Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/1cec02-26e6-400e-8d9a-32924ef47a1a/1/gXRkmx7wDcg8KFOaOdKQs1MO37A.mft
File: gXRkmx7wDcg8KFOaOdKQs1MO37A.mft (raw, json)
Hash identifier: 0Pldv9wpA4drhr1Z+y1unzx973k3LYCRfqrfI454G7k=
Subject key identifier: 7F:5E:3D:30:6E:C8:7F:B6:5E:7B:B9:2B:9E:0D:4B:5F:12:FB:77:94
Authority key identifier: 81:74:64:9B:1E:F0:0D:C8:3C:28:53:9A:39:D2:90:B3:53:0E:DF:B0
Certificate issuer: /CN=8174649b1ef00dc83c28539a39d290b3530edfb0
Certificate serial: 019D38D39053548BE17FE26FA422801063F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gXRkmx7wDcg8KFOaOdKQs1MO37A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/1cec02-26e6-400e-8d9a-32924ef47a1a/1/gXRkmx7wDcg8KFOaOdKQs1MO37A.mft
Manifest number: 039D
Signing time: Sun 29 Mar 2026 09:01:22 +0000
Manifest this update: Sun 29 Mar 2026 09:01:22 +0000
Manifest next update: Mon 30 Mar 2026 09:01:22 +0000
Files and hashes: 1: fVw1SO1JRoyQpw3vgQ8eixnB_dY.roa (hash: M97j0VWdhaZIClC1TkdlR4RLXTy+vP9OT5Bxj4HCOl4=)
2: gXRkmx7wDcg8KFOaOdKQs1MO37A.crl (hash: CV7vdJFcdKEOVRJJv831jFtNim1swiH632Q22RBhctE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/1cec02-26e6-400e-8d9a-32924ef47a1a/1/gXRkmx7wDcg8KFOaOdKQs1MO37A.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/1cec02-26e6-400e-8d9a-32924ef47a1a/1/gXRkmx7wDcg8KFOaOdKQs1MO37A.mft
rsync://rpki.ripe.net/repository/DEFAULT/gXRkmx7wDcg8KFOaOdKQs1MO37A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:90:53:54:8b:e1:7f:e2:6f:a4:22:80:10:63:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8174649b1ef00dc83c28539a39d290b3530edfb0
Validity
Not Before: Mar 29 09:01:22 2026 GMT
Not After : Mar 30 09:01:22 2026 GMT
Subject: CN=7f5e3d306ec87fb65e7bb92b9e0d4b5f12fb7794
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:6e:c2:9b:f4:16:8c:df:a4:1f:8a:b9:b5:76:
73:79:7f:e6:06:62:40:76:e0:f3:7d:c8:f8:c6:e3:
2a:c8:88:4b:df:f2:81:12:81:e5:33:44:c7:7a:ff:
e0:d3:34:38:c8:c9:fb:ff:b5:79:72:2d:97:97:79:
44:59:7b:88:45:d5:a2:85:68:9e:26:1b:c9:e5:8d:
e9:8e:de:8b:cc:e5:5f:f4:01:a3:be:26:01:90:ce:
0f:80:54:14:e0:a9:5e:f4:44:70:d9:b4:2b:78:e2:
64:d0:67:ba:24:00:02:36:d1:e0:0f:d1:0c:53:1e:
4f:ca:d8:85:32:06:98:9d:b3:c9:87:0a:38:47:3b:
54:08:fe:89:d5:0c:cf:64:fd:d6:cc:15:a7:4e:71:
1b:2b:61:c8:d2:d2:ef:06:4b:0f:d6:60:19:9f:33:
bf:6a:d6:3e:ed:cd:66:3a:69:a2:83:19:52:33:01:
e4:69:09:ab:08:df:bd:d2:bb:c0:05:79:66:c3:64:
d5:9a:d3:22:3a:37:37:2c:e9:66:4a:2b:b0:c9:6a:
55:aa:89:15:7a:c7:1d:c6:44:a4:8c:d4:13:12:91:
dc:66:a1:23:eb:9a:33:c5:98:ea:e7:e9:87:a6:66:
3f:b7:44:bf:e2:85:78:f3:78:d5:17:bd:c1:8a:e5:
87:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:5E:3D:30:6E:C8:7F:B6:5E:7B:B9:2B:9E:0D:4B:5F:12:FB:77:94
X509v3 Authority Key Identifier:
keyid:81:74:64:9B:1E:F0:0D:C8:3C:28:53:9A:39:D2:90:B3:53:0E:DF:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gXRkmx7wDcg8KFOaOdKQs1MO37A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/1cec02-26e6-400e-8d9a-32924ef47a1a/1/gXRkmx7wDcg8KFOaOdKQs1MO37A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/1cec02-26e6-400e-8d9a-32924ef47a1a/1/gXRkmx7wDcg8KFOaOdKQs1MO37A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:84:2a:fb:87:80:9f:bd:27:11:b7:80:50:70:65:db:9f:0d:
38:20:fb:55:f1:db:7c:b0:12:f3:b5:40:2d:ee:f9:ad:fd:33:
53:39:bc:b5:96:6a:0c:b5:89:29:0a:03:30:40:58:5b:d8:6c:
85:c6:ca:b5:5b:f6:79:e3:fb:99:9c:c6:ec:d0:cc:6b:bb:4d:
74:08:89:10:c0:6c:a2:b9:33:b0:27:b8:c9:96:52:99:b4:61:
5e:b1:57:82:a1:26:55:4d:bd:ad:32:70:94:7d:6b:bc:1f:f8:
12:63:80:23:ac:17:6f:7c:96:11:df:51:3b:31:99:1d:fb:7f:
b9:a0:91:47:f3:df:a2:30:d3:06:55:c5:86:88:5e:79:3f:8d:
7e:a8:5b:32:80:2f:91:04:a1:87:65:74:23:a2:c7:33:78:41:
a8:6f:f8:02:10:9c:b1:44:b3:aa:8c:21:16:be:c2:8c:67:b6:
f2:57:28:8f:b8:0f:1e:29:d1:4b:7b:c8:92:f1:0f:f9:34:4b:
b5:d1:b8:50:35:b8:a6:bb:d7:df:6b:48:6f:d6:61:fa:a5:89:
5f:b0:41:16:dd:a9:99:a9:01:da:c9:1e:db:33:37:19:59:ba:
8f:e6:21:e4:0d:2c:f7:01:54:26:89:66:37:b1:aa:d2:c7:34:
9f:f7:41:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0405BTVIvhf+JvpCKAEGP0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxNzQ2NDliMWVmMDBkYzgzYzI4NTM5YTM5ZDI5MGIzNTMw
ZWRmYjAwHhcNMjYwMzI5MDkwMTIyWhcNMjYwMzMwMDkwMTIyWjAzMTEwLwYDVQQD
Eyg3ZjVlM2QzMDZlYzg3ZmI2NWU3YmI5MmI5ZTBkNGI1ZjEyZmI3Nzk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkG7Cm/QWjN+kH4q5tXZzeX/mBmJA
duDzfcj4xuMqyIhL3/KBEoHlM0THev/g0zQ4yMn7/7V5ci2Xl3lEWXuIRdWihWie
JhvJ5Y3pjt6LzOVf9AGjviYBkM4PgFQU4Kle9ERw2bQreOJk0Ge6JAACNtHgD9EM
Ux5PytiFMgaYnbPJhwo4RztUCP6J1QzPZP3WzBWnTnEbK2HI0tLvBksP1mAZnzO/
atY+7c1mOmmigxlSMwHkaQmrCN+90rvABXlmw2TVmtMiOjc3LOlmSiuwyWpVqokV
escdxkSkjNQTEpHcZqEj65ozxZjq5+mHpmY/t0S/4oV483jVF73BiuWH0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH9ePTBuyH+2Xnu5K54NS18S+3eUMB8GA1UdIwQY
MBaAFIF0ZJse8A3IPChTmjnSkLNTDt+wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1hSa214N3dEY2c4S0ZPYU9kS1FzMU1PMzdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC8xY2VjMDItMjZlNi00MDBlLThkOWEt
MzI5MjRlZjQ3YTFhLzEvZ1hSa214N3dEY2c4S0ZPYU9kS1FzMU1PMzdBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC8xY2VjMDItMjZlNi00MDBlLThkOWEtMzI5MjRlZjQ3YTFh
LzEvZ1hSa214N3dEY2c4S0ZPYU9kS1FzMU1PMzdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHYQq+4eA
n70nEbeAUHBl258NOCD7VfHbfLAS87VALe75rf0zUzm8tZZqDLWJKQoDMEBYW9hs
hcbKtVv2eeP7mZzG7NDMa7tNdAiJEMBsorkzsCe4yZZSmbRhXrFXgqEmVU29rTJw
lH1rvB/4EmOAI6wXb3yWEd9ROzGZHft/uaCRR/PfojDTBlXFhoheeT+NfqhbMoAv
kQShh2V0I6LHM3hBqG/4AhCcsUSzqowhFr7CjGe28lcoj7gPHinRS3vIkvEP+TRL
tdG4UDW4prvX32tIb9Zh+qWJX7BBFt2pmakB2ske2zM3GVm6j+Yh5A0s9wFUJolm
N7Gq0sc0n/dBCw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:10 2026 by rpki-client