Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/8795e0-efb7-48c5-849f-cfceb87973dd/1/gfOofhE2a1RaWhJ7gyh2U7GMilY.mft
File: gfOofhE2a1RaWhJ7gyh2U7GMilY.mft (raw, json)
Hash identifier: ePYXuinq1tNvjlRMjQ+1x3be6MNwVdvhD8+VjK2sKfE=
Subject key identifier: F2:B8:B7:09:48:1F:B0:0F:B0:30:B8:41:38:EE:E9:F2:78:CA:00:85
Authority key identifier: 81:F3:A8:7E:11:36:6B:54:5A:5A:12:7B:83:28:76:53:B1:8C:8A:56
Certificate issuer: /CN=81f3a87e11366b545a5a127b83287653b18c8a56
Certificate serial: 019D273AB88B19AA1768BAA09E5EA68CBA65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gfOofhE2a1RaWhJ7gyh2U7GMilY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/8795e0-efb7-48c5-849f-cfceb87973dd/1/gfOofhE2a1RaWhJ7gyh2U7GMilY.mft
Manifest number: 026D
Signing time: Wed 25 Mar 2026 23:00:52 +0000
Manifest this update: Wed 25 Mar 2026 23:00:52 +0000
Manifest next update: Thu 26 Mar 2026 23:00:52 +0000
Files and hashes: 1: LJsQ6phR8LiQVY1FFhD_unQmTVI.roa (hash: EDMo6GSMblcwsUUKgaU7mr/ntpmSgCtV67E6zw3bxPk=)
2: gfOofhE2a1RaWhJ7gyh2U7GMilY.crl (hash: 05Vdy1ML/rW/Dc3NF0yIVYpQCtw1dpqJOnHldu5lnas=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/8795e0-efb7-48c5-849f-cfceb87973dd/1/gfOofhE2a1RaWhJ7gyh2U7GMilY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/8795e0-efb7-48c5-849f-cfceb87973dd/1/gfOofhE2a1RaWhJ7gyh2U7GMilY.mft
rsync://rpki.ripe.net/repository/DEFAULT/gfOofhE2a1RaWhJ7gyh2U7GMilY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:b8:8b:19:aa:17:68:ba:a0:9e:5e:a6:8c:ba:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81f3a87e11366b545a5a127b83287653b18c8a56
Validity
Not Before: Mar 25 23:00:52 2026 GMT
Not After : Mar 26 23:00:52 2026 GMT
Subject: CN=f2b8b709481fb00fb030b84138eee9f278ca0085
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:d8:59:af:a8:65:71:a4:8f:2a:54:fe:2b:4d:
e2:38:0b:92:df:57:f2:95:c3:d1:81:98:4b:76:67:
c7:56:47:85:52:45:51:cf:4c:b0:c9:4e:0b:3a:d2:
3f:91:68:1f:ed:0d:1a:29:0a:dc:ce:13:b0:63:b6:
28:4f:5b:74:4c:25:29:33:12:5e:fd:5d:6f:d0:53:
e1:12:8f:ca:62:03:94:2e:8f:26:dd:bf:a9:d0:56:
68:c0:07:74:de:40:bc:e6:6f:c3:1e:39:8c:4c:7e:
eb:ba:4e:f0:d1:15:f8:86:d7:9b:cd:db:1a:2b:f0:
49:7d:b3:90:2f:e4:79:68:83:c9:7a:c4:d9:3f:6d:
b8:7e:d4:4a:15:73:ad:12:b3:3c:06:e8:60:a7:9f:
18:56:dc:50:d6:87:ca:2b:2f:73:89:c9:cc:0d:29:
32:dc:09:5e:36:9e:38:dd:39:94:04:26:05:10:f0:
5b:ad:94:d4:a9:ae:11:f7:c6:c0:e4:e7:71:e4:06:
77:11:94:31:ac:6f:6d:98:34:ad:f6:36:22:18:c5:
78:50:a2:f6:63:fe:ef:c9:58:ba:5f:83:f6:e4:93:
d4:10:ac:28:d3:49:94:80:89:59:3a:20:61:a2:f1:
f4:21:2a:f9:cb:2b:54:b8:a6:15:85:2a:58:0c:48:
b3:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:B8:B7:09:48:1F:B0:0F:B0:30:B8:41:38:EE:E9:F2:78:CA:00:85
X509v3 Authority Key Identifier:
keyid:81:F3:A8:7E:11:36:6B:54:5A:5A:12:7B:83:28:76:53:B1:8C:8A:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gfOofhE2a1RaWhJ7gyh2U7GMilY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/8795e0-efb7-48c5-849f-cfceb87973dd/1/gfOofhE2a1RaWhJ7gyh2U7GMilY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/8795e0-efb7-48c5-849f-cfceb87973dd/1/gfOofhE2a1RaWhJ7gyh2U7GMilY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:a7:4b:20:d1:46:49:c1:37:52:8d:80:3b:9c:00:a7:97:93:
90:f4:3e:43:5c:2d:5c:06:dd:24:92:30:a2:37:a2:63:5b:4d:
56:fe:5f:49:50:7d:5a:a2:5c:26:a6:e4:62:02:67:46:af:cf:
f1:b4:3a:c5:e6:57:b9:a9:7e:ed:7d:11:60:f6:8c:8b:e9:74:
0e:f4:7b:26:50:98:02:d1:42:31:d0:10:3c:23:28:dd:97:19:
bd:6f:07:f3:35:bf:eb:82:4d:4e:bf:5c:2c:b0:5b:7a:23:97:
05:94:30:9c:f8:99:d2:93:f7:07:0a:60:84:44:39:02:dc:4f:
59:f7:12:5f:ea:12:97:90:39:59:f6:7f:76:c8:73:51:3b:55:
92:b0:89:14:90:15:7f:e8:ae:1b:83:77:82:44:8d:26:18:89:
63:9f:a5:9d:61:a4:a0:44:6f:53:5b:11:db:4e:0c:39:62:66:
e0:13:15:a0:15:7e:73:26:a2:a3:ff:76:ef:de:a1:f6:a5:6e:
c0:62:4f:de:50:91:d5:83:6e:e3:a0:31:72:b6:94:d2:8a:01:
78:a2:e0:19:d6:d1:e9:69:41:bf:eb:a9:68:22:e4:56:16:60:
3f:ac:ad:63:90:bb:b8:82:ff:91:b0:18:ef:1f:76:94:f1:30:
e4:a6:d5:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:27:31 2026 by rpki-client