Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.mft
File: gFwMnyN2PAN71ohHRc-EZNLbZj4.mft (raw, json)
Hash identifier: xuM6li2ztT7G+qbXPjTn946h+L5UmPCkp0KV9Mcppj0=
Subject key identifier: BC:9B:D0:86:5D:06:5B:81:AF:70:95:82:59:3A:B4:10:45:C6:DF:12
Authority key identifier: 80:5C:0C:9F:23:76:3C:03:7B:D6:88:47:45:CF:84:64:D2:DB:66:3E
Certificate issuer: /CN=805c0c9f23763c037bd6884745cf8464d2db663e
Certificate serial: 019D27E04A4281AA664A25D1CEBBE5F2B793
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gFwMnyN2PAN71ohHRc-EZNLbZj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 02:01:43 +0000
Manifest this update: Thu 26 Mar 2026 02:01:43 +0000
Manifest next update: Fri 27 Mar 2026 02:01:43 +0000
Files and hashes: 1: 1YAm7d6nHHlsRDgw1O6_EUuzw9U.roa (hash: riRb4iPkDBtyw2U0WQzBeSsFtt3y8g90iqUigaVwK4I=)
2: gFwMnyN2PAN71ohHRc-EZNLbZj4.crl (hash: 6Wde73d+aqo7a0BzUguOGp1Ek1NVQ5yabmPNizXbGXc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/gFwMnyN2PAN71ohHRc-EZNLbZj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:4a:42:81:aa:66:4a:25:d1:ce:bb:e5:f2:b7:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=805c0c9f23763c037bd6884745cf8464d2db663e
Validity
Not Before: Mar 26 02:01:43 2026 GMT
Not After : Mar 27 02:01:43 2026 GMT
Subject: CN=bc9bd0865d065b81af709582593ab41045c6df12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:24:1b:4b:c4:b5:29:34:85:8f:c0:34:44:64:
84:5b:d7:89:55:50:5b:ef:74:fa:7d:bd:6f:a9:1a:
41:fc:f3:d8:6a:c3:db:87:20:56:d4:f7:ce:3d:fc:
24:6e:9d:55:d4:2d:a7:c8:c9:fc:2a:18:d0:5f:bd:
d4:f4:dd:24:0f:e4:68:ae:e8:11:e9:1b:45:96:9f:
6d:d0:70:77:6f:8c:38:08:b3:b0:fe:bd:fc:2c:dc:
68:6b:93:9e:f8:93:8f:60:2f:44:f4:ad:c1:77:b7:
a1:37:ae:e2:8e:a1:5c:dd:91:20:e0:d5:03:78:27:
c4:10:72:30:3b:3f:84:a2:68:34:b6:46:3a:50:9d:
93:f8:fc:79:12:a8:69:79:10:ca:41:75:ca:ce:44:
10:85:7b:2e:60:9b:f2:04:d1:50:3a:62:9f:53:1d:
56:e2:2e:ac:4c:b5:b3:76:f2:36:80:a8:35:fe:fc:
4c:47:4a:b4:68:e5:55:ed:d9:82:58:b4:5a:5f:96:
6d:2b:3d:15:a4:91:29:41:e7:21:e0:12:75:66:a2:
52:3f:84:9d:86:08:a8:8a:b1:6a:42:de:04:eb:10:
2c:69:ca:41:fa:d1:86:01:70:88:bc:e2:40:77:ff:
cc:49:13:98:9e:fc:ae:fa:84:07:56:ce:65:f7:eb:
73:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:9B:D0:86:5D:06:5B:81:AF:70:95:82:59:3A:B4:10:45:C6:DF:12
X509v3 Authority Key Identifier:
keyid:80:5C:0C:9F:23:76:3C:03:7B:D6:88:47:45:CF:84:64:D2:DB:66:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gFwMnyN2PAN71ohHRc-EZNLbZj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:34:bb:87:11:a1:33:0f:b2:c1:d5:1c:e7:e3:8f:24:cc:4f:
07:4a:70:8c:07:94:00:84:49:b6:ad:42:3d:11:e8:4c:51:de:
95:26:3f:98:fe:b0:79:14:16:7a:f0:68:b5:5d:f1:24:1a:d4:
70:12:76:f6:57:38:fd:c3:4d:a9:4a:de:67:e3:81:f0:1a:71:
59:65:f2:be:a4:bc:e9:13:77:b7:03:73:b8:a4:61:7d:a2:b3:
81:cc:b1:87:80:fe:96:5c:d3:77:38:fd:09:82:3f:7d:10:85:
90:d3:01:4b:1b:b4:b5:2b:55:a7:8d:76:d2:9e:f5:21:c8:8c:
72:79:53:d8:cc:b0:78:0e:7d:26:7d:c2:1a:d4:61:4f:f5:dd:
a5:76:07:96:da:98:da:97:db:d9:d7:98:18:ce:9f:f5:4c:f5:
12:3c:3e:01:33:35:f3:eb:64:1a:b8:2e:5a:f7:92:47:23:9f:
de:58:87:e3:ba:2e:4d:3c:94:ca:7d:6b:5e:8a:52:81:49:5d:
b6:5d:21:5e:fa:6a:0c:3d:dc:5c:b3:72:ba:bb:eb:dc:f9:94:
ed:3f:c0:97:19:28:cc:ce:89:fb:6a:f5:ef:fe:36:95:3e:73:
29:e3:44:0b:6c:9f:eb:ef:ba:15:c4:d0:66:18:86:19:b6:2b:
48:06:7a:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:29:33 2026 by rpki-client