Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/13d50b-7db3-4d10-8a4e-6eb3aa6a21af/1/gNZ6hECc7boCLusDW9itYg1oPqc.mft
File: gNZ6hECc7boCLusDW9itYg1oPqc.mft (raw, json)
Hash identifier: /YzNl2hP9xd8l35sCc/6HpF+vSaXuSP9EqHsaMGgWWk=
Subject key identifier: C5:A5:6D:96:B9:74:57:8B:2D:55:0B:6D:A5:7D:48:84:31:E0:CC:D3
Authority key identifier: 80:D6:7A:84:40:9C:ED:BA:02:2E:EB:03:5B:D8:AD:62:0D:68:3E:A7
Certificate issuer: /CN=80d67a84409cedba022eeb035bd8ad620d683ea7
Certificate serial: 019D2A04ADCAD495D97CEA397DAF89AC34CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gNZ6hECc7boCLusDW9itYg1oPqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/13d50b-7db3-4d10-8a4e-6eb3aa6a21af/1/gNZ6hECc7boCLusDW9itYg1oPqc.mft
Manifest number: 181D
Signing time: Thu 26 Mar 2026 12:00:42 +0000
Manifest this update: Thu 26 Mar 2026 12:00:42 +0000
Manifest next update: Fri 27 Mar 2026 12:00:42 +0000
Files and hashes: 1: _Yb7IW78SKZuD4V1IkJEZwe6uu8.roa (hash: 14e7sG8qVox+8SMefeXpeF7AFL8AbwbjJc3kCO+AHdc=)
2: gNZ6hECc7boCLusDW9itYg1oPqc.crl (hash: GfRop2tEHaoRgKtbaW7hjVJGUOMU+SfR7boGpsvOCxU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/13d50b-7db3-4d10-8a4e-6eb3aa6a21af/1/gNZ6hECc7boCLusDW9itYg1oPqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/13d50b-7db3-4d10-8a4e-6eb3aa6a21af/1/gNZ6hECc7boCLusDW9itYg1oPqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/gNZ6hECc7boCLusDW9itYg1oPqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:ad:ca:d4:95:d9:7c:ea:39:7d:af:89:ac:34:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80d67a84409cedba022eeb035bd8ad620d683ea7
Validity
Not Before: Mar 26 12:00:42 2026 GMT
Not After : Mar 27 12:00:42 2026 GMT
Subject: CN=c5a56d96b974578b2d550b6da57d488431e0ccd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:3a:88:e2:5a:a2:ee:a3:97:fa:8b:ce:77:b3:
84:dd:3c:df:bf:66:48:62:f1:f6:c2:e6:04:93:e8:
68:05:05:c1:c7:ae:64:6d:c5:fd:be:55:ee:09:60:
dc:da:9f:b0:f4:5f:e0:9c:3d:85:dd:2e:90:0e:4a:
ec:c3:97:d1:a2:96:06:97:cc:34:02:08:c1:1f:45:
2a:68:55:c2:33:6b:60:cd:2f:08:88:17:b0:fa:e5:
51:d1:e0:4b:17:ab:78:11:4a:d7:43:1d:75:55:3d:
15:ec:d2:29:a9:f0:ff:38:7e:4e:46:44:65:b5:17:
2f:1e:8a:11:6f:ee:5c:ad:dc:bb:d7:1f:e5:35:13:
1a:03:3c:25:9d:a8:01:eb:c6:ea:03:e3:00:da:2e:
ef:72:04:07:25:d3:34:60:9e:02:42:33:4a:d6:a3:
a9:37:2b:de:e2:41:f8:6c:5a:21:4c:92:68:33:68:
21:17:26:7a:52:e3:f6:4b:dc:ff:1a:bc:29:ca:af:
66:6a:63:68:08:05:40:00:17:f9:a9:02:bf:ae:cb:
ae:85:30:1c:86:c6:76:fd:c2:d2:52:cc:46:3a:1b:
bc:a0:62:08:70:f1:5b:68:b4:ef:76:be:b3:91:d8:
98:ef:65:83:0e:ec:60:0b:c4:01:a2:28:6f:97:24:
11:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:A5:6D:96:B9:74:57:8B:2D:55:0B:6D:A5:7D:48:84:31:E0:CC:D3
X509v3 Authority Key Identifier:
keyid:80:D6:7A:84:40:9C:ED:BA:02:2E:EB:03:5B:D8:AD:62:0D:68:3E:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gNZ6hECc7boCLusDW9itYg1oPqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/13d50b-7db3-4d10-8a4e-6eb3aa6a21af/1/gNZ6hECc7boCLusDW9itYg1oPqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/13d50b-7db3-4d10-8a4e-6eb3aa6a21af/1/gNZ6hECc7boCLusDW9itYg1oPqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:0d:e8:df:cd:a7:d9:49:7e:52:e2:b0:6c:ee:bc:a3:18:50:
21:de:4e:56:b6:1b:91:ea:07:41:69:42:cf:a1:db:e4:8e:1d:
56:02:fe:f6:3b:05:1f:e8:b6:c5:11:77:73:23:57:36:74:95:
e5:22:23:8c:a2:04:df:d8:71:a5:96:7d:e1:58:d5:e4:3b:5b:
65:3e:43:8f:55:c0:46:0f:f1:ac:91:74:35:41:52:99:6e:88:
83:fe:53:17:ce:1f:a8:b4:d4:56:54:48:03:fa:8f:30:6f:9e:
f1:06:fd:54:a1:28:e0:fa:0a:06:d6:01:8a:0c:69:81:38:82:
28:45:be:58:7a:2a:6f:79:65:2a:62:6c:72:12:b4:7a:8d:00:
6a:81:0c:d5:c6:dd:8c:3e:36:ed:c4:df:47:93:c7:15:1d:70:
f3:10:e9:a8:b4:39:60:4d:d8:a1:d3:bb:a5:a5:e9:35:0a:27:
fd:c2:51:4e:c3:7d:93:c3:c4:fe:dd:01:1c:94:88:eb:ab:47:
7e:67:62:7d:39:ca:8a:4a:80:0f:93:27:0a:3b:52:e4:9a:17:
d1:1e:a0:86:95:ec:66:a7:5e:4f:79:a3:7d:95:64:30:89:56:
94:7d:db:02:23:ca:15:bb:c1:2a:a6:8b:01:fa:52:33:5c:79:
ff:ec:ae:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:52:54 2026 by rpki-client