Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.mft
File: gFPZtR9HqlX55ScEdUhp9VNrrkw.mft (raw, json)
Hash identifier: GH/sTo0kII57gUMltatxxTKA5zV/Kz9cSWkLe6p2Pcs=
Subject key identifier: 2B:24:5B:03:5D:1B:E4:44:7B:2B:0C:2D:D9:D4:8B:C0:BA:1A:1F:08
Authority key identifier: 80:53:D9:B5:1F:47:AA:55:F9:E5:27:04:75:48:69:F5:53:6B:AE:4C
Certificate issuer: /CN=8053d9b51f47aa55f9e52704754869f5536bae4c
Certificate serial: 019D27E078BC1B4F7355F93C3EDBB3813704
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gFPZtR9HqlX55ScEdUhp9VNrrkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.mft
Manifest number: 0FB7
Signing time: Thu 26 Mar 2026 02:01:55 +0000
Manifest this update: Thu 26 Mar 2026 02:01:55 +0000
Manifest next update: Fri 27 Mar 2026 02:01:55 +0000
Files and hashes: 1: KSQvhRpWm210zaiJFJOFKsXWoaM.roa (hash: LSleA0VuES4q3u0nWIFwZayUEirvzQtEPVPAFoUczQk=)
2: gFPZtR9HqlX55ScEdUhp9VNrrkw.crl (hash: BP8xzKl3jS4ccohYGIdf9JJknC/1cRUyZ+BbvZjzZKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/gFPZtR9HqlX55ScEdUhp9VNrrkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:78:bc:1b:4f:73:55:f9:3c:3e:db:b3:81:37:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8053d9b51f47aa55f9e52704754869f5536bae4c
Validity
Not Before: Mar 26 02:01:55 2026 GMT
Not After : Mar 27 02:01:55 2026 GMT
Subject: CN=2b245b035d1be4447b2b0c2dd9d48bc0ba1a1f08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:df:bc:a6:12:42:7c:ac:d2:15:e4:10:53:e6:
a7:ed:89:51:ef:27:e9:3d:c6:20:49:ef:d3:ae:48:
20:d5:97:31:73:cf:18:11:63:a9:cc:37:7f:49:2a:
ab:ad:98:22:67:7e:b0:9f:ed:6f:9d:98:54:5f:24:
68:7e:0f:35:a6:9a:d3:f9:4a:2b:d0:35:ca:2f:18:
cc:df:a7:36:ba:e9:05:52:fc:3b:25:bb:5c:d8:77:
bc:e4:5d:5c:98:1c:f2:4d:f9:f7:f7:8c:b6:d5:18:
60:a7:0d:3e:b3:ac:f0:8b:f7:6b:d2:08:ec:56:2c:
11:92:ae:cc:5b:3f:48:aa:0f:9c:a5:12:00:4e:12:
2f:a5:32:b5:3c:32:9b:75:5b:7c:bb:95:b8:14:1d:
52:6f:c5:74:11:ee:bd:d8:5f:3d:fe:46:cd:77:43:
28:41:23:24:7e:0d:7e:4d:bc:69:6b:68:17:12:8d:
e6:af:c1:0c:cc:7b:38:86:cd:26:60:e3:03:ae:2a:
40:80:ef:61:93:81:4a:f1:ea:4b:b3:e0:d4:be:7f:
47:d6:b1:2d:1f:b9:46:e8:fd:c5:af:ce:63:63:58:
c0:c3:b6:67:0d:c5:74:ba:c7:bc:94:ca:c9:af:b6:
1b:86:b0:7c:92:69:d6:fa:e1:53:fe:c2:84:f7:2d:
6f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:24:5B:03:5D:1B:E4:44:7B:2B:0C:2D:D9:D4:8B:C0:BA:1A:1F:08
X509v3 Authority Key Identifier:
keyid:80:53:D9:B5:1F:47:AA:55:F9:E5:27:04:75:48:69:F5:53:6B:AE:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gFPZtR9HqlX55ScEdUhp9VNrrkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:98:48:82:bc:61:4b:9e:78:6c:05:a4:2b:a6:97:4b:5d:41:
5c:11:93:76:c3:84:96:ca:a1:3f:66:2d:50:46:b8:e8:78:a4:
f0:61:0c:7d:d6:2f:4a:76:bb:ef:24:a8:4d:45:fe:f0:fb:0d:
87:6c:fe:d4:aa:5e:71:58:d2:aa:97:69:4e:75:a0:a6:68:2a:
27:72:24:85:62:4b:fa:81:b2:76:3e:02:2a:c5:4a:68:cb:e9:
26:74:bb:b1:97:f0:df:99:2a:04:62:b9:e5:43:bd:18:a8:70:
06:ca:e9:6c:68:60:b2:06:a4:5b:85:ca:48:03:1e:58:77:6d:
50:15:a7:0f:d8:e8:2f:fd:5b:bb:9f:21:14:23:11:d7:95:7b:
a5:52:e4:ad:b0:b5:27:af:c8:d7:15:ec:4a:0f:ff:3a:02:95:
ca:2f:ef:e0:5b:ba:e5:a0:22:59:9d:bb:93:4a:d6:b3:03:6e:
3a:71:04:0b:1c:4c:55:b8:97:cc:2b:70:64:31:5e:bb:0b:e0:
33:cb:4b:8b:4f:23:00:da:4a:60:50:a1:d3:f4:37:72:b5:0d:
93:68:61:77:af:4a:aa:bf:e7:08:36:f9:28:9e:fd:f3:bc:ab:
27:b0:54:ee:fc:45:30:e6:5a:7a:71:d6:a1:c4:21:83:7f:99:
82:43:79:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:36:51 2026 by rpki-client