Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/c2c03e-56e1-403a-93de-e23ad799b1d1/1/gcEVEu7o_tkcQi8ztljWi8NOt4A.mft
File: gcEVEu7o_tkcQi8ztljWi8NOt4A.mft (raw, json)
Hash identifier: XC84UxWKVJRqlalcN3UalhfBFjdTK4aJlcHcLk5kMuE=
Subject key identifier: 01:C9:1A:8F:31:EC:B6:87:E5:7F:3B:4E:47:57:90:34:F1:4D:E9:00
Authority key identifier: 81:C1:15:12:EE:E8:FE:D9:1C:42:2F:33:B6:58:D6:8B:C3:4E:B7:80
Certificate issuer: /CN=81c11512eee8fed91c422f33b658d68bc34eb780
Certificate serial: 019CE5FF22C515B7B4E822922ACCD7E7A24D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gcEVEu7o_tkcQi8ztljWi8NOt4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/c2c03e-56e1-403a-93de-e23ad799b1d1/1/gcEVEu7o_tkcQi8ztljWi8NOt4A.mft
Manifest number: 0C15
Signing time: Fri 13 Mar 2026 07:00:28 +0000
Manifest this update: Fri 13 Mar 2026 07:00:28 +0000
Manifest next update: Sat 14 Mar 2026 07:00:28 +0000
Files and hashes: 1: 5qQ7K2Sw3wA3dSNaHobcrxLnZf8.roa (hash: 3XSxcIAkBoWThD9Raz/rE6P+YouBEagvQQFhIuaHny4=)
2: gcEVEu7o_tkcQi8ztljWi8NOt4A.crl (hash: lU4Ung6VAWQZdjMbSTnYkxEQ+arQgUlJFXO4/nNCVn8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/c2c03e-56e1-403a-93de-e23ad799b1d1/1/gcEVEu7o_tkcQi8ztljWi8NOt4A.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/c2c03e-56e1-403a-93de-e23ad799b1d1/1/gcEVEu7o_tkcQi8ztljWi8NOt4A.mft
rsync://rpki.ripe.net/repository/DEFAULT/gcEVEu7o_tkcQi8ztljWi8NOt4A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 07:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:ff:22:c5:15:b7:b4:e8:22:92:2a:cc:d7:e7:a2:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81c11512eee8fed91c422f33b658d68bc34eb780
Validity
Not Before: Mar 13 07:00:28 2026 GMT
Not After : Mar 14 07:00:28 2026 GMT
Subject: CN=01c91a8f31ecb687e57f3b4e47579034f14de900
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ed:c2:ce:9d:5f:74:28:76:da:5e:d4:18:57:
9c:33:8d:e8:ba:77:86:91:d0:49:fc:1f:69:6a:f7:
82:25:b1:93:7c:0f:d4:79:75:d8:89:ee:bf:cf:d7:
be:15:03:ce:6a:a8:b2:e1:b4:3c:03:67:2e:63:c2:
e1:b0:6b:66:b1:08:11:36:c2:d3:a0:ff:50:47:81:
6e:62:c3:49:e9:8a:a9:45:a6:9b:3b:04:8e:72:11:
7d:af:ef:11:fb:86:60:be:ab:c9:da:ee:f2:56:9b:
49:06:03:be:2d:89:bd:46:73:02:e9:8b:ef:00:3f:
ab:90:66:63:c4:32:7c:5e:0d:87:00:70:54:0d:60:
d5:a1:e1:40:fb:9b:fd:77:63:e7:d5:27:0c:07:c9:
03:66:1b:cf:3c:36:0e:07:2f:d5:ab:bb:f7:b1:54:
c2:2a:57:dc:49:02:44:7f:bb:f8:39:a6:37:71:4d:
51:64:eb:4e:62:e8:93:8d:cd:bc:a0:c6:3f:e7:08:
c5:e2:30:2c:f0:90:1c:0f:70:0d:e3:fe:2c:32:c8:
29:c6:42:c6:84:0b:b9:c7:0c:de:ce:29:9c:02:b9:
2c:22:2a:f3:20:c7:e9:db:b7:e4:d9:78:55:38:e2:
14:8d:32:c3:21:25:0a:63:16:7a:f4:32:77:dd:a7:
5a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:C9:1A:8F:31:EC:B6:87:E5:7F:3B:4E:47:57:90:34:F1:4D:E9:00
X509v3 Authority Key Identifier:
keyid:81:C1:15:12:EE:E8:FE:D9:1C:42:2F:33:B6:58:D6:8B:C3:4E:B7:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcEVEu7o_tkcQi8ztljWi8NOt4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c2c03e-56e1-403a-93de-e23ad799b1d1/1/gcEVEu7o_tkcQi8ztljWi8NOt4A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c2c03e-56e1-403a-93de-e23ad799b1d1/1/gcEVEu7o_tkcQi8ztljWi8NOt4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:58:0a:34:06:f1:a1:4c:e3:e8:11:3d:19:fb:b2:77:ac:f1:
65:2f:11:8a:48:29:14:5f:f7:e6:62:af:aa:ae:fe:61:7d:f7:
21:5d:03:7e:35:eb:0f:7d:0f:b6:ce:1a:73:5a:18:26:c4:96:
2a:2b:98:66:04:a1:d0:cc:ec:e2:46:57:79:f6:e1:bb:32:1e:
a4:d8:c2:c8:d6:79:94:b3:17:6b:06:20:11:b6:96:15:ab:f4:
29:cf:c5:f5:b6:23:e3:fa:0c:60:52:84:ba:05:8a:52:05:94:
20:45:cf:87:73:8c:1a:5c:51:14:c3:72:c1:52:16:fd:2d:bc:
9b:a9:eb:7a:91:09:3f:01:dd:e8:ab:15:a3:59:7e:2c:ec:74:
b6:cd:a7:1e:ba:4a:89:4e:a6:2b:ba:72:39:7f:06:24:07:4a:
9f:4f:e3:17:b2:46:98:bc:dc:85:5d:b2:ec:bf:65:42:04:12:
4e:16:8f:81:4b:24:b7:b2:ff:8b:5b:ad:9f:65:2c:e7:1d:e5:
ea:16:c8:e6:29:5a:06:b2:9e:af:04:88:21:39:2b:d1:b1:42:
fe:70:4b:f1:4c:43:4a:cf:ba:ab:f7:d3:f9:7b:b7:c1:38:93:
47:bf:98:5d:b2:1b:82:e9:2f:5b:52:bc:b7:fa:05:76:97:0b:
b1:3b:c7:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzl/yLFFbe06CKSKszX56JNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxYzExNTEyZWVlOGZlZDkxYzQyMmYzM2I2NThkNjhiYzM0
ZWI3ODAwHhcNMjYwMzEzMDcwMDI4WhcNMjYwMzE0MDcwMDI4WjAzMTEwLwYDVQQD
EygwMWM5MWE4ZjMxZWNiNjg3ZTU3ZjNiNGU0NzU3OTAzNGYxNGRlOTAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvu3Czp1fdCh22l7UGFecM43ouneG
kdBJ/B9paveCJbGTfA/UeXXYie6/z9e+FQPOaqiy4bQ8A2cuY8LhsGtmsQgRNsLT
oP9QR4FuYsNJ6YqpRaabOwSOchF9r+8R+4ZgvqvJ2u7yVptJBgO+LYm9RnMC6Yvv
AD+rkGZjxDJ8Xg2HAHBUDWDVoeFA+5v9d2Pn1ScMB8kDZhvPPDYOBy/Vq7v3sVTC
KlfcSQJEf7v4OaY3cU1RZOtOYuiTjc28oMY/5wjF4jAs8JAcD3AN4/4sMsgpxkLG
hAu5xwzezimcArksIirzIMfp27fk2XhVOOIUjTLDISUKYxZ69DJ33adaOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAHJGo8x7LaH5X87TkdXkDTxTekAMB8GA1UdIwQY
MBaAFIHBFRLu6P7ZHEIvM7ZY1ovDTreAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2NFVkV1N29fdGtjUWk4enRsaldpOE5PdDRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9jMmMwM2UtNTZlMS00MDNhLTkzZGUt
ZTIzYWQ3OTliMWQxLzEvZ2NFVkV1N29fdGtjUWk4enRsaldpOE5PdDRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS9jMmMwM2UtNTZlMS00MDNhLTkzZGUtZTIzYWQ3OTliMWQx
LzEvZ2NFVkV1N29fdGtjUWk4enRsaldpOE5PdDRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmlgKNAbx
oUzj6BE9Gfuyd6zxZS8RikgpFF/35mKvqq7+YX33IV0DfjXrD30Pts4ac1oYJsSW
KiuYZgSh0Mzs4kZXefbhuzIepNjCyNZ5lLMXawYgEbaWFav0Kc/F9bYj4/oMYFKE
ugWKUgWUIEXPh3OMGlxRFMNywVIW/S28m6nrepEJPwHd6KsVo1l+LOx0ts2nHrpK
iU6mK7pyOX8GJAdKn0/jF7JGmLzchV2y7L9lQgQSThaPgUskt7L/i1utn2Us5x3l
6hbI5ilaBrKerwSIITkr0bFC/nBL8UxDSs+6q/fT+Xu3wTiTR7+YXbIbgukvW1K8
t/oFdpcLsTvHqw==
-----END CERTIFICATE-----
Generated at Fri Mar 13 12:01:19 2026 by rpki-client