Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/f0b960-86d8-4062-a597-9b4a2d5f3a76/1/pS_GDTbii7jfFFyErKsZz6U7Alo.mft
File: pS_GDTbii7jfFFyErKsZz6U7Alo.mft (raw, json)
Hash identifier: MromYClrw/9J54CKnpMZlO0+HtFqpcgKq8ElFLz7xxE=
Subject key identifier: 5B:7B:DB:56:BE:37:BA:F0:6C:22:88:CB:7E:F8:F9:8C:E5:14:45:80
Authority key identifier: A5:2F:C6:0D:36:E2:8B:B8:DF:14:5C:84:AC:AB:19:CF:A5:3B:02:5A
Certificate issuer: /CN=a52fc60d36e28bb8df145c84acab19cfa53b025a
Certificate serial: 019D2627F28B5AB6D2C080DF3878452EFC83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pS_GDTbii7jfFFyErKsZz6U7Alo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/f0b960-86d8-4062-a597-9b4a2d5f3a76/1/pS_GDTbii7jfFFyErKsZz6U7Alo.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 18:00:45 +0000
Manifest this update: Wed 25 Mar 2026 18:00:45 +0000
Manifest next update: Thu 26 Mar 2026 18:00:45 +0000
Files and hashes: 1: FRyXsiFg-6BIhEw2ARWH0DNGSnM.roa (hash: HOwOr4bTuIB/KNZWR5lcxrrwlrEvRwNSNG9O5oAt0bs=)
2: M_VtU7f5fPlDKkVKH-oBTR-MfOc.roa (hash: INw4W70ov+0DIQom+PoiFmtJQ/A7yUcxsfN1Ujem6fA=)
3: kkaW2PybyMFtKIudjGW5zNwrUVA.roa (hash: q2dHdK2+xshlUtyI1McPweg9tnAFSg39WkJ96aCsEe8=)
4: pS_GDTbii7jfFFyErKsZz6U7Alo.crl (hash: dyF4ll8wZft+CD3HpaxCMGdt19pP5GFBFndBiQuLZ/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/f0b960-86d8-4062-a597-9b4a2d5f3a76/1/pS_GDTbii7jfFFyErKsZz6U7Alo.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/f0b960-86d8-4062-a597-9b4a2d5f3a76/1/pS_GDTbii7jfFFyErKsZz6U7Alo.mft
rsync://rpki.ripe.net/repository/DEFAULT/pS_GDTbii7jfFFyErKsZz6U7Alo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:27:f2:8b:5a:b6:d2:c0:80:df:38:78:45:2e:fc:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a52fc60d36e28bb8df145c84acab19cfa53b025a
Validity
Not Before: Mar 25 18:00:45 2026 GMT
Not After : Mar 26 18:00:45 2026 GMT
Subject: CN=5b7bdb56be37baf06c2288cb7ef8f98ce5144580
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:89:66:0c:51:a2:ec:a1:cf:48:70:2a:29:4a:
e0:38:f6:db:0f:8d:74:5c:12:69:42:f2:d9:07:30:
95:92:c7:36:7e:fe:c5:19:17:dd:32:02:a9:f4:bb:
ca:e1:2d:00:a4:a4:2c:65:51:7e:e4:19:71:c1:be:
65:2f:cf:e1:7b:e4:c4:de:4b:83:60:cd:05:f0:79:
ad:f7:8a:9d:e2:b1:c9:34:27:5e:1d:7b:f0:52:b8:
99:80:45:9f:03:16:68:26:c5:78:8d:fa:7f:c3:19:
8a:47:2a:d0:0d:43:6c:d3:08:e2:10:6c:e4:21:8a:
a6:ed:f9:be:cb:42:a3:91:7f:be:bc:34:fe:d2:0a:
ea:ec:2c:37:c8:43:e3:c4:b7:60:c5:f7:2f:92:06:
16:05:47:a7:19:5e:14:b3:b3:f0:b2:7c:4e:d0:ae:
1f:88:57:7a:ee:c4:a4:fa:37:1e:f0:0a:69:28:bc:
d6:32:7b:e4:0a:7a:20:94:c9:b9:e9:06:6c:7f:0b:
36:91:f3:ad:bd:2f:3c:eb:6e:2c:cc:40:df:37:00:
1a:c0:1e:42:18:87:72:02:af:55:b3:41:20:50:c7:
72:8d:5c:6f:01:7a:ac:68:df:64:c6:a0:19:74:85:
5e:24:10:ad:79:32:4b:0f:7b:22:bd:cf:f0:44:98:
10:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:7B:DB:56:BE:37:BA:F0:6C:22:88:CB:7E:F8:F9:8C:E5:14:45:80
X509v3 Authority Key Identifier:
keyid:A5:2F:C6:0D:36:E2:8B:B8:DF:14:5C:84:AC:AB:19:CF:A5:3B:02:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pS_GDTbii7jfFFyErKsZz6U7Alo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/f0b960-86d8-4062-a597-9b4a2d5f3a76/1/pS_GDTbii7jfFFyErKsZz6U7Alo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/f0b960-86d8-4062-a597-9b4a2d5f3a76/1/pS_GDTbii7jfFFyErKsZz6U7Alo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:3f:5a:ac:03:bd:0a:53:00:18:2c:b9:58:36:fd:90:0f:a3:
bc:be:15:95:3c:a9:30:9f:9e:05:19:d8:6d:7d:13:fb:2e:3e:
4f:8d:e0:42:61:a3:a1:14:56:d5:0a:95:85:49:6d:49:af:34:
75:cd:f3:48:d1:47:be:a1:87:c6:8f:e3:78:7d:e4:64:18:21:
9a:34:28:97:4f:83:97:78:64:da:6b:ea:2b:86:c5:b8:3e:65:
26:a3:fd:3c:f8:f1:a6:34:d4:1e:de:2e:96:e4:a7:67:74:22:
b4:a2:f5:ac:77:94:49:d2:64:a6:72:9f:32:2f:a2:c8:d6:02:
fa:c3:c4:ab:ca:ea:3c:28:b7:8f:10:12:8e:ed:ee:30:66:4f:
d6:f7:47:40:00:06:ab:80:d6:0a:04:ab:5d:5c:6b:1e:3e:05:
c0:78:a0:70:c3:a8:cb:ec:82:b1:47:61:bd:2d:53:e8:dd:eb:
39:9b:bb:d1:17:9b:5f:5c:aa:fa:0d:5b:aa:2b:b9:2f:75:84:
e2:7b:0b:27:5a:3d:84:b4:2c:50:0e:ee:69:2d:76:d7:e1:25:
a4:a5:44:ac:c0:35:53:08:01:d7:e7:fc:7c:62:ee:0b:12:bb:
e8:7d:c0:9c:c3:fd:c6:cc:d4:38:fc:95:8c:d9:3b:df:87:d8:
ae:ee:e3:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:09 2026 by rpki-client