Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/255ec8-f1e3-4a8f-af30-7e39d963a537/1/gRncpg1HvWA7jpzF3r2WxcS6FFs.mft
File: gRncpg1HvWA7jpzF3r2WxcS6FFs.mft (raw, json)
Hash identifier: 7GHjcNYw1NgCCL8mkWHxu9Ge+3aqMjC6VzXyKik/t7o=
Subject key identifier: B7:4B:DE:7B:0E:FA:09:E2:EB:7C:1C:AE:39:3D:51:A1:82:52:81:C5
Authority key identifier: 81:19:DC:A6:0D:47:BD:60:3B:8E:9C:C5:DE:BD:96:C5:C4:BA:14:5B
Certificate issuer: /CN=8119dca60d47bd603b8e9cc5debd96c5c4ba145b
Certificate serial: 019D2A04A7255886D775B394D51AA5C80F51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gRncpg1HvWA7jpzF3r2WxcS6FFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/255ec8-f1e3-4a8f-af30-7e39d963a537/1/gRncpg1HvWA7jpzF3r2WxcS6FFs.mft
Manifest number: 07F6
Signing time: Thu 26 Mar 2026 12:00:41 +0000
Manifest this update: Thu 26 Mar 2026 12:00:41 +0000
Manifest next update: Fri 27 Mar 2026 12:00:41 +0000
Files and hashes: 1: 8DmkjBsB4UphtJeSH3FxYV3pk2w.roa (hash: bPCKO1jX7AbhbVFNmCvWafOjpt+yiRZfbgufuUpuv5g=)
2: gRncpg1HvWA7jpzF3r2WxcS6FFs.crl (hash: mUq+N8BiuXdEBZE/m5XvwyjuVgP+0ywVZQcKffzorWU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/255ec8-f1e3-4a8f-af30-7e39d963a537/1/gRncpg1HvWA7jpzF3r2WxcS6FFs.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/255ec8-f1e3-4a8f-af30-7e39d963a537/1/gRncpg1HvWA7jpzF3r2WxcS6FFs.mft
rsync://rpki.ripe.net/repository/DEFAULT/gRncpg1HvWA7jpzF3r2WxcS6FFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:a7:25:58:86:d7:75:b3:94:d5:1a:a5:c8:0f:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8119dca60d47bd603b8e9cc5debd96c5c4ba145b
Validity
Not Before: Mar 26 12:00:41 2026 GMT
Not After : Mar 27 12:00:41 2026 GMT
Subject: CN=b74bde7b0efa09e2eb7c1cae393d51a1825281c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:48:25:44:6e:1a:86:62:c4:87:28:27:c4:39:
b3:e7:d1:d2:04:f1:d4:bf:3d:73:6b:7f:fe:45:24:
8b:db:2d:c4:04:63:bf:30:c0:bb:e1:4b:21:b0:ff:
9f:52:20:af:f0:fe:d9:13:49:88:51:23:1f:90:59:
db:dd:df:bd:a6:fc:f5:ec:37:3c:2b:48:95:e3:bf:
b6:9f:95:e5:fc:8f:f4:cc:d1:4f:bf:0d:38:5e:55:
41:76:8d:bd:b5:ce:bb:98:a3:93:55:ff:ab:d7:a0:
b1:2e:f6:a8:4e:4e:77:ed:61:fd:37:0b:f2:88:6a:
a0:3d:fb:05:2c:e7:e6:3b:25:14:bb:44:b8:c0:a7:
52:67:ac:e0:3c:28:e9:05:54:fd:50:da:d9:ec:e7:
16:d0:9d:4f:0b:61:32:d4:21:fb:16:2b:10:11:5b:
b4:46:d8:68:68:13:ba:ba:cc:f6:33:50:99:89:f6:
00:93:59:39:4e:4b:a9:2a:2e:f6:72:9a:5c:de:b1:
8a:28:d9:69:a3:cd:ed:33:96:3a:0c:41:05:5d:14:
0d:fb:9a:56:b3:04:23:1f:2e:71:f5:c9:d4:43:07:
26:ea:7f:1a:90:62:0c:1d:d6:2b:92:e4:f6:3b:f3:
51:c0:32:15:49:4e:f8:72:eb:99:d3:ba:2b:b7:76:
f0:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:4B:DE:7B:0E:FA:09:E2:EB:7C:1C:AE:39:3D:51:A1:82:52:81:C5
X509v3 Authority Key Identifier:
keyid:81:19:DC:A6:0D:47:BD:60:3B:8E:9C:C5:DE:BD:96:C5:C4:BA:14:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gRncpg1HvWA7jpzF3r2WxcS6FFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/255ec8-f1e3-4a8f-af30-7e39d963a537/1/gRncpg1HvWA7jpzF3r2WxcS6FFs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/255ec8-f1e3-4a8f-af30-7e39d963a537/1/gRncpg1HvWA7jpzF3r2WxcS6FFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:a3:52:dc:2b:f0:af:80:3a:e9:6f:cd:b3:b8:01:36:0c:79:
6b:29:30:35:24:01:7c:ad:1e:70:cf:34:a8:53:8d:a5:4f:9c:
f7:4f:af:7c:3b:11:0f:ce:9f:d8:c6:3a:2d:7f:66:89:6c:98:
6d:9d:e0:51:97:60:07:a6:6d:ef:97:8f:17:8e:e1:62:c8:7f:
0b:6b:0b:a4:3d:af:8a:b5:9f:76:c0:6a:7f:9a:16:1e:bb:fa:
d4:5f:44:2f:a3:a9:bd:d6:0a:2c:cd:e6:bf:ec:33:5f:3b:ae:
bc:7b:85:6f:ab:ad:a4:37:7b:fa:e8:13:b2:5f:03:f9:48:ac:
a2:b8:69:89:6b:de:f1:6b:88:ae:03:17:a4:0d:04:5f:3c:64:
41:16:87:a7:e3:bb:0d:9b:a2:5b:36:14:9c:d5:c3:cc:5a:58:
33:4c:07:37:0d:7c:86:b4:6b:82:5f:fd:fd:d5:ad:0c:99:05:
85:18:7d:54:dc:3a:15:7f:4e:b2:ed:1c:07:31:58:d2:ed:27:
bf:2c:52:79:dc:35:6b:23:d5:c2:fb:e7:81:f8:ef:71:5b:62:
c6:c6:b4:4c:a7:f8:bd:15:b8:78:d3:98:18:8e:8c:5e:39:bf:
73:37:7c:d5:92:8f:05:bc:f0:9c:bc:f0:4e:43:2a:5e:f7:be:
27:01:fd:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:18:02 2026 by rpki-client