79:E6:83:99:71:E1:1D:2C:E3:3B:34:7B
X509v3 Authority Key Identifier:
keyid:81:CD:C1:7D:AD:03:BC:B9:BC:34:A9:E3:77:AB:20:70:85:2D:CA:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gc3Bfa0DvLm8NKnjd6sgcIUtymU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/efc9f1-bec3-4771-b480-0184e81aead9/1/gc3Bfa0DvLm8NKnjd6sgcIUtymU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/efc9f1-bec3-4771-b480-0184e81aead9/1/gc3Bfa0DvLm8NKnjd6sgcIUtymU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:59:98:cc:71:7b:b5:9d:d4:d6:59:07:5c:10:b0:fd:58:54:
c3:1b:7c:2d:c8:6c:f1:09:31:25:11:f2:82:1f:07:13:5e:de:
2d:cb:79:b7:80:4a:f7:fc:83:30:37:bc:76:21:b4:0a:5a:f8:
37:02:4c:51:9d:7d:d0:94:32:43:d6:46:f1:04:8f:ff:cd:07:
1c:9b:08:2d:1f:24:89:2f:eb:9a:c0:92:79:dd:a2:29:3c:6f:
a3:fc:63:20:6f:43:ec:d4:5b:dc:ea:0d:03:5a:af:d7:90:6c:
9e:9a:1a:4e:89:12:6a:7a:84:f6:17:b1:ff:2b:4f:30:f7:5a:
1e:a6:9c:c4:87:ad:e2:51:34:c9:cb:91:eb:c8:bd:03:d8:cf:
ae:8c:45:33:27:05:31:e8:d1:4c:ae:bf:6c:97:15:a3:f3:05:
7c:bf:d8:f5:6a:87:f4:18:af:47:cc:23:30:c9:71:1d:1a:0b:
66:66:8e:3e:d5:c9:a1:a1:00:e2:84:59:48:6e:e0:18:73:4b:
ac:3d:d1:dd:30:e4:b2:13:66:3c:ab:9a:7d:9d:56:18:34:14:
98:b3:b0:50:a7:f9:93:38:60:25:08:c1:31:2b:4c:18:c7:6c:
11:3d:af:95:73:c4:d3:51:02:47:95:ec:41:32:1a:ac:7f:c1:
d0:3a:5e:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04Zh7WqgcOjQKyBZ04Pca9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxY2RjMTdkYWQwM2JjYjliYzM0YTllMzc3YWIyMDcwODUy
ZGNhNjUwHhcNMjYwMzI5MDcwMTQ5WhcNMjYwMzMwMDcwMTQ5WjAzMTEwLwYDVQQD
EyhkMTc5NWJmYmY0Njk4MTE0NzllNjgzOTk3MWUxMWQyY2UzM2IzNDdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwh8iDNx0R1IQp3iL2pCC9c4YEekZ
RUcQikefOzlPfrfDCtnAMc08Pj/6pdcmg7v8TEKPWoXUc0P74UY4Ptop+25FYCdz
9WmK7HXTzgKRWrGGfOD2JTKbetQdCtwtR/2Ek0S8YmSKXnmnaEYtrLlbmjkZu7jc
qqgI/AIFXjmDg7aKzNY8hXZvQw/8mPf+lqh7kUrjjA8iPud0CCDRSlDYfhFuRjzO
a9F1fTVl7DVTcLnmZ4ZogZsP2Lml6XZloIFolAijoWnMjcXm2Hqar1Mqh8M1AeKL
7kwohfsT/c3/p+ntNExO6aXMGD2h0HJjjFu9zVD+XYk0zXK/E9TZCNusEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNF5W/v0aYEUeeaDmXHhHSzjOzR7MB8GA1UdIwQY
MBaAFIHNwX2tA7y5vDSp43erIHCFLcplMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2MzQmZhMER2TG04TktuamQ2c2djSVV0eW1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni9lZmM5ZjEtYmVjMy00NzcxLWI0ODAt
MDE4NGU4MWFlYWQ5LzEvZ2MzQmZhMER2TG04TktuamQ2c2djSVV0eW1VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni9lZmM5ZjEtYmVjMy00NzcxLWI0ODAtMDE4NGU4MWFlYWQ5
LzEvZ2MzQmZhMER2TG04TktuamQ2c2djSVV0eW1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM1mYzHF7
tZ3U1lkHXBCw/VhUwxt8Lchs8QkxJRHygh8HE17eLct5t4BK9/yDMDe8diG0Clr4
NwJMUZ190JQyQ9ZG8QSP/80HHJsILR8kiS/rmsCSed2iKTxvo/xjIG9D7NRb3OoN
A1qv15BsnpoaTokSanqE9hex/ytPMPdaHqacxIet4lE0ycuR68i9A9jProxFMycF
MejRTK6/bJcVo/MFfL/Y9WqH9BivR8wjMMlxHRoLZmaOPtXJoaEA4oRZSG7gGHNL
rD3R3TDkshNmPKuafZ1WGDQUmLOwUKf5kzhgJQjBMStMGMdsET2vlXPE01ECR5Xs
QTIarH/B0DpeCg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 15:04:05 2026 by rpki-client