Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.mft
File: gK2MUgu5Z3Rh3cTsCbdtczt9g3A.mft (raw, json)
Hash identifier: dM2xRUVyagNZyVFCVVz1CKHaRBgvblyOgf6ZSE+K0TM=
Subject key identifier: 45:C5:4E:18:1E:93:C2:3C:BF:9B:5A:86:0A:17:84:24:D7:77:8A:3E
Authority key identifier: 80:AD:8C:52:0B:B9:67:74:61:DD:C4:EC:09:B7:6D:73:3B:7D:83:70
Certificate issuer: /CN=80ad8c520bb9677461ddc4ec09b76d733b7d8370
Certificate serial: 019D29CDC9B9DAF88D428A356295C4386601
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.mft
Manifest number: 1890
Signing time: Thu 26 Mar 2026 11:00:45 +0000
Manifest this update: Thu 26 Mar 2026 11:00:45 +0000
Manifest next update: Fri 27 Mar 2026 11:00:45 +0000
Files and hashes: 1: 6YPsOlRZXzuXQifr40HsQHwppWA.roa (hash: 9XfpJtIAsjA2wiVUM5ZPG8hWeFlnclvOECDaYGybS4o=)
2: azo6oNDfWvxjhbTnCLvYx7uGQEg.roa (hash: LHMP4JoVnCkP5xgr60RpByWPQJHL/KBW7CXT+FDaByU=)
3: gK2MUgu5Z3Rh3cTsCbdtczt9g3A.crl (hash: hueWOUMzI7ZEIRvlE0p7uELc8WFuRVvXsQwaCPkczfM=)
4: xXiMv43g5gZyliPARvzZ7xyyW2k.roa (hash: lpdFA5yCXN5/FwIwDvBqyIeXJAPjPFSrUa0qNDgv7fQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:cd:c9:b9:da:f8:8d:42:8a:35:62:95:c4:38:66:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80ad8c520bb9677461ddc4ec09b76d733b7d8370
Validity
Not Before: Mar 26 11:00:45 2026 GMT
Not After : Mar 27 11:00:45 2026 GMT
Subject: CN=45c54e181e93c23cbf9b5a860a178424d7778a3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:6c:70:8f:30:e9:bf:0b:f0:45:01:0d:9b:9a:
93:04:01:f0:c0:17:14:50:b7:06:10:9d:5b:62:99:
85:ef:c8:df:2b:4d:d0:71:bd:75:0a:03:97:65:20:
62:32:43:2f:70:54:98:53:ec:b5:98:01:4b:85:87:
3d:ce:94:18:2d:19:ed:4b:52:d1:f4:fd:8f:cc:51:
16:24:a5:bc:40:5e:75:16:dd:1e:f0:48:46:1b:05:
fc:06:6d:10:a2:2f:7f:35:93:32:41:ed:19:0d:1c:
41:0d:88:80:36:e3:70:35:8a:33:c8:af:a7:d7:7e:
d9:41:59:a0:81:07:ed:46:75:85:ab:a0:e9:a0:8d:
72:e0:c2:79:6f:77:80:29:ed:4d:21:29:38:ec:af:
a3:b9:db:06:b2:97:84:d6:f7:3c:2f:24:f8:71:79:
e2:6f:0e:a4:cd:29:70:41:04:92:71:e4:88:05:48:
44:90:e1:f7:b6:3c:4c:20:64:db:2a:70:3f:77:d9:
6b:dd:3c:ca:f3:de:00:b5:c5:ed:29:d2:c2:92:57:
57:c8:ad:d7:42:67:af:47:d9:4c:78:e2:00:0e:90:
43:f1:aa:0d:61:f7:56:57:4b:c3:b2:fe:93:97:b5:
9c:e2:3f:48:67:f8:a1:7b:5c:46:af:ed:b8:cd:fb:
c6:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:C5:4E:18:1E:93:C2:3C:BF:9B:5A:86:0A:17:84:24:D7:77:8A:3E
X509v3 Authority Key Identifier:
keyid:80:AD:8C:52:0B:B9:67:74:61:DD:C4:EC:09:B7:6D:73:3B:7D:83:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:ff:9d:2b:6f:9a:1b:81:98:f6:7c:11:ca:47:65:5b:b5:60:
13:ba:9a:a4:5c:40:0a:a3:fa:9c:b3:cb:41:c1:39:d9:73:3b:
c9:40:93:b4:98:d4:7c:6f:e6:d6:50:ee:cb:1b:0b:7d:e9:8e:
46:b9:e3:4d:d6:1f:8f:a8:9a:07:28:b4:0b:4d:14:f7:9c:74:
9c:6b:b6:4c:f9:9d:e8:80:f7:ed:e7:d2:10:87:41:d1:01:9e:
64:2f:af:6c:e7:65:58:ff:59:86:53:08:f9:bc:85:48:ac:17:
1d:21:c6:b8:d0:32:7d:ca:17:58:9e:1e:fd:69:82:b1:d0:bd:
b0:57:33:af:50:42:73:b6:d1:d8:8d:31:23:90:3d:79:9c:90:
06:26:4e:59:06:ac:20:a2:ca:3d:3b:3d:25:5f:3e:64:d5:0f:
50:34:73:05:70:ba:c5:d3:06:3d:13:7c:a3:42:1c:8e:e5:9d:
92:f3:83:2d:6c:da:ac:5d:7c:0f:4f:34:84:25:44:23:29:ca:
12:c3:04:ca:b5:80:b7:ff:a6:be:8d:ce:c6:d6:19:03:c2:b2:
d5:a8:45:1e:a8:19:61:e4:39:88:90:db:47:b7:51:aa:cf:1a:
a6:d8:62:aa:bc:94:39:43:d6:2e:3a:46:aa:0c:5e:47:3d:1f:
f1:a7:0c:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:04:40 2026 by rpki-client