Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/54b678-b2fe-449d-b326-dcae70f1c93b/1/gmGkK_ImTLXrzsbhkNAqbVU7YjM.mft
File: gmGkK_ImTLXrzsbhkNAqbVU7YjM.mft (raw, json)
Hash identifier: 4uZFW6TMDsWJHdKpLueleGLS360hviFxn0CWfREgCeo=
Subject key identifier: 64:52:84:09:A0:3F:D0:94:64:42:67:75:9E:7D:EE:F5:07:99:FA:01
Authority key identifier: 82:61:A4:2B:F2:26:4C:B5:EB:CE:C6:E1:90:D0:2A:6D:55:3B:62:33
Certificate issuer: /CN=8261a42bf2264cb5ebcec6e190d02a6d553b6233
Certificate serial: 019D277245926841A7FB607891E065AA2910
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmGkK_ImTLXrzsbhkNAqbVU7YjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/54b678-b2fe-449d-b326-dcae70f1c93b/1/gmGkK_ImTLXrzsbhkNAqbVU7YjM.mft
Manifest number: 0BFA
Signing time: Thu 26 Mar 2026 00:01:33 +0000
Manifest this update: Thu 26 Mar 2026 00:01:33 +0000
Manifest next update: Fri 27 Mar 2026 00:01:33 +0000
Files and hashes: 1: IVL7dLrg6wGDU1LsfYsBBP5fLww.roa (hash: nXXz2gE0BqsxA3+AlASgnT6agymsn4mqf9G776nMdI8=)
2: gmGkK_ImTLXrzsbhkNAqbVU7YjM.crl (hash: /5BngaJlJhelwWRZELKXLUKN/Lf7knqj5J6gbax80yM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/54b678-b2fe-449d-b326-dcae70f1c93b/1/gmGkK_ImTLXrzsbhkNAqbVU7YjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/54b678-b2fe-449d-b326-dcae70f1c93b/1/gmGkK_ImTLXrzsbhkNAqbVU7YjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/gmGkK_ImTLXrzsbhkNAqbVU7YjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:45:92:68:41:a7:fb:60:78:91:e0:65:aa:29:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8261a42bf2264cb5ebcec6e190d02a6d553b6233
Validity
Not Before: Mar 26 00:01:33 2026 GMT
Not After : Mar 27 00:01:33 2026 GMT
Subject: CN=64528409a03fd094644267759e7deef50799fa01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:d5:44:7c:8f:a7:64:a0:f6:7a:2c:49:3d:21:
20:10:5a:24:4f:50:12:59:41:e8:92:3d:40:e9:b4:
b2:5d:13:6f:e0:42:92:51:7c:a5:b5:82:5e:1d:ee:
93:0c:3b:9d:da:6f:98:8c:43:37:fc:80:3e:be:f8:
9f:cd:00:30:6f:fe:6b:74:4c:51:b6:50:1d:2d:4e:
e5:09:7e:e0:c6:7d:5c:a8:0f:1b:59:87:f2:c9:17:
55:8e:51:fd:12:da:8a:3f:55:74:8b:b1:a6:9a:4f:
a1:9e:56:c1:f0:da:17:11:ad:18:4e:eb:b6:09:45:
96:1f:e8:fd:dd:2e:be:b8:db:b6:d7:17:ce:5e:1b:
1a:b0:b3:30:9a:5e:ba:70:d5:fc:5e:8e:75:f5:d3:
d2:72:89:ae:df:7c:71:13:cf:b0:85:5f:11:c3:3c:
2d:df:4a:d8:9b:ed:7e:f4:af:c2:cb:42:a4:4a:5b:
5b:cf:3e:80:1c:d4:a9:8c:7f:b8:a9:79:c6:38:e7:
75:17:50:28:c4:fc:56:64:f2:84:50:df:46:5a:1f:
31:ee:f8:4e:8a:65:ca:7a:27:76:a8:43:28:5e:a6:
c1:7b:c0:82:71:e6:7a:c1:8e:71:d4:d1:ea:8b:88:
f5:66:db:4c:fb:c1:3a:51:6d:08:13:7d:f8:9d:ae:
38:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:52:84:09:A0:3F:D0:94:64:42:67:75:9E:7D:EE:F5:07:99:FA:01
X509v3 Authority Key Identifier:
keyid:82:61:A4:2B:F2:26:4C:B5:EB:CE:C6:E1:90:D0:2A:6D:55:3B:62:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmGkK_ImTLXrzsbhkNAqbVU7YjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/54b678-b2fe-449d-b326-dcae70f1c93b/1/gmGkK_ImTLXrzsbhkNAqbVU7YjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/54b678-b2fe-449d-b326-dcae70f1c93b/1/gmGkK_ImTLXrzsbhkNAqbVU7YjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:eb:f2:69:dc:e7:0e:bf:9f:77:f6:07:7e:03:36:86:a7:4e:
69:42:95:c3:9c:47:c8:72:c1:7d:bf:f2:6c:e6:b0:92:a7:a3:
3a:fa:3d:a9:fd:18:93:d3:83:ae:74:cf:36:59:85:4e:20:ce:
aa:b2:0b:6b:73:8f:ea:9f:c4:22:fb:34:3f:44:f6:ce:0d:78:
df:1f:0e:91:21:c2:cf:92:ab:de:c5:48:3d:d8:be:e9:b3:f0:
3a:06:30:9d:4a:7f:4d:ab:22:fb:75:06:c9:97:9f:41:75:dd:
76:c3:09:d8:1f:d3:bf:54:c8:34:9d:d9:95:ec:27:28:7d:36:
24:9f:7c:0c:c3:9b:70:4c:d4:0f:71:f3:b1:5a:5b:ec:00:d8:
c3:06:18:2e:e1:73:4f:2c:ac:12:da:35:51:0e:df:b5:b7:bd:
ec:ba:ca:0c:f3:3d:1a:9e:aa:18:3b:ea:93:6c:52:b3:ae:0e:
c1:66:47:5a:5a:fb:41:02:16:cf:f3:31:ad:19:4a:56:90:10:
5b:eb:1d:22:43:28:03:12:5d:47:9a:0b:5a:48:70:3c:eb:12:
2c:f7:4b:91:5f:f4:dc:2f:e7:57:84:d9:dd:98:ef:f4:da:f7:
29:92:64:24:81:4b:c7:dc:b9:e7:f9:04:43:43:28:91:38:16:
25:d9:85:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:54:32 2026 by rpki-client