Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/536e54-d8fd-45ef-be60-f52306eeb722/1/gs1f087z4cqiC7ph-i1RtrlOtU0.mft
File: gs1f087z4cqiC7ph-i1RtrlOtU0.mft (raw, json)
Hash identifier: gwXKisYIsnOrdHOEWe3IxOlWZsXIj5IT92xpu2zHS58=
Subject key identifier: EC:2C:6B:EC:51:64:3A:F7:03:AF:87:B6:7A:5C:0D:2A:5B:21:61:E9
Authority key identifier: 82:CD:5F:D3:CE:F3:E1:CA:A2:0B:BA:61:FA:2D:51:B6:B9:4E:B5:4D
Certificate issuer: /CN=82cd5fd3cef3e1caa20bba61fa2d51b6b94eb54d
Certificate serial: 019D2583B24AC808B4A807626F8F2AA3EBBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gs1f087z4cqiC7ph-i1RtrlOtU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/536e54-d8fd-45ef-be60-f52306eeb722/1/gs1f087z4cqiC7ph-i1RtrlOtU0.mft
Manifest number: 0A02
Signing time: Wed 25 Mar 2026 15:01:20 +0000
Manifest this update: Wed 25 Mar 2026 15:01:20 +0000
Manifest next update: Thu 26 Mar 2026 15:01:20 +0000
Files and hashes: 1: 18OuO3YLBaVeqqlU-R18PjcKR2o.roa (hash: NlnhsswwnMpwMkpGryqI6bDof76aAgmGxVw0Adxc50I=)
2: gs1f087z4cqiC7ph-i1RtrlOtU0.crl (hash: deqN52puhtNniz0z37AEIQFUa5C6JjAczBDmT64ZW9Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/536e54-d8fd-45ef-be60-f52306eeb722/1/gs1f087z4cqiC7ph-i1RtrlOtU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/536e54-d8fd-45ef-be60-f52306eeb722/1/gs1f087z4cqiC7ph-i1RtrlOtU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/gs1f087z4cqiC7ph-i1RtrlOtU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:b2:4a:c8:08:b4:a8:07:62:6f:8f:2a:a3:eb:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82cd5fd3cef3e1caa20bba61fa2d51b6b94eb54d
Validity
Not Before: Mar 25 15:01:20 2026 GMT
Not After : Mar 26 15:01:20 2026 GMT
Subject: CN=ec2c6bec51643af703af87b67a5c0d2a5b2161e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f4:25:61:46:aa:f8:b5:82:13:a6:2b:d5:1b:
9a:fd:7e:53:8e:10:23:ad:c1:0d:61:78:da:78:9a:
c1:be:2f:d4:30:dc:9e:fd:e2:1d:cc:e0:15:4a:7e:
95:6f:ea:04:d4:47:f4:d3:c3:49:0d:8d:99:03:05:
b9:15:fd:d7:57:7e:39:eb:c1:be:90:0f:be:28:ea:
6f:e5:ef:79:b7:ff:e5:81:1f:a2:3e:39:67:84:cf:
cc:ff:4d:b7:c3:69:ae:1a:52:0e:57:e7:81:ca:d5:
68:18:29:df:1c:c3:f4:b4:28:ca:51:b6:dd:0f:93:
b3:a3:0f:2d:5f:1f:f8:fb:56:27:7e:08:6b:e7:26:
36:d9:c8:18:4a:26:8b:9b:e2:1c:fb:96:84:c3:0e:
4f:9f:fa:66:d8:16:b4:7b:78:6d:1c:8a:c9:84:b9:
ca:ea:1f:41:99:7a:2e:b4:80:c2:5d:82:df:d9:43:
fe:8c:65:cb:7f:ca:40:8c:2f:41:b2:8f:e5:27:cf:
43:0f:11:69:62:e7:ee:4f:6d:96:38:29:2b:2a:be:
9a:5f:67:cd:e7:eb:ef:1d:3e:9e:dc:c8:db:af:32:
08:0b:c0:fc:ce:04:3a:42:0f:ad:58:73:4f:38:9a:
1d:61:59:5a:f6:a8:29:7e:e2:95:b0:5c:14:5a:81:
69:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:2C:6B:EC:51:64:3A:F7:03:AF:87:B6:7A:5C:0D:2A:5B:21:61:E9
X509v3 Authority Key Identifier:
keyid:82:CD:5F:D3:CE:F3:E1:CA:A2:0B:BA:61:FA:2D:51:B6:B9:4E:B5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gs1f087z4cqiC7ph-i1RtrlOtU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/536e54-d8fd-45ef-be60-f52306eeb722/1/gs1f087z4cqiC7ph-i1RtrlOtU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/536e54-d8fd-45ef-be60-f52306eeb722/1/gs1f087z4cqiC7ph-i1RtrlOtU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:9a:93:ea:5e:1f:a7:9e:8a:16:83:97:d8:ba:2a:df:29:40:
66:b9:99:f3:46:71:e6:e4:e2:39:80:e4:f5:c5:0d:a4:a4:a7:
c2:e9:1f:18:e7:dc:ce:27:14:b1:77:71:14:4d:90:df:24:7b:
a6:0c:14:ec:e7:fc:e9:ba:7a:61:53:3f:19:ea:89:1c:47:3e:
6e:d0:90:d9:78:0f:8a:5e:94:7e:de:80:9d:d7:6b:67:35:da:
56:1c:77:19:f1:33:44:74:e7:e6:58:c1:d0:d9:89:b9:b2:8a:
a8:12:ba:de:fb:ec:d5:f2:3c:04:67:7d:cd:28:5d:99:59:73:
b5:02:aa:bd:84:a9:bf:ac:0b:09:87:49:73:7e:d2:b1:01:66:
31:26:c4:00:21:d4:2b:e2:48:a4:e4:ce:6d:73:73:3e:d8:7f:
44:0b:16:d9:25:a9:0d:57:e2:3b:d1:00:2b:34:32:54:4d:01:
15:a0:14:e8:c9:ca:49:03:2c:88:5e:44:f0:ce:4f:85:84:df:
01:3a:04:ba:6e:bb:6e:85:71:13:0f:d3:e6:64:c9:cc:eb:03:
30:0d:7b:b9:72:1b:37:70:56:67:fa:72:ee:61:81:14:6d:4e:
3e:23:15:1f:26:c8:57:0d:59:b3:4d:8d:ce:7c:c0:03:7a:17:
c4:a6:d9:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:10:28 2026 by rpki-client