Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/b084bf-a454-43cf-ac92-47d98e58545a/1/gKn_9jo0d5V_91zNwAPatoz50VU.mft
File: gKn_9jo0d5V_91zNwAPatoz50VU.mft (raw, json)
Hash identifier: kGuzdjZV61hMV7lQuGOQoFSopT/oc6Df/QnIV7de4OM=
Subject key identifier: 9D:CB:CE:E9:8E:0B:EE:74:79:A0:3D:CA:0A:8A:B7:85:EE:B2:21:C5
Authority key identifier: 80:A9:FF:F6:3A:34:77:95:7F:F7:5C:CD:C0:03:DA:B6:8C:F9:D1:55
Certificate issuer: /CN=80a9fff63a3477957ff75ccdc003dab68cf9d155
Certificate serial: 019D29CE377A63AC8DCC417AB711D6F50F90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gKn_9jo0d5V_91zNwAPatoz50VU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/b084bf-a454-43cf-ac92-47d98e58545a/1/gKn_9jo0d5V_91zNwAPatoz50VU.mft
Manifest number: 18BF
Signing time: Thu 26 Mar 2026 11:01:13 +0000
Manifest this update: Thu 26 Mar 2026 11:01:13 +0000
Manifest next update: Fri 27 Mar 2026 11:01:13 +0000
Files and hashes: 1: GReXiclUBB-KrTV4GjU5VEIGiuQ.roa (hash: +RCUZzeLZjE5ABoGDapDE+e1oMevPrWY5U4VoOEOhCE=)
2: WvR_PyZn7HQBLy1Van9znwED4dU.roa (hash: 5FqxeqmUCHn2vzUhg58G9qJL/lfqVbvp/uqG5bnLGIU=)
3: gKn_9jo0d5V_91zNwAPatoz50VU.crl (hash: IqoC22b55NQ/AKtqVVZIP7azIqimJAWpkeeB1F2+JbQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/b084bf-a454-43cf-ac92-47d98e58545a/1/gKn_9jo0d5V_91zNwAPatoz50VU.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/b084bf-a454-43cf-ac92-47d98e58545a/1/gKn_9jo0d5V_91zNwAPatoz50VU.mft
rsync://rpki.ripe.net/repository/DEFAULT/gKn_9jo0d5V_91zNwAPatoz50VU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:37:7a:63:ac:8d:cc:41:7a:b7:11:d6:f5:0f:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80a9fff63a3477957ff75ccdc003dab68cf9d155
Validity
Not Before: Mar 26 11:01:13 2026 GMT
Not After : Mar 27 11:01:13 2026 GMT
Subject: CN=9dcbcee98e0bee7479a03dca0a8ab785eeb221c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:78:7c:65:cd:ae:6e:72:f9:6b:23:1d:aa:52:
50:dd:dc:be:3b:7b:58:04:91:e0:3e:f9:af:34:e9:
23:4a:a9:af:a0:56:53:6f:c6:e0:6f:71:fc:47:12:
86:9c:47:61:89:bb:3e:36:f3:ff:36:2d:21:75:60:
08:91:26:31:03:54:88:cf:3c:0a:7a:87:7a:fd:e0:
0b:dd:f9:cb:b1:d0:83:de:36:39:59:af:24:fa:6d:
f1:50:e0:5d:f9:76:12:66:9c:93:c6:a6:c9:eb:76:
02:31:eb:c0:bf:a3:20:3e:f6:9f:c3:90:bb:9f:3e:
76:f5:39:f7:4b:ef:a2:10:54:37:3c:05:4b:6b:ea:
56:6c:1a:28:19:af:35:28:8f:44:b2:50:96:65:60:
1d:1b:2d:92:33:63:c1:2a:6e:01:51:a6:bf:0f:ef:
66:83:fc:67:12:07:73:9e:99:fc:9d:47:b3:c5:b5:
cb:3a:5e:93:e8:9f:46:77:68:e3:d3:70:58:90:40:
c9:c8:c6:25:24:8d:da:87:d3:3d:e8:da:b4:25:0a:
24:f0:61:41:b6:e9:d7:fd:7a:1b:2d:aa:97:9e:12:
1a:8e:41:04:99:e3:eb:bc:ec:f5:45:f6:8c:45:c0:
13:07:91:17:01:5c:c5:7f:76:d7:c2:e3:5f:80:6f:
06:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:CB:CE:E9:8E:0B:EE:74:79:A0:3D:CA:0A:8A:B7:85:EE:B2:21:C5
X509v3 Authority Key Identifier:
keyid:80:A9:FF:F6:3A:34:77:95:7F:F7:5C:CD:C0:03:DA:B6:8C:F9:D1:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gKn_9jo0d5V_91zNwAPatoz50VU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b084bf-a454-43cf-ac92-47d98e58545a/1/gKn_9jo0d5V_91zNwAPatoz50VU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b084bf-a454-43cf-ac92-47d98e58545a/1/gKn_9jo0d5V_91zNwAPatoz50VU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:b7:09:d1:cc:57:a8:da:26:f8:46:52:3a:67:3d:ea:ee:c6:
2b:ba:05:ce:08:63:75:dc:22:83:49:c1:ae:09:4d:2a:b8:a7:
c4:4b:09:c1:ed:19:b9:d9:af:d1:75:52:6e:57:73:e3:86:d0:
f5:15:64:62:c6:a4:e5:c0:42:2d:a1:62:0a:2f:a6:5a:fd:ac:
2d:e4:11:08:54:45:ff:e5:a7:06:aa:7a:ec:f6:9e:a8:a4:53:
1f:81:94:b4:ac:23:a7:ad:44:bb:28:83:11:f4:a9:cb:33:ef:
cc:21:63:0a:cc:95:8d:87:60:4c:4a:79:02:aa:b6:40:5d:bf:
7d:24:3a:f2:70:bf:aa:79:07:39:53:c8:d7:1b:07:52:c1:fc:
fd:59:41:9a:58:20:2c:21:70:d4:b8:a6:10:e5:01:c1:9f:9c:
7d:41:18:9d:52:be:28:f9:9e:9d:3c:3b:4b:95:ba:28:54:29:
2f:32:f6:1d:47:86:2a:0c:6d:7e:87:40:c8:95:cb:f4:21:c4:
59:bb:8f:87:cc:d6:eb:29:c6:2e:ef:87:e9:3a:cf:d2:c4:fe:
eb:b8:85:46:99:51:af:43:d8:49:7e:38:de:15:e0:be:ec:1c:
21:22:25:15:85:71:b7:97:4c:1e:b8:3d:0d:74:7a:4d:69:cd:
54:4c:e2:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:54:48 2026 by rpki-client