Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/0841b5-1955-4f00-8bf1-289f95893e84/1/D-Gntqa4WzwyZ8gDmW7YGKSmZHk.mft
File: D-Gntqa4WzwyZ8gDmW7YGKSmZHk.mft (raw, json)
Hash identifier: B07JD6m5lFXjqLgHilUeTY0CG4/sXnKSTlR4cDW1v40=
Subject key identifier: 0E:B8:A6:C9:EE:41:A0:E9:86:08:F0:22:BE:89:89:09:28:B4:FF:B2
Authority key identifier: 0F:E1:A7:B6:A6:B8:5B:3C:32:67:C8:03:99:6E:D8:18:A4:A6:64:79
Certificate issuer: /CN=0fe1a7b6a6b85b3c3267c803996ed818a4a66479
Certificate serial: 019D2771E72E3D28E6ABB473F7423D6EC1AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D-Gntqa4WzwyZ8gDmW7YGKSmZHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/0841b5-1955-4f00-8bf1-289f95893e84/1/D-Gntqa4WzwyZ8gDmW7YGKSmZHk.mft
Manifest number: 03AF
Signing time: Thu 26 Mar 2026 00:01:09 +0000
Manifest this update: Thu 26 Mar 2026 00:01:09 +0000
Manifest next update: Fri 27 Mar 2026 00:01:09 +0000
Files and hashes: 1: D-Gntqa4WzwyZ8gDmW7YGKSmZHk.crl (hash: zTfJGEW7IC/m+uuAkKpG4Qz2VAooA+sB18xZQJsg02s=)
2: rQ8HP-1CHQ2WJh4AZ9S-FHE5GNI.roa (hash: 2H9ylgH0h8jNYwcMQW9wprZPjTTUA+nJy+8c2P6cl8k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/0841b5-1955-4f00-8bf1-289f95893e84/1/D-Gntqa4WzwyZ8gDmW7YGKSmZHk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/0841b5-1955-4f00-8bf1-289f95893e84/1/D-Gntqa4WzwyZ8gDmW7YGKSmZHk.mft
rsync://rpki.ripe.net/repository/DEFAULT/D-Gntqa4WzwyZ8gDmW7YGKSmZHk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:e7:2e:3d:28:e6:ab:b4:73:f7:42:3d:6e:c1:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fe1a7b6a6b85b3c3267c803996ed818a4a66479
Validity
Not Before: Mar 26 00:01:09 2026 GMT
Not After : Mar 27 00:01:09 2026 GMT
Subject: CN=0eb8a6c9ee41a0e98608f022be89890928b4ffb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:85:e1:5d:67:16:e3:b2:a9:1f:cf:c8:d3:6a:
8e:65:0c:45:f7:bd:9b:f7:d6:cf:3f:2f:2b:a0:d0:
36:e4:c5:23:d0:77:25:68:12:67:be:b4:f5:a1:db:
4a:47:7e:ac:21:c0:01:4b:14:66:03:85:1d:a3:e3:
1c:7b:74:ef:6e:f5:f3:f1:c2:44:fc:99:10:f2:30:
15:3a:38:0e:a8:23:bd:32:6d:98:2c:a3:ea:d0:1c:
de:53:ca:3f:47:b1:66:11:ca:bd:cc:30:3c:c5:4e:
c7:85:5f:15:63:a6:b8:94:4b:ba:68:6b:fd:44:a4:
89:da:0f:61:e9:1d:da:d5:25:7a:24:00:e8:f1:9d:
5c:a5:df:2b:a3:27:a4:41:10:54:86:ca:86:8f:fc:
a8:a5:d9:a0:ab:08:0a:b9:fc:48:ff:1d:ad:4a:da:
f9:af:c8:d3:33:21:c3:92:46:19:a7:bf:92:bd:7d:
d2:2d:2e:2a:fc:2e:48:78:b5:93:7e:d6:81:5f:14:
98:e6:fd:07:0e:a0:4f:4a:d6:ff:95:2e:38:d6:b7:
33:23:69:f8:f5:8e:81:ab:c4:1d:0d:6e:5a:94:60:
c8:89:f5:57:64:18:3d:44:d9:7e:9f:53:2e:07:90:
4a:46:ad:df:18:17:31:3b:78:f8:37:ea:64:07:24:
1d:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:B8:A6:C9:EE:41:A0:E9:86:08:F0:22:BE:89:89:09:28:B4:FF:B2
X509v3 Authority Key Identifier:
keyid:0F:E1:A7:B6:A6:B8:5B:3C:32:67:C8:03:99:6E:D8:18:A4:A6:64:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D-Gntqa4WzwyZ8gDmW7YGKSmZHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/0841b5-1955-4f00-8bf1-289f95893e84/1/D-Gntqa4WzwyZ8gDmW7YGKSmZHk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/0841b5-1955-4f00-8bf1-289f95893e84/1/D-Gntqa4WzwyZ8gDmW7YGKSmZHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:d3:f9:b2:ab:fb:4b:29:9a:b0:5c:dc:dd:0c:72:bb:2a:03:
d3:07:da:74:ba:4b:3b:84:24:d6:15:1e:a0:36:38:d2:18:a3:
4e:b8:36:bb:b2:82:f8:ba:64:b8:b1:81:04:7d:d9:c3:30:ec:
67:00:86:95:9f:63:ff:dd:c1:c8:4d:a5:a4:b3:42:0d:ab:d1:
76:1f:75:86:f3:25:18:7c:d0:d4:d1:f6:50:6b:51:17:ef:71:
bd:0a:6b:51:50:6c:c6:9a:19:02:25:0b:5c:92:02:0d:59:b9:
18:f9:52:1f:57:bc:26:b6:17:95:d4:e4:ce:53:ae:d5:ad:a6:
c0:71:ad:ef:f9:a3:cc:f5:40:b3:f3:d8:e8:62:39:71:d5:92:
39:c4:0d:2e:b8:d0:c5:a9:1a:39:9f:14:bc:0c:f5:c3:76:c2:
89:3d:93:fb:ab:d3:71:a7:79:8b:d1:e7:db:13:62:e3:59:02:
fa:23:c5:60:d2:30:8b:71:a4:59:1f:fb:5c:04:fd:96:ee:f7:
5e:5e:50:8b:36:66:35:94:46:c9:01:cc:4d:34:6a:d9:c3:02:
0f:7d:2b:0a:30:3a:55:b2:2b:88:59:d1:4f:fb:ad:69:7a:e1:
c0:1d:ab:0d:2b:b5:8d:46:37:81:f8:70:a0:87:b5:f0:2a:88:
a8:46:26:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:42:41 2026 by rpki-client