Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/1face1-9e28-4d89-bf52-91795319845c/1/gzbKFR7UwyPUmPBt18WuOUzqxZ8.mft
File: gzbKFR7UwyPUmPBt18WuOUzqxZ8.mft (raw, json)
Hash identifier: vke5Sz8YbxzZXa2Zd3oRK94ovIHHo/5sWQjh2I2xU9s=
Subject key identifier: A1:1E:C6:91:2A:B4:D5:23:A3:0A:5D:8D:89:E3:FC:CA:F4:42:76:11
Authority key identifier: 83:36:CA:15:1E:D4:C3:23:D4:98:F0:6D:D7:C5:AE:39:4C:EA:C5:9F
Certificate issuer: /CN=8336ca151ed4c323d498f06dd7c5ae394ceac59f
Certificate serial: 019D2AAA04F604AF9A7D438606483F76A42C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gzbKFR7UwyPUmPBt18WuOUzqxZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/1face1-9e28-4d89-bf52-91795319845c/1/gzbKFR7UwyPUmPBt18WuOUzqxZ8.mft
Manifest number: 11EA
Signing time: Thu 26 Mar 2026 15:01:18 +0000
Manifest this update: Thu 26 Mar 2026 15:01:18 +0000
Manifest next update: Fri 27 Mar 2026 15:01:18 +0000
Files and hashes: 1: VlW6EtyMaH795hvnaMozw2BfYQQ.roa (hash: my2rC1+ycBVaR38Z3DLdakYhoWnomEP/kZgHcgk7zUE=)
2: gzbKFR7UwyPUmPBt18WuOUzqxZ8.crl (hash: Cc4TRZc90AN1nwBkZmRm7cRS6un9qgU9YdXjdbz2eRw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/1face1-9e28-4d89-bf52-91795319845c/1/gzbKFR7UwyPUmPBt18WuOUzqxZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/1face1-9e28-4d89-bf52-91795319845c/1/gzbKFR7UwyPUmPBt18WuOUzqxZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/gzbKFR7UwyPUmPBt18WuOUzqxZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 15:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:aa:04:f6:04:af:9a:7d:43:86:06:48:3f:76:a4:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8336ca151ed4c323d498f06dd7c5ae394ceac59f
Validity
Not Before: Mar 26 15:01:18 2026 GMT
Not After : Mar 27 15:01:18 2026 GMT
Subject: CN=a11ec6912ab4d523a30a5d8d89e3fccaf4427611
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9b:7d:8a:80:d2:8e:97:85:37:5a:a2:63:d2:
b9:02:dc:e4:31:b1:2e:13:55:5d:22:6f:ad:24:78:
1c:f7:6b:c1:bf:01:50:d8:ef:82:19:d8:5a:39:02:
f1:b5:a7:fa:62:b5:3f:d0:d0:1f:0f:02:9a:fb:2b:
87:6c:d8:8c:98:81:a6:a5:de:a3:ef:59:31:e6:85:
57:82:98:1f:6e:00:fe:c2:65:cd:22:cf:53:22:e7:
02:a0:43:19:ec:a5:48:4a:10:e2:1d:62:5f:72:59:
1d:79:93:99:73:e1:9e:52:d6:4a:d9:a5:be:47:83:
19:a8:bd:57:11:da:aa:a8:16:92:4c:6b:88:57:12:
b4:30:d5:d5:91:4d:ff:de:d9:4e:f0:00:a6:6c:01:
31:71:bc:50:79:4e:92:57:91:39:55:86:72:82:64:
c4:0d:be:04:02:73:ff:ec:fc:2b:b8:23:c9:f3:2a:
ea:78:30:7c:22:13:ad:0e:b6:bc:e3:ac:18:7c:c0:
86:74:d2:7e:89:db:12:b7:a4:99:81:38:50:d9:2b:
20:cc:37:6e:6d:25:94:6a:ed:5d:fb:b4:d7:ed:6a:
71:da:76:ef:6f:99:2a:88:5c:c4:46:76:6f:60:66:
b4:cb:9a:41:2e:33:69:7f:fb:a7:9c:57:76:fe:18:
a1:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:1E:C6:91:2A:B4:D5:23:A3:0A:5D:8D:89:E3:FC:CA:F4:42:76:11
X509v3 Authority Key Identifier:
keyid:83:36:CA:15:1E:D4:C3:23:D4:98:F0:6D:D7:C5:AE:39:4C:EA:C5:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzbKFR7UwyPUmPBt18WuOUzqxZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/1face1-9e28-4d89-bf52-91795319845c/1/gzbKFR7UwyPUmPBt18WuOUzqxZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/1face1-9e28-4d89-bf52-91795319845c/1/gzbKFR7UwyPUmPBt18WuOUzqxZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:ab:a0:86:38:83:1c:d0:a0:a6:d8:81:3c:af:e6:72:8b:47:
11:78:c2:d5:bb:1e:ff:25:85:7d:91:4d:07:10:df:ea:4e:0d:
a0:2c:26:d3:19:2f:88:3a:60:6f:b1:d5:7a:34:13:4d:c1:71:
36:7c:49:e6:84:36:fc:97:24:92:51:2f:cc:e0:3f:5d:4c:a6:
ab:da:c3:f4:1f:a8:b7:30:92:c9:b4:07:d5:16:50:d2:be:1d:
b8:7d:76:8d:bf:44:4c:12:d2:8b:54:62:b6:18:92:9a:a2:38:
bf:ea:d0:69:a2:00:8a:cc:45:a4:1d:2c:fa:fb:e5:7b:f8:14:
5d:41:bc:14:4d:1e:a8:61:ab:84:71:6d:e5:3d:70:21:a3:2e:
3b:b4:7c:14:13:e2:34:2f:2b:d8:c0:65:bd:ec:60:72:fd:84:
eb:1c:fe:0f:6b:c3:32:4a:90:77:97:4d:57:de:6b:ff:d8:a3:
5d:c3:d2:bb:ca:8a:cc:2a:2f:ca:44:0f:a8:14:d8:33:9f:af:
98:60:18:a0:00:f0:ad:92:f4:f6:eb:96:a6:a2:8a:7e:c9:aa:
9b:6e:a7:39:ab:43:dd:c3:48:6a:e0:69:95:72:a0:a6:40:a9:
aa:76:fd:b7:91:85:cc:8b:16:84:ac:c2:e9:a7:25:16:9e:06:
da:20:2a:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:39:03 2026 by rpki-client