Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/a0ab51-9dae-410d-8fd9-08fadeb2dbe7/1/gHvWL9jTUwjbyLH9Xxcnr1er0iA.mft
File: gHvWL9jTUwjbyLH9Xxcnr1er0iA.mft (raw, json)
Hash identifier: 9Ruf6EzQF1+GI8ODN5pofj2hTzG0ZIMBqLupmP6602A=
Subject key identifier: 8B:8B:DF:72:DF:F3:FA:AF:77:E9:FB:A4:F0:AD:5F:06:C2:4A:C5:5A
Authority key identifier: 80:7B:D6:2F:D8:D3:53:08:DB:C8:B1:FD:5F:17:27:AF:57:AB:D2:20
Certificate issuer: /CN=807bd62fd8d35308dbc8b1fd5f1727af57abd220
Certificate serial: 019D2A04C2DA525A927823383F5D59D6A378
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gHvWL9jTUwjbyLH9Xxcnr1er0iA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/a0ab51-9dae-410d-8fd9-08fadeb2dbe7/1/gHvWL9jTUwjbyLH9Xxcnr1er0iA.mft
Manifest number: 0F7B
Signing time: Thu 26 Mar 2026 12:00:48 +0000
Manifest this update: Thu 26 Mar 2026 12:00:48 +0000
Manifest next update: Fri 27 Mar 2026 12:00:48 +0000
Files and hashes: 1: gHvWL9jTUwjbyLH9Xxcnr1er0iA.crl (hash: MfGMylJcxzlXrv6DV06FYzoaA7e/BJAQVJECYKLVrhk=)
2: kUYY1Q4-v9Q6exQgCpt_jTplt24.roa (hash: L8NHXT8Vz2l7Z8N60RDMTVs4PiVsANYIsY9CEDH7bQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/a0ab51-9dae-410d-8fd9-08fadeb2dbe7/1/gHvWL9jTUwjbyLH9Xxcnr1er0iA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/a0ab51-9dae-410d-8fd9-08fadeb2dbe7/1/gHvWL9jTUwjbyLH9Xxcnr1er0iA.mft
rsync://rpki.ripe.net/repository/DEFAULT/gHvWL9jTUwjbyLH9Xxcnr1er0iA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 12:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:c2:da:52:5a:92:78:23:38:3f:5d:59:d6:a3:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=807bd62fd8d35308dbc8b1fd5f1727af57abd220
Validity
Not Before: Mar 26 12:00:48 2026 GMT
Not After : Mar 27 12:00:48 2026 GMT
Subject: CN=8b8bdf72dff3faaf77e9fba4f0ad5f06c24ac55a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:c3:e1:49:e8:bd:26:bf:26:c4:a4:89:5e:fa:
92:5a:35:95:23:b9:9a:30:04:2f:46:15:cd:43:b1:
05:ad:ed:ea:55:31:3a:eb:72:0e:ce:75:96:1d:26:
c1:f8:c0:e0:94:32:d6:bc:ef:eb:a1:94:56:92:49:
50:9d:07:3c:d8:42:74:88:17:88:a6:80:d5:f1:78:
2e:dd:38:d5:60:b1:4e:1c:82:b3:8f:53:09:bc:ba:
ae:af:bc:0b:d5:20:54:a3:48:f6:73:ed:37:ce:e7:
e9:8d:15:c3:0e:70:fb:e2:78:76:80:c0:d3:31:79:
c6:6b:b1:dc:fd:b7:e8:c6:7e:4b:c1:ef:d9:a6:d8:
55:9c:4a:de:81:9a:03:00:58:f2:ec:02:c6:13:9b:
62:99:db:73:83:90:f9:a5:ef:46:f2:43:3b:d4:c1:
cc:64:50:51:bc:4b:7e:f6:fc:01:bb:e7:3f:5b:68:
ae:7b:a0:aa:94:25:b0:57:c8:7a:16:9b:30:24:10:
2b:fd:48:9f:77:48:a2:b6:98:b3:0b:0d:ee:41:7d:
e0:f7:1a:c8:06:e8:9a:7b:76:ea:11:a0:27:2c:15:
1e:b7:19:0d:61:e0:76:e7:86:31:38:61:73:ae:a2:
ec:b6:b8:49:9b:69:42:06:90:74:18:65:de:02:53:
41:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:8B:DF:72:DF:F3:FA:AF:77:E9:FB:A4:F0:AD:5F:06:C2:4A:C5:5A
X509v3 Authority Key Identifier:
keyid:80:7B:D6:2F:D8:D3:53:08:DB:C8:B1:FD:5F:17:27:AF:57:AB:D2:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gHvWL9jTUwjbyLH9Xxcnr1er0iA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/a0ab51-9dae-410d-8fd9-08fadeb2dbe7/1/gHvWL9jTUwjbyLH9Xxcnr1er0iA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/a0ab51-9dae-410d-8fd9-08fadeb2dbe7/1/gHvWL9jTUwjbyLH9Xxcnr1er0iA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:c2:a1:ca:b1:d2:da:30:f0:dc:db:29:f3:37:f6:8d:95:e1:
4b:c1:fc:4e:c8:db:e7:90:95:6b:77:a0:4d:39:78:95:ab:a4:
c6:b9:d0:2f:fe:b6:fe:96:33:01:44:15:34:03:6f:eb:87:dc:
ac:c1:89:65:2a:b1:97:ef:c7:de:49:cd:17:58:37:d6:96:bb:
d7:ff:a6:2c:36:cf:f6:11:ec:aa:e1:07:cd:45:55:de:d4:75:
fe:f4:a9:26:c5:e8:45:78:22:86:5b:69:68:8a:59:ae:d8:c6:
51:10:92:31:de:39:d6:44:be:61:cd:2f:05:3c:cc:f9:84:7f:
e4:ea:40:7a:5b:40:be:9b:ff:d3:fb:cd:f1:fd:08:00:4c:9e:
c9:e0:df:40:a9:a3:ad:66:ac:67:0e:4c:d0:a8:97:b0:b2:b5:
8f:97:af:72:e4:61:1a:7c:2e:cb:5e:36:ff:37:13:73:36:80:
14:8b:36:7c:4c:28:30:ec:23:d9:8d:32:e0:79:df:51:de:02:
da:d8:33:0f:e6:b2:c9:b9:bf:be:85:14:97:ce:ab:02:2b:5e:
18:1d:3b:f7:10:9a:c0:9b:33:8b:fe:3d:c9:c4:14:46:fc:73:
9b:65:10:5a:fd:9b:7d:df:e2:7d:7a:d3:5b:19:8c:08:9c:d2:
68:77:d5:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:02:17 2026 by rpki-client