Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/3564e7-11d4-4d7a-8bcc-a953768fde2f/1/Gk0JI-wQZndgrYguavmhVpnAXvg.mft
File: Gk0JI-wQZndgrYguavmhVpnAXvg.mft (raw, json)
Hash identifier: q/HJHe2/jzhRFlVnfPs+/FPO8gEYW3XMtOhNeRPxglg=
Subject key identifier: 91:07:7F:6F:44:F0:16:28:AD:16:23:11:E3:76:31:77:99:40:5F:F4
Authority key identifier: 1A:4D:09:23:EC:10:66:77:60:AD:88:2E:6A:F9:A1:56:99:C0:5E:F8
Certificate issuer: /CN=1a4d0923ec10667760ad882e6af9a15699c05ef8
Certificate serial: 019D29979527522E22791F2A7BA6184ADFD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gk0JI-wQZndgrYguavmhVpnAXvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/3564e7-11d4-4d7a-8bcc-a953768fde2f/1/Gk0JI-wQZndgrYguavmhVpnAXvg.mft
Manifest number: 111E
Signing time: Thu 26 Mar 2026 10:01:33 +0000
Manifest this update: Thu 26 Mar 2026 10:01:33 +0000
Manifest next update: Fri 27 Mar 2026 10:01:33 +0000
Files and hashes: 1: ENz0VTcEnPSXBE5Znpjw7lUaAwA.roa (hash: DP27/a5o1Ym+vesDLFqV0Tua4ny+ds0/pH34jhmErS8=)
2: Gk0JI-wQZndgrYguavmhVpnAXvg.crl (hash: sOMbxXTRRwDyJGfDGGlO/aIrnbegeh6jlUlxv5Wk6O8=)
3: Y-eJmA6TDVKIS1tuOw2dm1_Jqdc.roa (hash: KqQ8TKxBYl3JumzrSj+0qt5zeDJPsxKpAnGsc38qwpE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/3564e7-11d4-4d7a-8bcc-a953768fde2f/1/Gk0JI-wQZndgrYguavmhVpnAXvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/3564e7-11d4-4d7a-8bcc-a953768fde2f/1/Gk0JI-wQZndgrYguavmhVpnAXvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gk0JI-wQZndgrYguavmhVpnAXvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 10:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:95:27:52:2e:22:79:1f:2a:7b:a6:18:4a:df:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a4d0923ec10667760ad882e6af9a15699c05ef8
Validity
Not Before: Mar 26 10:01:33 2026 GMT
Not After : Mar 27 10:01:33 2026 GMT
Subject: CN=91077f6f44f01628ad162311e376317799405ff4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:fd:46:77:e3:5d:01:0c:55:97:f6:58:6c:ef:
23:53:73:b1:5b:7f:1c:66:dd:1a:0f:ad:86:da:9c:
a5:d0:e7:df:65:ab:26:fe:8b:e3:d6:b3:a4:f5:a5:
73:8b:e8:e0:e0:ed:06:8c:95:99:68:ec:c5:b5:c5:
38:c2:35:3f:26:c4:ce:62:48:26:d4:54:37:20:b1:
38:32:db:65:4b:6b:79:56:d4:b5:d7:69:2c:2c:6c:
b0:45:e3:bb:55:fd:9c:3f:f9:29:47:ef:60:e3:9d:
81:06:63:bb:ad:3c:ac:e4:6d:09:6f:01:f2:51:95:
75:51:67:11:98:ed:59:5a:98:2b:82:12:6d:f6:43:
6f:f8:fb:f3:cb:67:e8:31:68:88:99:20:8b:98:ad:
24:52:e3:62:59:9b:f9:fa:98:95:47:f9:d9:aa:cc:
0f:50:50:94:34:c3:9c:7e:a4:f4:84:ab:fe:99:3f:
13:51:1e:28:1d:8c:7a:77:23:69:65:8f:bb:5e:35:
96:8e:da:80:33:11:9d:90:94:1a:06:56:b6:1d:7b:
72:89:77:47:84:20:20:2f:3c:16:89:57:60:48:af:
82:8a:e7:ce:10:f4:98:32:39:45:78:f6:bc:fc:09:
2f:9a:94:6a:ca:46:17:97:19:5e:74:ce:68:f4:19:
c9:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:07:7F:6F:44:F0:16:28:AD:16:23:11:E3:76:31:77:99:40:5F:F4
X509v3 Authority Key Identifier:
keyid:1A:4D:09:23:EC:10:66:77:60:AD:88:2E:6A:F9:A1:56:99:C0:5E:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gk0JI-wQZndgrYguavmhVpnAXvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/3564e7-11d4-4d7a-8bcc-a953768fde2f/1/Gk0JI-wQZndgrYguavmhVpnAXvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/3564e7-11d4-4d7a-8bcc-a953768fde2f/1/Gk0JI-wQZndgrYguavmhVpnAXvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:11:72:70:09:17:6c:cd:91:8e:e8:c0:23:22:47:b7:75:1c:
5c:11:5f:ec:bd:a2:47:17:f2:37:08:5e:3f:bf:79:45:b6:92:
1b:05:51:7b:7d:e1:ec:17:be:7e:4f:a9:4a:1f:4c:ab:0c:ad:
d7:57:a4:0c:79:aa:e5:5b:b2:be:bc:36:8a:b0:29:34:2d:cb:
42:3d:c0:ef:61:db:72:69:4f:c2:d0:9c:3a:c3:24:28:ba:57:
30:d0:fc:86:67:ca:fb:da:72:ec:e8:c8:01:0d:38:a4:4d:d7:
3c:f6:04:6f:af:e8:17:a2:52:5e:3d:45:de:fd:97:95:e7:52:
e1:bb:d1:ff:eb:94:7e:bd:d5:7d:20:38:36:84:a4:9e:a2:79:
13:3a:fb:c9:75:fd:af:2d:a3:0a:56:a1:41:54:e8:3d:04:4d:
8c:79:fb:95:22:d1:1b:9e:6c:e4:2b:83:54:d7:5c:92:83:4a:
34:0d:3b:15:d1:3b:07:a8:02:5f:07:91:7e:4d:ef:e9:3c:a5:
53:11:5a:56:3b:a1:70:0b:04:af:a9:c9:fb:c6:04:9c:d6:b1:
5e:02:4c:b7:86:da:25:81:f1:8c:4e:db:4e:1f:e1:e4:49:77:
f9:b5:9b:24:d3:08:bb:a4:85:b0:9d:55:c6:75:13:bb:9a:e9:
a0:6d:87:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:23:58 2026 by rpki-client