Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/2b7f70-fad1-403c-b08e-2c3ea4b86e20/1/GxUEuvgu-OsK5QivQLY442YKVIg.mft
File: GxUEuvgu-OsK5QivQLY442YKVIg.mft (raw, json)
Hash identifier: IRoSJR07iY6I7U/vm8YVHb5HTtYhQ/P++bRUDNv6gzE=
Subject key identifier: 02:7E:EA:05:4B:E4:A7:2B:47:5C:21:5E:70:6E:C5:D4:4A:B2:C8:C0
Authority key identifier: 1B:15:04:BA:F8:2E:F8:EB:0A:E5:08:AF:40:B6:38:E3:66:0A:54:88
Certificate issuer: /CN=1b1504baf82ef8eb0ae508af40b638e3660a5488
Certificate serial: 019D2884D1FE33A9CD8E7568DBEA527641C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GxUEuvgu-OsK5QivQLY442YKVIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/2b7f70-fad1-403c-b08e-2c3ea4b86e20/1/GxUEuvgu-OsK5QivQLY442YKVIg.mft
Manifest number: 10CE
Signing time: Thu 26 Mar 2026 05:01:26 +0000
Manifest this update: Thu 26 Mar 2026 05:01:26 +0000
Manifest next update: Fri 27 Mar 2026 05:01:26 +0000
Files and hashes: 1: 85Q2BPZ8YrJ4JSMOhyIE7VjIm4A.roa (hash: BN/ts7p0HOLbx5n5to0Fap17/wIm1nJi+AFg7t64Ih0=)
2: GxUEuvgu-OsK5QivQLY442YKVIg.crl (hash: 1EwyEF0VS4a7gussYU0gz5mTpSLGF+E3yedAh38PzNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/2b7f70-fad1-403c-b08e-2c3ea4b86e20/1/GxUEuvgu-OsK5QivQLY442YKVIg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/2b7f70-fad1-403c-b08e-2c3ea4b86e20/1/GxUEuvgu-OsK5QivQLY442YKVIg.mft
rsync://rpki.ripe.net/repository/DEFAULT/GxUEuvgu-OsK5QivQLY442YKVIg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 05:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:d1:fe:33:a9:cd:8e:75:68:db:ea:52:76:41:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b1504baf82ef8eb0ae508af40b638e3660a5488
Validity
Not Before: Mar 26 05:01:26 2026 GMT
Not After : Mar 27 05:01:26 2026 GMT
Subject: CN=027eea054be4a72b475c215e706ec5d44ab2c8c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:81:f4:59:7f:7a:04:30:5b:df:53:98:2b:da:
4d:67:a4:3e:d8:57:ce:93:e4:2c:77:61:d7:fd:cf:
8d:db:10:f1:9c:e8:f2:86:a6:ae:01:ac:da:d6:1e:
01:04:14:c3:c7:ce:03:be:08:71:d7:0b:e7:d4:73:
32:b9:dd:dc:68:55:fc:63:0e:1e:2d:b8:6d:35:72:
a5:56:3f:a3:23:96:a5:9c:63:fb:2a:e7:3e:48:45:
b3:d9:91:ba:53:44:7b:77:7e:e4:f9:b6:cf:bb:b7:
11:98:81:28:4b:5f:6b:83:72:b9:d3:28:78:55:02:
89:85:30:c5:3a:17:47:ba:39:a4:74:8d:07:8a:a9:
55:74:d3:2d:25:96:55:a0:a8:74:50:c9:81:74:b3:
d4:ee:67:81:a9:a7:26:97:1d:9c:ff:58:7a:3c:ed:
46:51:ba:80:a4:8e:d6:f2:3c:24:a3:bb:0b:8c:6d:
ab:70:70:b1:81:a4:73:04:40:e6:70:29:23:c3:9d:
44:30:e6:d1:84:3a:56:b4:7e:e1:e5:8d:95:3b:59:
4f:98:48:1e:72:ea:5a:9a:d6:39:6c:1c:de:ab:64:
6a:98:4a:5c:6d:ec:a3:ec:f9:ee:12:8e:ed:56:e8:
c2:f2:54:3a:ac:22:0c:e2:4e:05:4a:5d:f6:39:ea:
90:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:7E:EA:05:4B:E4:A7:2B:47:5C:21:5E:70:6E:C5:D4:4A:B2:C8:C0
X509v3 Authority Key Identifier:
keyid:1B:15:04:BA:F8:2E:F8:EB:0A:E5:08:AF:40:B6:38:E3:66:0A:54:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GxUEuvgu-OsK5QivQLY442YKVIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2b7f70-fad1-403c-b08e-2c3ea4b86e20/1/GxUEuvgu-OsK5QivQLY442YKVIg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2b7f70-fad1-403c-b08e-2c3ea4b86e20/1/GxUEuvgu-OsK5QivQLY442YKVIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:fb:20:33:3e:28:eb:ad:68:bb:a5:df:7a:ec:cf:36:6d:07:
8a:6e:9e:cc:d2:6c:82:47:34:fa:c5:91:ba:ab:9a:40:2d:93:
be:3b:9d:33:2f:27:02:68:69:f6:ce:00:eb:03:dc:9a:9a:01:
97:23:2c:a8:d4:fc:b7:4a:5f:d7:45:de:a7:1a:40:43:c8:b2:
3f:a6:35:fe:67:81:6f:60:47:99:5a:4e:8a:a1:df:e1:b2:75:
86:fa:d9:b3:f4:88:f7:e6:2e:b5:ff:4c:b0:43:33:e3:35:f8:
a7:97:50:5f:a5:b1:3a:f4:55:25:a4:48:84:17:7a:dd:01:ea:
22:e2:86:7a:d0:c1:e6:2e:60:e5:38:f7:cd:51:4d:97:d7:bc:
24:5c:dc:2a:c9:34:03:e0:69:40:3c:e1:5d:eb:bf:8c:b6:e2:
fb:70:e0:9a:a7:e6:08:1d:35:1d:37:24:e4:8d:6e:25:e7:40:
25:1e:f4:a2:c5:fe:11:7a:44:1e:34:5b:f8:94:de:d6:46:9a:
5f:b1:5f:a2:5a:06:6c:88:a1:9b:e8:86:59:7b:38:75:3e:84:
c7:4e:95:64:b5:98:e4:67:68:05:bc:b7:4f:be:9d:4d:cf:3b:
96:ab:46:04:8a:10:db:19:43:ff:38:dd:30:49:9b:a4:1c:79:
f6:21:93:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:54:43 2026 by rpki-client