Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/188f03-168f-4942-9505-19803b1fb1f0/1/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.mft
File: GMaK1vFL4hcsfQyU9LTU0AGTO7Q.mft (raw, json)
Hash identifier: HVAWVKmnpzkJl4vpQo2Nh2dopPH2zgDhUyrIIBDKLpM=
Subject key identifier: 71:42:81:E9:6C:07:75:2F:F1:2E:92:9E:6F:54:09:94:FA:EE:81:A5
Authority key identifier: 18:C6:8A:D6:F1:4B:E2:17:2C:7D:0C:94:F4:B4:D4:D0:01:93:3B:B4
Certificate issuer: /CN=18c68ad6f14be2172c7d0c94f4b4d4d001933bb4
Certificate serial: 019CE146A955CD750940E2B18ECF4EC80D60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/188f03-168f-4942-9505-19803b1fb1f0/1/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.mft
Manifest number: 02C4
Signing time: Thu 12 Mar 2026 09:00:30 +0000
Manifest this update: Thu 12 Mar 2026 09:00:30 +0000
Manifest next update: Fri 13 Mar 2026 09:00:30 +0000
Files and hashes: 1: GMaK1vFL4hcsfQyU9LTU0AGTO7Q.crl (hash: QjlLWQbKDkYd44OuptShczlckeVFo7d2I4hstdDSvYQ=)
2: t0GWZ3CudQn-9IZBbqlGRvEJe1g.roa (hash: Gojw7FbJO6oLOCFdJ+IonU5RAeRQTmH3d/fqvSSbRko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/188f03-168f-4942-9505-19803b1fb1f0/1/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/188f03-168f-4942-9505-19803b1fb1f0/1/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 09:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e1:46:a9:55:cd:75:09:40:e2:b1:8e:cf:4e:c8:0d:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18c68ad6f14be2172c7d0c94f4b4d4d001933bb4
Validity
Not Before: Mar 12 09:00:30 2026 GMT
Not After : Mar 13 09:00:30 2026 GMT
Subject: CN=714281e96c07752ff12e929e6f540994faee81a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:03:53:4d:68:22:3e:6b:7e:6e:93:fb:9f:44:
de:f7:eb:42:2e:e2:51:45:1d:1d:18:e7:08:52:17:
e2:eb:74:0b:1c:5b:b0:a1:6e:29:7d:c0:f1:12:d6:
76:c2:94:ef:a5:8e:06:b3:5d:0a:b7:99:4b:de:c8:
60:6f:95:8b:85:44:88:21:81:99:72:b7:9c:96:b7:
ad:4c:dd:be:21:51:dd:b7:d8:73:78:4f:e8:6b:e1:
20:be:e7:90:7b:7c:48:90:58:07:88:58:39:be:5a:
96:40:24:62:c3:b0:e9:3a:5a:28:38:45:53:e0:3e:
ba:e8:b6:e5:0a:78:c8:53:75:82:6e:60:4a:88:f4:
94:f9:05:6d:37:41:a3:40:f3:ad:d2:52:22:e7:17:
5e:22:18:a0:76:be:9e:31:a5:9c:24:3b:e5:4e:f6:
57:9a:e4:9e:2a:db:da:31:23:5c:c2:aa:a3:2a:00:
74:59:0c:e4:b4:66:95:73:94:d6:ba:2c:da:12:c5:
2b:39:73:d9:98:b9:35:96:87:9a:0a:b6:d2:16:c0:
82:53:be:7b:aa:15:82:3e:37:8d:7b:f9:c4:ac:35:
cd:07:6c:47:7b:04:8d:21:2d:de:f7:3e:b0:a1:13:
94:fd:eb:dd:e9:33:80:59:01:1b:a2:a2:e3:3e:a4:
5a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:42:81:E9:6C:07:75:2F:F1:2E:92:9E:6F:54:09:94:FA:EE:81:A5
X509v3 Authority Key Identifier:
keyid:18:C6:8A:D6:F1:4B:E2:17:2C:7D:0C:94:F4:B4:D4:D0:01:93:3B:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/188f03-168f-4942-9505-19803b1fb1f0/1/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/188f03-168f-4942-9505-19803b1fb1f0/1/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:ea:2e:93:19:84:1e:0c:ad:fe:df:db:a3:f9:65:ee:b5:1a:
74:ff:6f:ca:47:a8:fc:0a:e1:df:56:59:29:e6:cf:f4:08:fd:
bc:7a:63:ff:f8:23:23:c2:06:0e:47:38:fc:57:9a:d8:8d:72:
6b:dd:cd:10:34:7e:4d:f0:3c:35:9a:eb:f2:c7:27:88:f9:89:
50:52:29:80:bd:38:04:e9:11:17:6f:e0:63:bd:33:8e:5a:e9:
2b:39:91:ef:6c:d2:62:b1:96:4f:3b:db:d0:a2:76:5d:35:de:
f1:94:cc:f1:c7:01:47:df:11:02:68:80:82:3e:b7:10:22:15:
1b:74:3e:6c:4d:3d:db:f9:f9:b3:78:05:85:80:1b:f7:14:2b:
05:a3:9d:44:83:e3:d3:c8:7f:2d:fd:ab:02:04:d6:f3:f6:9c:
96:74:03:e3:19:6d:90:a5:cc:f2:f1:f3:c0:a8:5a:38:a3:3c:
ac:44:bf:e7:26:da:8c:78:b7:b0:0e:37:b8:21:a8:4d:37:e2:
20:c1:fd:f8:c2:90:7c:0c:d3:e4:5f:45:ac:94:c4:b6:13:cb:
7e:d5:13:c5:f2:c7:7b:a0:3d:98:4b:f7:cc:20:f1:dd:b6:9f:
bd:0f:5f:12:a1:4b:e5:19:a7:6f:99:7a:bb:bd:9d:e0:98:1e:
fe:75:c7:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzhRqlVzXUJQOKxjs9OyA1gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4YzY4YWQ2ZjE0YmUyMTcyYzdkMGM5NGY0YjRkNGQwMDE5
MzNiYjQwHhcNMjYwMzEyMDkwMDMwWhcNMjYwMzEzMDkwMDMwWjAzMTEwLwYDVQQD
Eyg3MTQyODFlOTZjMDc3NTJmZjEyZTkyOWU2ZjU0MDk5NGZhZWU4MWE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvgNTTWgiPmt+bpP7n0Te9+tCLuJR
RR0dGOcIUhfi63QLHFuwoW4pfcDxEtZ2wpTvpY4Gs10Kt5lL3shgb5WLhUSIIYGZ
creclretTN2+IVHdt9hzeE/oa+EgvueQe3xIkFgHiFg5vlqWQCRiw7DpOlooOEVT
4D666LblCnjIU3WCbmBKiPSU+QVtN0GjQPOt0lIi5xdeIhigdr6eMaWcJDvlTvZX
muSeKtvaMSNcwqqjKgB0WQzktGaVc5TWuizaEsUrOXPZmLk1loeaCrbSFsCCU757
qhWCPjeNe/nErDXNB2xHewSNIS3e9z6woROU/evd6TOAWQEboqLjPqRaMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHFCgelsB3Uv8S6Snm9UCZT67oGlMB8GA1UdIwQY
MBaAFBjGitbxS+IXLH0MlPS01NABkzu0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR01hSzF2Rkw0aGNzZlF5VTlMVFUwQUdUTzdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8xODhmMDMtMTY4Zi00OTQyLTk1MDUt
MTk4MDNiMWZiMWYwLzEvR01hSzF2Rkw0aGNzZlF5VTlMVFUwQUdUTzdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi8xODhmMDMtMTY4Zi00OTQyLTk1MDUtMTk4MDNiMWZiMWYw
LzEvR01hSzF2Rkw0aGNzZlF5VTlMVFUwQUdUTzdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW+oukxmE
Hgyt/t/bo/ll7rUadP9vykeo/Arh31ZZKebP9Aj9vHpj//gjI8IGDkc4/Fea2I1y
a93NEDR+TfA8NZrr8scniPmJUFIpgL04BOkRF2/gY70zjlrpKzmR72zSYrGWTzvb
0KJ2XTXe8ZTM8ccBR98RAmiAgj63ECIVG3Q+bE092/n5s3gFhYAb9xQrBaOdRIPj
08h/Lf2rAgTW8/aclnQD4xltkKXM8vHzwKhaOKM8rES/5ybajHi3sA43uCGoTTfi
IMH9+MKQfAzT5F9FrJTEthPLftUTxfLHe6A9mEv3zCDx3bafvQ9fEqFL5Rmnb5l6
u72d4Jge/nXHrg==
-----END CERTIFICATE-----
Generated at Thu Mar 12 16:52:13 2026 by rpki-client