Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.mft
File: gOuvLLqDWUOOQ0Ej3aelo5b19Rk.mft (raw, json)
Hash identifier: hKv8+luREbY5kRhGGEStuJHpl88ZMIYyCIhIzL4Wn6A=
Subject key identifier: 48:25:13:6B:B6:15:8E:EA:FE:86:C0:18:DC:2D:0E:96:A0:27:73:50
Authority key identifier: 80:EB:AF:2C:BA:83:59:43:8E:43:41:23:DD:A7:A5:A3:96:F5:F5:19
Certificate issuer: /CN=80ebaf2cba8359438e434123dda7a5a396f5f519
Certificate serial: 019D273B21DB3157C401F75A73A70D7A2062
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.mft
Manifest number: 1888
Signing time: Wed 25 Mar 2026 23:01:19 +0000
Manifest this update: Wed 25 Mar 2026 23:01:19 +0000
Manifest next update: Thu 26 Mar 2026 23:01:19 +0000
Files and hashes: 1: MKFoAsHr3TV5czrMUEU2-S68gz8.roa (hash: FPj6ArHpiHkc92dGxOot02CZWnIJlaTAizHiHvHtZg8=)
2: gOuvLLqDWUOOQ0Ej3aelo5b19Rk.crl (hash: tFO3qlW//SGCxI7qhqTEmtTCfkmVrYY50GMoEdZX1Sc=)
3: ySQQLXcCioQUrT-vVLYr88NDd8k.roa (hash: 99wAMGqb6hUgck+9nOjEElLH944hixWosFh2OOImxmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.mft
rsync://rpki.ripe.net/repository/DEFAULT/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3b:21:db:31:57:c4:01:f7:5a:73:a7:0d:7a:20:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80ebaf2cba8359438e434123dda7a5a396f5f519
Validity
Not Before: Mar 25 23:01:19 2026 GMT
Not After : Mar 26 23:01:19 2026 GMT
Subject: CN=4825136bb6158eeafe86c018dc2d0e96a0277350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:24:5b:da:1c:e5:8b:7a:ab:fc:8b:e7:fe:52:
33:b6:42:82:84:37:e5:b5:7b:75:33:08:27:1a:7a:
67:d1:a7:a5:de:8e:60:08:e6:03:a0:d1:36:3a:9f:
bd:fd:33:fd:0d:30:b5:34:e7:02:5e:46:bb:7b:4a:
95:1e:1d:98:28:a1:b5:59:4f:bd:3a:4c:56:8f:f3:
fe:cf:45:83:f6:72:98:04:86:77:15:34:2d:e5:a2:
f0:1e:d3:01:21:f0:97:e7:2b:16:c1:57:c4:34:11:
73:25:3b:97:2e:8f:ab:29:d7:e3:2d:26:53:0b:93:
4d:01:c1:fb:68:1f:94:98:62:83:ff:09:87:9a:a0:
97:b5:84:3d:4e:3c:35:7d:6d:e0:fd:e8:41:1d:80:
3a:cd:e5:9d:ee:44:33:35:7f:46:dd:f4:47:25:82:
01:bb:f4:da:53:33:30:74:69:7d:8f:0e:30:17:66:
07:f1:29:6e:3e:c7:1c:d4:d2:3a:ff:7b:32:0a:06:
67:c5:64:13:7d:4f:71:a0:b5:ba:ce:68:b9:79:24:
81:3c:7f:31:7b:89:80:b7:76:ad:cd:92:f9:44:4f:
b9:43:93:7a:80:bd:f2:4d:e4:91:ce:24:ef:bc:e3:
33:a9:91:93:1c:4b:cf:e2:86:4e:0f:1e:89:0c:34:
90:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:25:13:6B:B6:15:8E:EA:FE:86:C0:18:DC:2D:0E:96:A0:27:73:50
X509v3 Authority Key Identifier:
keyid:80:EB:AF:2C:BA:83:59:43:8E:43:41:23:DD:A7:A5:A3:96:F5:F5:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:cd:09:db:7f:59:69:f0:9c:3d:84:d9:6a:ca:05:45:1d:06:
e0:05:06:37:9a:b4:61:75:96:36:00:a1:ca:fe:a8:d4:90:1d:
ee:ee:e1:71:2c:23:80:34:6c:98:ac:57:0d:9d:db:27:d6:a9:
5d:30:2b:c1:c6:59:42:d2:1a:48:57:a9:82:35:bd:4d:67:bc:
09:2a:26:f6:74:31:b7:50:66:d5:62:97:2f:14:6a:49:35:15:
3a:f4:1d:05:ee:51:44:0b:73:a6:74:1c:99:0c:8e:5d:e6:d6:
50:07:2a:d4:37:a3:26:56:ed:8d:0b:0a:96:7b:c1:51:14:cc:
87:4f:27:2a:89:e1:e1:d8:20:64:f8:df:cd:84:05:22:da:d0:
20:40:12:f9:91:57:ef:5c:7c:a4:52:56:0b:6d:f4:34:46:70:
97:8e:fe:eb:e8:ad:c2:2b:d0:8c:1e:63:1b:1d:7c:44:c4:07:
f3:73:19:97:83:d8:f9:aa:de:92:5f:01:83:13:d4:39:67:f8:
97:7c:34:bc:20:96:7f:28:c2:b5:6b:5c:0e:d5:d2:e5:62:26:
ce:1d:0e:76:79:f9:fe:b4:d3:a8:a1:7b:71:ad:72:64:8e:57:
38:9f:23:44:9d:4f:1e:c9:d3:07:b3:2d:c8:a8:57:a6:ce:7a:
73:34:6b:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:22:58 2026 by rpki-client