Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/2f3ef3-9267-4d4a-a365-73d26ea9b193/1/gTLbnRVmzNd-PGsWgfTfpB9jxGE.mft
File: gTLbnRVmzNd-PGsWgfTfpB9jxGE.mft (raw, json)
Hash identifier: Zm2yZfI07cMD3tbczymAgJj6In46RySQVi+bXVsAPU4=
Subject key identifier: 16:04:95:E7:8A:22:2F:4B:60:6E:14:37:EB:F9:EA:0B:D1:1E:C1:34
Authority key identifier: 81:32:DB:9D:15:66:CC:D7:7E:3C:6B:16:81:F4:DF:A4:1F:63:C4:61
Certificate issuer: /CN=8132db9d1566ccd77e3c6b1681f4dfa41f63c461
Certificate serial: 019D34511C6205AC416B0F4EE19E70572D98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gTLbnRVmzNd-PGsWgfTfpB9jxGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/2f3ef3-9267-4d4a-a365-73d26ea9b193/1/gTLbnRVmzNd-PGsWgfTfpB9jxGE.mft
Manifest number: 01A8
Signing time: Sat 28 Mar 2026 12:00:23 +0000
Manifest this update: Sat 28 Mar 2026 12:00:23 +0000
Manifest next update: Sun 29 Mar 2026 12:00:23 +0000
Files and hashes: 1: FVoVHpn4Qw4M_Fq1r7plRt7Lnrg.roa (hash: 9CN//cNUBbRB1+vFVB2QUaRbXhK9uNEcpq3PjuRDWqE=)
2: gTLbnRVmzNd-PGsWgfTfpB9jxGE.crl (hash: McV5uhGhhbczh7NkB6uQHGVxnFUA/uit9F0WwOoOhRg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/2f3ef3-9267-4d4a-a365-73d26ea9b193/1/gTLbnRVmzNd-PGsWgfTfpB9jxGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/2f3ef3-9267-4d4a-a365-73d26ea9b193/1/gTLbnRVmzNd-PGsWgfTfpB9jxGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/gTLbnRVmzNd-PGsWgfTfpB9jxGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:34:51:1c:62:05:ac:41:6b:0f:4e:e1:9e:70:57:2d:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8132db9d1566ccd77e3c6b1681f4dfa41f63c461
Validity
Not Before: Mar 28 12:00:23 2026 GMT
Not After : Mar 29 12:00:23 2026 GMT
Subject: CN=160495e78a222f4b606e1437ebf9ea0bd11ec134
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:5a:ae:63:bf:41:f7:ab:97:e2:4f:1d:13:ac:
7e:2e:54:bc:b5:f1:ce:db:d9:9b:40:5d:02:af:fa:
fc:77:63:07:34:82:02:fc:ce:64:58:19:38:4b:ff:
2e:47:f0:a1:48:e1:66:e0:1c:b5:f7:b5:51:4f:ae:
2c:f2:66:97:97:f2:d2:2d:a9:db:e9:5e:0f:42:ed:
e5:f4:9d:f7:a8:0b:d6:88:da:d6:32:d9:a7:56:d6:
9f:6f:61:32:9b:5b:38:4a:bb:a8:e9:b5:a2:d9:cb:
65:2b:f8:58:8d:e1:19:70:56:14:04:69:1d:0f:cb:
90:e9:61:97:1d:98:14:29:52:78:18:a5:cc:c5:13:
0c:ae:21:15:80:ab:a0:85:af:95:5d:77:9b:2d:ae:
cf:41:77:71:ad:53:14:a3:d3:73:11:e3:58:37:c6:
b8:e2:e7:29:fa:f6:22:af:6c:63:4c:65:d0:e2:fe:
bf:3d:c7:8c:21:0d:3a:97:b0:9e:b6:77:0d:19:f1:
66:c5:b6:44:64:22:6f:b1:fd:14:0f:67:c6:73:91:
1b:d5:a5:ed:a7:23:b5:95:f1:37:3f:c0:a5:94:9a:
15:52:a9:0e:fc:6c:33:41:04:ee:a3:7b:1f:be:56:
07:27:30:39:d0:e5:a1:10:74:69:2f:76:cf:b9:72:
fc:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:04:95:E7:8A:22:2F:4B:60:6E:14:37:EB:F9:EA:0B:D1:1E:C1:34
X509v3 Authority Key Identifier:
keyid:81:32:DB:9D:15:66:CC:D7:7E:3C:6B:16:81:F4:DF:A4:1F:63:C4:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gTLbnRVmzNd-PGsWgfTfpB9jxGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/2f3ef3-9267-4d4a-a365-73d26ea9b193/1/gTLbnRVmzNd-PGsWgfTfpB9jxGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/2f3ef3-9267-4d4a-a365-73d26ea9b193/1/gTLbnRVmzNd-PGsWgfTfpB9jxGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:a5:55:fd:d5:9a:ba:9d:22:6e:f6:68:2f:ed:e7:3a:73:23:
32:f8:e7:0e:df:8a:9a:bc:fe:8e:ec:37:5d:ac:a5:c7:0e:0f:
83:b7:ec:3c:ab:9d:a9:29:b9:5f:74:da:14:da:df:c5:d7:9a:
83:a7:b9:6d:80:59:a9:1b:a3:d9:4f:b0:56:8c:c9:ee:b6:83:
7d:8c:96:b1:a4:48:47:51:00:6e:83:e4:66:88:c6:87:2f:db:
c9:b2:b2:34:23:70:1a:d8:8d:94:fd:68:11:73:87:48:8d:d5:
02:a4:af:6b:22:78:b8:c7:09:3e:f2:78:74:25:04:9c:f7:4e:
98:52:72:3e:94:3f:5a:56:71:51:d0:5a:0c:78:be:89:ef:d0:
e9:18:7e:98:9d:6e:94:51:1c:26:54:50:cb:1b:98:fc:72:b4:
3d:41:4e:52:07:4e:e6:8b:a5:e3:50:fa:b2:f7:a8:37:84:71:
33:c7:c7:cf:84:ae:9a:fb:5c:e2:0e:31:53:5d:b6:72:18:ab:
4e:9d:25:1f:71:62:c4:a6:37:af:50:09:09:18:30:7a:3b:ba:
10:34:c2:e2:78:81:c7:cc:ca:07:6c:59:b5:53:a2:41:2c:c8:
80:ea:e9:ff:e6:d8:b6:f5:a1:e9:59:49:b6:70:d7:32:91:f6:
5e:b2:af:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 15:56:08 2026 by rpki-client