Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/1f9ced-6bc2-486b-a4b6-09bdeb6afabd/1/GgAddwJfBSr30OYuFwEBa54i4AI.mft
File: GgAddwJfBSr30OYuFwEBa54i4AI.mft (raw, json)
Hash identifier: cLSJz+EbPdxBQV3ZZ3ycYSnsVK+joFq7PmMpEMzaR8w=
Subject key identifier: 25:FE:A1:D1:17:B0:77:88:06:40:FD:26:10:6A:B3:71:F9:3A:39:00
Authority key identifier: 1A:00:1D:77:02:5F:05:2A:F7:D0:E6:2E:17:01:01:6B:9E:22:E0:02
Certificate issuer: /CN=1a001d77025f052af7d0e62e1701016b9e22e002
Certificate serial: 019D38666D279F4804F18F2B690FA639A7EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GgAddwJfBSr30OYuFwEBa54i4AI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/1f9ced-6bc2-486b-a4b6-09bdeb6afabd/1/GgAddwJfBSr30OYuFwEBa54i4AI.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 07:02:09 +0000
Manifest this update: Sun 29 Mar 2026 07:02:09 +0000
Manifest next update: Mon 30 Mar 2026 07:02:09 +0000
Files and hashes: 1: GgAddwJfBSr30OYuFwEBa54i4AI.crl (hash: aB69dZi6JDHm5JGHoXIWkqWjYfFxM5rF4FRMHOXEd6I=)
2: QjFn6_kap5YT5wJGjuWydP9ovDM.roa (hash: /kI/7NdcivqH51KbH9Az38dv1Sm+7SZzBZyhFKOG6OY=)
3: U8WN1zqZlitTPF__hjyiuUy0R1c.roa (hash: mDHRfN2i8bM/0SSYCQob7Dr24tBbE96JKVBgc95p8M4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/1f9ced-6bc2-486b-a4b6-09bdeb6afabd/1/GgAddwJfBSr30OYuFwEBa54i4AI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/1f9ced-6bc2-486b-a4b6-09bdeb6afabd/1/GgAddwJfBSr30OYuFwEBa54i4AI.mft
rsync://rpki.ripe.net/repository/DEFAULT/GgAddwJfBSr30OYuFwEBa54i4AI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:6d:27:9f:48:04:f1:8f:2b:69:0f:a6:39:a7:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a001d77025f052af7d0e62e1701016b9e22e002
Validity
Not Before: Mar 29 07:02:09 2026 GMT
Not After : Mar 30 07:02:09 2026 GMT
Subject: CN=25fea1d117b077880640fd26106ab371f93a3900
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:5b:9b:05:ba:02:4a:af:8e:e3:44:68:fe:3b:
b5:45:95:3c:f4:7b:cf:39:e4:8c:7d:cf:00:a1:70:
64:68:db:18:86:03:c1:68:68:df:39:3a:74:4c:69:
86:f0:a1:c8:97:48:cb:90:ba:f6:eb:2f:65:12:71:
7b:f9:6f:d6:4f:71:36:e8:b3:11:cc:7f:4b:68:f0:
de:02:36:e0:f9:32:a8:91:df:58:16:cb:09:c2:0f:
24:5b:50:ae:60:44:1d:2e:e8:03:b3:96:fb:5a:4a:
8d:22:3b:70:46:35:57:17:14:1c:71:54:29:8d:f8:
22:4c:20:ac:cd:78:98:27:7e:ba:cf:62:52:33:bb:
76:a2:f1:56:c6:d2:a7:d3:91:8d:cc:70:0a:e7:48:
5d:2c:2a:11:c0:7c:cd:95:f8:cb:3f:a0:ed:3b:ff:
1d:f9:57:e7:5f:74:55:ed:17:0e:2c:d4:17:2f:06:
bf:df:e8:8a:8a:e8:a3:bb:0b:75:e8:2c:5a:6c:79:
e6:62:52:47:3d:a0:e9:07:7c:e7:2c:7a:cd:f3:8a:
eb:3d:b7:a6:61:ed:75:48:d5:cb:0e:b3:9b:e7:c5:
f1:24:e4:f7:c0:6f:49:87:36:c6:3b:1d:fa:c5:45:
79:17:f5:f2:28:d7:e2:3f:6b:f0:1e:a4:68:77:45:
31:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:FE:A1:D1:17:B0:77:88:06:40:FD:26:10:6A:B3:71:F9:3A:39:00
X509v3 Authority Key Identifier:
keyid:1A:00:1D:77:02:5F:05:2A:F7:D0:E6:2E:17:01:01:6B:9E:22:E0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GgAddwJfBSr30OYuFwEBa54i4AI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/1f9ced-6bc2-486b-a4b6-09bdeb6afabd/1/GgAddwJfBSr30OYuFwEBa54i4AI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/1f9ced-6bc2-486b-a4b6-09bdeb6afabd/1/GgAddwJfBSr30OYuFwEBa54i4AI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:68:d3:00:c0:05:3a:73:76:bc:40:4f:b5:1d:00:02:ce:36:
d1:66:25:49:7a:19:b1:4a:81:0d:58:89:4c:fd:9e:12:57:10:
0b:02:6b:5b:f3:11:86:e8:99:f9:a1:88:31:09:4e:f9:33:30:
1c:16:14:03:14:c1:a1:17:45:86:68:22:02:87:f4:84:c7:68:
7d:81:61:81:a2:76:74:84:2c:3f:68:69:72:61:08:aa:db:fd:
e4:8b:34:45:03:aa:b2:d0:85:9c:56:d5:b0:05:28:72:50:f4:
02:98:af:99:a5:8a:e3:17:6e:33:a6:27:ae:57:24:fe:bc:22:
11:9a:21:b6:27:5e:3c:17:cb:a5:0f:be:f7:ae:4e:94:62:d6:
a2:21:25:e1:af:97:7e:ce:e4:f2:8e:9e:5f:66:29:78:9a:88:
5f:f4:ac:65:26:9d:9b:05:5b:a2:a5:d2:03:3a:b9:7e:6c:6c:
4e:77:68:fc:e3:b4:62:9b:19:48:36:88:c7:fb:ae:de:9f:26:
a6:93:40:fc:68:f4:06:41:c1:9e:b5:40:c2:b1:8c:57:af:81:
33:78:b5:eb:5e:a2:db:bd:4b:86:11:13:dd:93:ca:d8:e0:38:
d6:d2:24:3a:8a:54:c2:27:a1:f9:be:25:78:89:41:1a:7e:c1:
57:43:99:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04Zm0nn0gE8Y8raQ+mOafuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhMDAxZDc3MDI1ZjA1MmFmN2QwZTYyZTE3MDEwMTZiOWUy
MmUwMDIwHhcNMjYwMzI5MDcwMjA5WhcNMjYwMzMwMDcwMjA5WjAzMTEwLwYDVQQD
EygyNWZlYTFkMTE3YjA3Nzg4MDY0MGZkMjYxMDZhYjM3MWY5M2EzOTAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwVubBboCSq+O40Ro/ju1RZU89HvP
OeSMfc8AoXBkaNsYhgPBaGjfOTp0TGmG8KHIl0jLkLr26y9lEnF7+W/WT3E26LMR
zH9LaPDeAjbg+TKokd9YFssJwg8kW1CuYEQdLugDs5b7WkqNIjtwRjVXFxQccVQp
jfgiTCCszXiYJ366z2JSM7t2ovFWxtKn05GNzHAK50hdLCoRwHzNlfjLP6DtO/8d
+VfnX3RV7RcOLNQXLwa/3+iKiuijuwt16CxabHnmYlJHPaDpB3znLHrN84rrPbem
Ye11SNXLDrOb58XxJOT3wG9JhzbGOx36xUV5F/XyKNfiP2vwHqRod0Ux7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCX+odEXsHeIBkD9JhBqs3H5OjkAMB8GA1UdIwQY
MBaAFBoAHXcCXwUq99DmLhcBAWueIuACMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2dBZGR3SmZCU3IzME9ZdUZ3RUJhNTRpNEFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy8xZjljZWQtNmJjMi00ODZiLWE0YjYt
MDliZGViNmFmYWJkLzEvR2dBZGR3SmZCU3IzME9ZdUZ3RUJhNTRpNEFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy8xZjljZWQtNmJjMi00ODZiLWE0YjYtMDliZGViNmFmYWJk
LzEvR2dBZGR3SmZCU3IzME9ZdUZ3RUJhNTRpNEFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQmjTAMAF
OnN2vEBPtR0AAs420WYlSXoZsUqBDViJTP2eElcQCwJrW/MRhuiZ+aGIMQlO+TMw
HBYUAxTBoRdFhmgiAof0hMdofYFhgaJ2dIQsP2hpcmEIqtv95Is0RQOqstCFnFbV
sAUoclD0ApivmaWK4xduM6Ynrlck/rwiEZohtidePBfLpQ++965OlGLWoiEl4a+X
fs7k8o6eX2YpeJqIX/SsZSadmwVboqXSAzq5fmxsTndo/OO0YpsZSDaIx/uu3p8m
ppNA/Gj0BkHBnrVAwrGMV6+BM3i1616i271LhhET3ZPK2OA41tIkOopUwieh+b4l
eIlBGn7BV0OZ6g==
-----END CERTIFICATE-----
Generated at Sun Mar 29 16:25:04 2026 by rpki-client