Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/159860-f832-438a-9e6f-76a141cdd41f/1/gQfcA22dbCjx2Hq2TnjuSFqW_YE.mft
File: gQfcA22dbCjx2Hq2TnjuSFqW_YE.mft (raw, json)
Hash identifier: Azro98xXckERcqFyUS59iD5D0vYL05gbFJzQoKadRJY=
Subject key identifier: B9:AA:9D:43:4A:53:D5:B2:B7:80:28:6A:14:BC:84:AC:28:1D:C6:60
Authority key identifier: 81:07:DC:03:6D:9D:6C:28:F1:D8:7A:B6:4E:78:EE:48:5A:96:FD:81
Certificate issuer: /CN=8107dc036d9d6c28f1d87ab64e78ee485a96fd81
Certificate serial: 019D265F13A29AD2BE8CCF923F70A051E8A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gQfcA22dbCjx2Hq2TnjuSFqW_YE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/159860-f832-438a-9e6f-76a141cdd41f/1/gQfcA22dbCjx2Hq2TnjuSFqW_YE.mft
Manifest number: 083E
Signing time: Wed 25 Mar 2026 19:00:58 +0000
Manifest this update: Wed 25 Mar 2026 19:00:58 +0000
Manifest next update: Thu 26 Mar 2026 19:00:58 +0000
Files and hashes: 1: BrA8u2faJKSWsAITat9kgoQt3WE.roa (hash: gxZOLWmQMlnhj/neNAY1nmBM8bF2InZz8Umo3wa3Z6A=)
2: gQfcA22dbCjx2Hq2TnjuSFqW_YE.crl (hash: ANW+N5wKB17uq36r3QQusggcSemY3Jf/bRBD6RNTb64=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/159860-f832-438a-9e6f-76a141cdd41f/1/gQfcA22dbCjx2Hq2TnjuSFqW_YE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/159860-f832-438a-9e6f-76a141cdd41f/1/gQfcA22dbCjx2Hq2TnjuSFqW_YE.mft
rsync://rpki.ripe.net/repository/DEFAULT/gQfcA22dbCjx2Hq2TnjuSFqW_YE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:13:a2:9a:d2:be:8c:cf:92:3f:70:a0:51:e8:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8107dc036d9d6c28f1d87ab64e78ee485a96fd81
Validity
Not Before: Mar 25 19:00:58 2026 GMT
Not After : Mar 26 19:00:58 2026 GMT
Subject: CN=b9aa9d434a53d5b2b780286a14bc84ac281dc660
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6f:26:32:ae:d5:56:8f:6b:9f:31:46:2e:16:
87:76:c7:9f:5f:ee:a3:70:69:1d:a0:3a:4e:f7:8e:
53:6a:38:84:8a:3c:99:80:b5:76:96:2c:b8:c7:42:
36:e1:ee:2e:b5:ba:a1:05:c5:fe:a7:37:13:e2:14:
5e:8d:c7:20:f5:4c:2d:74:64:08:73:d2:2a:d8:c8:
ec:68:ea:17:2b:6d:36:3d:f6:5f:03:e1:fe:62:bf:
27:3c:c8:34:7b:8a:1c:0e:c0:2d:ff:a9:cb:96:94:
f3:01:6d:9c:9e:62:b4:49:0c:6c:54:8e:21:be:a5:
b3:de:5d:30:18:b7:7e:30:97:ea:0d:7b:7a:7b:bd:
47:39:9c:3d:d6:4e:d2:61:01:64:b4:c8:1a:2c:46:
ef:3d:10:da:a8:fa:1a:cd:00:16:13:73:ee:db:16:
12:82:37:3c:ee:1c:9d:4f:4e:5a:54:5a:b3:9a:f0:
5d:23:49:53:77:e1:9b:ab:14:47:7c:b8:a5:ef:f9:
27:86:4c:dc:e3:f1:ad:fe:e9:d8:cd:22:17:05:69:
0d:0e:39:31:43:be:11:05:29:c4:91:02:12:fb:33:
3f:9b:62:b7:ca:d8:8b:14:1f:d9:44:f8:52:93:eb:
4f:6b:cd:a2:22:9f:64:61:bd:f0:4d:a2:29:6e:95:
fc:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:AA:9D:43:4A:53:D5:B2:B7:80:28:6A:14:BC:84:AC:28:1D:C6:60
X509v3 Authority Key Identifier:
keyid:81:07:DC:03:6D:9D:6C:28:F1:D8:7A:B6:4E:78:EE:48:5A:96:FD:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQfcA22dbCjx2Hq2TnjuSFqW_YE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/159860-f832-438a-9e6f-76a141cdd41f/1/gQfcA22dbCjx2Hq2TnjuSFqW_YE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/159860-f832-438a-9e6f-76a141cdd41f/1/gQfcA22dbCjx2Hq2TnjuSFqW_YE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:5f:70:a6:e4:0a:bc:0d:63:2a:de:fe:01:09:f3:dd:fe:42:
a0:a6:65:35:31:2c:e9:1c:ee:5d:bd:0a:2f:d7:a0:01:8c:c0:
d0:4b:9b:da:c9:56:51:9a:09:24:88:7a:18:b1:f8:75:d0:8d:
e1:71:c9:41:81:66:78:5d:7f:d8:e0:7b:9d:ec:8d:bd:75:bc:
ec:d4:2b:ab:6c:48:db:f6:13:7a:bc:c6:ad:ee:e8:7a:12:89:
09:00:b8:b5:84:4a:26:ae:07:40:84:23:14:1b:f1:9f:ed:92:
ee:1f:06:3e:1d:da:77:b2:9d:37:08:b3:f7:ba:1b:6f:6a:57:
a3:da:12:2b:40:a5:d0:08:ca:52:f3:5a:9a:56:64:9d:11:c2:
60:5b:bd:f8:32:25:dd:e9:e0:5c:bf:f4:52:b3:2d:88:9c:7d:
22:db:39:33:8a:ba:1f:26:8c:cf:9f:da:43:59:66:e1:cd:53:
bc:aa:b9:69:26:48:16:97:02:aa:c8:14:08:ec:43:a9:a3:42:
f1:93:b1:0e:49:6f:62:89:6d:e4:d3:4a:6f:a3:5f:99:6a:1a:
a8:c3:cf:42:22:16:3a:2f:b4:ed:77:45:63:4a:38:9a:53:98:
3f:c7:17:d9:ae:55:d1:99:fd:ee:2e:b4:40:53:0d:48:61:18:
6e:12:be:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:15:19 2026 by rpki-client