Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/774f37-0e57-49e6-8865-a64ba4b8fa19/1/gZuXsgzLT2llGOR8Q3JZqJE-cq4.mft
File: gZuXsgzLT2llGOR8Q3JZqJE-cq4.mft (raw, json)
Hash identifier: wS/E9PoIv2iJwhjkLiVELH/WF24fm7KriicdZV4kQ/Y=
Subject key identifier: 32:EC:AE:1D:79:62:79:C8:51:59:35:16:75:15:79:5B:E8:39:71:C7
Authority key identifier: 81:9B:97:B2:0C:CB:4F:69:65:18:E4:7C:43:72:59:A8:91:3E:72:AE
Certificate issuer: /CN=819b97b20ccb4f696518e47c437259a8913e72ae
Certificate serial: 019D277245E8E072CC163248A3283C0DE392
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZuXsgzLT2llGOR8Q3JZqJE-cq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/774f37-0e57-49e6-8865-a64ba4b8fa19/1/gZuXsgzLT2llGOR8Q3JZqJE-cq4.mft
Manifest number: 12D6
Signing time: Thu 26 Mar 2026 00:01:33 +0000
Manifest this update: Thu 26 Mar 2026 00:01:33 +0000
Manifest next update: Fri 27 Mar 2026 00:01:33 +0000
Files and hashes: 1: L2sVy84YNgdXdVRcFvky1jOyapo.roa (hash: 3nfkWDukO5seERRcNCHmDmoRPYQO0LEHGFHMMpgINH8=)
2: ehALNgmvDMXOCz1qDVIzrXU9qPs.roa (hash: dn6QOi6y7D3WWFMRmemHXTmqvY1tGOW3y/+Az1xAbxM=)
3: gZuXsgzLT2llGOR8Q3JZqJE-cq4.crl (hash: 6OThIxuqOjGA0NGCculbQMIbXUHRdTLo7JgTGO9zZwc=)
4: hwtVlXCFjo--idd4yO5s0tt7X3I.roa (hash: NUHjZYJkOekWUWwDXQIom+k1M6skxKicFwBdcoVK9n8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/774f37-0e57-49e6-8865-a64ba4b8fa19/1/gZuXsgzLT2llGOR8Q3JZqJE-cq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/774f37-0e57-49e6-8865-a64ba4b8fa19/1/gZuXsgzLT2llGOR8Q3JZqJE-cq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/gZuXsgzLT2llGOR8Q3JZqJE-cq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:45:e8:e0:72:cc:16:32:48:a3:28:3c:0d:e3:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=819b97b20ccb4f696518e47c437259a8913e72ae
Validity
Not Before: Mar 26 00:01:33 2026 GMT
Not After : Mar 27 00:01:33 2026 GMT
Subject: CN=32ecae1d796279c8515935167515795be83971c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:7e:b0:49:5d:f8:a1:e9:e6:e2:29:bc:5b:0d:
dc:31:f7:d9:d2:d7:10:3b:cb:1a:88:26:b7:7d:02:
c6:af:ea:88:6f:de:2a:56:f6:64:bf:6e:fe:45:79:
a6:8a:b6:76:22:80:79:57:35:a2:0e:30:fe:90:56:
c4:58:e2:f0:36:f0:75:af:6e:48:1f:8c:88:ff:19:
b9:8b:06:c2:e8:c9:89:38:84:6e:77:99:6b:e7:7b:
f9:54:e9:b7:e3:46:28:c9:8e:83:bf:a0:30:ab:b8:
6d:3d:7e:40:c7:df:f1:40:79:6b:1e:3b:2a:07:f4:
da:9f:47:4e:5b:72:eb:e5:6a:64:5a:ed:0c:3a:6c:
70:65:2d:04:e2:c3:cc:ee:14:d3:7a:ff:11:02:0e:
88:b4:f1:1b:2c:a2:d0:ef:c6:d6:3f:bc:e2:2a:eb:
a7:fc:35:43:f6:19:b3:67:f6:2b:97:ed:ef:1f:b9:
29:2d:bf:a7:19:af:0f:24:f1:36:aa:fa:2f:bc:35:
ff:2f:16:a5:41:b9:c5:0f:1a:2d:0c:b7:4d:a3:88:
e4:6e:78:cd:01:69:e8:40:56:89:27:83:13:8f:86:
0e:d2:37:6d:30:26:72:8d:11:03:ae:6f:49:b5:d1:
6a:de:2f:3a:93:22:8f:43:33:c3:17:6a:e7:a2:2c:
9a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:EC:AE:1D:79:62:79:C8:51:59:35:16:75:15:79:5B:E8:39:71:C7
X509v3 Authority Key Identifier:
keyid:81:9B:97:B2:0C:CB:4F:69:65:18:E4:7C:43:72:59:A8:91:3E:72:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZuXsgzLT2llGOR8Q3JZqJE-cq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/774f37-0e57-49e6-8865-a64ba4b8fa19/1/gZuXsgzLT2llGOR8Q3JZqJE-cq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/774f37-0e57-49e6-8865-a64ba4b8fa19/1/gZuXsgzLT2llGOR8Q3JZqJE-cq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:d9:05:36:54:cd:55:3b:99:ae:c4:90:aa:15:6a:a7:0b:a3:
2d:9d:70:02:e3:b4:a2:a5:c4:3a:2b:58:f2:41:8f:5b:23:09:
66:f6:d1:7f:62:70:3b:1d:fc:05:fa:1e:a1:db:77:ad:71:72:
b6:97:c7:e8:fb:85:9e:90:53:b6:a9:16:b4:c8:3c:fa:21:ff:
12:e8:8a:06:05:07:76:a2:15:a8:27:2d:2b:3e:de:97:c0:c6:
e0:fd:62:46:6d:4f:88:c7:d5:e4:05:e6:79:0a:cb:9e:f2:c5:
74:8f:9f:ea:33:cc:11:c4:86:0e:57:8b:4d:52:e5:81:64:13:
8f:8e:ef:8a:0e:24:ce:8d:24:05:4e:5e:c9:bf:f6:f3:a1:e5:
0f:67:3a:1e:15:96:3a:fa:ad:23:ab:4d:11:da:31:29:d7:c7:
ac:a9:26:76:d6:fe:60:bd:2f:54:0d:c2:9c:86:d1:f9:2f:41:
10:52:0f:f7:89:e1:45:a2:2a:1c:89:f2:97:b8:d1:21:0a:f0:
33:84:5c:b4:01:97:9f:f8:5c:44:ed:ce:e2:37:cd:fa:bc:7a:
b1:be:cb:0a:b3:a8:7f:b3:88:22:6c:d7:a2:65:66:0f:45:41:
a6:9f:cd:75:b7:64:e8:4e:9b:9a:33:60:64:ae:2c:3a:11:dc:
ae:54:36:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:40:23 2026 by rpki-client