Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.mft
File: gPq1UNgnot7w1NJhYGFCXC9pTIQ.mft (raw, json)
Hash identifier: oH2kF/9UEiFqHyXtm//uXZlevO6koE0A4xX1qzqpQKk=
Subject key identifier: 99:AB:D6:0A:CD:EB:13:F6:84:E1:BF:8D:D8:1F:B7:47:44:5A:0A:64
Authority key identifier: 80:FA:B5:50:D8:27:A2:DE:F0:D4:D2:61:60:61:42:5C:2F:69:4C:84
Certificate issuer: /CN=80fab550d827a2def0d4d2616061425c2f694c84
Certificate serial: 019D3909B25352D20C6A1D6584F9785C5489
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gPq1UNgnot7w1NJhYGFCXC9pTIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.mft
Manifest number: 0BD3
Signing time: Sun 29 Mar 2026 10:00:29 +0000
Manifest this update: Sun 29 Mar 2026 10:00:29 +0000
Manifest next update: Mon 30 Mar 2026 10:00:29 +0000
Files and hashes: 1: gPq1UNgnot7w1NJhYGFCXC9pTIQ.crl (hash: 82CZZhcAO2TLsNc4xw2RXcdWAyzT0Qkz2FJmIoZoy1c=)
2: nSdbQEZKwp0Romsqj9nsZ4vQQrg.roa (hash: cAfzjYhPiwZe4Q3nVUxCxa/M+bhIuNdGJn+GlgVFeZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/gPq1UNgnot7w1NJhYGFCXC9pTIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:b2:53:52:d2:0c:6a:1d:65:84:f9:78:5c:54:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80fab550d827a2def0d4d2616061425c2f694c84
Validity
Not Before: Mar 29 10:00:29 2026 GMT
Not After : Mar 30 10:00:29 2026 GMT
Subject: CN=99abd60acdeb13f684e1bf8dd81fb747445a0a64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4e:0b:2f:3a:3e:cb:ee:b9:90:fc:da:d6:52:
ab:0e:57:71:fb:eb:51:96:9e:cb:0f:a9:4f:4a:d0:
57:e4:6d:ef:1a:56:08:1e:8d:fd:1f:a4:ec:0a:e4:
81:3c:d5:10:59:01:dc:cb:37:7c:c3:7c:87:0a:5c:
f8:b9:09:ea:93:01:40:58:48:d1:c1:06:ca:46:5a:
ed:b3:0f:11:c6:50:c6:3f:42:21:50:e5:6b:de:63:
fb:30:17:6f:05:37:8f:03:9d:44:02:d7:db:b6:20:
9d:26:e0:79:f5:1b:79:32:a5:c8:9e:c2:78:4c:e7:
3f:d7:fa:fd:4b:7c:c5:ca:e5:f0:2a:01:ae:36:d6:
bf:d2:63:8c:98:32:58:6c:81:32:4a:b0:cd:6e:04:
c3:ed:15:66:67:5a:34:a1:ea:fd:6c:e2:33:bc:fb:
4b:32:a0:fe:5f:7a:16:f4:e5:42:55:15:c9:f1:0b:
ce:c6:67:2d:b3:4f:27:93:0f:af:91:7b:b8:4b:d0:
83:98:e6:ce:ff:fc:45:57:6c:19:9b:2d:e4:3f:4a:
83:a5:a1:0c:8f:f0:75:ea:d4:03:56:01:7c:73:35:
2c:5a:83:41:b6:bc:64:ef:76:45:27:b3:76:d5:08:
60:43:41:5e:c0:7f:6a:07:7a:e2:57:33:b7:83:a2:
59:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:AB:D6:0A:CD:EB:13:F6:84:E1:BF:8D:D8:1F:B7:47:44:5A:0A:64
X509v3 Authority Key Identifier:
keyid:80:FA:B5:50:D8:27:A2:DE:F0:D4:D2:61:60:61:42:5C:2F:69:4C:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gPq1UNgnot7w1NJhYGFCXC9pTIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:1b:46:68:6c:47:fb:80:4f:cd:ba:1b:4a:44:50:70:e4:e6:
ec:20:7f:25:5e:0f:b4:f6:95:51:4a:4a:0c:22:f6:4b:75:c0:
ab:44:63:97:0c:58:0e:55:0c:20:45:b8:8f:5b:88:c6:fc:b7:
5e:a1:33:f9:dd:3d:74:95:25:d9:52:b0:6a:d6:0e:99:3b:25:
cc:07:4f:79:a7:e3:0c:9f:7b:18:a4:e5:45:46:d7:01:86:f2:
5f:6f:fe:ae:74:e1:8f:08:8e:15:7e:3c:09:c1:4d:7d:22:09:
8c:da:94:45:c1:3f:27:a0:c1:e9:ff:c7:18:7a:1f:4b:3a:28:
20:cf:3e:5c:ce:6a:ff:e2:d5:a2:b6:4c:90:7b:95:05:6a:1d:
e1:4b:13:19:0a:e1:40:74:cc:10:67:f6:e9:66:36:6c:a6:12:
1a:c1:fd:78:87:c4:19:2b:30:30:b7:fb:83:f9:ef:1b:5d:f6:
7b:36:ee:07:56:12:f7:ef:e2:bf:9c:dc:cc:fe:e3:27:5f:34:
fd:53:17:e9:dc:d5:ee:ee:ac:f7:fc:3c:c3:09:df:af:43:cf:
d1:93:81:ae:a3:37:3a:a9:ac:0f:bc:af:1e:93:f4:05:81:a3:
dd:cf:88:c6:df:9c:05:ee:9b:87:2f:48:8e:99:19:50:19:3f:
83:16:e0:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05CbJTUtIMah1lhPl4XFSJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwZmFiNTUwZDgyN2EyZGVmMGQ0ZDI2MTYwNjE0MjVjMmY2
OTRjODQwHhcNMjYwMzI5MTAwMDI5WhcNMjYwMzMwMTAwMDI5WjAzMTEwLwYDVQQD
Eyg5OWFiZDYwYWNkZWIxM2Y2ODRlMWJmOGRkODFmYjc0NzQ0NWEwYTY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvE4LLzo+y+65kPza1lKrDldx++tR
lp7LD6lPStBX5G3vGlYIHo39H6TsCuSBPNUQWQHcyzd8w3yHClz4uQnqkwFAWEjR
wQbKRlrtsw8RxlDGP0IhUOVr3mP7MBdvBTePA51EAtfbtiCdJuB59Rt5MqXInsJ4
TOc/1/r9S3zFyuXwKgGuNta/0mOMmDJYbIEySrDNbgTD7RVmZ1o0oer9bOIzvPtL
MqD+X3oW9OVCVRXJ8QvOxmcts08nkw+vkXu4S9CDmObO//xFV2wZmy3kP0qDpaEM
j/B16tQDVgF8czUsWoNBtrxk73ZFJ7N21QhgQ0FewH9qB3riVzO3g6JZdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJmr1grN6xP2hOG/jdgft0dEWgpkMB8GA1UdIwQY
MBaAFID6tVDYJ6Le8NTSYWBhQlwvaUyEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1BxMVVOZ25vdDd3MU5KaFlHRkNYQzlwVElRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS80YmE1ZmYtNTYyZS00MzU0LTk2MDAt
Zjc2MjkyOWYxZjA4LzEvZ1BxMVVOZ25vdDd3MU5KaFlHRkNYQzlwVElRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS80YmE1ZmYtNTYyZS00MzU0LTk2MDAtZjc2MjkyOWYxZjA4
LzEvZ1BxMVVOZ25vdDd3MU5KaFlHRkNYQzlwVElRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApxtGaGxH
+4BPzbobSkRQcOTm7CB/JV4PtPaVUUpKDCL2S3XAq0RjlwxYDlUMIEW4j1uIxvy3
XqEz+d09dJUl2VKwatYOmTslzAdPeafjDJ97GKTlRUbXAYbyX2/+rnThjwiOFX48
CcFNfSIJjNqURcE/J6DB6f/HGHofSzooIM8+XM5q/+LVorZMkHuVBWod4UsTGQrh
QHTMEGf26WY2bKYSGsH9eIfEGSswMLf7g/nvG132ezbuB1YS9+/iv5zczP7jJ180
/VMX6dzV7u6s9/w8wwnfr0PP0ZOBrqM3OqmsD7yvHpP0BYGj3c+Ixt+cBe6bhy9I
jpkZUBk/gxbgGA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:51:02 2026 by rpki-client