Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/3daa6b-6348-48b2-8b96-51afb0d8d163/1/gDiSnMjY_ADZaXa-TIwe19r0Vdc.mft
File: gDiSnMjY_ADZaXa-TIwe19r0Vdc.mft (raw, json)
Hash identifier: as9ZQHGEQqiYgfd1Ve5RrLlvfbKxcCcHIKRcENKTBGI=
Subject key identifier: F2:04:C3:5E:AC:BE:62:DB:3E:F6:2B:B4:21:6D:35:21:76:E6:F0:09
Authority key identifier: 80:38:92:9C:C8:D8:FC:00:D9:69:76:BE:4C:8C:1E:D7:DA:F4:55:D7
Certificate issuer: /CN=8038929cc8d8fc00d96976be4c8c1ed7daf455d7
Certificate serial: 019D25BA189C8121F4AD56CECB09026B058F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gDiSnMjY_ADZaXa-TIwe19r0Vdc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/3daa6b-6348-48b2-8b96-51afb0d8d163/1/gDiSnMjY_ADZaXa-TIwe19r0Vdc.mft
Manifest number: BF
Signing time: Wed 25 Mar 2026 16:00:46 +0000
Manifest this update: Wed 25 Mar 2026 16:00:46 +0000
Manifest next update: Thu 26 Mar 2026 16:00:46 +0000
Files and hashes: 1: 4rHwkDFu4RDHhDHcuEqOQsu4pk0.asa (hash: Ypr3QNWLU2bOlasvtwuLjWnOf1RontOU/jxRbuCyPaI=)
2: gDiSnMjY_ADZaXa-TIwe19r0Vdc.crl (hash: 80GWLEBqvI7mYkbYLCsYGYlZ1aqAt4W3k+LogjxfEkc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/3daa6b-6348-48b2-8b96-51afb0d8d163/1/gDiSnMjY_ADZaXa-TIwe19r0Vdc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/3daa6b-6348-48b2-8b96-51afb0d8d163/1/gDiSnMjY_ADZaXa-TIwe19r0Vdc.mft
rsync://rpki.ripe.net/repository/DEFAULT/gDiSnMjY_ADZaXa-TIwe19r0Vdc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:18:9c:81:21:f4:ad:56:ce:cb:09:02:6b:05:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8038929cc8d8fc00d96976be4c8c1ed7daf455d7
Validity
Not Before: Mar 25 16:00:46 2026 GMT
Not After : Mar 26 16:00:46 2026 GMT
Subject: CN=f204c35eacbe62db3ef62bb4216d352176e6f009
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:40:ea:13:5f:8f:f1:f2:89:57:a8:1e:be:3c:
e8:6a:44:53:8e:71:0b:a5:b0:0c:e4:e4:56:3b:7a:
f5:95:da:d7:07:25:ab:92:97:b1:bc:bf:0b:f0:1b:
97:19:ba:ca:d5:74:ba:d2:9e:1b:cc:5b:5b:17:e5:
fa:92:cb:02:2a:cc:66:e1:20:02:ee:1c:89:d8:69:
ab:a2:57:0d:5e:7f:a4:a7:c5:73:e0:e2:08:a3:82:
c7:64:5b:f2:ce:93:52:b8:70:e3:3d:5e:22:e5:b8:
4a:46:95:8f:94:fe:31:94:29:aa:d4:48:02:7f:a1:
b7:48:8a:69:be:43:37:c8:48:27:9d:b5:be:1b:8c:
9e:37:f4:28:41:ac:38:3f:de:f7:38:9a:dc:22:62:
7e:d6:a4:35:6e:79:f0:25:a1:4e:6b:df:e9:54:21:
f5:4b:50:18:88:c3:5d:ae:ea:12:70:2c:5e:ec:33:
aa:4b:6d:0b:3f:04:92:8b:ae:33:b8:a4:96:7d:2a:
29:43:a6:b1:52:64:86:82:30:a7:f5:52:c4:ce:67:
4a:e1:03:d0:50:75:03:d5:5f:78:e3:85:4c:d1:3c:
11:21:99:4e:ea:a1:9a:a1:d1:fc:d9:4f:b3:8c:4f:
be:7d:05:31:c9:86:fd:48:aa:6d:d8:7c:b1:4e:69:
1a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:04:C3:5E:AC:BE:62:DB:3E:F6:2B:B4:21:6D:35:21:76:E6:F0:09
X509v3 Authority Key Identifier:
keyid:80:38:92:9C:C8:D8:FC:00:D9:69:76:BE:4C:8C:1E:D7:DA:F4:55:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gDiSnMjY_ADZaXa-TIwe19r0Vdc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/3daa6b-6348-48b2-8b96-51afb0d8d163/1/gDiSnMjY_ADZaXa-TIwe19r0Vdc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/3daa6b-6348-48b2-8b96-51afb0d8d163/1/gDiSnMjY_ADZaXa-TIwe19r0Vdc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:ea:4a:9d:b5:6c:54:48:90:f0:9e:57:5c:ec:13:d9:31:c5:
3e:94:6a:94:87:22:1f:3d:92:74:7c:da:8f:85:1a:f1:3f:7e:
58:17:89:24:22:6b:56:d0:ce:e1:74:d9:19:6a:e8:39:2f:a1:
b0:d7:5b:16:bc:36:ce:e7:84:7e:27:e6:50:95:e3:9f:f7:6c:
3d:37:48:ec:5a:c9:3a:72:b5:fe:7b:75:33:83:b5:55:40:74:
6a:fb:aa:8e:6d:d5:f0:70:1b:bf:3d:31:b2:47:d8:84:c1:a7:
a9:79:c8:91:35:1a:7c:30:5f:23:07:dd:70:54:24:99:66:fb:
d4:ff:fd:a5:f6:50:b2:1a:9b:81:0f:07:8e:3c:89:b6:db:ef:
e4:1f:c8:8d:f5:0b:6e:b3:95:53:f7:17:ad:3b:14:25:6a:91:
8d:5a:f8:9c:a6:ae:6b:d9:88:a7:72:17:b7:27:c7:e9:65:ed:
05:7b:c8:ba:9a:5c:e1:1e:98:fa:03:37:70:9a:8d:15:96:15:
6f:9c:13:8f:b5:08:53:03:b5:27:c8:e5:9e:40:03:04:6a:e5:
d9:ee:20:26:de:bb:72:a9:ce:27:6d:91:a6:26:cc:53:8f:4a:
18:dd:b7:77:80:55:dd:02:29:c8:3a:58:54:23:05:37:1a:c5:
5c:fd:06:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:23:10 2026 by rpki-client