Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/a782cc-1e09-4480-a6dc-6c20ebaf30a9/1/gz4OSAQRuciOkW3vkPw6kBAmOUo.mft
File: gz4OSAQRuciOkW3vkPw6kBAmOUo.mft (raw, json)
Hash identifier: 5BtPzIeWZfE0Ldu8paSE/qlKtpSDkkwfT/41pB7J4OM=
Subject key identifier: 2E:4D:91:55:CF:85:A6:69:72:51:C2:28:ED:54:53:90:75:34:DB:20
Authority key identifier: 83:3E:0E:48:04:11:B9:C8:8E:91:6D:EF:90:FC:3A:90:10:26:39:4A
Certificate issuer: /CN=833e0e480411b9c88e916def90fc3a901026394a
Certificate serial: 019D27A8CB13153CFAE751187821D5B1E80C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4OSAQRuciOkW3vkPw6kBAmOUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/a782cc-1e09-4480-a6dc-6c20ebaf30a9/1/gz4OSAQRuciOkW3vkPw6kBAmOUo.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 01:01:06 +0000
Manifest this update: Thu 26 Mar 2026 01:01:06 +0000
Manifest next update: Fri 27 Mar 2026 01:01:06 +0000
Files and hashes: 1: 5gSf1-VDKOYVBkqkgnQrEMypzTg.roa (hash: z6ZcdBsDa7Hg3rkYAPzvBooMd+rknZS/02yCZUcFlGI=)
2: CmZeg0QZClyASLrlfEFcbEqzniE.roa (hash: hxAFIZw4RCC07UgvikV6JR0Y6MOvZuFKg3XrUhhJ604=)
3: Ih_bDVPWPg40meMVUQH52Q_SiqE.roa (hash: WQr9CRYz6MHyRZSZGa17nV7pgtE8mhzsKExO1LfYlFY=)
4: gz4OSAQRuciOkW3vkPw6kBAmOUo.crl (hash: eViHT32b9N/j5xkmFhyC+tV+bgUwb7MPZ+gAo2w31nM=)
5: yhvjZUqxn_FUY-Mlri4ogZjyLBM.roa (hash: L0ywjyagm2bruEE3Ewodq3fXEbUNJSk+4fnvkwsHn6s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/a782cc-1e09-4480-a6dc-6c20ebaf30a9/1/gz4OSAQRuciOkW3vkPw6kBAmOUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/a782cc-1e09-4480-a6dc-6c20ebaf30a9/1/gz4OSAQRuciOkW3vkPw6kBAmOUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/gz4OSAQRuciOkW3vkPw6kBAmOUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:cb:13:15:3c:fa:e7:51:18:78:21:d5:b1:e8:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e0e480411b9c88e916def90fc3a901026394a
Validity
Not Before: Mar 26 01:01:06 2026 GMT
Not After : Mar 27 01:01:06 2026 GMT
Subject: CN=2e4d9155cf85a6697251c228ed5453907534db20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:59:ac:da:e1:6c:16:42:56:23:71:28:b6:ec:
08:84:7b:23:aa:fd:f8:09:21:8f:ef:e8:04:7d:bc:
62:32:06:d3:fe:48:9d:a4:30:0b:c0:64:3e:2f:bd:
48:b1:25:53:f7:d7:10:91:3d:15:4f:3e:c4:ae:51:
50:14:4f:8b:60:c8:66:34:cc:19:be:f8:72:05:49:
e4:83:58:93:dc:95:be:66:c5:98:6b:a1:75:06:0a:
49:e3:eb:b5:50:8a:f5:b2:83:f1:ac:e8:63:df:77:
bc:80:d0:ec:7c:55:b0:86:0a:3f:91:d1:2b:68:4d:
4d:9f:c4:e7:ff:0a:4b:0e:30:fb:a5:af:68:66:cf:
f6:d0:18:5c:d7:f9:fb:93:5a:a8:44:2a:ec:44:57:
85:a2:2a:2c:4b:e0:2a:bf:1d:81:55:d3:67:bb:af:
36:f4:c8:68:58:93:23:45:de:93:6e:8b:af:d5:5d:
d7:24:f7:36:55:b9:8e:e3:8e:20:5a:7c:2d:76:b4:
88:e6:4f:c8:9e:0d:69:8d:1c:aa:c5:c5:53:e1:97:
74:9f:84:e4:74:65:b5:a4:b1:38:af:03:82:0d:5d:
cf:3d:19:dd:ea:ee:cc:64:4b:03:a1:18:12:45:0a:
9e:06:7c:79:5b:0b:ba:5a:16:85:54:d7:02:16:64:
ff:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:4D:91:55:CF:85:A6:69:72:51:C2:28:ED:54:53:90:75:34:DB:20
X509v3 Authority Key Identifier:
keyid:83:3E:0E:48:04:11:B9:C8:8E:91:6D:EF:90:FC:3A:90:10:26:39:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4OSAQRuciOkW3vkPw6kBAmOUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a782cc-1e09-4480-a6dc-6c20ebaf30a9/1/gz4OSAQRuciOkW3vkPw6kBAmOUo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a782cc-1e09-4480-a6dc-6c20ebaf30a9/1/gz4OSAQRuciOkW3vkPw6kBAmOUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:db:a4:47:0d:a6:f3:ce:db:6e:24:d8:55:ca:80:0c:b7:22:
8e:58:6a:2b:c3:c0:71:55:fc:63:5b:32:3a:e8:67:44:4a:d9:
28:9f:1f:0c:82:45:69:7c:5f:9a:27:10:3d:05:c8:fc:bc:f0:
4c:82:d5:69:a5:07:38:f1:f4:b3:e4:db:b6:00:ae:29:ca:1c:
89:d0:9f:d1:6b:11:91:76:ff:ab:c2:7a:fb:f8:b0:af:e8:a4:
e8:71:9c:83:0e:9b:2b:32:5f:c4:25:bf:c0:43:bc:09:fa:2f:
62:ed:dc:ca:87:dd:51:59:3e:d2:2c:e7:6c:39:08:02:a6:f5:
ea:c4:ac:76:87:5c:74:dc:d8:5b:44:9b:8d:9a:d3:83:63:ba:
4d:4d:d6:bc:30:a1:64:3c:4f:a0:48:92:04:f3:9c:4b:70:88:
00:44:31:88:2f:83:5b:67:8a:92:57:e3:81:a4:1e:36:ea:57:
fa:82:fc:61:bc:f6:24:70:bf:9d:c5:1d:0f:12:d6:85:91:b8:
90:87:1b:5a:11:75:ac:90:6d:d9:14:44:f4:ff:67:87:4d:33:
20:38:49:a4:7e:5d:37:8a:fe:fa:b9:ad:86:84:4e:31:b4:e9:
9f:02:4f:d0:9e:3e:00:8c:f2:11:e9:35:02:71:95:07:e2:0b:
07:d9:a2:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:56:44 2026 by rpki-client