Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/GjHcqIfYvmBgGdChWToW_9Of1pI.mft
File: GjHcqIfYvmBgGdChWToW_9Of1pI.mft (raw, json)
Hash identifier: 9tzQ+B7wUK9Y1C8craEbWkmTCONZwybsh6pXZy/Y/5w=
Subject key identifier: 13:88:48:9C:22:FF:6A:21:30:A1:A8:DC:93:13:89:0A:2C:6D:3A:2B
Authority key identifier: 1A:31:DC:A8:87:D8:BE:60:60:19:D0:A1:59:3A:16:FF:D3:9F:D6:92
Certificate issuer: /CN=1a31dca887d8be606019d0a1593a16ffd39fd692
Certificate serial: 019DF91642C21CC550A8EB5A80C84378326C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GjHcqIfYvmBgGdChWToW_9Of1pI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/GjHcqIfYvmBgGdChWToW_9Of1pI.mft
Manifest number: 0AD8
Signing time: Tue 05 May 2026 17:01:18 +0000
Manifest this update: Tue 05 May 2026 17:01:18 +0000
Manifest next update: Wed 06 May 2026 17:01:18 +0000
Files and hashes: 1: GQ44FZo45uadx5xa67VPxM3MWOc.roa (hash: uTq3D6bK0frbt9f5N6hf9Vhq6zN5k3gerfpDd5Jzok8=)
2: GjHcqIfYvmBgGdChWToW_9Of1pI.crl (hash: wEZBx7Ed6qlvB0PmK/2pbVCf+JscfA1KJ4nAE/VO+C8=)
3: gBNRmzSrEizMbcJUH5GuHVirsuc.roa (hash: CTTPqsoELtrrnKPCDm5NIDhaVqO6sNQ6f6XzK5l53dY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/GjHcqIfYvmBgGdChWToW_9Of1pI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/GjHcqIfYvmBgGdChWToW_9Of1pI.mft
rsync://rpki.ripe.net/repository/DEFAULT/GjHcqIfYvmBgGdChWToW_9Of1pI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 May 2026 17:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:f9:16:42:c2:1c:c5:50:a8:eb:5a:80:c8:43:78:32:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a31dca887d8be606019d0a1593a16ffd39fd692
Validity
Not Before: May 5 17:01:18 2026 GMT
Not After : May 6 17:01:18 2026 GMT
Subject: CN=1388489c22ff6a2130a1a8dc9313890a2c6d3a2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a6:21:0a:53:21:a9:b1:d0:a7:b6:d0:43:32:
bc:a2:b3:01:c9:d8:12:62:ae:0d:ff:34:0f:a3:f1:
be:90:60:03:25:31:69:23:02:b6:9e:e9:03:74:5e:
52:19:8c:e4:b4:88:64:b8:3d:c0:05:7f:e0:a5:eb:
0d:97:e4:ae:92:d5:e2:d2:b9:12:13:a3:e0:e7:7c:
87:7c:95:5a:53:2d:d8:29:19:9c:d4:82:ae:67:21:
cd:82:d4:40:53:80:ce:75:13:83:67:3a:b3:37:95:
2e:84:c4:41:71:5d:f9:b7:15:ae:dd:a8:27:0d:60:
82:40:f2:d9:1c:41:3d:8b:c8:10:88:ed:fe:e4:6c:
63:d5:a7:9a:1d:35:a6:d8:1a:dc:c7:ac:71:44:e3:
e2:68:3d:eb:50:fa:68:03:e8:40:a7:f1:2e:70:c1:
71:58:4f:49:6f:5a:67:4b:44:ba:02:95:47:d2:12:
a9:45:89:59:86:3d:92:98:c7:50:86:1e:69:b4:fe:
95:a4:86:e3:8e:6c:65:d0:a7:e7:2b:9a:3a:70:9f:
48:2e:0c:99:da:77:73:f7:ac:56:d8:49:94:df:bc:
5c:79:31:b1:73:1c:dc:27:25:d6:1b:ac:b6:3f:18:
26:37:e8:0a:f4:11:5c:9b:33:70:0f:44:04:8c:2a:
ab:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:88:48:9C:22:FF:6A:21:30:A1:A8:DC:93:13:89:0A:2C:6D:3A:2B
X509v3 Authority Key Identifier:
keyid:1A:31:DC:A8:87:D8:BE:60:60:19:D0:A1:59:3A:16:FF:D3:9F:D6:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GjHcqIfYvmBgGdChWToW_9Of1pI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/GjHcqIfYvmBgGdChWToW_9Of1pI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/GjHcqIfYvmBgGdChWToW_9Of1pI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:17:39:82:e7:f3:9a:69:fd:b6:53:f7:1b:cc:ab:11:57:b6:
cc:79:80:2a:88:48:84:b8:d9:93:db:b8:9e:70:93:66:26:a3:
89:f3:19:5f:4d:d1:89:d6:02:88:a6:df:87:2b:fe:c8:cb:8f:
f2:dd:5f:51:1b:b7:38:44:25:eb:25:ad:78:fe:c6:81:c5:3a:
d2:ad:38:4c:ad:49:9c:95:8f:65:8f:bc:ad:d8:a7:0b:40:d6:
32:c6:47:91:5f:c4:43:4d:1e:4f:fe:4c:30:e6:6c:c7:ad:68:
e3:55:fd:da:68:29:08:0b:91:a3:6a:30:b1:96:65:68:62:6a:
a0:ec:e9:2f:c5:db:64:74:78:c6:78:fb:a7:5e:76:36:06:17:
08:b7:26:ca:75:f1:b6:37:b9:59:88:9d:ad:cc:b8:55:c7:e9:
64:7e:df:a8:c4:ce:f7:cf:14:eb:da:cb:a5:e8:f0:83:c7:6d:
4e:30:1c:05:6b:73:54:bb:6e:cc:89:9e:0a:63:ce:68:90:cb:
20:24:09:d0:df:2a:80:80:83:d6:f5:c1:48:fb:94:13:93:e2:
b8:d2:b2:91:b5:f9:fa:ed:fd:18:23:9f:79:13:99:44:98:c8:
b1:ea:0e:8e:7a:27:bb:7a:ad:ab:ef:d3:30:27:7a:c0:c2:6a:
93:cc:70:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ35FkLCHMVQqOtagMhDeDJsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhMzFkY2E4ODdkOGJlNjA2MDE5ZDBhMTU5M2ExNmZmZDM5
ZmQ2OTIwHhcNMjYwNTA1MTcwMTE4WhcNMjYwNTA2MTcwMTE4WjAzMTEwLwYDVQQD
EygxMzg4NDg5YzIyZmY2YTIxMzBhMWE4ZGM5MzEzODkwYTJjNmQzYTJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoaYhClMhqbHQp7bQQzK8orMBydgS
Yq4N/zQPo/G+kGADJTFpIwK2nukDdF5SGYzktIhkuD3ABX/gpesNl+SuktXi0rkS
E6Pg53yHfJVaUy3YKRmc1IKuZyHNgtRAU4DOdRODZzqzN5UuhMRBcV35txWu3agn
DWCCQPLZHEE9i8gQiO3+5Gxj1aeaHTWm2Brcx6xxROPiaD3rUPpoA+hAp/EucMFx
WE9Jb1pnS0S6ApVH0hKpRYlZhj2SmMdQhh5ptP6VpIbjjmxl0KfnK5o6cJ9ILgyZ
2ndz96xW2EmU37xceTGxcxzcJyXWG6y2PxgmN+gK9BFcmzNwD0QEjCqrQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBOISJwi/2ohMKGo3JMTiQosbTorMB8GA1UdIwQY
MBaAFBox3KiH2L5gYBnQoVk6Fv/Tn9aSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2pIY3FJZll2bUJnR2RDaFdUb1dfOU9mMXBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8yNzgwY2UtNGYyNi00YjY0LWI3ZjEt
OTBjOTk5ZDM1ZWQ4LzEvR2pIY3FJZll2bUJnR2RDaFdUb1dfOU9mMXBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS8yNzgwY2UtNGYyNi00YjY0LWI3ZjEtOTBjOTk5ZDM1ZWQ4
LzEvR2pIY3FJZll2bUJnR2RDaFdUb1dfOU9mMXBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGBc5gufz
mmn9tlP3G8yrEVe2zHmAKohIhLjZk9u4nnCTZiajifMZX03RidYCiKbfhyv+yMuP
8t1fURu3OEQl6yWteP7GgcU60q04TK1JnJWPZY+8rdinC0DWMsZHkV/EQ00eT/5M
MOZsx61o41X92mgpCAuRo2owsZZlaGJqoOzpL8XbZHR4xnj7p152NgYXCLcmynXx
tje5WYidrcy4VcfpZH7fqMTO988U69rLpejwg8dtTjAcBWtzVLtuzImeCmPOaJDL
ICQJ0N8qgICD1vXBSPuUE5PiuNKykbX5+u39GCOfeROZRJjIseoOjnonu3qtq+/T
MCd6wMJqk8xwBQ==
-----END CERTIFICATE-----
Generated at Wed May 6 03:27:56 2026 by rpki-client