Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2c7b2e-242a-4336-b0fb-fcf0f1594d2f/1/gxJNBBGiD9K7VGlw6oARbvJ226s.mft
File: gxJNBBGiD9K7VGlw6oARbvJ226s.mft (raw, json)
Hash identifier: afs6Y//k899GyZuI/EtlCrtVJEZw8NoaU8f7LWqPlk4=
Subject key identifier: 60:BE:30:53:F4:B1:4C:09:A0:5D:34:54:A2:CA:30:DA:C6:2C:A4:90
Authority key identifier: 83:12:4D:04:11:A2:0F:D2:BB:54:69:70:EA:80:11:6E:F2:76:DB:AB
Certificate issuer: /CN=83124d0411a20fd2bb546970ea80116ef276dbab
Certificate serial: 019D265F3CA94480D7EF6C2944A6D6BFA5AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gxJNBBGiD9K7VGlw6oARbvJ226s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/2c7b2e-242a-4336-b0fb-fcf0f1594d2f/1/gxJNBBGiD9K7VGlw6oARbvJ226s.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 19:01:08 +0000
Manifest this update: Wed 25 Mar 2026 19:01:08 +0000
Manifest next update: Thu 26 Mar 2026 19:01:08 +0000
Files and hashes: 1: Qy5yKoxjLWJA1uRpC0vjfkx5IHQ.roa (hash: y7SNkohtjGeeXJKm5Co5EsY36dtQ+/7kfkwvtYcQU4g=)
2: gxJNBBGiD9K7VGlw6oARbvJ226s.crl (hash: qBQIObO7Xm/IkByOMnOZ29Pp/2BHbATCiGKEStD73ro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/2c7b2e-242a-4336-b0fb-fcf0f1594d2f/1/gxJNBBGiD9K7VGlw6oARbvJ226s.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/2c7b2e-242a-4336-b0fb-fcf0f1594d2f/1/gxJNBBGiD9K7VGlw6oARbvJ226s.mft
rsync://rpki.ripe.net/repository/DEFAULT/gxJNBBGiD9K7VGlw6oARbvJ226s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:3c:a9:44:80:d7:ef:6c:29:44:a6:d6:bf:a5:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83124d0411a20fd2bb546970ea80116ef276dbab
Validity
Not Before: Mar 25 19:01:08 2026 GMT
Not After : Mar 26 19:01:08 2026 GMT
Subject: CN=60be3053f4b14c09a05d3454a2ca30dac62ca490
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:08:aa:dd:17:3d:ab:92:de:f0:18:91:96:36:
1f:d0:5c:e8:c9:f3:bf:2c:8e:16:35:0e:ff:ed:2a:
cf:1e:98:6f:78:8f:90:f0:75:4a:f8:7c:b7:ce:7b:
2f:7e:de:6d:6d:9a:33:7e:41:45:9a:60:1f:cf:34:
c0:db:0a:aa:51:4f:b3:5f:ba:94:41:1d:4b:76:7b:
78:a7:c7:92:9b:c6:d7:ff:50:27:30:fd:a8:76:69:
ce:ef:04:35:3c:af:81:a3:3f:bd:37:08:2e:8c:82:
cd:1b:0f:3b:f9:0c:7b:f0:e5:73:4c:c7:5b:0b:c7:
37:20:cb:cf:cf:9f:c4:f0:74:33:47:37:2c:63:bf:
cd:f2:d9:c4:a7:ee:e2:bb:2d:4e:10:7b:fd:17:65:
5a:af:7a:5a:53:6a:6c:16:e4:7b:14:5b:be:1c:77:
65:75:62:44:ed:71:6e:ca:66:85:10:49:88:64:24:
66:2b:1d:f2:01:97:58:a2:a8:14:49:7e:35:65:85:
3c:81:27:f8:b7:fe:31:dd:63:c4:51:bf:be:5a:ca:
1b:0a:cb:ed:5b:81:96:5f:39:6c:66:21:eb:4d:f9:
f9:dd:99:b2:00:dc:24:6e:9b:3d:cf:40:cb:4a:b9:
2d:33:bc:54:8e:c1:ad:16:c4:d1:c5:e2:7f:ce:55:
71:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:BE:30:53:F4:B1:4C:09:A0:5D:34:54:A2:CA:30:DA:C6:2C:A4:90
X509v3 Authority Key Identifier:
keyid:83:12:4D:04:11:A2:0F:D2:BB:54:69:70:EA:80:11:6E:F2:76:DB:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gxJNBBGiD9K7VGlw6oARbvJ226s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2c7b2e-242a-4336-b0fb-fcf0f1594d2f/1/gxJNBBGiD9K7VGlw6oARbvJ226s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2c7b2e-242a-4336-b0fb-fcf0f1594d2f/1/gxJNBBGiD9K7VGlw6oARbvJ226s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:8d:55:a9:10:6e:c1:d5:b5:6d:d2:5b:a6:d2:a2:08:22:e2:
12:05:4f:77:9f:40:fe:9c:66:1b:1f:5b:37:97:a6:15:40:fe:
71:01:21:2e:44:78:e0:d6:d5:2c:56:48:ba:ee:d9:7c:e6:ea:
e8:79:55:e4:87:c7:74:7c:b9:1f:2c:e4:de:ce:6d:7e:a5:8c:
66:d7:77:54:35:fa:ce:e0:fd:41:f2:af:85:39:2c:2c:bb:c6:
76:15:40:5e:41:42:cd:ed:e0:32:99:ee:7a:13:e2:f1:e6:1b:
1c:3f:b7:7f:3f:ea:21:c6:ac:6c:31:b0:dc:62:2f:05:25:d0:
45:f5:5b:6d:f9:3f:f9:de:77:90:fd:f2:d6:4b:b7:be:7e:af:
2e:28:e9:ff:04:74:3d:db:69:20:8c:34:1c:6b:bf:53:21:3c:
90:23:1e:d8:7d:8c:51:5c:88:bf:d6:48:5d:90:42:42:3f:63:
8d:c6:ad:1d:fe:73:7d:99:3c:37:b5:08:92:1d:9c:d1:dc:87:
c2:a3:53:e1:ab:3b:b2:e2:dd:aa:34:78:44:cc:7c:77:de:e5:
a3:d4:c2:ef:6a:5e:d9:ae:a9:58:95:ea:ab:2c:42:81:16:df:
f6:13:82:1e:23:05:72:12:0f:81:ce:d5:67:2c:08:a3:37:0a:
92:f8:6a:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:57:52 2026 by rpki-client