Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/69dc6a-e91e-4b3a-934a-b354b78cc969/1/gQbZlKEhklejzsntkc0Ym8PZOws.mft
File: gQbZlKEhklejzsntkc0Ym8PZOws.mft (raw, json)
Hash identifier: bl0E8uLZIpNk4tae89Mng8RkPFGRy56oXpFypmZQao0=
Subject key identifier: CB:57:4B:40:02:73:A2:8A:C9:C8:6D:89:F8:41:88:D7:F0:6D:71:ED
Authority key identifier: 81:06:D9:94:A1:21:92:57:A3:CE:C9:ED:91:CD:18:9B:C3:D9:3B:0B
Certificate issuer: /CN=8106d994a1219257a3cec9ed91cd189bc3d93b0b
Certificate serial: 019F189E3A2B61C4B76512CD44F4EC9412CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gQbZlKEhklejzsntkc0Ym8PZOws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/69dc6a-e91e-4b3a-934a-b354b78cc969/1/gQbZlKEhklejzsntkc0Ym8PZOws.mft
Manifest number: 198C
Signing time: Tue 30 Jun 2026 13:00:50 +0000
Manifest this update: Tue 30 Jun 2026 13:00:50 +0000
Manifest next update: Wed 01 Jul 2026 13:00:50 +0000
Files and hashes: 1: F2IHJrnPyRwbzKo1HP_xqBvLdvQ.roa (hash: FgszxDdrz1FfhJ+T4y5DQNjiDZnx4cEgXP5k1Bjw7eg=)
2: gQbZlKEhklejzsntkc0Ym8PZOws.crl (hash: /LbpseQcsemUUAr816rt+ltQ1MrosKPQArHpSU6KPpg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/69dc6a-e91e-4b3a-934a-b354b78cc969/1/gQbZlKEhklejzsntkc0Ym8PZOws.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/69dc6a-e91e-4b3a-934a-b354b78cc969/1/gQbZlKEhklejzsntkc0Ym8PZOws.mft
rsync://rpki.ripe.net/repository/DEFAULT/gQbZlKEhklejzsntkc0Ym8PZOws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 13:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:9e:3a:2b:61:c4:b7:65:12:cd:44:f4:ec:94:12:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8106d994a1219257a3cec9ed91cd189bc3d93b0b
Validity
Not Before: Jun 30 13:00:50 2026 GMT
Not After : Jul 1 13:00:50 2026 GMT
Subject: CN=cb574b400273a28ac9c86d89f84188d7f06d71ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:81:be:73:14:5a:8f:04:03:44:f8:66:69:4e:
11:f0:84:9a:f5:07:2a:13:61:7b:76:93:01:54:e1:
0a:88:67:68:d3:c7:6e:c2:f6:e0:3a:11:35:c8:96:
11:3c:a4:1a:80:58:b6:5f:0b:30:3e:2b:6b:ca:71:
a0:1f:54:5e:ec:24:f6:a3:ff:87:2d:8e:1b:65:76:
01:04:be:37:01:58:13:80:59:ab:23:62:3b:f2:2c:
22:17:e1:46:17:74:3a:98:e0:d3:99:30:c3:12:ea:
37:96:08:75:f0:39:4f:3e:0c:1e:c0:86:7c:03:bb:
a5:c2:cd:25:40:71:87:74:8b:c7:f9:5b:a1:e5:38:
51:14:ee:7e:6a:52:7b:6d:0e:e0:7c:3d:8a:7f:d8:
65:34:3f:6d:83:e5:ad:51:ab:3d:af:61:46:5f:33:
19:0e:2f:d5:07:a4:2a:a1:58:5b:86:2d:eb:07:8b:
47:4f:b2:b9:ef:92:1b:4d:d6:a4:e2:61:d3:0f:9f:
9c:cb:41:34:af:1d:76:a7:3c:83:d2:cc:26:ae:e4:
cd:08:8f:40:df:3f:77:f0:c3:a7:ed:e7:36:21:3e:
b4:16:ac:01:64:41:02:76:ab:80:b4:f6:62:69:6c:
a5:7f:98:52:cd:6d:96:2e:8e:7c:cb:5d:19:ea:a8:
44:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:57:4B:40:02:73:A2:8A:C9:C8:6D:89:F8:41:88:D7:F0:6D:71:ED
X509v3 Authority Key Identifier:
keyid:81:06:D9:94:A1:21:92:57:A3:CE:C9:ED:91:CD:18:9B:C3:D9:3B:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQbZlKEhklejzsntkc0Ym8PZOws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/69dc6a-e91e-4b3a-934a-b354b78cc969/1/gQbZlKEhklejzsntkc0Ym8PZOws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/69dc6a-e91e-4b3a-934a-b354b78cc969/1/gQbZlKEhklejzsntkc0Ym8PZOws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:49:35:ae:99:34:48:51:44:4b:82:d8:26:02:a6:17:c0:a9:
cd:87:49:31:5f:40:59:05:a9:79:95:d5:b6:22:ba:f5:89:6a:
8e:5d:fc:04:8d:9c:1b:3f:fa:6e:72:40:ac:f0:9e:0e:e5:cd:
94:dc:23:02:ec:de:7c:f0:68:f3:9c:a9:c2:1b:03:13:dc:3f:
fd:e4:f6:ff:aa:76:e8:74:13:7c:2d:4e:c0:32:44:65:e5:b9:
0c:b3:00:80:39:a8:f1:c6:8a:89:30:fb:18:2f:b0:f0:1a:df:
f5:df:df:e1:54:b6:fd:f8:d9:a0:ec:f0:cc:a7:a5:c5:33:85:
e9:03:a9:7b:d6:8f:96:0a:e0:30:4f:72:14:8e:f9:b2:06:e5:
96:64:3b:2e:a8:58:e3:7f:9b:d7:59:47:bb:ed:9e:19:21:cf:
97:f0:7b:77:99:44:34:bb:92:b0:7a:42:9c:df:b2:d2:8e:04:
69:ba:7e:0a:d7:ec:72:7f:03:d8:1c:9b:c0:e0:35:22:2b:90:
98:ba:b3:d7:30:f5:d2:07:b3:12:ff:95:35:45:73:11:55:89:
33:d6:7c:d2:9a:1f:6d:a0:44:c6:25:6c:49:e8:a9:af:d1:7a:
b6:d1:14:7b:12:b3:5f:06:f6:08:79:53:dd:e0:f0:33:17:01:
72:73:30:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8YnjorYcS3ZRLNRPTslBLNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxMDZkOTk0YTEyMTkyNTdhM2NlYzllZDkxY2QxODliYzNk
OTNiMGIwHhcNMjYwNjMwMTMwMDUwWhcNMjYwNzAxMTMwMDUwWjAzMTEwLwYDVQQD
EyhjYjU3NGI0MDAyNzNhMjhhYzljODZkODlmODQxODhkN2YwNmQ3MWVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4G+cxRajwQDRPhmaU4R8ISa9Qcq
E2F7dpMBVOEKiGdo08duwvbgOhE1yJYRPKQagFi2XwswPitrynGgH1Re7CT2o/+H
LY4bZXYBBL43AVgTgFmrI2I78iwiF+FGF3Q6mODTmTDDEuo3lgh18DlPPgwewIZ8
A7ulws0lQHGHdIvH+Vuh5ThRFO5+alJ7bQ7gfD2Kf9hlND9tg+WtUas9r2FGXzMZ
Di/VB6QqoVhbhi3rB4tHT7K575IbTdak4mHTD5+cy0E0rx12pzyD0swmruTNCI9A
3z938MOn7ec2IT60FqwBZEECdquAtPZiaWylf5hSzW2WLo58y10Z6qhEwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMtXS0ACc6KKychtifhBiNfwbXHtMB8GA1UdIwQY
MBaAFIEG2ZShIZJXo87J7ZHNGJvD2TsLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1FiWmxLRWhrbGVqenNudGtjMFltOFBaT3dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy82OWRjNmEtZTkxZS00YjNhLTkzNGEt
YjM1NGI3OGNjOTY5LzEvZ1FiWmxLRWhrbGVqenNudGtjMFltOFBaT3dzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy82OWRjNmEtZTkxZS00YjNhLTkzNGEtYjM1NGI3OGNjOTY5
LzEvZ1FiWmxLRWhrbGVqenNudGtjMFltOFBaT3dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANUk1rpk0
SFFES4LYJgKmF8CpzYdJMV9AWQWpeZXVtiK69Ylqjl38BI2cGz/6bnJArPCeDuXN
lNwjAuzefPBo85ypwhsDE9w//eT2/6p26HQTfC1OwDJEZeW5DLMAgDmo8caKiTD7
GC+w8Brf9d/f4VS2/fjZoOzwzKelxTOF6QOpe9aPlgrgME9yFI75sgbllmQ7LqhY
43+b11lHu+2eGSHPl/B7d5lENLuSsHpCnN+y0o4Eabp+Ctfscn8D2BybwOA1IiuQ
mLqz1zD10gezEv+VNUVzEVWJM9Z80pofbaBExiVsSeipr9F6ttEUexKzXwb2CHlT
3eDwMxcBcnMwlg==
-----END CERTIFICATE-----
Generated at Tue Jun 30 23:17:53 2026 by rpki-client