Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/3dd082-c503-45b8-9b07-922923e898e6/1/gF21Z4E54u6s6Jte6ZgsNUScCzs.mft
File: gF21Z4E54u6s6Jte6ZgsNUScCzs.mft (raw, json)
Hash identifier: OcGvAcNAFJKiYrGe+qG0QTz6qZiN2Sqi/JUm71BAExk=
Subject key identifier: B0:48:1E:C0:BA:41:8D:C2:3A:21:99:D6:B8:56:6E:C6:19:48:8B:A1
Authority key identifier: 80:5D:B5:67:81:39:E2:EE:AC:E8:9B:5E:E9:98:2C:35:44:9C:0B:3B
Certificate issuer: /CN=805db5678139e2eeace89b5ee9982c35449c0b3b
Certificate serial: 019D3A1CD1C535D4FF0CCEB4CC128B975DB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gF21Z4E54u6s6Jte6ZgsNUScCzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/3dd082-c503-45b8-9b07-922923e898e6/1/gF21Z4E54u6s6Jte6ZgsNUScCzs.mft
Manifest number: 152E
Signing time: Sun 29 Mar 2026 15:01:00 +0000
Manifest this update: Sun 29 Mar 2026 15:01:00 +0000
Manifest next update: Mon 30 Mar 2026 15:01:00 +0000
Files and hashes: 1: 1-nxOwcqKJT0K-u0XDjOtyS0LoY0.roa (hash: nATa+n5oWjMZXiwMho7tjE9Rx2x+4yb18TAu52HSqiY=)
2: gF21Z4E54u6s6Jte6ZgsNUScCzs.crl (hash: gK5h8uL/bPf3sMafTjqQ/G2IAHdvZIoEWYxXvrJ6xWM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/3dd082-c503-45b8-9b07-922923e898e6/1/gF21Z4E54u6s6Jte6ZgsNUScCzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/3dd082-c503-45b8-9b07-922923e898e6/1/gF21Z4E54u6s6Jte6ZgsNUScCzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/gF21Z4E54u6s6Jte6ZgsNUScCzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 15:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:d1:c5:35:d4:ff:0c:ce:b4:cc:12:8b:97:5d:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=805db5678139e2eeace89b5ee9982c35449c0b3b
Validity
Not Before: Mar 29 15:01:00 2026 GMT
Not After : Mar 30 15:01:00 2026 GMT
Subject: CN=b0481ec0ba418dc23a2199d6b8566ec619488ba1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b3:4f:c0:aa:ca:e8:81:e6:57:a0:7b:ee:52:
ae:f6:27:23:52:e7:7e:60:eb:13:3c:c3:45:61:8d:
0f:d9:e7:a4:7c:64:2c:eb:a5:03:c8:81:b1:4f:dd:
4c:19:9e:82:47:21:d5:77:48:b0:05:00:3f:f8:fc:
71:e3:6e:d2:dc:0b:06:7f:64:e2:73:34:7c:77:bd:
f3:b1:e7:74:21:1f:30:09:03:a9:cf:a8:d2:b8:b1:
35:06:3f:b2:60:22:55:ca:42:2b:39:91:be:ea:60:
f9:81:57:f4:25:a4:34:7c:3b:f6:9b:2b:05:74:6c:
8b:94:25:04:4b:53:a2:a4:69:45:9d:18:10:89:d4:
a8:eb:87:56:4e:93:55:e2:d1:d1:3f:b8:4c:79:e2:
7f:90:e1:f2:b7:2e:4a:f8:54:40:2f:32:91:f9:b9:
57:25:86:42:e3:ab:fb:f0:a3:66:75:f1:5e:d9:fd:
4d:cf:c0:b9:fc:df:a5:10:d6:b5:53:ca:05:02:9b:
29:d3:17:c8:2e:f9:1f:c7:e3:88:2f:f0:86:34:27:
95:6f:a0:f3:f0:64:b7:a0:6d:06:ff:f4:94:00:6f:
8f:f6:10:6a:4e:b9:9c:77:ce:bb:3b:0d:a4:62:7a:
8e:bd:0d:db:cd:79:62:8d:6a:04:46:0c:e7:93:fb:
57:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:48:1E:C0:BA:41:8D:C2:3A:21:99:D6:B8:56:6E:C6:19:48:8B:A1
X509v3 Authority Key Identifier:
keyid:80:5D:B5:67:81:39:E2:EE:AC:E8:9B:5E:E9:98:2C:35:44:9C:0B:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gF21Z4E54u6s6Jte6ZgsNUScCzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/3dd082-c503-45b8-9b07-922923e898e6/1/gF21Z4E54u6s6Jte6ZgsNUScCzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/3dd082-c503-45b8-9b07-922923e898e6/1/gF21Z4E54u6s6Jte6ZgsNUScCzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:e3:a3:a8:b5:34:27:4c:fd:99:d9:ee:e0:b2:5d:79:c8:aa:
e8:9f:6b:d6:81:69:a0:93:f9:95:39:3e:0d:05:2a:8a:ba:9d:
f8:a6:e0:0c:2c:90:2f:a1:0f:8e:cf:96:0c:58:8c:70:3f:13:
47:bd:01:c1:a9:9b:c3:4b:dc:bb:45:3b:4b:b7:c3:dd:b7:95:
44:f3:41:4e:28:7f:1c:bb:07:53:79:8b:26:57:43:06:9c:c1:
43:56:d9:6b:49:31:e6:b0:91:de:7b:35:25:26:9d:43:28:4a:
37:13:36:2d:85:c2:62:7e:bb:4b:bf:e6:31:be:b5:3b:ba:ee:
8f:22:37:43:7d:82:ec:07:f1:8c:42:11:f1:44:a0:ff:9f:09:
25:14:ec:00:d6:ab:09:c1:c8:f1:66:fc:57:ca:21:4e:38:9a:
a5:9f:5a:a7:54:2f:b1:65:78:2a:49:35:b2:b9:6e:e5:95:a0:
cc:65:3c:cf:53:10:90:80:0f:cf:b9:ba:eb:c6:e9:96:a5:9e:
78:5c:b4:56:80:8a:22:88:ed:12:e9:d7:f0:2a:c6:d0:8e:e4:
87:19:75:5c:10:88:71:f3:b7:df:31:da:4f:46:35:9e:e7:55:
db:cd:1e:40:29:af:45:fa:97:87:fd:4a:97:42:f4:72:ff:c4:
26:8a:0f:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ06HNHFNdT/DM60zBKLl12zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwNWRiNTY3ODEzOWUyZWVhY2U4OWI1ZWU5OTgyYzM1NDQ5
YzBiM2IwHhcNMjYwMzI5MTUwMTAwWhcNMjYwMzMwMTUwMTAwWjAzMTEwLwYDVQQD
EyhiMDQ4MWVjMGJhNDE4ZGMyM2EyMTk5ZDZiODU2NmVjNjE5NDg4YmExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrNPwKrK6IHmV6B77lKu9icjUud+
YOsTPMNFYY0P2eekfGQs66UDyIGxT91MGZ6CRyHVd0iwBQA/+Pxx427S3AsGf2Ti
czR8d73zsed0IR8wCQOpz6jSuLE1Bj+yYCJVykIrOZG+6mD5gVf0JaQ0fDv2mysF
dGyLlCUES1OipGlFnRgQidSo64dWTpNV4tHRP7hMeeJ/kOHyty5K+FRALzKR+blX
JYZC46v78KNmdfFe2f1Nz8C5/N+lENa1U8oFApsp0xfILvkfx+OIL/CGNCeVb6Dz
8GS3oG0G//SUAG+P9hBqTrmcd867Ow2kYnqOvQ3bzXlijWoERgznk/tXOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLBIHsC6QY3COiGZ1rhWbsYZSIuhMB8GA1UdIwQY
MBaAFIBdtWeBOeLurOibXumYLDVEnAs7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ0YyMVo0RTU0dTZzNkp0ZTZaZ3NOVVNjQ3pzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC8zZGQwODItYzUwMy00NWI4LTliMDct
OTIyOTIzZTg5OGU2LzEvZ0YyMVo0RTU0dTZzNkp0ZTZaZ3NOVVNjQ3pzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC8zZGQwODItYzUwMy00NWI4LTliMDctOTIyOTIzZTg5OGU2
LzEvZ0YyMVo0RTU0dTZzNkp0ZTZaZ3NOVVNjQ3pzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ+OjqLU0
J0z9mdnu4LJdeciq6J9r1oFpoJP5lTk+DQUqirqd+KbgDCyQL6EPjs+WDFiMcD8T
R70Bwambw0vcu0U7S7fD3beVRPNBTih/HLsHU3mLJldDBpzBQ1bZa0kx5rCR3ns1
JSadQyhKNxM2LYXCYn67S7/mMb61O7rujyI3Q32C7AfxjEIR8USg/58JJRTsANar
CcHI8Wb8V8ohTjiapZ9ap1QvsWV4Kkk1srlu5ZWgzGU8z1MQkIAPz7m668bplqWe
eFy0VoCKIojtEunX8CrG0I7khxl1XBCIcfO33zHaT0Y1nudV280eQCmvRfqXh/1K
l0L0cv/EJooPmQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 19:51:49 2026 by rpki-client