Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.mft
File: gYEjhbgt2g_Ugmq7eu_rDfPrj_0.mft (raw, json)
Hash identifier: +zow/vUVH7X206oJT8w2llnu50LWmjxTW1IejZnK52I=
Subject key identifier: 09:B5:4F:97:66:B8:B5:57:0F:43:8E:3E:20:55:67:40:DE:BE:A6:FA
Authority key identifier: 81:81:23:85:B8:2D:DA:0F:D4:82:6A:BB:7A:EF:EB:0D:F3:EB:8F:FD
Certificate issuer: /CN=81812385b82dda0fd4826abb7aefeb0df3eb8ffd
Certificate serial: 019D3789C96E5C1E77DDC10444487D3140C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.mft
Manifest number: 1018
Signing time: Sun 29 Mar 2026 03:01:09 +0000
Manifest this update: Sun 29 Mar 2026 03:01:09 +0000
Manifest next update: Mon 30 Mar 2026 03:01:09 +0000
Files and hashes: 1: 1-0ESjCcBgJ9ilRz4WpnDiMgllHI.asa (hash: HPraMMTMSnrRxM+nmnBuJokSt3AldiyftyO21H+JBCM=)
2: U0VXVBNH_sq5iJd2GKeaUQVKrlM.roa (hash: 9SxTMnA/ARh1HjLKf0PfWKa0umnzt2pBGbzQr2CW6PA=)
3: gYEjhbgt2g_Ugmq7eu_rDfPrj_0.crl (hash: juuvZeCUO22tTpvHC9e72hIA8QrddB+xcQd5EWDrmIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:c9:6e:5c:1e:77:dd:c1:04:44:48:7d:31:40:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81812385b82dda0fd4826abb7aefeb0df3eb8ffd
Validity
Not Before: Mar 29 03:01:09 2026 GMT
Not After : Mar 30 03:01:09 2026 GMT
Subject: CN=09b54f9766b8b5570f438e3e20556740debea6fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4a:28:e6:29:a0:27:2e:80:2f:6f:ed:12:94:
c3:a3:d1:7d:9a:60:6e:d4:ce:29:e6:e6:41:eb:3b:
55:8a:d6:ca:43:ec:67:2c:4f:8b:5f:2f:41:b4:32:
fb:2f:48:c9:06:5b:e8:24:63:01:96:00:55:b1:aa:
86:d6:fd:93:78:3f:77:5b:dc:ec:b4:92:84:e8:00:
02:c0:70:fc:d5:f7:3c:a0:35:45:cd:ae:78:f5:51:
34:72:06:3d:e0:12:aa:b4:43:9e:82:53:07:6e:a3:
3e:1a:97:5d:08:07:08:b9:19:6f:16:91:1a:48:6f:
28:7b:33:99:ac:a5:3d:5f:5f:c9:14:56:5d:f3:11:
ca:9a:bd:5b:1d:f0:41:b2:53:ee:d6:24:18:55:48:
ef:7a:ae:31:e5:64:b9:8a:16:ab:1e:55:cf:9c:aa:
03:96:81:92:b2:ac:ef:50:ce:f8:f5:4b:2f:99:85:
35:27:c1:35:63:49:b6:63:f1:94:f3:14:87:bf:be:
3b:97:39:07:e9:d6:ed:39:e6:91:ce:fa:d7:46:ed:
f1:b5:87:43:47:62:0e:a4:61:8b:98:9c:cf:12:58:
66:5a:fe:bb:87:a9:79:0f:89:28:38:82:c4:03:8e:
c6:bc:60:0b:97:50:94:a4:e0:fa:b0:01:0f:e0:6f:
2e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:B5:4F:97:66:B8:B5:57:0F:43:8E:3E:20:55:67:40:DE:BE:A6:FA
X509v3 Authority Key Identifier:
keyid:81:81:23:85:B8:2D:DA:0F:D4:82:6A:BB:7A:EF:EB:0D:F3:EB:8F:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:ef:ba:37:06:f5:01:14:f8:75:75:d1:91:d2:00:94:6a:b4:
75:12:7a:a8:e3:71:d3:e1:a0:bb:48:8e:ae:67:64:f9:e2:61:
59:57:c1:d2:4b:52:f6:4c:82:82:e2:12:8e:ac:8f:d7:0b:a0:
ac:2f:39:a8:76:05:e2:7e:b5:e5:10:c7:ad:18:55:cf:61:b3:
70:ae:96:28:0e:81:cd:38:8f:df:2a:b0:19:c9:dd:54:bd:18:
58:e4:12:1e:2a:36:6f:85:47:0c:9a:d4:4f:d5:bb:c5:c8:02:
fa:8a:db:27:34:29:7e:84:1b:bd:b1:97:6b:60:16:be:94:2f:
9d:64:88:73:ff:27:62:8a:e5:a3:a7:bd:67:e7:f2:25:3a:16:
ce:11:60:76:0a:f1:ea:84:68:cc:f6:21:5a:35:27:76:91:40:
ed:e7:c7:1e:b4:9f:9d:f4:c2:50:08:c9:ae:ad:9e:b7:96:e3:
a0:57:9b:30:59:f9:6b:5c:11:ef:bd:84:dc:4f:b8:61:15:dd:
b7:8b:c3:37:6b:2c:34:d0:f3:25:06:f8:cd:cc:eb:e1:01:80:
33:15:50:3b:32:20:a8:d0:04:94:0f:69:03:48:ff:bd:86:68:
86:7c:f8:6e:66:94:71:98:3d:5b:c6:c7:88:b3:35:d6:4d:22:
02:4b:6a:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03icluXB533cEEREh9MUDBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxODEyMzg1YjgyZGRhMGZkNDgyNmFiYjdhZWZlYjBkZjNl
YjhmZmQwHhcNMjYwMzI5MDMwMTA5WhcNMjYwMzMwMDMwMTA5WjAzMTEwLwYDVQQD
EygwOWI1NGY5NzY2YjhiNTU3MGY0MzhlM2UyMDU1Njc0MGRlYmVhNmZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkoo5imgJy6AL2/tEpTDo9F9mmBu
1M4p5uZB6ztVitbKQ+xnLE+LXy9BtDL7L0jJBlvoJGMBlgBVsaqG1v2TeD93W9zs
tJKE6AACwHD81fc8oDVFza549VE0cgY94BKqtEOeglMHbqM+GpddCAcIuRlvFpEa
SG8oezOZrKU9X1/JFFZd8xHKmr1bHfBBslPu1iQYVUjveq4x5WS5iharHlXPnKoD
loGSsqzvUM749UsvmYU1J8E1Y0m2Y/GU8xSHv747lzkH6dbtOeaRzvrXRu3xtYdD
R2IOpGGLmJzPElhmWv67h6l5D4koOILEA47GvGALl1CUpOD6sAEP4G8uBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAm1T5dmuLVXD0OOPiBVZ0Devqb6MB8GA1UdIwQY
MBaAFIGBI4W4LdoP1IJqu3rv6w3z64/9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1lFamhiZ3QyZ19VZ21xN2V1X3JEZlByal8wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi8wMDkwNzQtNjZmNi00ZDRkLTk3NGEt
ZGEyZWM4Y2ZiODg4LzEvZ1lFamhiZ3QyZ19VZ21xN2V1X3JEZlByal8wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi8wMDkwNzQtNjZmNi00ZDRkLTk3NGEtZGEyZWM4Y2ZiODg4
LzEvZ1lFamhiZ3QyZ19VZ21xN2V1X3JEZlByal8wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUe+6Nwb1
ART4dXXRkdIAlGq0dRJ6qONx0+Ggu0iOrmdk+eJhWVfB0ktS9kyCguISjqyP1wug
rC85qHYF4n615RDHrRhVz2GzcK6WKA6BzTiP3yqwGcndVL0YWOQSHio2b4VHDJrU
T9W7xcgC+orbJzQpfoQbvbGXa2AWvpQvnWSIc/8nYorlo6e9Z+fyJToWzhFgdgrx
6oRozPYhWjUndpFA7efHHrSfnfTCUAjJrq2et5bjoFebMFn5a1wR772E3E+4YRXd
t4vDN2ssNNDzJQb4zczr4QGAMxVQOzIgqNAElA9pA0j/vYZohnz4bmaUcZg9W8bH
iLM11k0iAktqoQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:54 2026 by rpki-client