Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/b56881-e919-445a-9923-89a9023261f1/1/gSBe85sNP11y-h2XHUGR4Lomhr8.mft
File: gSBe85sNP11y-h2XHUGR4Lomhr8.mft (raw, json)
Hash identifier: O3sfJ10e7/zAzcZhgyJj21PMe5XpMdvS4K5bmeOG87A=
Subject key identifier: 39:1B:42:58:15:AE:8B:12:62:FC:04:3C:BB:07:72:44:5D:AE:56:48
Authority key identifier: 81:20:5E:F3:9B:0D:3F:5D:72:FA:1D:97:1D:41:91:E0:BA:26:86:BF
Certificate issuer: /CN=81205ef39b0d3f5d72fa1d971d4191e0ba2686bf
Certificate serial: 019CE523340674097A0C1A33A00F3332E90B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gSBe85sNP11y-h2XHUGR4Lomhr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/b56881-e919-445a-9923-89a9023261f1/1/gSBe85sNP11y-h2XHUGR4Lomhr8.mft
Manifest number: 0F4A
Signing time: Fri 13 Mar 2026 03:00:15 +0000
Manifest this update: Fri 13 Mar 2026 03:00:15 +0000
Manifest next update: Sat 14 Mar 2026 03:00:15 +0000
Files and hashes: 1: M16NJT8ocHcFhdxLajdl5OmYfWg.roa (hash: OCbF5Tgm3E71OlvzY1cYnxinuqaWID2lU/O06sRIcAE=)
2: gSBe85sNP11y-h2XHUGR4Lomhr8.crl (hash: rpry5K19J0/BuDYqlxcnkLiRalTgnaHb4XRpJcsJAjs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/b56881-e919-445a-9923-89a9023261f1/1/gSBe85sNP11y-h2XHUGR4Lomhr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/b56881-e919-445a-9923-89a9023261f1/1/gSBe85sNP11y-h2XHUGR4Lomhr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/gSBe85sNP11y-h2XHUGR4Lomhr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 21:05:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:23:34:06:74:09:7a:0c:1a:33:a0:0f:33:32:e9:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81205ef39b0d3f5d72fa1d971d4191e0ba2686bf
Validity
Not Before: Mar 13 03:00:15 2026 GMT
Not After : Mar 14 03:00:15 2026 GMT
Subject: CN=391b425815ae8b1262fc043cbb0772445dae5648
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:92:ec:80:23:cd:05:76:05:a6:51:a9:de:38:
d1:9c:b6:28:28:fb:5f:97:76:37:8d:5f:4c:3e:4c:
a8:51:0e:67:f4:fa:a1:cd:1d:e1:08:e3:76:a2:f2:
c1:67:dc:e7:ad:12:a0:59:2f:20:d8:6e:38:f2:18:
1e:f8:dc:1d:b0:ac:10:2a:45:9c:43:30:b6:0f:f8:
70:fc:aa:4a:c1:98:47:22:3b:5f:0c:6c:40:0c:64:
00:b8:a4:d1:70:66:ed:68:d4:77:fa:e0:d9:de:5f:
91:09:ca:9b:41:72:e0:15:f9:88:eb:d1:59:9e:28:
a9:5b:34:75:07:17:65:0a:fb:7b:0f:30:2a:84:f5:
db:8d:1a:ce:93:cb:8e:9d:69:e0:61:24:4c:ad:a0:
02:96:bc:25:9d:b5:85:e7:a4:7f:9f:ed:41:1f:cb:
8f:bd:11:91:ad:cd:82:87:31:c0:61:58:1c:33:75:
af:85:26:29:91:a3:62:14:ac:ef:14:59:0a:87:91:
fb:89:1c:f0:9b:7a:5a:23:28:0d:a7:b1:97:fd:e3:
9f:f5:6c:55:66:d7:3e:4c:84:6f:76:df:6d:05:2a:
29:1d:9d:a0:9b:2b:b0:5d:bc:e7:3d:e7:6d:a2:4a:
63:9b:94:5f:5f:46:2a:2c:50:9f:0d:55:0c:f0:85:
33:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:1B:42:58:15:AE:8B:12:62:FC:04:3C:BB:07:72:44:5D:AE:56:48
X509v3 Authority Key Identifier:
keyid:81:20:5E:F3:9B:0D:3F:5D:72:FA:1D:97:1D:41:91:E0:BA:26:86:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gSBe85sNP11y-h2XHUGR4Lomhr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/b56881-e919-445a-9923-89a9023261f1/1/gSBe85sNP11y-h2XHUGR4Lomhr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/b56881-e919-445a-9923-89a9023261f1/1/gSBe85sNP11y-h2XHUGR4Lomhr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:af:ee:57:cd:2f:8e:67:7f:5d:f9:3c:19:93:cc:97:83:3b:
e1:67:13:df:77:f3:e7:1a:59:90:2c:3a:12:47:a7:98:a2:03:
30:86:34:b7:b5:6d:82:c7:75:99:ed:9a:40:a9:d0:9c:f3:60:
44:d0:05:95:26:7f:2e:80:2a:08:62:ee:9d:97:0f:5f:b7:8a:
8f:e1:e2:3d:23:4c:65:5b:b5:c8:bb:a1:c0:bb:34:80:64:79:
71:f3:53:7a:6d:65:6f:56:96:83:22:66:79:1f:d8:42:24:3c:
3a:04:d4:05:10:b6:ed:4c:5b:40:c4:40:91:c0:f3:33:1e:29:
49:8a:7c:61:a1:35:78:d2:5d:e3:09:13:bb:e9:5e:c1:74:58:
1d:e8:35:89:b1:2e:85:9d:30:38:15:d7:af:96:2b:55:2f:5d:
89:2a:e7:a6:dc:a0:e5:6e:48:a9:eb:99:4e:03:9f:4c:5f:04:
66:26:5b:20:6d:b0:d4:1b:3a:93:32:2f:07:3f:f8:a2:03:42:
47:f9:30:90:80:7a:b5:10:06:5f:ff:4b:ba:c0:ec:af:37:47:
7b:97:49:50:11:53:6f:a2:5f:61:5f:1d:77:d7:84:ee:62:05:
b5:de:b3:4c:67:67:f2:10:d1:a4:a8:d4:86:c3:45:cb:51:e6:
b6:fd:d9:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzlIzQGdAl6DBozoA8zMukLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxMjA1ZWYzOWIwZDNmNWQ3MmZhMWQ5NzFkNDE5MWUwYmEy
Njg2YmYwHhcNMjYwMzEzMDMwMDE1WhcNMjYwMzE0MDMwMDE1WjAzMTEwLwYDVQQD
EygzOTFiNDI1ODE1YWU4YjEyNjJmYzA0M2NiYjA3NzI0NDVkYWU1NjQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZLsgCPNBXYFplGp3jjRnLYoKPtf
l3Y3jV9MPkyoUQ5n9PqhzR3hCON2ovLBZ9znrRKgWS8g2G448hge+NwdsKwQKkWc
QzC2D/hw/KpKwZhHIjtfDGxADGQAuKTRcGbtaNR3+uDZ3l+RCcqbQXLgFfmI69FZ
niipWzR1BxdlCvt7DzAqhPXbjRrOk8uOnWngYSRMraAClrwlnbWF56R/n+1BH8uP
vRGRrc2ChzHAYVgcM3WvhSYpkaNiFKzvFFkKh5H7iRzwm3paIygNp7GX/eOf9WxV
Ztc+TIRvdt9tBSopHZ2gmyuwXbznPedtokpjm5RfX0YqLFCfDVUM8IUztwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDkbQlgVrosSYvwEPLsHckRdrlZIMB8GA1UdIwQY
MBaAFIEgXvObDT9dcvodlx1BkeC6Joa/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1NCZTg1c05QMTF5LWgyWEhVR1I0TG9taHI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9iNTY4ODEtZTkxOS00NDVhLTk5MjMt
ODlhOTAyMzI2MWYxLzEvZ1NCZTg1c05QMTF5LWgyWEhVR1I0TG9taHI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy9iNTY4ODEtZTkxOS00NDVhLTk5MjMtODlhOTAyMzI2MWYx
LzEvZ1NCZTg1c05QMTF5LWgyWEhVR1I0TG9taHI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaq/uV80v
jmd/Xfk8GZPMl4M74WcT33fz5xpZkCw6EkenmKIDMIY0t7Vtgsd1me2aQKnQnPNg
RNAFlSZ/LoAqCGLunZcPX7eKj+HiPSNMZVu1yLuhwLs0gGR5cfNTem1lb1aWgyJm
eR/YQiQ8OgTUBRC27UxbQMRAkcDzMx4pSYp8YaE1eNJd4wkTu+lewXRYHeg1ibEu
hZ0wOBXXr5YrVS9diSrnptyg5W5IqeuZTgOfTF8EZiZbIG2w1Bs6kzIvBz/4ogNC
R/kwkIB6tRAGX/9LusDsrzdHe5dJUBFTb6JfYV8dd9eE7mIFtd6zTGdn8hDRpKjU
hsNFy1Hmtv3ZOQ==
-----END CERTIFICATE-----
Generated at Fri Mar 13 06:07:38 2026 by rpki-client