Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/788d10-e8df-4dac-aa8f-d39ffc16ef89/1/gEbjOGAXHvbsYOvPxexayRwldXw.mft
File: gEbjOGAXHvbsYOvPxexayRwldXw.mft (raw, json)
Hash identifier: ybET5Vrumx6koUb4A7ciKdJnuXjNBsqdguSDapCF2TU=
Subject key identifier: 2F:1E:D7:7F:F7:4B:85:3A:18:DA:73:11:94:1C:8F:D0:66:86:83:78
Authority key identifier: 80:46:E3:38:60:17:1E:F6:EC:60:EB:CF:C5:EC:5A:C9:1C:25:75:7C
Certificate issuer: /CN=8046e33860171ef6ec60ebcfc5ec5ac91c25757c
Certificate serial: 019D269659B9F7149515863204FB972BD920
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gEbjOGAXHvbsYOvPxexayRwldXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/788d10-e8df-4dac-aa8f-d39ffc16ef89/1/gEbjOGAXHvbsYOvPxexayRwldXw.mft
Manifest number: 0A1F
Signing time: Wed 25 Mar 2026 20:01:20 +0000
Manifest this update: Wed 25 Mar 2026 20:01:20 +0000
Manifest next update: Thu 26 Mar 2026 20:01:20 +0000
Files and hashes: 1: 6KJDdIsLff1CN0PMajuP88fcMpE.roa (hash: B2Hljs3iskIAlDm2x1NuHiYauh52yu9vfPaGo3V/YZs=)
2: gEbjOGAXHvbsYOvPxexayRwldXw.crl (hash: Rc+GFBTTdl/OUWwCGAzdYnVVyqmZuLHYa8Rt1SpYQXc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/788d10-e8df-4dac-aa8f-d39ffc16ef89/1/gEbjOGAXHvbsYOvPxexayRwldXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/788d10-e8df-4dac-aa8f-d39ffc16ef89/1/gEbjOGAXHvbsYOvPxexayRwldXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/gEbjOGAXHvbsYOvPxexayRwldXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:59:b9:f7:14:95:15:86:32:04:fb:97:2b:d9:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8046e33860171ef6ec60ebcfc5ec5ac91c25757c
Validity
Not Before: Mar 25 20:01:20 2026 GMT
Not After : Mar 26 20:01:20 2026 GMT
Subject: CN=2f1ed77ff74b853a18da7311941c8fd066868378
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4e:49:68:b8:44:9e:58:b3:e9:c7:a1:f6:55:
66:83:ec:06:81:8d:04:6b:cd:69:ee:50:4a:6b:d7:
1a:f6:85:8f:1a:73:f5:ba:db:ca:ef:95:9a:77:1d:
bd:f6:e1:a0:21:a1:aa:80:52:ea:ba:7b:55:39:c5:
00:2c:74:96:12:ad:af:b8:d1:44:8c:35:8b:ac:64:
5d:5b:79:f7:e2:d6:e7:3b:c5:c0:c7:06:dc:30:8e:
23:9e:5b:50:2e:75:18:73:6b:13:e3:f9:22:84:ea:
80:4e:ce:dc:7b:30:bc:3f:54:91:66:4c:ce:a6:fd:
81:de:b5:ea:70:07:7a:2b:1c:78:13:07:08:9e:12:
ac:7c:cd:ff:33:bb:60:aa:46:fc:13:33:48:3f:45:
18:dd:10:2b:30:1b:38:d7:6c:64:49:52:d2:74:23:
ca:f7:9b:23:3e:9f:e0:38:09:ef:fb:16:9c:2e:6f:
5b:8d:21:dc:1c:db:d6:42:7b:0f:6a:d8:18:8e:85:
2f:b0:42:95:5b:57:32:a8:87:1e:0c:cb:fd:99:49:
36:bf:52:0d:c9:4d:14:f7:1a:e2:85:c2:42:0e:ee:
8e:26:f7:c0:71:bc:c9:f3:5b:2a:c0:5b:44:b7:60:
9d:6c:e9:96:bd:a0:b8:ac:00:d3:ef:de:e7:11:bc:
5f:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:1E:D7:7F:F7:4B:85:3A:18:DA:73:11:94:1C:8F:D0:66:86:83:78
X509v3 Authority Key Identifier:
keyid:80:46:E3:38:60:17:1E:F6:EC:60:EB:CF:C5:EC:5A:C9:1C:25:75:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gEbjOGAXHvbsYOvPxexayRwldXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/788d10-e8df-4dac-aa8f-d39ffc16ef89/1/gEbjOGAXHvbsYOvPxexayRwldXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/788d10-e8df-4dac-aa8f-d39ffc16ef89/1/gEbjOGAXHvbsYOvPxexayRwldXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:e1:d5:09:01:7e:af:6b:47:5b:6d:dc:0f:b3:f2:0f:7a:fd:
3e:46:19:f6:26:6a:45:6f:85:d0:14:b7:db:b0:29:27:c5:5d:
e6:8d:d2:66:0c:86:d1:c6:38:93:c1:9e:40:ae:07:8c:a7:1d:
82:8c:2f:39:26:d2:9d:2f:f4:fb:03:3b:df:5d:c5:c5:1c:c5:
44:c1:38:df:0f:3d:86:70:60:51:61:f6:b3:12:d0:2a:8e:b5:
73:f5:d9:83:33:b7:7c:d4:f0:13:9f:6c:38:18:7c:67:51:10:
99:4b:40:f2:b1:89:66:c4:b7:5f:30:d9:5c:31:bc:de:69:3d:
4d:ff:e4:fb:51:c4:da:89:e2:d7:58:79:fc:fe:0d:15:cc:2f:
b0:f7:83:63:83:e8:34:89:fa:9a:b8:3d:69:8f:f3:be:00:bd:
3d:db:a0:48:67:cc:70:fe:51:0f:8f:ee:4c:61:02:f7:65:34:
d7:d7:c0:9e:5b:27:af:18:7a:b9:34:90:cd:d5:45:61:f8:f9:
7c:ac:99:d1:bb:06:3e:cb:bd:ed:ba:78:a8:3d:bf:1d:99:2b:
12:39:6e:56:d1:d4:a8:fc:2c:13:e7:af:46:67:aa:c9:a5:03:
e5:56:a5:0a:06:ea:de:65:6a:da:d5:f6:09:05:11:8a:7e:17:
cf:31:43:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:20:05 2026 by rpki-client