Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/f6fee6-c0a2-4a03-a981-f5fda0ea300d/1/gKtMCUW3OO3aBYOidLY8G4ZzpjA.mft
File: gKtMCUW3OO3aBYOidLY8G4ZzpjA.mft (raw, json)
Hash identifier: wlvC43rPfBujSVc9m/Yb/AwyKIFocJOl3uac34F9WBc=
Subject key identifier: 83:B9:07:C1:28:BE:C3:30:43:49:E6:12:84:30:E0:7E:1E:A9:6F:10
Authority key identifier: 80:AB:4C:09:45:B7:38:ED:DA:05:83:A2:74:B6:3C:1B:86:73:A6:30
Certificate issuer: /CN=80ab4c0945b738edda0583a274b63c1b8673a630
Certificate serial: 019D29296F15F7A1D18CE5ABFF2AD812E8A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gKtMCUW3OO3aBYOidLY8G4ZzpjA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/f6fee6-c0a2-4a03-a981-f5fda0ea300d/1/gKtMCUW3OO3aBYOidLY8G4ZzpjA.mft
Manifest number: 188A
Signing time: Thu 26 Mar 2026 08:01:14 +0000
Manifest this update: Thu 26 Mar 2026 08:01:14 +0000
Manifest next update: Fri 27 Mar 2026 08:01:14 +0000
Files and hashes: 1: gKtMCUW3OO3aBYOidLY8G4ZzpjA.crl (hash: jOfeCs5ED5b87ibQk7g1c2iXVjZ7/2BbkF6ybjDBAZM=)
2: xQLXNMGtJIEmbmsa0yimk8gh264.roa (hash: 681EcZV9/rvtEn+cL3EpnhUhg/0vWlpEsupf9xZzDx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/f6fee6-c0a2-4a03-a981-f5fda0ea300d/1/gKtMCUW3OO3aBYOidLY8G4ZzpjA.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/f6fee6-c0a2-4a03-a981-f5fda0ea300d/1/gKtMCUW3OO3aBYOidLY8G4ZzpjA.mft
rsync://rpki.ripe.net/repository/DEFAULT/gKtMCUW3OO3aBYOidLY8G4ZzpjA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:6f:15:f7:a1:d1:8c:e5:ab:ff:2a:d8:12:e8:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80ab4c0945b738edda0583a274b63c1b8673a630
Validity
Not Before: Mar 26 08:01:14 2026 GMT
Not After : Mar 27 08:01:14 2026 GMT
Subject: CN=83b907c128bec3304349e6128430e07e1ea96f10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e3:ef:e0:e2:36:30:5d:2c:6d:ba:53:12:e1:
82:39:fd:18:86:9b:e2:27:c4:e9:19:01:73:8b:f1:
42:e9:fa:ca:c9:7b:02:de:1d:a7:71:6a:a3:86:e5:
47:c1:80:35:0a:d9:33:84:4f:0f:98:6f:74:cc:c8:
1b:47:f3:bf:d5:87:c0:a6:c3:6c:74:7e:5e:e5:49:
9b:60:50:f5:9a:be:45:9c:4f:af:94:6c:4a:6c:71:
57:0b:9c:0d:9b:51:31:01:9f:19:90:ef:2f:e0:f7:
bc:bf:f3:29:7a:df:36:eb:81:d9:b2:cc:09:cf:28:
cd:51:db:90:47:da:83:2c:01:95:62:81:b6:57:28:
e2:0c:9d:d7:b8:ce:9c:e8:66:ab:2a:82:43:c0:78:
62:a8:bd:95:fe:5d:a7:fd:6c:16:52:1a:7f:3e:bc:
5c:a3:03:78:d2:5a:b5:88:02:1d:13:2e:42:42:2a:
10:cd:da:6f:d4:87:5c:3b:6a:e2:f9:e5:cd:07:ad:
85:3f:95:82:b3:66:06:13:19:d9:1e:e8:40:92:a4:
45:ed:b3:0e:8b:02:14:6d:09:c0:70:d6:04:63:d7:
37:81:a0:ed:61:6f:0f:7e:18:66:37:f5:3c:d5:90:
f5:00:c1:24:80:4b:ea:07:69:dd:84:6a:ff:53:eb:
e0:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:B9:07:C1:28:BE:C3:30:43:49:E6:12:84:30:E0:7E:1E:A9:6F:10
X509v3 Authority Key Identifier:
keyid:80:AB:4C:09:45:B7:38:ED:DA:05:83:A2:74:B6:3C:1B:86:73:A6:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gKtMCUW3OO3aBYOidLY8G4ZzpjA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/f6fee6-c0a2-4a03-a981-f5fda0ea300d/1/gKtMCUW3OO3aBYOidLY8G4ZzpjA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/f6fee6-c0a2-4a03-a981-f5fda0ea300d/1/gKtMCUW3OO3aBYOidLY8G4ZzpjA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:6f:ea:30:aa:11:a9:7e:0d:00:b7:1a:8d:78:9c:ac:e8:89:
39:23:8d:f8:75:02:01:84:42:a9:11:9d:10:4b:8d:93:f6:a1:
1f:b1:07:ba:04:db:c1:2a:83:f3:3e:79:d3:d5:0b:7b:17:69:
59:a6:66:5d:02:b1:b8:b9:1b:96:f8:a4:7d:45:d9:66:1a:3d:
28:c2:07:30:d1:a4:ac:b4:d6:4c:4c:e4:87:6a:16:bc:b2:68:
f5:43:ea:26:04:92:39:48:94:e7:e1:c5:1d:b5:b2:60:0d:8f:
78:e9:b9:2b:04:f1:38:fa:15:21:69:db:74:fc:ac:56:50:ad:
4f:73:9b:e0:8e:67:d4:87:46:b3:7a:6e:e3:ba:8e:4d:ee:65:
93:e7:7a:6a:2d:67:51:11:f3:96:4a:b0:a9:ec:12:e0:d4:46:
48:f8:07:59:62:15:ff:35:f1:66:0c:f0:68:0a:16:79:3a:b0:
a7:08:c0:ba:dc:ea:48:8a:7d:dc:40:79:94:20:79:b4:9c:15:
66:37:ec:b1:5f:29:6e:e8:9a:62:34:9b:6f:ca:bb:c3:ba:d2:
24:9a:08:d6:ab:8d:b3:81:c2:2f:41:30:a4:6f:06:e1:22:cd:
36:93:f5:dc:27:cf:35:96:76:99:4b:19:9a:ea:15:d4:7a:46:
74:bf:6f:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:26:04 2026 by rpki-client