Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/fb212a-7a76-42e2-8989-965529f20d11/1/gPmiS9JsyCF1GKEfWY5jcgJeiuk.mft
File: gPmiS9JsyCF1GKEfWY5jcgJeiuk.mft (raw, json)
Hash identifier: 2AuFnNVrQ/5kbaz9ZdS5Q9r8a9ZRGnYhcfsQx0vGOUE=
Subject key identifier: A2:1D:3C:D1:84:60:C6:16:61:9E:E6:A0:F8:1F:8F:59:36:CC:B9:0F
Authority key identifier: 80:F9:A2:4B:D2:6C:C8:21:75:18:A1:1F:59:8E:63:72:02:5E:8A:E9
Certificate issuer: /CN=80f9a24bd26cc8217518a11f598e6372025e8ae9
Certificate serial: 019D2816B366E524CE4CFD46B70D7A6F3358
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gPmiS9JsyCF1GKEfWY5jcgJeiuk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/fb212a-7a76-42e2-8989-965529f20d11/1/gPmiS9JsyCF1GKEfWY5jcgJeiuk.mft
Manifest number: 1893
Signing time: Thu 26 Mar 2026 03:01:09 +0000
Manifest this update: Thu 26 Mar 2026 03:01:09 +0000
Manifest next update: Fri 27 Mar 2026 03:01:09 +0000
Files and hashes: 1: GvVv96JrRLH22YKSK9VfEbCaaP0.roa (hash: Qk3itIJYOZGxOb9KSpcwss8K3JcW4s+BHAT7y+BPQUI=)
2: ZYu3qwDD62OQjK-0MY1GhTTV3L0.roa (hash: jwdnKx0rMKE4+yxjFPdAO7oEDuayA2F4huzOqBo8dhI=)
3: gPmiS9JsyCF1GKEfWY5jcgJeiuk.crl (hash: hMZN3UKbd2v/q/F157/nkbYajPdCD+YaptU0ZJCRy7c=)
4: uXeyuyNFTLdI8bGRmbqj8zikNy8.roa (hash: 3g5uGaWB0/TdoVSPoOBbNodtyn53Sd/iS2fmmUAB/ic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/fb212a-7a76-42e2-8989-965529f20d11/1/gPmiS9JsyCF1GKEfWY5jcgJeiuk.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/fb212a-7a76-42e2-8989-965529f20d11/1/gPmiS9JsyCF1GKEfWY5jcgJeiuk.mft
rsync://rpki.ripe.net/repository/DEFAULT/gPmiS9JsyCF1GKEfWY5jcgJeiuk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:b3:66:e5:24:ce:4c:fd:46:b7:0d:7a:6f:33:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80f9a24bd26cc8217518a11f598e6372025e8ae9
Validity
Not Before: Mar 26 03:01:09 2026 GMT
Not After : Mar 27 03:01:09 2026 GMT
Subject: CN=a21d3cd18460c616619ee6a0f81f8f5936ccb90f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:06:3e:d3:22:5a:65:17:76:bf:36:96:67:c5:
99:d8:8a:19:0c:02:4b:1d:d4:2f:99:84:6b:d8:62:
a1:d6:fb:06:13:c8:75:bf:e3:86:eb:08:0b:59:ef:
42:09:e3:91:fa:a9:b5:d2:d5:8d:57:a1:3e:75:4a:
b6:fa:f1:31:9b:15:da:35:b5:6a:15:4e:89:53:9f:
81:38:b3:75:2b:b9:da:21:e1:34:fc:8a:39:32:fa:
1c:0a:59:1b:53:76:ad:5e:5f:37:d5:3b:74:3d:a4:
6a:77:74:24:b0:71:d4:b4:31:ee:6b:27:88:2a:01:
1f:3e:09:55:d7:44:80:f0:8c:23:6e:91:ad:c1:5a:
67:62:a7:06:28:04:90:0d:60:5b:2e:7f:41:58:93:
37:14:49:0c:35:b2:6e:50:96:2a:3c:79:a3:09:33:
d5:48:0a:ae:e2:08:3b:9f:98:43:a1:18:a0:ed:13:
74:c0:b0:9d:77:c0:e0:69:14:d6:38:1e:37:30:6b:
a8:84:df:3d:42:d7:96:cf:82:6e:f5:4e:0d:77:ad:
31:06:2a:5f:21:74:3b:98:07:9a:ce:11:f5:cb:01:
be:60:e1:42:5e:d0:3a:cb:36:16:64:2e:1d:47:71:
e4:f4:9c:6d:92:6c:19:ab:d1:68:ce:02:fc:80:0e:
d2:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:1D:3C:D1:84:60:C6:16:61:9E:E6:A0:F8:1F:8F:59:36:CC:B9:0F
X509v3 Authority Key Identifier:
keyid:80:F9:A2:4B:D2:6C:C8:21:75:18:A1:1F:59:8E:63:72:02:5E:8A:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gPmiS9JsyCF1GKEfWY5jcgJeiuk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/fb212a-7a76-42e2-8989-965529f20d11/1/gPmiS9JsyCF1GKEfWY5jcgJeiuk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/fb212a-7a76-42e2-8989-965529f20d11/1/gPmiS9JsyCF1GKEfWY5jcgJeiuk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:96:e8:4e:ea:1f:0e:7d:60:2a:72:0a:d8:bd:da:c1:d2:99:
e4:2c:cf:a0:22:a9:ec:67:34:64:c6:88:69:e5:5e:6d:e0:3d:
b5:ce:d3:cd:c7:2a:c5:63:79:9f:db:b2:22:63:3c:44:81:48:
c3:39:10:1b:19:db:8f:d0:87:fe:64:b8:50:63:f2:6e:9f:c7:
a5:ee:06:46:04:95:2a:7d:b9:ce:ff:92:ef:d5:24:df:cf:75:
06:44:14:63:a0:7a:83:76:1d:73:76:78:13:57:6c:f9:f2:dd:
82:ab:79:0e:4e:a8:3e:c7:b2:95:99:f9:d5:5e:da:95:23:49:
7a:0d:b6:3f:6d:6e:ab:1e:5c:84:73:15:46:af:a3:92:3e:48:
37:fe:d6:c5:b6:2b:10:ca:3f:4c:14:b3:3d:a3:e4:93:b8:8c:
15:90:64:3b:26:9a:bb:b8:87:a6:a8:6c:57:4e:5f:d9:93:ed:
47:05:20:7e:18:a5:49:01:e9:65:f0:4f:d1:a5:f7:82:fa:27:
8c:c9:cf:2f:98:58:d9:a2:0b:8d:40:ff:5c:7f:c9:2c:ce:38:
d2:02:ae:4d:23:20:6f:e2:9c:a4:34:a4:02:ff:e2:a3:8c:2d:
05:bc:54:d4:55:ee:8f:f5:c0:a5:73:fb:8b:02:83:39:f7:a6:
f2:5c:4d:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:00:09 2026 by rpki-client