Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/d317ca-3961-4fe0-bde8-f7c501418e56/1/gEH-6hI_ywfocqjLS92at7jaL88.mft
File: gEH-6hI_ywfocqjLS92at7jaL88.mft (raw, json)
Hash identifier: KJEUBeGj6wl4ofumScEj9f7/uWvlLbjtkMFnBMxNEUE=
Subject key identifier: BC:49:5F:29:1C:DC:73:0C:07:7A:70:5B:3E:AC:80:C5:24:89:F3:24
Authority key identifier: 80:41:FE:EA:12:3F:CB:07:E8:72:A8:CB:4B:DD:9A:B7:B8:DA:2F:CF
Certificate issuer: /CN=8041feea123fcb07e872a8cb4bdd9ab7b8da2fcf
Certificate serial: 019D28BB255390C00A3DE0CD0400CC3D6C4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gEH-6hI_ywfocqjLS92at7jaL88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/d317ca-3961-4fe0-bde8-f7c501418e56/1/gEH-6hI_ywfocqjLS92at7jaL88.mft
Manifest number: 0C9E
Signing time: Thu 26 Mar 2026 06:00:46 +0000
Manifest this update: Thu 26 Mar 2026 06:00:46 +0000
Manifest next update: Fri 27 Mar 2026 06:00:46 +0000
Files and hashes: 1: TtXo5-QRvXwKIgknKnZ4_4t2vL8.roa (hash: mXHeMxujxsacK8/QlflktbO+DxAXX0UCko2MtIwDM0I=)
2: fSV05LTtRowHQPxeGrTgmMw12XI.asa (hash: 1wYE2I2ay1wSvk0f46A4Hik/XpXQv4vsPJSMPwGvQmo=)
3: gEH-6hI_ywfocqjLS92at7jaL88.crl (hash: dgdCqeShgeyH60mpjiTupDW7xuptSk5fWEJP2FuEHQg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/d317ca-3961-4fe0-bde8-f7c501418e56/1/gEH-6hI_ywfocqjLS92at7jaL88.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/d317ca-3961-4fe0-bde8-f7c501418e56/1/gEH-6hI_ywfocqjLS92at7jaL88.mft
rsync://rpki.ripe.net/repository/DEFAULT/gEH-6hI_ywfocqjLS92at7jaL88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:25:53:90:c0:0a:3d:e0:cd:04:00:cc:3d:6c:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8041feea123fcb07e872a8cb4bdd9ab7b8da2fcf
Validity
Not Before: Mar 26 06:00:46 2026 GMT
Not After : Mar 27 06:00:46 2026 GMT
Subject: CN=bc495f291cdc730c077a705b3eac80c52489f324
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c4:5b:50:c4:c4:20:29:29:3d:96:50:b0:13:
51:8f:93:04:c1:4d:d9:dd:3e:d1:bb:ca:ce:b7:fe:
4d:cf:b3:9c:0d:a5:76:1b:5d:11:f0:f2:61:2a:c6:
50:16:ff:27:f1:4d:70:19:d5:e1:01:88:f0:22:62:
f2:ee:7b:f0:1e:21:41:b3:c3:46:df:c8:ef:ab:93:
29:6c:2f:76:e1:fe:17:ce:46:91:83:cf:42:6b:d9:
c3:2e:e5:1e:9c:d6:03:db:93:ef:31:f9:50:63:6d:
a6:82:60:b5:5a:dc:40:f0:26:27:ce:49:74:4d:82:
f5:b1:0d:74:b9:3c:de:84:db:49:1f:58:d8:35:d4:
75:0d:85:e5:f3:b7:37:99:e1:af:3a:00:07:cc:d9:
74:78:11:f3:38:09:f8:07:17:23:30:64:8b:fe:23:
f6:9f:2d:e4:4d:5f:c0:a7:48:cd:42:ea:b2:e4:d7:
5d:2b:c5:9d:7c:73:93:73:21:42:76:aa:17:87:b3:
5d:aa:30:3e:72:29:e8:1b:7a:60:14:4e:50:56:88:
b4:ff:ef:6d:51:bf:9e:ad:7e:b0:9a:fe:ec:37:c8:
d5:46:5d:48:ea:d9:57:07:e8:94:f5:4d:38:ae:7c:
4f:ce:de:66:88:9c:8f:7f:50:ef:15:8f:ed:ca:89:
0f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:49:5F:29:1C:DC:73:0C:07:7A:70:5B:3E:AC:80:C5:24:89:F3:24
X509v3 Authority Key Identifier:
keyid:80:41:FE:EA:12:3F:CB:07:E8:72:A8:CB:4B:DD:9A:B7:B8:DA:2F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gEH-6hI_ywfocqjLS92at7jaL88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/d317ca-3961-4fe0-bde8-f7c501418e56/1/gEH-6hI_ywfocqjLS92at7jaL88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/d317ca-3961-4fe0-bde8-f7c501418e56/1/gEH-6hI_ywfocqjLS92at7jaL88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:c8:f6:1e:a1:48:bd:55:a5:d9:5d:b4:ce:e4:ad:bd:75:71:
ff:25:30:27:5d:3f:1b:a5:ec:0a:1a:7e:bb:89:93:48:47:92:
06:21:db:8e:3a:d1:92:ee:0a:34:82:1b:2b:77:9e:9c:bc:94:
bf:4f:82:19:c6:0a:9d:f1:a3:32:be:5e:31:4c:9c:53:56:f2:
90:9c:2f:6d:67:49:c6:84:4b:dd:c7:51:91:b0:db:37:d6:52:
00:bd:ef:96:aa:1c:34:c6:19:95:ab:6c:ce:f9:d7:df:76:e2:
9d:09:e0:1d:ab:18:35:0e:d5:2f:e7:72:d9:f9:7d:e2:35:2a:
57:c4:8c:cd:89:3e:dc:4f:3a:b5:44:b5:dc:05:ef:ea:bb:35:
e6:81:36:d0:e7:46:02:0d:3f:d9:6d:30:40:a2:f4:74:60:d1:
03:eb:1d:20:06:75:1f:9f:29:3c:c6:89:3b:59:64:38:d4:30:
22:ee:37:b7:6d:34:08:e0:b0:0a:e2:6c:aa:7a:48:86:9b:fb:
ca:7c:33:f2:71:c2:e4:ad:99:d5:a3:3c:c3:02:db:d3:8e:e3:
fb:de:24:3d:e7:3a:b0:a4:53:16:6b:c0:7f:ed:63:91:9f:06:
b5:b4:30:b7:fe:f0:21:4b:2b:79:5c:eb:60:ce:b5:90:c3:d9:
25:3a:1f:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:06:16 2026 by rpki-client