
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/cef114-5868-47b8-9788-7b64089bb141/1/gnFzo4DN-Tx7KGaPq65Wmqb3o1o.mft
File: gnFzo4DN-Tx7KGaPq65Wmqb3o1o.mft (raw, json)
Hash identifier: xfCqkAgghNvbKi6xyvARFaDD4O8Cft59UOa/k4g7WZk=
Subject key identifier: 15:31:7B:A4:4B:C8:6D:43:AF:0A:78:9F:DE:94:08:E4:CE:73:91:A5
Authority key identifier: 82:71:73:A3:80:CD:F9:3C:7B:28:66:8F:AB:AE:56:9A:A6:F7:A3:5A
Certificate issuer: /CN=827173a380cdf93c7b28668fabae569aa6f7a35a
Certificate serial: 019D27DFDDF86DA48A87C8042903D4DA9EAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnFzo4DN-Tx7KGaPq65Wmqb3o1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/cef114-5868-47b8-9788-7b64089bb141/1/gnFzo4DN-Tx7KGaPq65Wmqb3o1o.mft
Manifest number: 13A8
Signing time: Thu 26 Mar 2026 02:01:15 +0000
Manifest this update: Thu 26 Mar 2026 02:01:15 +0000
Manifest next update: Fri 27 Mar 2026 02:01:15 +0000
Files and hashes: 1: MKLnBwEoTvJQ6Ll9HAStk_6b-lo.roa (hash: UcMYN8ihICS5eRjwAvcwUGC2jCQeNNKHfqsuNIFnBhE=)
2: gnFzo4DN-Tx7KGaPq65Wmqb3o1o.crl (hash: e0i1v2o1V8Z40w4JPoQFJMlOmVJLKenwQIYhNU5GUP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/cef114-5868-47b8-9788-7b64089bb141/1/gnFzo4DN-Tx7KGaPq65Wmqb3o1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/cef114-5868-47b8-9788-7b64089bb141/1/gnFzo4DN-Tx7KGaPq65Wmqb3o1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/gnFzo4DN-Tx7KGaPq65Wmqb3o1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:dd:f8:6d:a4:8a:87:c8:04:29:03:d4:da:9e:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=827173a380cdf93c7b28668fabae569aa6f7a35a
Validity
Not Before: Mar 26 02:01:15 2026 GMT
Not After : Mar 27 02:01:15 2026 GMT
Subject: CN=15317ba44bc86d43af0a789fde9408e4ce7391a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1c:74:40:fb:cf:e8:b0:f3:cd:b7:07:92:f3:
73:02:fe:85:d9:90:42:4c:8f:a9:49:fd:98:55:f5:
b1:2a:98:be:a0:fe:51:03:e6:82:fc:11:4b:5f:83:
d1:b9:69:b2:f6:48:69:89:31:40:08:16:90:74:16:
48:79:ac:5d:ce:78:10:52:15:36:cd:b4:a1:c1:05:
62:2a:e5:f8:5d:f6:1e:90:e6:c0:a0:12:83:b0:f3:
92:81:9e:e9:96:38:51:29:1b:15:7e:0e:85:c0:24:
c5:31:8b:4a:d9:ae:51:f7:99:d7:86:7c:f2:f5:fd:
53:df:97:f7:94:82:1c:c4:97:7f:bb:cf:c9:88:a5:
06:14:70:89:74:68:a3:3a:1c:9a:63:83:ea:78:7a:
b7:9d:4e:e1:56:a5:ec:c6:e1:57:ab:ac:0f:2e:f4:
8f:6d:e5:18:fd:43:09:0d:35:31:28:75:51:38:7e:
cb:26:1e:cf:19:0f:ad:a5:ab:97:27:28:cb:2b:c8:
43:c8:9c:dd:fa:c1:7c:d6:fc:a6:68:f1:86:12:2a:
ff:53:c3:aa:67:48:93:90:62:b9:45:be:bd:d5:37:
1c:b4:5e:38:99:fd:c6:a3:46:44:74:97:b0:06:4e:
e0:6c:f6:b0:78:e2:ef:c0:76:44:6e:14:40:0f:4d:
38:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:31:7B:A4:4B:C8:6D:43:AF:0A:78:9F:DE:94:08:E4:CE:73:91:A5
X509v3 Authority Key Identifier:
keyid:82:71:73:A3:80:CD:F9:3C:7B:28:66:8F:AB:AE:56:9A:A6:F7:A3:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnFzo4DN-Tx7KGaPq65Wmqb3o1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/cef114-5868-47b8-9788-7b64089bb141/1/gnFzo4DN-Tx7KGaPq65Wmqb3o1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/cef114-5868-47b8-9788-7b64089bb141/1/gnFzo4DN-Tx7KGaPq65Wmqb3o1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:81:11:d9:7d:a2:a4:45:eb:8a:ca:bd:56:b0:57:14:3c:5e:
b4:95:54:b8:b4:16:5b:b3:a0:d6:85:00:88:aa:a9:11:9b:bf:
37:fb:ce:07:55:ba:eb:e3:d7:f9:97:fa:5a:e2:76:14:f3:2c:
7a:69:61:46:f2:4e:ad:5a:27:f1:fb:5c:a1:a0:76:2e:e8:76:
19:a5:a9:13:02:05:3a:38:fe:81:8e:1d:b6:a8:43:47:2c:e7:
c7:74:1b:1a:8e:be:82:55:9e:32:50:55:da:23:a1:6a:5b:5d:
f9:06:10:0c:2c:9b:f7:4e:30:24:39:61:1d:c5:2e:21:da:4c:
94:43:dc:36:3e:a9:41:b9:33:42:4f:df:8b:88:44:0b:e5:3c:
26:f1:ba:c8:ac:fc:3f:d9:4b:1b:f2:58:61:45:f4:f4:87:cd:
be:da:ab:d2:46:4b:a6:2c:6a:e4:7c:66:57:2f:1e:83:46:d8:
b6:50:af:16:e6:28:87:5e:7c:5a:c5:9f:3f:2e:64:50:35:3f:
fb:5d:fc:18:8f:db:83:f3:2a:2c:f2:2b:ff:a0:dd:71:4c:e7:
d2:9e:1c:f4:d2:50:12:15:09:71:4d:03:9e:0e:a0:f5:60:32:
4a:ed:ef:da:43:8e:6e:43:d9:a1:8a:db:40:9f:14:b9:fc:e4:
25:c6:3f:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:20:58 2026 by rpki-client