Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/3daa6b-6348-48b2-8b96-51afb0d8d163/1/gDiSnMjY_ADZaXa-TIwe19r0Vdc.mft
File: gDiSnMjY_ADZaXa-TIwe19r0Vdc.mft (raw, json)
Hash identifier: EukFZw79mwPZ/O5CEa5ohp7fCY8Mcxd9AR7useNEGD4=
Subject key identifier: 09:C8:CE:D5:D5:C9:98:75:8C:D3:BC:6C:C2:45:21:F3:22:8F:15:78
Authority key identifier: 80:38:92:9C:C8:D8:FC:00:D9:69:76:BE:4C:8C:1E:D7:DA:F4:55:D7
Certificate issuer: /CN=8038929cc8d8fc00d96976be4c8c1ed7daf455d7
Certificate serial: 019E1C7D90C7FE663C430821EEF71101486A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gDiSnMjY_ADZaXa-TIwe19r0Vdc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/3daa6b-6348-48b2-8b96-51afb0d8d163/1/gDiSnMjY_ADZaXa-TIwe19r0Vdc.mft
Manifest number: 0142
Signing time: Tue 12 May 2026 14:00:51 +0000
Manifest this update: Tue 12 May 2026 14:00:51 +0000
Manifest next update: Wed 13 May 2026 14:00:51 +0000
Files and hashes: 1: 3QYKtdVp6ghjnv0-L14a3zlyn14.asa (hash: HKMC3EvClMF/krkydWFlfneamVuKAfLz+YRUysUDyOQ=)
2: gDiSnMjY_ADZaXa-TIwe19r0Vdc.crl (hash: raHqQTeXcPs2jteyrkW9iDcw//AHO4ek+9VFBfZ/iB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/3daa6b-6348-48b2-8b96-51afb0d8d163/1/gDiSnMjY_ADZaXa-TIwe19r0Vdc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/3daa6b-6348-48b2-8b96-51afb0d8d163/1/gDiSnMjY_ADZaXa-TIwe19r0Vdc.mft
rsync://rpki.ripe.net/repository/DEFAULT/gDiSnMjY_ADZaXa-TIwe19r0Vdc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:7d:90:c7:fe:66:3c:43:08:21:ee:f7:11:01:48:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8038929cc8d8fc00d96976be4c8c1ed7daf455d7
Validity
Not Before: May 12 14:00:51 2026 GMT
Not After : May 13 14:00:51 2026 GMT
Subject: CN=09c8ced5d5c998758cd3bc6cc24521f3228f1578
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:2c:d7:86:77:90:e3:d8:f0:38:57:dd:fd:60:
7d:1f:53:58:32:64:23:30:2f:01:f2:83:7d:82:c4:
1b:b5:aa:77:30:59:fa:a9:e8:15:c4:5a:5c:54:ee:
6f:e0:2c:96:e8:4d:45:75:71:63:7d:76:0b:41:d8:
3b:d4:47:a9:8e:8d:03:72:e2:0d:b9:3e:b8:aa:81:
a9:c9:43:c1:22:75:b1:46:ef:9f:81:e6:8a:bf:59:
61:2f:82:13:4d:bb:5d:74:30:3a:fc:04:c8:49:8d:
0a:31:4e:c6:e3:80:21:4c:ce:42:0e:38:29:57:bd:
a0:ab:ec:67:47:f8:e5:d4:4c:51:86:28:ca:50:41:
3e:94:35:23:64:64:34:94:0e:d7:f3:17:e4:83:70:
ff:70:c9:36:eb:88:a3:00:11:00:ab:ad:73:1f:fd:
3b:56:39:42:de:f6:77:c7:68:3c:e5:d2:6a:b7:06:
48:08:82:01:78:7d:fb:79:34:a7:79:c0:f3:d3:f2:
9b:40:3e:2f:31:58:1f:df:3b:77:01:a4:f6:4e:e2:
56:c5:04:48:5e:84:d7:f5:d7:86:de:51:58:53:78:
8f:1f:8a:19:a9:8e:38:bb:31:6e:7c:e7:67:10:6e:
00:70:b9:ae:6c:b7:00:46:73:a2:c7:2c:7a:80:e9:
6c:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:C8:CE:D5:D5:C9:98:75:8C:D3:BC:6C:C2:45:21:F3:22:8F:15:78
X509v3 Authority Key Identifier:
keyid:80:38:92:9C:C8:D8:FC:00:D9:69:76:BE:4C:8C:1E:D7:DA:F4:55:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gDiSnMjY_ADZaXa-TIwe19r0Vdc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/3daa6b-6348-48b2-8b96-51afb0d8d163/1/gDiSnMjY_ADZaXa-TIwe19r0Vdc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/3daa6b-6348-48b2-8b96-51afb0d8d163/1/gDiSnMjY_ADZaXa-TIwe19r0Vdc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:be:92:4e:10:5e:fe:20:35:08:e1:65:03:44:6e:5e:01:01:
ea:24:e3:d9:86:f5:48:92:4a:f3:f6:f9:2a:57:61:ff:6a:26:
33:6c:59:b0:73:2d:99:a9:79:15:5d:4e:fd:df:7d:9d:24:4a:
ca:15:b6:bd:f8:91:6d:ab:3e:28:63:c7:04:49:a8:15:81:a7:
d9:2f:27:9c:1d:ff:30:9d:c1:9a:82:d1:3e:60:67:7d:a4:a9:
1e:7f:4f:47:06:61:d7:6a:cf:38:d4:c4:45:d2:cb:35:9d:e6:
64:3c:07:9c:41:23:5c:61:12:84:9a:0e:ea:cb:63:b8:13:b0:
1f:18:99:2a:4c:f4:e6:4f:b8:9d:e8:af:c9:f7:18:f9:3b:21:
2d:82:06:58:ac:f6:61:1a:b2:23:ef:a2:b3:d3:ba:ac:f1:45:
de:09:0e:c6:2e:81:d2:76:76:94:aa:01:61:93:fb:a3:a7:12:
f4:81:79:bb:70:64:f0:29:d7:02:00:28:d0:83:bd:71:4b:02:
1d:6a:5b:3d:2f:a3:3f:7d:4a:f9:d1:26:db:d7:e9:bc:a8:9f:
c9:7b:44:a0:07:a6:a7:1c:9d:2e:8a:85:0f:0d:4d:d4:b3:f6:
d7:61:56:08:79:6d:45:58:ac:85:73:ca:2f:4d:74:c6:45:6f:
8f:4a:b1:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:43:30 2026 by rpki-client