Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/9291e1-57ca-4c29-9e93-bd75ef9b5798/1/gN8MvdVXHlgOpX4YpEDKK-pIBvg.mft
File: gN8MvdVXHlgOpX4YpEDKK-pIBvg.mft (raw, json)
Hash identifier: 17i4BvYSD+dZZOFaUnjq5+Vp6TrRsXlvzbkJwADdIrI=
Subject key identifier: 14:EB:82:58:B0:6B:3E:F5:BD:49:4A:AC:4E:8E:86:62:1F:90:A9:78
Authority key identifier: 80:DF:0C:BD:D5:57:1E:58:0E:A5:7E:18:A4:40:CA:2B:EA:48:06:F8
Certificate issuer: /CN=80df0cbdd5571e580ea57e18a440ca2bea4806f8
Certificate serial: 019D26CD1E56A76EF90EACFF3FF51894B363
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gN8MvdVXHlgOpX4YpEDKK-pIBvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/9291e1-57ca-4c29-9e93-bd75ef9b5798/1/gN8MvdVXHlgOpX4YpEDKK-pIBvg.mft
Manifest number: 1760
Signing time: Wed 25 Mar 2026 21:01:09 +0000
Manifest this update: Wed 25 Mar 2026 21:01:09 +0000
Manifest next update: Thu 26 Mar 2026 21:01:09 +0000
Files and hashes: 1: PsabYp2ySYYY4yWAvK9dKL6YUH8.roa (hash: vZfpMIjc6fu7umjV0/mcBQ6XxsIN7kJ9lIrou1yREPE=)
2: gN8MvdVXHlgOpX4YpEDKK-pIBvg.crl (hash: tx6+p37Kyt1Y1wl7OMRXs6DOCwDhaZ2xj5/yzSBRk1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/9291e1-57ca-4c29-9e93-bd75ef9b5798/1/gN8MvdVXHlgOpX4YpEDKK-pIBvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/9291e1-57ca-4c29-9e93-bd75ef9b5798/1/gN8MvdVXHlgOpX4YpEDKK-pIBvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/gN8MvdVXHlgOpX4YpEDKK-pIBvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:1e:56:a7:6e:f9:0e:ac:ff:3f:f5:18:94:b3:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80df0cbdd5571e580ea57e18a440ca2bea4806f8
Validity
Not Before: Mar 25 21:01:09 2026 GMT
Not After : Mar 26 21:01:09 2026 GMT
Subject: CN=14eb8258b06b3ef5bd494aac4e8e86621f90a978
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:e2:74:09:ad:5b:43:db:6a:46:79:70:22:09:
3b:56:49:5c:3c:02:29:89:9a:33:85:7f:e1:53:00:
e0:61:23:5d:ef:62:da:77:30:ce:bb:73:bd:95:c2:
9a:a2:c2:f4:a3:5c:c1:fa:59:e4:af:3b:22:0f:18:
a7:2d:0b:e0:85:a6:c8:e8:c3:dd:bd:11:b4:d1:e5:
e2:d0:17:e3:c6:25:12:49:1e:b4:3f:07:df:37:6e:
43:03:15:72:29:81:7b:9c:1d:36:db:37:b4:3e:03:
87:bb:f1:f4:24:74:5a:58:d9:0f:38:d4:b8:5b:1d:
c3:99:29:63:20:97:0a:27:48:5e:22:e0:2c:a5:6d:
d9:15:ab:b6:77:51:48:5e:22:28:8b:f8:7d:8b:3e:
b5:46:8a:63:09:8f:0b:ab:04:a1:45:5f:4b:6f:b6:
91:ee:2a:9a:4c:99:bb:fc:46:bd:8d:0c:1d:dd:f9:
0c:6a:b5:22:72:b7:d5:b8:4c:7e:1a:4c:23:d5:85:
99:f0:e0:87:02:3a:d2:a3:82:42:51:93:bf:5e:90:
79:00:5b:a9:ff:8a:f0:b2:17:27:1f:a9:c6:dd:d8:
78:8f:1f:09:45:be:bd:16:41:b4:0b:a4:6e:e2:b3:
d5:d7:87:4e:cc:77:fc:26:7f:20:45:ea:6d:57:da:
bc:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:EB:82:58:B0:6B:3E:F5:BD:49:4A:AC:4E:8E:86:62:1F:90:A9:78
X509v3 Authority Key Identifier:
keyid:80:DF:0C:BD:D5:57:1E:58:0E:A5:7E:18:A4:40:CA:2B:EA:48:06:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gN8MvdVXHlgOpX4YpEDKK-pIBvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9291e1-57ca-4c29-9e93-bd75ef9b5798/1/gN8MvdVXHlgOpX4YpEDKK-pIBvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9291e1-57ca-4c29-9e93-bd75ef9b5798/1/gN8MvdVXHlgOpX4YpEDKK-pIBvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:d9:8c:5b:6b:b9:b6:9e:32:fb:d9:35:2a:8f:4b:30:d7:10:
24:c2:3f:d4:fa:8d:75:73:48:51:dc:67:9c:74:3d:00:5b:ce:
54:23:ea:49:9c:5a:86:47:20:c3:13:40:e8:b2:72:68:9d:56:
31:6d:57:22:fd:6a:35:a6:d4:65:88:de:a6:f3:2f:51:d6:c9:
7b:84:72:ea:1f:00:52:94:0b:ae:4c:cb:07:ca:76:50:9e:f3:
6c:ee:17:e5:da:c7:a5:9b:13:f1:a3:f5:d0:64:6d:1d:83:9c:
b5:4b:a5:04:81:c3:37:de:03:83:dc:14:49:07:dc:5c:83:6c:
f7:71:da:6a:10:77:27:2a:15:0e:77:6b:7f:c5:b8:b4:77:a8:
f0:40:15:6f:f4:59:2d:3e:0e:52:92:af:2c:32:bd:bb:c9:2a:
c6:30:25:f3:47:a9:3e:69:f3:9c:27:6f:7c:07:fa:82:28:fc:
bb:47:e8:d5:96:29:48:bd:89:8b:42:1c:cf:11:9a:65:2c:4e:
21:11:23:b0:e2:5b:6f:3f:74:cb:8d:7e:79:30:a9:03:15:ab:
77:db:b7:db:39:4f:59:f9:a7:ac:cb:63:36:da:4e:ba:41:9a:
37:c1:fe:d8:58:23:e1:c5:1d:e5:c6:fa:a0:51:b0:0b:b0:95:
63:3c:59:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:33 2026 by rpki-client