Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/200fa4-4578-4ae8-9ffb-2ed269384a74/1/gNclN8xUrBC0q_rMcsG3VMFxr48.mft
File: gNclN8xUrBC0q_rMcsG3VMFxr48.mft (raw, json)
Hash identifier: mnLbLjGO7LNZvisTBKDdE9tW/mlblcKxvazm3Qlbmt4=
Subject key identifier: A3:C5:2B:DF:1C:D2:B8:65:0C:48:75:70:87:BC:AD:E0:2E:9F:E3:F4
Authority key identifier: 80:D7:25:37:CC:54:AC:10:B4:AB:FA:CC:72:C1:B7:54:C1:71:AF:8F
Certificate issuer: /CN=80d72537cc54ac10b4abfacc72c1b754c171af8f
Certificate serial: 019D284E680FFA22AC4B728AE0BE629CA681
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gNclN8xUrBC0q_rMcsG3VMFxr48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/200fa4-4578-4ae8-9ffb-2ed269384a74/1/gNclN8xUrBC0q_rMcsG3VMFxr48.mft
Manifest number: 07D8
Signing time: Thu 26 Mar 2026 04:02:00 +0000
Manifest this update: Thu 26 Mar 2026 04:02:00 +0000
Manifest next update: Fri 27 Mar 2026 04:02:00 +0000
Files and hashes: 1: P8LunT7NWyGTGPbLtH4shJpoGP0.roa (hash: TbFuXtQTiW0SZnaPUm+pr7Lb/RImoBN9F9vrbRZOLrA=)
2: gNclN8xUrBC0q_rMcsG3VMFxr48.crl (hash: jCMogLmNXbAmYzC+fPuf6vJQVu8j7OhqsBgR3kzbwxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/200fa4-4578-4ae8-9ffb-2ed269384a74/1/gNclN8xUrBC0q_rMcsG3VMFxr48.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/200fa4-4578-4ae8-9ffb-2ed269384a74/1/gNclN8xUrBC0q_rMcsG3VMFxr48.mft
rsync://rpki.ripe.net/repository/DEFAULT/gNclN8xUrBC0q_rMcsG3VMFxr48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:68:0f:fa:22:ac:4b:72:8a:e0:be:62:9c:a6:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80d72537cc54ac10b4abfacc72c1b754c171af8f
Validity
Not Before: Mar 26 04:02:00 2026 GMT
Not After : Mar 27 04:02:00 2026 GMT
Subject: CN=a3c52bdf1cd2b8650c48757087bcade02e9fe3f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:d4:80:7c:c1:2e:af:5d:dd:68:f9:cb:ff:2d:
ce:bb:57:31:c8:2c:74:79:25:de:30:02:85:ef:04:
51:76:ba:d3:eb:e1:41:61:fc:e7:59:6b:c4:07:c3:
5c:9c:db:d8:fe:29:55:fe:81:9e:db:ed:65:be:96:
9d:e3:40:87:ae:1e:e2:f6:4b:04:90:6a:35:23:27:
de:9b:73:fa:bb:56:ed:02:2c:3a:01:92:d3:fc:46:
cf:17:18:9a:fa:11:de:b1:f8:69:ae:32:69:98:23:
17:13:9a:1d:e8:f4:a5:d5:23:ee:e8:87:d4:ff:21:
89:40:b9:75:a7:cf:37:fc:9a:f3:82:8f:7f:47:f2:
dc:49:85:42:e9:a7:f1:19:bb:b5:32:7e:12:27:d1:
db:b0:29:17:79:75:c8:df:f5:93:64:68:7a:d6:19:
f5:5c:4b:e5:33:60:c2:5a:c9:ce:10:d8:5c:19:96:
99:fc:aa:10:2d:20:ea:7e:e5:8e:e6:b9:f1:e6:d6:
43:cf:d7:5a:c9:e0:9d:37:a6:f9:33:e2:df:88:34:
03:c9:c9:f1:84:66:c8:1e:ea:13:e4:32:85:6f:37:
73:aa:3b:c9:b6:1d:b5:4f:fe:76:11:f8:1e:2d:ab:
43:93:08:cb:37:b9:dc:05:c7:11:01:2b:d4:3b:b2:
71:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:C5:2B:DF:1C:D2:B8:65:0C:48:75:70:87:BC:AD:E0:2E:9F:E3:F4
X509v3 Authority Key Identifier:
keyid:80:D7:25:37:CC:54:AC:10:B4:AB:FA:CC:72:C1:B7:54:C1:71:AF:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gNclN8xUrBC0q_rMcsG3VMFxr48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/200fa4-4578-4ae8-9ffb-2ed269384a74/1/gNclN8xUrBC0q_rMcsG3VMFxr48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/200fa4-4578-4ae8-9ffb-2ed269384a74/1/gNclN8xUrBC0q_rMcsG3VMFxr48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:a5:52:26:df:f1:c0:5f:ad:f4:dd:3d:23:f3:d6:87:db:13:
1a:1d:25:e9:3a:96:40:de:90:87:d5:01:26:52:1c:af:2d:41:
63:cf:56:0a:61:6d:af:81:ce:bd:9b:e2:a5:a8:76:97:30:22:
ea:22:b6:29:a3:b0:6e:15:9d:24:ac:bb:80:77:63:7a:4d:0e:
db:cf:48:a4:77:93:59:c4:56:7b:40:3e:d1:77:c8:a8:e6:f0:
f5:cb:7d:08:d5:f6:09:3a:c3:2a:2f:2d:69:c5:f0:6c:43:cb:
03:36:83:ce:f6:21:1a:4e:e0:71:68:b9:7a:82:13:30:5c:49:
c7:53:3b:71:49:c0:b4:11:3f:33:ae:cb:5b:1d:7f:81:1f:ff:
2d:e0:41:26:fd:45:ca:14:1f:e1:88:72:32:ae:48:85:06:66:
be:57:7f:64:b8:be:6b:5a:78:3a:69:0e:79:67:93:00:37:3b:
4b:b7:cd:e6:3f:37:38:bd:14:9d:59:a8:ba:aa:64:c9:22:12:
88:12:e8:d1:cc:54:70:7f:dd:75:a7:59:f4:b3:d7:f8:98:75:
02:e2:11:2d:8f:1a:a5:6f:fc:98:a0:df:59:ac:3e:97:98:06:
5b:e6:f3:70:18:33:e5:0b:e0:0c:f2:2a:1e:35:f3:9b:4f:47:
34:a4:7d:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:38:15 2026 by rpki-client