Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/1491bf-84ad-48a3-a619-577da12e3648/1/gnfY854_j7Zjj3CDq58WwEfQ02Q.mft
File: gnfY854_j7Zjj3CDq58WwEfQ02Q.mft (raw, json)
Hash identifier: Bvsug2SsU+HP0SExszkYnj74o4hNZLOxE9Yeho24VAg=
Subject key identifier: A4:F7:24:5F:B7:5E:5E:20:68:7A:F6:BC:C6:EC:BE:35:C7:5A:47:A8
Authority key identifier: 82:77:D8:F3:9E:3F:8F:B6:63:8F:70:83:AB:9F:16:C0:47:D0:D3:64
Certificate issuer: /CN=8277d8f39e3f8fb6638f7083ab9f16c047d0d364
Certificate serial: 019D2BBCD3661FEE364573AB8A9789E70BBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnfY854_j7Zjj3CDq58WwEfQ02Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/1491bf-84ad-48a3-a619-577da12e3648/1/gnfY854_j7Zjj3CDq58WwEfQ02Q.mft
Manifest number: 1368
Signing time: Thu 26 Mar 2026 20:01:28 +0000
Manifest this update: Thu 26 Mar 2026 20:01:28 +0000
Manifest next update: Fri 27 Mar 2026 20:01:28 +0000
Files and hashes: 1: ZWEjcdwIM9EyAELpOcIP5A4AjN8.roa (hash: rVWcxdUR4t77+j89visuW0FsrMuy3PkstpLbGV2iT0Y=)
2: gnfY854_j7Zjj3CDq58WwEfQ02Q.crl (hash: U1Jhu86F+t2Ttm8a5EmkJ6G7gWPjLGINPdXIqawYXVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/1491bf-84ad-48a3-a619-577da12e3648/1/gnfY854_j7Zjj3CDq58WwEfQ02Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/1491bf-84ad-48a3-a619-577da12e3648/1/gnfY854_j7Zjj3CDq58WwEfQ02Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/gnfY854_j7Zjj3CDq58WwEfQ02Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 20:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:bc:d3:66:1f:ee:36:45:73:ab:8a:97:89:e7:0b:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8277d8f39e3f8fb6638f7083ab9f16c047d0d364
Validity
Not Before: Mar 26 20:01:28 2026 GMT
Not After : Mar 27 20:01:28 2026 GMT
Subject: CN=a4f7245fb75e5e20687af6bcc6ecbe35c75a47a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0b:c9:24:06:8c:56:b1:57:99:5e:8a:33:90:
00:6d:f3:84:46:74:a3:1e:0a:69:a8:43:1a:6d:bd:
ba:c6:c3:4b:d1:c0:68:ff:fc:62:48:84:3d:72:f8:
2f:b5:4f:e8:3a:82:59:ab:25:1c:3d:91:11:9f:b3:
66:60:f4:57:21:a8:72:00:b0:fe:bd:16:04:80:eb:
0f:99:09:0b:23:b4:a9:36:fb:26:ea:be:8d:fe:ca:
49:dc:ea:22:64:8f:d8:df:f8:d2:b6:13:6c:4f:e0:
b7:30:08:f2:28:5a:ec:6e:dd:60:9d:ea:b4:1d:78:
c4:5a:44:fc:ec:3a:6a:9a:f9:5d:59:74:4f:d9:92:
0f:d5:77:9d:f4:6b:a2:fb:ee:05:ef:f5:d5:e9:5e:
a2:63:37:b9:9c:18:de:12:2d:ce:15:65:59:7d:15:
c1:0e:f4:33:20:d1:33:22:ce:06:74:3c:87:bf:3a:
fb:09:e6:9b:31:91:07:7a:36:ed:01:e3:8a:7b:ac:
a4:1d:ef:3b:29:a2:9c:1f:c5:55:75:87:ea:09:0a:
db:d0:cb:35:a9:74:3a:f3:aa:a8:a7:0f:8c:d2:98:
85:90:4a:19:8e:f1:9b:e9:43:7d:60:dd:17:9e:36:
c7:de:ec:4f:87:de:09:b2:f2:7e:2f:a8:17:88:3f:
bd:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:F7:24:5F:B7:5E:5E:20:68:7A:F6:BC:C6:EC:BE:35:C7:5A:47:A8
X509v3 Authority Key Identifier:
keyid:82:77:D8:F3:9E:3F:8F:B6:63:8F:70:83:AB:9F:16:C0:47:D0:D3:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnfY854_j7Zjj3CDq58WwEfQ02Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/1491bf-84ad-48a3-a619-577da12e3648/1/gnfY854_j7Zjj3CDq58WwEfQ02Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/1491bf-84ad-48a3-a619-577da12e3648/1/gnfY854_j7Zjj3CDq58WwEfQ02Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:2d:00:c2:e1:bb:36:5e:0b:f4:7e:52:5e:ae:1a:f1:93:3e:
ce:62:53:8f:23:c5:4b:a2:ef:78:67:d2:f0:dd:d6:f7:eb:10:
ee:06:b8:6b:62:cd:8b:4b:b5:c8:a0:66:3a:a4:39:fd:61:1d:
c8:99:95:35:03:b3:f1:2e:f7:7a:aa:ee:a0:cc:38:7b:b5:bc:
2c:9c:16:97:f3:29:90:2d:d7:c9:52:6c:64:bf:aa:e9:21:eb:
d8:10:c4:b5:69:af:ba:b3:cb:49:06:cb:62:43:0f:00:a3:96:
b3:cb:19:59:d6:00:30:5a:12:0c:e8:f4:3a:60:85:e3:ad:40:
fe:b7:83:19:8a:4a:7c:d5:be:aa:23:6a:3b:6f:0f:96:45:08:
36:78:2e:b5:32:36:35:23:c1:25:a8:24:96:eb:83:1f:46:eb:
1f:6d:aa:6b:71:ff:cd:8e:19:cb:5b:40:60:bf:a3:24:4f:15:
65:21:e8:70:1f:85:ef:78:73:e1:77:54:94:1b:5e:c5:1a:df:
13:d3:84:e4:0f:3a:8e:33:47:d1:8f:a3:04:8c:89:95:1e:6e:
fd:8b:3e:21:10:f7:77:3d:78:59:74:80:c6:31:28:2f:5a:39:
4d:de:ee:5b:c9:cb:40:55:d2:ba:52:ff:79:1a:3d:df:68:e0:
f2:3e:e4:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 06:21:28 2026 by rpki-client