Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/ecaa96-9af6-4b99-957f-6b7599fcdc33/1/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.mft
File: gQzVDbQ3x4lGTLZN-r_kBcqYGxo.mft (raw, json)
Hash identifier: j3PG2i9GX835Z2MDQrgt7oYohWYDFvQITUcDt7Qodtk=
Subject key identifier: 4E:39:E4:29:6F:15:16:77:FE:16:FA:4F:74:A4:03:48:CB:82:EB:20
Authority key identifier: 81:0C:D5:0D:B4:37:C7:89:46:4C:B6:4D:FA:BF:E4:05:CA:98:1B:1A
Certificate issuer: /CN=810cd50db437c789464cb64dfabfe405ca981b1a
Certificate serial: 019D265F3097A1D5B42BE3835717D8982DC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/ecaa96-9af6-4b99-957f-6b7599fcdc33/1/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.mft
Manifest number: 1889
Signing time: Wed 25 Mar 2026 19:01:05 +0000
Manifest this update: Wed 25 Mar 2026 19:01:05 +0000
Manifest next update: Thu 26 Mar 2026 19:01:05 +0000
Files and hashes: 1: 1-GJxYFfHhPUGldIW84G9cSjaROo.roa (hash: xnT7kV2Yd837mUQZhjujVXj3ng6jUmkGRRzKFJTHREg=)
2: FcCot_n8byTOtYnTcT9gqTdXqgI.roa (hash: W7M2MGUSVVgsXq7kupYfdmxLZ/fDswJFwIWF+JWAWi0=)
3: gQzVDbQ3x4lGTLZN-r_kBcqYGxo.crl (hash: BbF2GT8WP0zD1hmcuoOX3wG2WxNIFfG2AxRQ4Ogf5B0=)
4: i3hqrGmzLv-adlovTZFEhAYhrt8.roa (hash: YEHlqYbfyAyYFOXiBY45uPwANx9Oj4hq3HmMe/UJ6jI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/ecaa96-9af6-4b99-957f-6b7599fcdc33/1/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/ecaa96-9af6-4b99-957f-6b7599fcdc33/1/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:30:97:a1:d5:b4:2b:e3:83:57:17:d8:98:2d:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=810cd50db437c789464cb64dfabfe405ca981b1a
Validity
Not Before: Mar 25 19:01:05 2026 GMT
Not After : Mar 26 19:01:05 2026 GMT
Subject: CN=4e39e4296f151677fe16fa4f74a40348cb82eb20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:6f:73:82:63:d6:2c:f2:99:0a:67:6d:4d:6b:
d7:a6:de:c4:c8:2b:af:d9:18:ef:3c:dd:bc:02:f7:
16:c1:ab:1b:06:9e:62:e3:1c:d5:29:2c:64:f7:c7:
2f:bf:19:ae:a5:0e:57:fe:70:bc:e6:bc:91:cd:fe:
f4:c4:fc:17:b1:73:33:aa:be:f9:28:22:67:ae:f8:
e9:a4:74:8e:aa:de:d6:ec:d6:b4:f7:27:73:b8:a3:
ed:e6:56:d5:36:fc:b2:bd:c3:fd:f1:69:5e:0f:b3:
42:b4:b2:27:c2:35:88:a4:d1:37:76:a1:59:d9:02:
f3:54:c0:00:27:d8:2e:56:83:ae:9a:3a:aa:55:5e:
a8:7a:d2:0a:5a:74:00:27:31:4b:93:bc:aa:6d:29:
ee:3c:d9:62:c9:3d:7f:9a:5b:35:41:6b:f3:05:8f:
ad:4f:fa:e3:3c:6b:f7:a1:8e:4a:ba:3a:be:fc:e8:
3e:28:7c:c9:2c:75:54:a6:96:f9:67:af:a6:ce:d7:
b3:68:fd:59:2f:ad:31:92:c1:89:6e:3c:93:58:6d:
cc:d3:bb:4f:0c:5f:1b:d6:b6:a8:8b:67:ee:97:30:
c0:2f:bc:96:a3:96:b1:c4:11:f1:7c:39:f6:f0:8f:
08:28:87:0b:92:c2:fe:b4:c5:65:eb:4e:85:08:31:
d8:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:39:E4:29:6F:15:16:77:FE:16:FA:4F:74:A4:03:48:CB:82:EB:20
X509v3 Authority Key Identifier:
keyid:81:0C:D5:0D:B4:37:C7:89:46:4C:B6:4D:FA:BF:E4:05:CA:98:1B:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ecaa96-9af6-4b99-957f-6b7599fcdc33/1/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ecaa96-9af6-4b99-957f-6b7599fcdc33/1/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:18:d6:eb:e1:fe:4a:49:cb:c9:1b:d2:d4:8c:b4:c4:62:04:
99:1c:05:81:1c:2b:65:b2:47:43:b1:4a:58:3e:01:8b:ae:4e:
1b:df:36:b6:d2:a5:95:06:72:b1:83:f3:87:17:e7:89:9e:6a:
16:09:0a:43:2f:16:c0:0f:85:c5:40:1b:ea:99:74:0c:8e:e4:
07:c8:77:26:d5:ab:c3:d2:2a:80:23:58:5c:94:24:10:3e:f5:
10:8c:27:c4:09:76:c0:0e:6e:d8:54:af:12:fd:09:88:80:38:
13:e4:1d:9c:c9:21:74:49:be:fc:e0:c6:b2:f9:e1:3a:7e:f2:
7a:57:c4:be:df:fe:88:76:55:bc:bd:3e:5f:61:d1:6c:85:7f:
78:d3:22:55:6f:9d:97:5c:d3:81:5d:e2:dd:30:18:48:a2:b5:
e2:f3:dd:01:88:7f:4b:40:17:ad:3d:2a:4d:35:80:d9:0a:4d:
15:07:9b:28:3a:65:c7:5d:a8:b3:7f:a3:36:3b:47:3a:5b:f2:
e0:5d:8a:37:6b:47:27:ef:d3:bf:74:48:1d:d8:fd:91:ff:b9:
5b:d7:9b:b2:05:9c:98:ee:d4:84:0e:7c:2d:1a:c3:d2:5b:7d:
66:11:3a:8a:17:3f:6f:cc:4f:be:34:01:93:5e:44:06:8f:7c:
95:32:dd:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:50 2026 by rpki-client