Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.mft
File: rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.mft (raw, json)
Hash identifier: cjDvMddEH1xS5qchuBNnSntPP2QTXeN7//LOJsgg1sE=
Subject key identifier: 06:4C:13:ED:64:30:DB:EC:99:9B:1F:80:1D:97:5C:59:10:28:D1:F4
Authority key identifier: AE:0A:5A:1B:38:61:7C:C1:61:F6:06:13:D9:8E:17:9B:53:60:C0:54
Certificate issuer: /CN=ae0a5a1b38617cc161f60613d98e179b5360c054
Certificate serial: 019D24A7CA329D029719DA3920324608B2C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.mft
Manifest number: 18A0
Signing time: Wed 25 Mar 2026 11:01:09 +0000
Manifest this update: Wed 25 Mar 2026 11:01:09 +0000
Manifest next update: Thu 26 Mar 2026 11:01:09 +0000
Files and hashes: 1: L--nog6xEzatgFx0vve4F3aMfqg.roa (hash: bT7m47/vJSRP8Nb+CoGFbdUeEIOeotqAaMuhhj16mOg=)
2: UWUWF46MigK1a0cd003CguBbQdc.asa (hash: 8MF1DQrDAZ7AsSrFu9a41jWtJfGtyeySnSqbPCLIeLA=)
3: dCesxMMj3iimdYMAKtjCOo7VCaw.roa (hash: rBIdWhYFqNkTi4VSYSHXSoz7Tccn1BMFaCDizvKANgE=)
4: rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.crl (hash: YTxBLeydqPfiFEnycadZ/7zw1KsGTZcvGygZ7bFotXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 11:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:24:a7:ca:32:9d:02:97:19:da:39:20:32:46:08:b2:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae0a5a1b38617cc161f60613d98e179b5360c054
Validity
Not Before: Mar 25 11:01:09 2026 GMT
Not After : Mar 26 11:01:09 2026 GMT
Subject: CN=064c13ed6430dbec999b1f801d975c591028d1f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:90:4d:1c:8b:bc:eb:56:19:3f:0a:38:c3:cb:
0b:b6:76:14:c0:03:14:e0:fb:3d:6d:5a:2e:34:c6:
51:66:42:b5:4d:4e:b7:76:32:d8:e7:59:7c:e6:3d:
96:c2:fc:ce:cd:e3:e0:5e:24:de:6c:0b:c8:39:6b:
50:de:53:b6:dd:b5:09:3a:60:1f:64:03:49:b9:88:
fd:25:25:21:f3:ab:fb:83:79:44:a7:61:39:24:a0:
95:f6:49:f3:bd:e0:ea:b6:24:2d:4d:0e:ac:9d:a2:
6c:75:38:70:a7:8d:c1:02:b4:cd:bd:55:1a:12:4b:
ff:de:f0:22:95:b3:01:3e:51:e1:00:da:57:b3:3f:
2f:1f:ae:a1:9b:80:3b:4e:bf:ba:ef:44:3d:1b:ff:
7d:34:aa:7d:6a:0f:7f:27:35:0a:ad:4e:e4:96:43:
67:69:ed:6c:bc:72:37:29:75:aa:82:c2:0c:67:14:
e3:70:c4:d1:2b:2f:e2:9a:a7:24:f3:7f:8f:b8:78:
a7:7e:21:13:ab:3c:d4:b5:7c:8b:8c:ac:c2:bd:f5:
0e:4f:49:ed:2c:39:5a:87:b9:78:90:2a:03:17:45:
ca:02:0a:9b:75:75:9e:ea:12:e3:09:d3:42:57:df:
6d:ca:2e:0c:78:5d:43:3d:d5:4c:22:93:c8:94:ef:
c0:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:4C:13:ED:64:30:DB:EC:99:9B:1F:80:1D:97:5C:59:10:28:D1:F4
X509v3 Authority Key Identifier:
keyid:AE:0A:5A:1B:38:61:7C:C1:61:F6:06:13:D9:8E:17:9B:53:60:C0:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:b0:34:34:84:14:46:77:5e:f8:48:c0:b1:ca:d8:de:19:ac:
dc:25:a3:ee:1a:45:d3:d7:c2:1b:ef:f6:27:91:6b:be:27:7d:
f9:3f:56:d7:39:a2:c8:87:76:c3:2a:45:1d:de:aa:cb:8a:92:
98:85:8e:26:cd:61:1a:c4:36:54:25:4d:03:40:6f:f8:b1:c1:
c4:b2:4a:46:56:57:a2:c4:a1:ff:17:0d:a9:97:66:cb:dd:77:
c2:0b:93:05:c3:e8:31:73:c4:b3:49:a1:ca:53:9c:55:a3:e8:
81:1c:ec:14:ff:1c:3f:3e:b9:23:a9:44:b1:cc:ad:2d:cb:61:
f6:b9:cf:e5:19:a5:6e:fe:d3:c3:b2:19:c1:25:6f:58:f6:bc:
c2:86:2b:a4:99:ff:e6:de:a0:e8:ff:09:69:36:61:9f:62:c8:
64:ea:0f:9f:a9:b7:9a:51:ce:5d:c2:4d:18:db:24:91:53:dc:
6a:33:e0:13:91:5e:a8:46:ec:0b:27:dd:a3:27:6d:1e:a1:2a:
23:53:2c:ca:4e:bb:92:09:6c:45:40:4a:0c:65:2a:fe:89:8f:
cc:90:eb:72:7e:03:7d:81:d9:2a:8a:25:2e:0a:dd:b4:f6:76:
51:9c:36:b8:80:b0:49:53:05:05:6d:14:e9:f8:2a:67:80:b0:
7f:e2:78:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:24:44 2026 by rpki-client