Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/cdecd2-38d6-40cf-ab02-dab9dc6dc4c9/1/gbZaIw1pJ9usIBCX-Uni6qJzEiA.mft
File: gbZaIw1pJ9usIBCX-Uni6qJzEiA.mft (raw, json)
Hash identifier: jOg7Bmon4j8ne3AMOJf8YauzMlKBvCul7tDQzFF7SHg=
Subject key identifier: F2:C1:72:EB:73:A1:38:3D:04:84:17:67:20:99:F6:59:C1:32:F3:8A
Authority key identifier: 81:B6:5A:23:0D:69:27:DB:AC:20:10:97:F9:49:E2:EA:A2:73:12:20
Certificate issuer: /CN=81b65a230d6927dbac201097f949e2eaa2731220
Certificate serial: 019D27DF7A454B0B113F97C95ED361C32BEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gbZaIw1pJ9usIBCX-Uni6qJzEiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/cdecd2-38d6-40cf-ab02-dab9dc6dc4c9/1/gbZaIw1pJ9usIBCX-Uni6qJzEiA.mft
Manifest number: 0E1E
Signing time: Thu 26 Mar 2026 02:00:50 +0000
Manifest this update: Thu 26 Mar 2026 02:00:50 +0000
Manifest next update: Fri 27 Mar 2026 02:00:50 +0000
Files and hashes: 1: QeR12R9Z_jTNrUpQr1ODF5IR7mc.roa (hash: 8rRLxS0jjdwQyV6rT5Us1y0eR8TYGMlqxEVb79Eceds=)
2: gbZaIw1pJ9usIBCX-Uni6qJzEiA.crl (hash: ab3MCFfx2Cawg5De6lsL2VlIjzouXC4nKhHCJLI5ooI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/cdecd2-38d6-40cf-ab02-dab9dc6dc4c9/1/gbZaIw1pJ9usIBCX-Uni6qJzEiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/cdecd2-38d6-40cf-ab02-dab9dc6dc4c9/1/gbZaIw1pJ9usIBCX-Uni6qJzEiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/gbZaIw1pJ9usIBCX-Uni6qJzEiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:7a:45:4b:0b:11:3f:97:c9:5e:d3:61:c3:2b:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81b65a230d6927dbac201097f949e2eaa2731220
Validity
Not Before: Mar 26 02:00:50 2026 GMT
Not After : Mar 27 02:00:50 2026 GMT
Subject: CN=f2c172eb73a1383d048417672099f659c132f38a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:29:e6:d9:b2:41:84:e7:d7:bb:be:ef:8a:8f:
de:e6:75:e1:88:98:79:ae:24:7f:45:ee:49:c8:99:
07:42:8e:94:75:90:38:81:40:3b:cb:73:c8:bc:50:
ca:5b:ee:51:67:fc:42:75:89:8c:84:d2:15:ec:79:
68:e0:55:25:f3:c7:43:76:8e:11:9c:41:7f:bf:af:
d3:0c:ed:63:88:95:96:1b:93:10:f6:56:6f:a1:cd:
a2:64:57:c7:d6:d1:c0:7a:11:b4:f3:51:19:0e:7a:
b7:ca:59:a4:7c:2c:ad:cb:9d:27:6f:bc:94:a1:be:
fb:92:b2:0b:8e:4c:a5:e0:1b:4f:8b:5c:d8:7c:05:
78:e0:98:d3:e1:3c:6b:eb:90:42:99:8d:03:56:d7:
ad:1d:5b:df:75:55:c6:a6:85:5b:d0:c2:09:3d:16:
0d:40:01:78:7a:cc:1a:7b:54:1e:44:39:83:03:2b:
3f:52:c5:bb:64:32:0f:2a:06:4d:7e:04:36:0b:58:
bd:1f:11:23:de:0e:4d:41:38:46:4e:3b:8f:0a:e6:
3c:db:8d:fb:0a:29:e7:05:7c:88:54:29:35:9d:cd:
fa:15:d1:e5:e1:23:5c:db:4b:42:6f:7c:b9:9e:d2:
fc:97:4c:42:ad:f6:b9:45:21:a7:f6:e8:cd:7e:f1:
17:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:C1:72:EB:73:A1:38:3D:04:84:17:67:20:99:F6:59:C1:32:F3:8A
X509v3 Authority Key Identifier:
keyid:81:B6:5A:23:0D:69:27:DB:AC:20:10:97:F9:49:E2:EA:A2:73:12:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gbZaIw1pJ9usIBCX-Uni6qJzEiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cdecd2-38d6-40cf-ab02-dab9dc6dc4c9/1/gbZaIw1pJ9usIBCX-Uni6qJzEiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cdecd2-38d6-40cf-ab02-dab9dc6dc4c9/1/gbZaIw1pJ9usIBCX-Uni6qJzEiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:29:eb:8c:17:6e:26:29:02:1c:a4:e6:01:ec:32:45:a8:ce:
6a:30:81:06:b3:24:03:16:96:2e:5c:a0:fe:ca:7a:41:d2:29:
1b:5a:38:e1:5d:49:76:16:e3:39:2d:b9:b6:cc:16:4b:7c:3c:
cb:45:c4:b4:88:3e:44:53:3d:81:59:7d:d4:cd:8c:e5:ad:68:
f4:44:87:b7:2c:8f:b5:94:11:c4:b3:27:be:40:5d:2a:dd:8f:
b0:1d:66:3a:47:43:a1:2c:73:0f:a6:e3:38:f0:92:97:6c:7a:
71:f8:82:c5:a0:bc:7f:7d:28:e7:1d:29:94:44:bb:9e:fc:5f:
9b:b6:f7:39:c0:a6:9e:c1:a7:18:34:6e:e3:d1:d5:33:7f:c5:
7a:ec:fa:e5:7a:d3:75:15:cd:5e:f3:f5:3a:75:ce:ff:f6:ef:
89:6a:78:d1:91:d8:e4:cd:e4:5e:0d:6a:9a:3b:e9:e6:55:cb:
d6:70:64:14:bf:6c:dd:23:87:04:82:d9:4e:97:28:85:5c:30:
0f:50:f0:af:d4:93:15:d1:21:0d:31:2d:e3:24:94:47:af:a8:
e6:4e:59:51:f5:32:e1:b0:e6:b4:a3:23:64:2f:6e:93:8b:0f:
92:1b:b0:85:91:eb:2e:dc:6a:ed:a8:19:98:97:26:78:07:87:
c9:b1:f9:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:54:56 2026 by rpki-client