Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/139b38-5b24-407d-b17e-4ca35430dca3/1/gKMz0T3JFfT7-2GyWkh36ROOfx0.mft
File: gKMz0T3JFfT7-2GyWkh36ROOfx0.mft (raw, json)
Hash identifier: uNAtL0sPM1/6uukJ4NRSsKcz5Nsj7j3KEoAeC5IR75k=
Subject key identifier: B7:33:5A:08:CC:58:29:D9:F2:63:CB:66:55:0B:C3:D7:62:3F:16:55
Authority key identifier: 80:A3:33:D1:3D:C9:15:F4:FB:FB:61:B2:5A:48:77:E9:13:8E:7F:1D
Certificate issuer: /CN=80a333d13dc915f4fbfb61b25a4877e9138e7f1d
Certificate serial: 019D2B4EAEB2D28D60A0CE57CA712532971B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gKMz0T3JFfT7-2GyWkh36ROOfx0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/139b38-5b24-407d-b17e-4ca35430dca3/1/gKMz0T3JFfT7-2GyWkh36ROOfx0.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 18:01:09 +0000
Manifest this update: Thu 26 Mar 2026 18:01:09 +0000
Manifest next update: Fri 27 Mar 2026 18:01:09 +0000
Files and hashes: 1: 60R1h-oxgPD3iJcDXQAz-94iJbU.roa (hash: Q4xOmlaV2o2SZe3E5kLrLywn0HX4BFk1d4KvQu8nLsY=)
2: gKMz0T3JFfT7-2GyWkh36ROOfx0.crl (hash: ZG8UDZF2vhbrD6sMmfDcefDhKRiAUXOQT0VtzYTYNe0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/139b38-5b24-407d-b17e-4ca35430dca3/1/gKMz0T3JFfT7-2GyWkh36ROOfx0.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/139b38-5b24-407d-b17e-4ca35430dca3/1/gKMz0T3JFfT7-2GyWkh36ROOfx0.mft
rsync://rpki.ripe.net/repository/DEFAULT/gKMz0T3JFfT7-2GyWkh36ROOfx0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:4e:ae:b2:d2:8d:60:a0:ce:57:ca:71:25:32:97:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80a333d13dc915f4fbfb61b25a4877e9138e7f1d
Validity
Not Before: Mar 26 18:01:09 2026 GMT
Not After : Mar 27 18:01:09 2026 GMT
Subject: CN=b7335a08cc5829d9f263cb66550bc3d7623f1655
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:56:84:69:d0:b3:bf:c2:35:86:5c:6a:14:51:
1a:9a:8a:68:f8:47:8f:ef:76:65:81:ed:f2:48:e1:
3c:56:f0:99:1f:48:76:38:b5:d3:f5:f3:68:2a:28:
08:33:72:a0:e4:3e:98:da:ee:68:57:f7:58:13:ef:
09:d4:b6:14:f7:bb:f9:54:ab:29:1e:e1:f0:94:2f:
74:e3:5b:41:1e:ed:3b:cb:03:ae:2f:74:cc:ae:3c:
06:54:45:b2:e4:db:c4:47:d2:5b:70:10:0d:cf:8d:
2d:61:c3:b2:39:66:a6:33:98:66:53:73:4c:53:48:
1e:fc:90:75:ee:e6:42:58:ef:e6:39:e5:38:93:ec:
68:67:76:e7:dc:4b:57:14:61:42:46:42:3e:45:39:
e6:07:75:f4:ba:71:57:28:ba:77:6a:a4:f0:e7:a9:
48:02:89:30:e6:80:40:5a:a1:bf:6c:23:24:9c:52:
21:a7:50:0b:96:83:1e:e8:0c:84:e7:a1:99:fc:05:
36:1a:e2:25:cf:cf:4b:e0:bc:15:e4:c4:e3:af:dc:
d8:4e:cb:82:03:13:4c:46:77:52:04:03:ff:7e:37:
84:41:cd:3a:99:2b:1e:72:83:74:6c:a3:67:fd:8d:
56:9c:fa:3a:9e:7c:53:f6:be:7f:5f:96:7a:f0:8a:
31:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:33:5A:08:CC:58:29:D9:F2:63:CB:66:55:0B:C3:D7:62:3F:16:55
X509v3 Authority Key Identifier:
keyid:80:A3:33:D1:3D:C9:15:F4:FB:FB:61:B2:5A:48:77:E9:13:8E:7F:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gKMz0T3JFfT7-2GyWkh36ROOfx0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/139b38-5b24-407d-b17e-4ca35430dca3/1/gKMz0T3JFfT7-2GyWkh36ROOfx0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/139b38-5b24-407d-b17e-4ca35430dca3/1/gKMz0T3JFfT7-2GyWkh36ROOfx0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:8c:9c:9e:c0:36:d6:fc:90:79:40:de:ec:14:f3:2c:b0:1c:
c3:e5:6a:0e:e2:d3:9c:95:aa:7d:c3:f7:d8:22:a5:ac:77:5a:
01:5f:2f:36:45:1a:a8:0d:6b:86:4c:18:c8:91:7b:c9:63:28:
85:2e:33:f4:fb:72:25:67:a5:d4:f8:8b:fc:52:00:2b:ce:79:
c0:96:cf:82:cf:7d:ef:be:71:eb:de:84:7b:b5:33:b5:8e:71:
2d:18:1c:23:90:f0:cb:ff:01:32:fa:4a:e0:75:51:45:18:18:
b3:b3:59:82:64:88:0a:99:3d:54:75:70:be:2e:9e:b9:8b:80:
7d:5e:a1:fd:24:fe:8e:4a:a7:40:48:bd:50:76:1a:0d:72:d9:
c9:86:41:87:5d:a9:c4:de:51:d2:9a:29:1a:74:82:5d:7a:5b:
a0:58:f8:90:32:7a:3a:47:d2:07:71:4b:3a:ce:44:34:d8:4c:
e2:da:39:07:e5:b3:c6:3c:e4:68:d4:ae:56:5e:21:e5:dc:04:
b6:0a:2b:1c:0d:3f:8b:4d:47:83:c5:a7:e8:4b:ba:1a:ea:dd:
66:76:75:aa:50:0d:ac:e2:ba:9c:57:17:5c:ac:00:2b:00:24:
9d:ad:aa:d2:fe:89:0b:a1:42:9b:5f:88:10:d9:56:77:ba:f3:
20:5a:de:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:38:45 2026 by rpki-client