Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/880b00-58ab-47de-9728-0cad6ca7ecd7/1/gVI4iO7VMR-SoWYV7yzwF1xv5B4.mft
File: gVI4iO7VMR-SoWYV7yzwF1xv5B4.mft (raw, json)
Hash identifier: h1w4ytRkKy7N8z9LUYseR0vY3BBBwZRodXu4ibqOGTE=
Subject key identifier: 19:A7:22:3F:3E:2D:2E:10:6D:D0:21:6D:28:7E:4E:7E:A5:E8:3B:E1
Authority key identifier: 81:52:38:88:EE:D5:31:1F:92:A1:66:15:EF:2C:F0:17:5C:6F:E4:1E
Certificate issuer: /CN=81523888eed5311f92a16615ef2cf0175c6fe41e
Certificate serial: 019D2960D858FCB31AB52713C60E0DE613D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gVI4iO7VMR-SoWYV7yzwF1xv5B4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/880b00-58ab-47de-9728-0cad6ca7ecd7/1/gVI4iO7VMR-SoWYV7yzwF1xv5B4.mft
Manifest number: 1014
Signing time: Thu 26 Mar 2026 09:01:45 +0000
Manifest this update: Thu 26 Mar 2026 09:01:45 +0000
Manifest next update: Fri 27 Mar 2026 09:01:45 +0000
Files and hashes: 1: 7ly9B-spICGtf03biM302y-qv8c.roa (hash: Q9wd8lqO1aqbdvOMhFFtm6Se5dFT3mbOpspfd9Kex7s=)
2: gVI4iO7VMR-SoWYV7yzwF1xv5B4.crl (hash: OqWLNuXSe5mCXoCqt/yHe18cxS6NTKCU5KZcL/7hmnQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/880b00-58ab-47de-9728-0cad6ca7ecd7/1/gVI4iO7VMR-SoWYV7yzwF1xv5B4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/880b00-58ab-47de-9728-0cad6ca7ecd7/1/gVI4iO7VMR-SoWYV7yzwF1xv5B4.mft
rsync://rpki.ripe.net/repository/DEFAULT/gVI4iO7VMR-SoWYV7yzwF1xv5B4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:d8:58:fc:b3:1a:b5:27:13:c6:0e:0d:e6:13:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81523888eed5311f92a16615ef2cf0175c6fe41e
Validity
Not Before: Mar 26 09:01:45 2026 GMT
Not After : Mar 27 09:01:45 2026 GMT
Subject: CN=19a7223f3e2d2e106dd0216d287e4e7ea5e83be1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:97:7a:c5:a4:98:51:6b:0a:d0:48:76:4c:e5:
e2:d0:ad:d5:42:22:7f:e7:e9:96:ae:6e:c4:90:71:
0c:1c:1a:31:78:9a:65:c7:15:bc:38:8b:ef:a0:50:
4e:78:45:49:b9:db:34:21:7d:4b:1d:4f:3a:a1:35:
d8:8e:68:7a:0b:97:84:d8:fa:a4:66:71:30:a2:78:
04:96:98:76:7a:78:66:56:0d:79:5c:a3:49:af:e6:
f8:9e:46:68:4c:5c:44:3a:c2:12:b9:55:d9:9d:0e:
9a:95:a0:1f:4b:3a:43:bc:38:a3:f9:19:e8:e9:26:
41:43:2d:55:82:66:0e:8b:64:f2:80:18:cc:19:e1:
e3:98:ff:3a:06:89:f8:c2:07:4c:9c:4f:f5:9d:78:
94:f8:a6:3e:90:df:8f:c0:15:5f:b7:ca:f5:17:e4:
97:a1:0d:d6:3b:67:a8:e4:13:8a:70:51:bc:1e:2a:
30:b8:1e:e5:f6:15:58:5d:7c:1e:d1:ab:6e:78:1d:
1b:ab:43:4f:22:fd:07:96:11:36:65:b3:a0:99:77:
73:16:64:34:11:77:d2:5d:bf:db:d9:47:5e:23:1c:
c1:c2:70:b8:54:72:4a:c2:f3:f4:5f:4e:9b:16:46:
39:84:ab:1f:99:66:56:c8:aa:a5:ea:7d:77:1e:87:
0d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:A7:22:3F:3E:2D:2E:10:6D:D0:21:6D:28:7E:4E:7E:A5:E8:3B:E1
X509v3 Authority Key Identifier:
keyid:81:52:38:88:EE:D5:31:1F:92:A1:66:15:EF:2C:F0:17:5C:6F:E4:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gVI4iO7VMR-SoWYV7yzwF1xv5B4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/880b00-58ab-47de-9728-0cad6ca7ecd7/1/gVI4iO7VMR-SoWYV7yzwF1xv5B4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/880b00-58ab-47de-9728-0cad6ca7ecd7/1/gVI4iO7VMR-SoWYV7yzwF1xv5B4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:8c:a1:16:fe:99:1c:74:10:42:33:a2:e0:77:c3:bf:02:57:
29:15:b4:5d:ed:4c:70:06:00:c8:ac:f7:df:1a:87:92:cd:3a:
a0:fd:b8:b6:3f:43:76:09:f5:9f:2f:0f:97:b4:5a:97:a4:83:
87:18:bd:37:fc:46:50:9e:51:54:a6:70:57:55:12:e4:62:aa:
8e:70:7d:3e:01:e0:e1:68:b5:9c:ae:ae:39:a4:26:1b:b7:2d:
93:40:6e:8b:82:17:fc:78:57:46:2c:21:37:f4:7e:2d:2b:18:
17:98:4b:cb:ee:84:a2:b4:7b:21:84:73:2e:98:3a:e4:96:c9:
cf:45:9e:1d:c3:e1:a6:75:aa:41:bf:f6:80:26:23:69:3e:3d:
20:35:af:27:74:39:d5:8e:7e:eb:41:92:3b:4a:cf:da:3a:43:
cf:e9:01:31:f1:23:6a:d4:b0:44:c2:e6:6b:8b:f8:77:85:bf:
49:d8:95:51:0a:dc:2c:36:d1:a2:97:46:b0:52:1b:30:73:d6:
d2:51:df:1c:8e:4d:ca:ad:ba:f9:d3:46:ce:12:47:bd:9d:2a:
6f:4d:16:e5:92:d4:3a:e6:9b:19:ad:fa:b3:43:40:07:35:be:
84:01:61:43:d7:b2:e9:93:e7:5a:ec:09:d5:4a:af:a2:14:3a:
6e:26:da:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:50:04 2026 by rpki-client